$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2997b863-0195-3e1c-b0be-799abb6a4f69.roa File: 2997b863-0195-3e1c-b0be-799abb6a4f69.roa (raw, json) Hash identifier: Lc2sT+qRiDSAg5+XFakmwCvDLTUF+0N+g7/An+hCOLw= Subject key identifier: 02:D7:DC:55:FE:36:D5:29:CE:71:DC:B4:C9:06:82:DD:2B:FF:B8:F8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE58466F5D1537C168A6B280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2997b863-0195-3e1c-b0be-799abb6a4f69.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 73.208.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:46:6f:5d:15:37:c1:68:a6:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=3a95af6f-2c3e-40d3-83d4-7bd46aa9f644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:42:98:11:83:ae:15:db:84:d5:e7:d8:58:70: 36:c7:14:b6:d2:bb:4a:c4:e0:6f:a9:01:50:d5:db: 6a:09:02:14:7c:79:6b:81:f2:35:49:32:a3:4e:84: d5:9c:c9:d7:13:c8:ca:8e:a5:82:80:5f:23:5c:31: 77:82:c9:72:5e:ec:90:b5:ec:6c:b3:4b:c6:2f:96: 58:99:07:10:e0:e8:4a:7b:88:9f:cb:40:d5:46:c9: 27:14:a6:22:13:13:fe:65:c6:27:1f:27:df:dd:75: 8d:81:10:f2:97:ee:27:9d:be:bb:2b:85:21:34:d2: d5:0a:61:66:97:2f:34:a0:cd:dd:c6:d9:5d:75:e0: e7:3e:51:21:f5:65:e4:26:79:74:b0:fd:7d:6f:1e: a8:e2:7d:e6:c7:4a:c1:f1:7e:75:ad:7e:0a:1a:ed: a9:69:fc:a5:bc:5f:70:0e:92:c6:78:23:ba:0d:51: ee:60:45:0e:8c:65:af:67:61:86:e9:cc:b5:e4:67: c1:37:8b:e6:d0:d4:33:37:8e:7c:33:87:33:54:db: 33:9f:de:c4:94:f3:8e:e8:67:7b:8d:78:6e:7c:cf: 7c:be:e3:ba:58:22:c7:c0:e7:4d:05:62:f9:b8:21: 65:92:82:e4:79:2e:78:c4:9d:47:b1:62:1f:74:0b: d2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D7:DC:55:FE:36:D5:29:CE:71:DC:B4:C9:06:82:DD:2B:FF:B8:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2997b863-0195-3e1c-b0be-799abb6a4f69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.208.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:17:98:4f:12:85:a9:60:0d:3b:81:cc:4d:43:f1:87:88:52: e2:ef:b8:69:b3:ff:f1:84:e7:98:9a:af:2e:fd:53:b9:a1:21: 85:53:fb:55:22:d9:1f:74:8f:43:ee:48:87:8a:41:6e:80:ad: 66:27:d2:7a:62:72:5a:11:fa:db:90:e9:60:f9:9a:68:24:f8: c4:c2:79:fc:06:bb:0e:9e:22:c9:ec:02:12:fb:7c:06:00:75: c2:97:01:de:29:2f:e6:00:6b:9d:05:c7:42:32:c4:da:27:88: c4:37:2e:32:5a:6c:ae:82:8f:c0:31:5d:b3:f6:07:f9:2e:98: ec:36:7f:28:1e:8a:6e:de:34:a1:73:7d:64:7d:aa:0a:60:65: 05:29:89:b2:59:f5:c1:a8:43:7a:c0:7a:59:91:a3:35:fe:c0: f9:fd:9b:ac:55:08:98:e8:56:f6:b0:f2:98:95:8d:6e:d0:0c: c3:22:1c:07:e2:3d:cd:3b:fc:13:45:94:64:8b:b0:e0:0c:2b: c9:ba:c6:76:5d:8f:11:1c:59:43:6f:50:c4:84:0e:80:fa:79: 7c:91:99:74:fc:a7:24:6f:80:82:f2:fc:41:d9:0b:b0:6f:68: f7:26:3f:bf:27:d2:2c:33:fc:ef:20:c7:16:ad:05:32:30:ec: 17:76:07:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWEZvXRU3wWimsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk M2E5NWFmNmYtMmMzZS00MGQzLTgzZDQtN2JkNDZhYTlmNjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikKYEYOuFduE1efYWHA2xxS20rtKxOBvqQFQ 1dtqCQIUfHlrgfI1STKjToTVnMnXE8jKjqWCgF8jXDF3gslyXuyQtexss0vGL5ZY mQcQ4OhKe4ify0DVRsknFKYiExP+ZcYnHyff3XWNgRDyl+4nnb67K4UhNNLVCmFm ly80oM3dxtlddeDnPlEh9WXkJnl0sP19bx6o4n3mx0rB8X51rX4KGu2pafylvF9w DpLGeCO6DVHuYEUOjGWvZ2GG6cy15GfBN4vm0NQzN458M4czVNszn97ElPOO6Gd7 jXhufM98vuO6WCLHwOdNBWL5uCFlkoLkeS54xJ1HsWIfdAvSPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFALX3FX+NtUpznHctMkGgt0r/7j4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjk5N2I4NjMtMDE5NS0z ZTFjLWIwYmUtNzk5YWJiNmE0ZjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSdBiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJwXmE8ShalgDTuBzE1D8YeIUuLvuGmz//GE55iary79U7mhIYVT+1Ui 2R90j0PuSIeKQW6ArWYn0npicloR+tuQ6WD5mmgk+MTCefwGuw6eIsnsAhL7fAYA dcKXAd4pL+YAa50Fx0IyxNoniMQ3LjJabK6Cj8AxXbP2B/kumOw2fygeim7eNKFz fWR9qgpgZQUpibJZ9cGoQ3rAelmRozX+wPn9m6xVCJjoVvaw8piVjW7QDMMiHAfi Pc07/BNFlGSLsOAMK8m6xnZdjxEcWUNvUMSEDoD6eXyRmXT8pyRvgILy/EHZC7Bv aPcmP78n0iwz/O8gxxatBTIw7Bd2B2A= -----END CERTIFICATE-----Generated at Mon Mar 2 06:37:54 2026 by rpki-client