$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40fc7c99-5001-3346-b71a-dacf1a4ddd41.roa File: 40fc7c99-5001-3346-b71a-dacf1a4ddd41.roa (raw, json) Hash identifier: 3Ym56343rtB+GI7TWEy79aMewNFpGkdQ9Bw6Umz+aHY= Subject key identifier: C2:89:AB:F7:54:6C:5E:BD:DB:9C:DA:F7:7B:43:DB:9B:8A:CF:FD:04 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5DBCD448E1AA4D06466600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40fc7c99-5001-3346-b71a-dacf1a4ddd41.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 73.252.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5d:bc:d4:48:e1:aa:4d:06:46:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=c2764e1f-977d-485f-8b97-0ab4bf94f90a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e4:77:6c:91:86:79:02:6d:41:2f:f5:49:76: 27:03:f8:f9:7c:47:5a:eb:07:f2:76:ec:b5:db:7a: 0d:22:dd:38:d0:9d:1c:1b:38:ad:22:cb:69:4a:a7: e8:6d:fd:f6:8f:5b:c0:89:0c:7f:3f:b0:5d:03:e1: 54:48:dc:a8:3f:c1:fc:14:b4:44:95:72:89:37:73: b3:49:94:e1:73:aa:6c:7f:44:44:8b:40:8d:d1:8e: 28:f3:33:f0:f9:48:e2:a6:c3:88:1a:6e:e8:ee:f7: 45:c9:d2:ac:ca:dd:88:e4:ef:ce:7c:82:43:63:c8: 7b:c1:99:c3:62:1b:af:02:91:98:ca:0a:fe:34:25: e7:e8:11:0a:86:c2:2b:1c:e1:e3:9a:4d:76:b9:9b: ae:66:df:49:c4:65:68:ed:86:47:7c:53:ff:95:6b: 69:48:5d:35:d9:4f:59:dc:0e:a4:f2:e9:e0:df:ab: f9:e0:e3:f7:d9:a4:a1:59:c7:bd:45:4a:b3:04:ef: d4:40:02:65:be:cc:79:75:80:97:a5:a7:d2:af:7d: b3:ab:d7:77:f2:39:6a:08:99:a6:8f:34:72:7c:15: bc:f3:8e:c8:d4:01:b4:a2:d7:63:38:e0:7f:65:ca: 87:19:59:2c:e8:d9:c1:6f:bd:39:f1:68:ca:dd:29: 05:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:89:AB:F7:54:6C:5E:BD:DB:9C:DA:F7:7B:43:DB:9B:8A:CF:FD:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40fc7c99-5001-3346-b71a-dacf1a4ddd41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.252.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:10:82:72:70:67:69:06:9e:ad:5f:6b:88:51:79:f8:a9:f8: a3:36:5d:8a:23:1d:72:bc:3b:ae:14:6b:55:dd:d0:6f:0d:63: fc:8b:e4:2c:56:e2:3f:31:a5:b4:5e:42:24:ea:17:25:37:80: bd:90:7e:15:52:22:95:66:36:89:e5:c7:40:c0:be:04:2e:f3: 6b:75:89:39:56:fa:93:13:31:4e:9c:44:88:60:79:86:9f:8d: 40:4c:e9:5c:f2:d4:d9:24:5b:6f:21:74:e2:87:8d:9f:96:d0: bf:b9:a7:67:dd:46:ea:21:c0:ed:11:de:1d:44:0e:3b:1d:60: 17:b4:e3:0b:80:86:68:af:6d:c1:37:9f:69:d5:0c:a4:ba:39: bc:58:96:05:02:89:47:89:38:93:9f:a2:f3:12:ce:5e:45:55: eb:f9:f5:76:9a:93:c2:61:38:6a:4e:aa:9e:82:5c:9b:dc:c3: f3:11:f4:dc:7e:44:7e:91:a4:18:30:8d:e6:0a:3e:23:ef:04: 12:f1:7f:db:1b:82:8a:ca:98:0e:27:c2:db:15:90:dd:d1:8b: 55:1f:bb:a6:72:bb:98:57:9f:98:f0:03:71:70:27:84:12:2f: 88:f4:e1:13:6d:37:0d:76:10:78:97:7c:ac:6b:eb:e9:11:b4: 91:4e:c3:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXbzUSOGqTQZGZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YzI3NjRlMWYtOTc3ZC00ODVmLThiOTctMGFiNGJmOTRmOTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uR3bJGGeQJtQS/1SXYnA/j5fEda6wfyduy1 23oNIt040J0cGzitIstpSqfobf32j1vAiQx/P7BdA+FUSNyoP8H8FLRElXKJN3Oz SZThc6psf0REi0CN0Y4o8zPw+UjipsOIGm7o7vdFydKsyt2I5O/OfIJDY8h7wZnD YhuvApGYygr+NCXn6BEKhsIrHOHjmk12uZuuZt9JxGVo7YZHfFP/lWtpSF012U9Z 3A6k8ung36v54OP32aShWce9RUqzBO/UQAJlvsx5dYCXpafSr32zq9d38jlqCJmm jzRyfBW8847I1AG0otdjOOB/ZcqHGVks6NnBb7058WjK3SkFVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKJq/dUbF6925za93tD25uKz/0EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDBmYzdjOTktNTAwMS0z MzQ2LWI3MWEtZGFjZjFhNGRkZDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSfzcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0QgnJwZ2kGnq1fa4hRefip+KM2XYojHXK8O64Ua1Xd0G8NY/yL5CxW 4j8xpbReQiTqFyU3gL2QfhVSIpVmNonlx0DAvgQu82t1iTlW+pMTMU6cRIhgeYaf jUBM6Vzy1NkkW28hdOKHjZ+W0L+5p2fdRuohwO0R3h1EDjsdYBe04wuAhmivbcE3 n2nVDKS6ObxYlgUCiUeJOJOfovMSzl5FVev59Xaak8JhOGpOqp6CXJvcw/MR9Nx+ RH6RpBgwjeYKPiPvBBLxf9sbgorKmA4nwtsVkN3Ri1Ufu6Zyu5hXn5jwA3FwJ4QS L4j04RNtNw12EHiXfKxr6+kRtJFOw1s= -----END CERTIFICATE-----Generated at Mon Mar 2 00:57:40 2026 by rpki-client