$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e932da7-4a5e-3cde-8405-63aaede7458c.roa File: 2e932da7-4a5e-3cde-8405-63aaede7458c.roa (raw, json) Hash identifier: i/w8b2J8ByQmy2KiglkcEU+JdfBApoI2n9SzGwIRd0I= Subject key identifier: C3:C1:FA:5D:C9:BC:08:AB:86:64:5E:3F:71:7C:76:9E:95:41:1C:3C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5C43842AC675F56F9F2540 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e932da7-4a5e-3cde-8405-63aaede7458c.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 73.247.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5c:43:84:2a:c6:75:f5:6f:9f:25:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=74cd2780-eacd-4dc4-bef1-9c9bb72e7db5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b9:3a:ac:a0:b0:b6:18:94:76:f2:fa:06:5d: e8:21:e7:81:f9:30:5b:50:6d:7d:35:4c:5b:c9:a2: cd:3d:2c:1e:a2:fc:3c:4e:a0:2b:e3:c4:ec:72:55: ab:c6:6e:88:6c:6a:eb:08:bc:c1:18:7a:1f:04:6d: fb:25:0e:8d:6a:41:46:9b:e5:e0:bb:0c:b0:cb:83: ec:27:a1:90:93:c2:09:54:4c:57:f4:4a:17:79:5d: c6:1b:6d:53:57:ef:81:96:4c:45:fe:2b:a2:88:38: f0:fa:bf:85:33:60:bd:2d:f8:e4:4b:e1:00:94:6e: fe:d3:88:24:94:75:a1:bd:2f:ce:64:eb:81:03:22: c6:a6:d9:cf:6a:62:ef:80:7b:e4:e7:1b:8d:89:75: 7e:1d:40:89:23:a1:0c:6c:87:e2:1e:e5:f9:fc:80: 95:e7:52:49:64:4b:4b:a2:88:eb:b4:cb:55:5b:7e: d5:d5:a0:9d:6e:a8:88:30:d4:d3:eb:c8:59:89:be: a3:21:67:c4:4b:a1:17:00:5d:fa:4d:61:6f:d5:af: 82:24:5d:5d:b5:95:ff:85:47:01:6f:a0:a9:74:23: 5d:99:2e:18:02:91:92:0e:03:aa:d4:0f:5e:3b:15: ec:32:de:04:5c:68:e1:d1:d8:3b:a1:1a:69:a8:6a: 8f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C1:FA:5D:C9:BC:08:AB:86:64:5E:3F:71:7C:76:9E:95:41:1C:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e932da7-4a5e-3cde-8405-63aaede7458c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.247.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:d8:51:5c:21:ae:34:71:0f:7f:19:d5:84:02:03:c3:5c:c2: 36:b6:49:8e:0f:ae:22:96:9e:f1:7b:fa:27:0d:b9:c1:3f:62: a8:9f:84:5b:7b:94:b9:41:3b:88:66:2a:73:48:e0:43:24:80: 24:e4:45:da:37:3c:ad:3e:73:e4:ac:f2:ee:25:2f:39:20:0e: e5:53:df:3c:74:4b:2e:06:f1:dd:3b:19:c4:bc:c7:e2:35:f1: 63:b5:14:92:90:0d:fa:30:8a:cb:94:22:d8:0b:d4:ed:0b:c1: 14:35:cf:7b:77:41:1c:0f:de:e4:da:22:f3:1b:bc:c2:b4:ab: b5:f0:7e:72:c3:dd:c4:86:44:ed:86:0e:38:35:54:8c:e8:f3: d5:ed:e3:5e:d5:fe:ce:91:92:40:57:70:d3:74:5e:f7:5d:2d: 3f:d8:6e:a4:6d:f5:1c:a8:35:aa:9e:5a:bd:71:16:85:21:7b: d9:89:97:55:46:c5:2b:62:a6:8e:95:8e:6d:d7:c2:f6:bc:fb: c4:e7:32:76:6c:5f:ea:bf:dc:ac:e0:15:f0:2f:60:a9:f6:33: 90:2a:9c:ba:2e:30:31:24:c1:76:93:81:96:12:80:64:7b:cf: cf:5b:95:73:26:5a:d9:e3:3e:27:ff:08:a6:87:39:ab:e4:29: 0c:ed:bb:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXEOEKsZ19W+fJUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NzRjZDI3ODAtZWFjZC00ZGM0LWJlZjEtOWM5YmI3MmU3ZGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLk6rKCwthiUdvL6Bl3oIeeB+TBbUG19NUxb yaLNPSweovw8TqAr48TsclWrxm6IbGrrCLzBGHofBG37JQ6NakFGm+Xguwywy4Ps J6GQk8IJVExX9EoXeV3GG21TV++BlkxF/iuiiDjw+r+FM2C9LfjkS+EAlG7+04gk lHWhvS/OZOuBAyLGptnPamLvgHvk5xuNiXV+HUCJI6EMbIfiHuX5/ICV51JJZEtL oojrtMtVW37V1aCdbqiIMNTT68hZib6jIWfES6EXAF36TWFv1a+CJF1dtZX/hUcB b6CpdCNdmS4YApGSDgOq1A9eOxXsMt4EXGjh0dg7oRppqGqPTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPB+l3JvAirhmReP3F8dp6VQRw8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmU5MzJkYTctNGE1ZS0z Y2RlLTg0MDUtNjNhYWVkZTc0NThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSffmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfYUVwhrjRxD38Z1YQCA8Ncwja2SY4PriKWnvF7+icNucE/YqifhFt7 lLlBO4hmKnNI4EMkgCTkRdo3PK0+c+Ss8u4lLzkgDuVT3zx0Sy4G8d07GcS8x+I1 8WO1FJKQDfowisuUItgL1O0LwRQ1z3t3QRwP3uTaIvMbvMK0q7XwfnLD3cSGRO2G Djg1VIzo89Xt417V/s6RkkBXcNN0XvddLT/YbqRt9RyoNaqeWr1xFoUhe9mJl1VG xStipo6Vjm3Xwva8+8TnMnZsX+q/3KzgFfAvYKn2M5AqnLouMDEkwXaTgZYSgGR7 z89blXMmWtnjPif/CKaHOavkKQztu1o= -----END CERTIFICATE-----Generated at Sun Mar 1 18:41:33 2026 by rpki-client