$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a4226a0-d4c3-3369-b0bf-f0456fdda616.roa File: 3a4226a0-d4c3-3369-b0bf-f0456fdda616.roa (raw, json) Hash identifier: rtvgjqi2GcGRUsGMmabYvuKkCu9uh/7tGmZnVWHvXAk= Subject key identifier: E0:51:88:80:E4:BB:C8:70:A9:9A:48:9A:D5:E1:3E:05:9A:5F:D7:C9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE57D68A2E3467ADA8AF77A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a4226a0-d4c3-3369-b0bf-f0456fdda616.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33287 IP address blocks: 73.248.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:d6:8a:2e:34:67:ad:a8:af:77:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=4ae4e607-a0aa-44c6-9eab-45467cb77911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:05:37:fb:05:45:19:c2:bf:82:8a:1b:94:5c: 3c:ff:a1:9d:d6:1e:9e:ad:2f:e4:0b:c6:42:6b:65: 46:93:c6:e8:48:a4:99:e9:51:9b:85:a9:9b:89:0f: 65:d9:b0:b5:76:a2:60:be:8a:2d:fe:7e:5c:9e:04: eb:a0:bb:c0:0a:06:72:7d:40:54:ed:23:b7:4c:75: 01:03:1f:f8:ec:c0:2d:70:07:77:d9:0d:c3:33:d0: 5d:ac:29:fb:2d:ee:0b:45:7a:a7:07:5e:c2:a0:44: de:c5:7e:8d:43:ec:f0:fa:40:cd:09:d7:55:90:fa: 8d:cb:5d:b8:f1:19:61:a9:81:d9:9e:97:4f:bd:91: 2a:de:9a:6a:00:b0:da:92:c2:7c:a4:24:88:02:3b: 91:e3:02:d5:17:41:cf:8f:e1:c3:46:5e:5f:dd:00: 87:88:7a:d5:0e:41:24:92:71:48:38:81:a0:27:51: 34:ba:80:3d:33:11:f3:ed:47:c0:bf:e4:f8:69:92: 65:22:69:88:83:83:e8:27:8e:7a:56:98:80:d4:7c: 88:81:77:f2:93:85:4e:23:ed:e4:a7:11:42:0d:c3: c4:6e:8c:d4:af:d7:9e:5b:60:3e:d4:3f:35:e3:cc: 3c:6a:fa:14:d6:94:47:27:2b:b5:d2:ac:1a:fb:16: 0b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:51:88:80:E4:BB:C8:70:A9:9A:48:9A:D5:E1:3E:05:9A:5F:D7:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a4226a0-d4c3-3369-b0bf-f0456fdda616.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.248.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ce:1d:bd:87:f8:fa:1a:b1:14:6a:1a:51:61:ef:4a:c1:c8:8e: bf:dd:69:7b:8e:b8:97:05:eb:bd:5a:ff:49:4f:dc:59:91:d9: 8f:59:22:b4:51:c3:3b:d7:66:6a:90:30:eb:22:fd:de:47:dc: 7c:b8:28:0d:8c:2a:23:10:82:21:68:f4:bc:7c:55:87:b5:b9: 7f:8f:b7:c7:c8:59:f3:46:e6:b7:58:ab:08:26:38:42:02:4a: 9d:db:f8:1e:bd:ad:77:39:9c:10:2b:74:62:8c:81:0c:2d:40: a4:89:7f:49:68:fd:7e:81:8b:de:36:af:11:7a:5f:3f:b5:e6: 9d:04:9d:63:d7:d2:f5:ca:35:fe:99:4e:67:ef:8a:f8:e4:0c: b0:58:87:f2:b7:06:29:84:bf:ac:e5:f4:a0:c4:26:f3:44:49: 0a:5c:75:bd:2d:40:6a:f5:69:6b:a7:c5:b0:a5:8b:e4:2d:09: f2:d2:b9:21:3c:ce:f4:74:e9:26:ab:81:76:3b:69:bf:17:8d: 17:c9:89:9c:f5:55:30:7a:c5:37:54:fd:fa:ee:86:c5:ee:2e: c7:62:c6:90:e1:e8:4a:5c:05:dd:5c:8b:51:05:50:6f:2d:05: ee:4f:15:d5:79:15:cd:bb:0f:35:63:c0:ad:62:40:ca:dc:5d: 48:cf:36:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuV9aKLjRnraivd6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NGFlNGU2MDctYTBhYS00NGM2LTllYWItNDU0NjdjYjc3OTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgU3+wVFGcK/gooblFw8/6Gd1h6erS/kC8ZC a2VGk8boSKSZ6VGbhambiQ9l2bC1dqJgvoot/n5cngTroLvACgZyfUBU7SO3THUB Ax/47MAtcAd32Q3DM9BdrCn7Le4LRXqnB17CoETexX6NQ+zw+kDNCddVkPqNy124 8RlhqYHZnpdPvZEq3ppqALDaksJ8pCSIAjuR4wLVF0HPj+HDRl5f3QCHiHrVDkEk knFIOIGgJ1E0uoA9MxHz7UfAv+T4aZJlImmIg4PoJ456VpiA1HyIgXfyk4VOI+3k pxFCDcPEbozUr9eeW2A+1D8148w8avoU1pRHJyu10qwa+xYLIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOBRiIDku8hwqZpImtXhPgWaX9fJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2E0MjI2YTAtZDRjMy0z MzY5LWIwYmYtZjA0NTZmZGRhNjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSfieMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM4dvYf4+hqxFGoaUWHvSsHIjr/daXuOuJcF671a/0lP3FmR2Y9ZIrRR wzvXZmqQMOsi/d5H3Hy4KA2MKiMQgiFo9Lx8VYe1uX+Pt8fIWfNG5rdYqwgmOEIC Sp3b+B69rXc5nBArdGKMgQwtQKSJf0lo/X6Bi942rxF6Xz+15p0EnWPX0vXKNf6Z TmfvivjkDLBYh/K3BimEv6zl9KDEJvNESQpcdb0tQGr1aWunxbCli+QtCfLSuSE8 zvR06SargXY7ab8XjRfJiZz1VTB6xTdU/fruhsXuLsdixpDh6EpcBd1ci1EFUG8t Be5PFdV5Fc27DzVjwK1iQMrcXUjPNv4= -----END CERTIFICATE-----Generated at Mon Mar 2 20:06:35 2026 by rpki-client