$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25607423-d6fc-3f33-9094-42dfdadb9f22.roa File: 25607423-d6fc-3f33-9094-42dfdadb9f22.roa (raw, json) Hash identifier: vvrJkAjMkbIS8iAyxu/oqHqqTJmQS2Zm5CtaeguWHEg= Subject key identifier: F1:50:2A:0E:4B:12:13:3C:15:E4:09:F1:A6:E2:2D:48:4B:76:98:BE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5C2E699E50C980324F0600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25607423-d6fc-3f33-9094-42dfdadb9f22.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 73.22.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5c:2e:69:9e:50:c9:80:32:4f:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=fa457aae-df01-4218-9e48-a7ca122e1808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:83:ac:f0:be:a7:00:f1:61:4d:8d:0d:6d:67: 0d:3c:9b:95:95:be:72:d1:58:24:cb:04:c3:40:67: 3b:7d:af:da:d8:81:da:9b:44:eb:da:52:c5:e2:4c: c8:32:67:ac:0c:8a:56:9f:eb:78:7e:f7:92:23:bf: a2:c2:ab:01:08:34:3f:7b:53:b2:4b:f0:b2:ef:c9: aa:18:c5:47:32:a4:3a:32:ca:cf:7b:92:7d:f1:68: 2f:0f:08:01:26:82:ef:f2:10:7a:f0:f7:58:2e:fa: 9d:c8:3c:63:32:76:37:7a:bd:23:72:a6:7b:32:d8: 41:98:91:14:08:a7:4e:4d:63:80:a0:d2:9c:15:8a: ec:01:0b:1f:9f:72:e6:9d:14:48:ff:f2:c7:a2:97: fa:b0:c4:0b:f6:80:7f:6f:f2:25:c3:d9:11:de:0e: 5c:3e:8f:21:52:e6:75:dd:4c:f6:3e:96:22:19:90: cc:f2:2e:fb:ec:84:32:7b:ec:2e:8a:0e:08:b2:a4: b7:5c:4a:c0:ee:61:e8:f5:1b:d1:d8:21:e0:41:d7: f4:c1:48:81:45:aa:7c:03:c9:d1:a1:47:fe:dc:02: 17:e3:5e:f8:62:44:2f:bb:9a:3a:30:eb:af:4b:be: d9:13:fc:30:e8:30:5d:d5:15:d7:d9:bf:21:42:90: e7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:50:2A:0E:4B:12:13:3C:15:E4:09:F1:A6:E2:2D:48:4B:76:98:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25607423-d6fc-3f33-9094-42dfdadb9f22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.22.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:54:02:10:45:48:1b:61:ae:7d:5b:fb:f1:43:4b:d4:30:e1: 7d:34:bf:2f:2e:15:75:ea:a9:19:39:1d:f7:18:b5:9f:e7:19: 56:91:92:f4:55:52:58:c5:f5:a5:a7:d7:e5:4b:05:c2:79:84: d4:db:bd:f5:ce:ef:ac:a8:f0:b9:ff:a1:bf:a0:ac:df:a7:be: 7e:40:d1:58:8f:13:9b:80:68:87:85:67:86:42:f0:b8:89:bc: 45:fd:ad:a6:06:e8:88:40:a0:83:bf:b2:71:27:e1:bf:00:22: e1:bb:da:50:1a:59:a1:9a:d8:30:a0:a4:a9:37:a9:bc:d6:35: c7:b6:03:d8:64:18:17:03:9e:58:df:83:4f:1f:64:2f:db:f9: c3:2e:cd:96:36:48:ed:92:42:23:ed:a9:72:73:65:19:1f:3d: a1:a1:65:6f:29:ce:15:3b:8f:ea:55:4c:0f:ff:5f:7c:dd:5b: 7a:11:71:da:e6:37:6b:a9:cf:d5:28:05:57:bc:4b:c6:65:a9: 24:ae:b1:de:db:cc:ce:0c:69:71:c7:c5:95:1c:7c:b2:60:98: ce:d9:1e:20:cf:9d:94:69:5a:f6:31:1c:da:db:14:67:23:3f: ea:66:31:0e:69:b8:08:8e:a4:db:18:9e:4d:f5:03:52:0b:d6: 22:c4:cd:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXC5pnlDJgDJPBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZmE0NTdhYWUtZGYwMS00MjE4LTllNDgtYTdjYTEyMmUxODA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIOs8L6nAPFhTY0NbWcNPJuVlb5y0VgkywTD QGc7fa/a2IHam0Tr2lLF4kzIMmesDIpWn+t4fveSI7+iwqsBCDQ/e1OyS/Cy78mq GMVHMqQ6MsrPe5J98WgvDwgBJoLv8hB68PdYLvqdyDxjMnY3er0jcqZ7MthBmJEU CKdOTWOAoNKcFYrsAQsfn3LmnRRI//LHopf6sMQL9oB/b/Ilw9kR3g5cPo8hUuZ1 3Uz2PpYiGZDM8i777IQye+wuig4IsqS3XErA7mHo9RvR2CHgQdf0wUiBRap8A8nR oUf+3AIX4174YkQvu5o6MOuvS77ZE/ww6DBd1RXX2b8hQpDn+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFQKg5LEhM8FeQJ8abiLUhLdpi+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjU2MDc0MjMtZDZmYy0z ZjMzLTkwOTQtNDJkZmRhZGI5ZjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSRZsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5UAhBFSBthrn1b+/FDS9Qw4X00vy8uFXXqqRk5HfcYtZ/nGVaRkvRV UljF9aWn1+VLBcJ5hNTbvfXO76yo8Ln/ob+grN+nvn5A0ViPE5uAaIeFZ4ZC8LiJ vEX9raYG6IhAoIO/snEn4b8AIuG72lAaWaGa2DCgpKk3qbzWNce2A9hkGBcDnljf g08fZC/b+cMuzZY2SO2SQiPtqXJzZRkfPaGhZW8pzhU7j+pVTA//X3zdW3oRcdrm N2upz9UoBVe8S8ZlqSSusd7bzM4MaXHHxZUcfLJgmM7ZHiDPnZRpWvYxHNrbFGcj P+pmMQ5puAiOpNsYnk31A1IL1iLEzZc= -----END CERTIFICATE-----Generated at Sun Mar 1 19:01:20 2026 by rpki-client