$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/65917c93-12d1-3d3f-aa8d-581647b5aa8e.roa File: 65917c93-12d1-3d3f-aa8d-581647b5aa8e.roa (raw, json) Hash identifier: NgpPkVCSS7bzAmyd8BNbFHmUtKBb945mMKdN33Q4oWg= Subject key identifier: 1E:4F:14:9C:EF:93:45:59:F1:3F:2E:C2:DD:F8:61:A3:2A:51:B4:8B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE59BEEE3AA99585D99A2B00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/65917c93-12d1-3d3f-aa8d-581647b5aa8e.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33659 IP address blocks: 73.29.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:59:be:ee:3a:a9:95:85:d9:9a:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=4f003a61-f283-498c-93c4-d2cb7aef90da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c9:95:59:74:4d:96:fc:f3:67:33:0a:13:40: ce:2c:52:c6:4b:0e:1b:ae:d3:a8:d3:6c:a6:97:d7: 2f:67:da:78:52:11:13:fc:e3:0e:11:e8:1f:17:4d: 70:99:9d:d3:67:7d:e7:5c:45:70:45:33:09:a7:43: 05:73:37:d3:94:db:27:74:74:7b:76:a6:ae:d6:21: b1:5e:01:f0:6a:13:09:22:cf:32:3d:b6:8a:49:bb: df:13:88:8f:05:d7:37:52:52:99:29:7d:b6:af:33: ff:cd:67:25:ed:a0:0b:75:79:37:f5:49:c8:67:12: 1e:71:7c:ce:b2:2f:9a:2e:93:c0:ff:93:87:81:be: aa:7d:2e:96:a4:80:15:ab:0f:d7:c5:e3:12:3d:42: 57:67:24:1f:99:51:85:1a:c3:f7:37:5d:63:83:28: 0a:a3:e3:97:e4:30:d2:92:b5:d4:aa:7c:65:47:b2: 03:f6:d6:98:e2:a4:e8:f0:c8:2c:9c:b0:ab:f6:43: b9:23:8f:63:f2:dc:2d:02:b9:32:44:f7:19:62:d9: 12:df:ca:86:98:68:19:28:cf:74:6c:9e:9f:3c:53: 76:5f:74:5a:0f:33:a6:d2:d3:9d:7f:1a:92:e7:71: 7e:15:12:b4:bd:36:ab:19:dd:65:d3:80:20:d4:83: 2d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:4F:14:9C:EF:93:45:59:F1:3F:2E:C2:DD:F8:61:A3:2A:51:B4:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/65917c93-12d1-3d3f-aa8d-581647b5aa8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.29.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:70:1d:fa:57:d8:b2:3a:91:d1:c1:7e:ea:f3:9f:eb:32:19: 09:20:4d:58:c7:21:2b:71:95:32:5f:37:16:78:6e:53:af:d8: c6:c8:8c:99:b8:11:41:12:fb:b6:55:3b:5c:d4:33:ab:af:97: 67:81:e4:74:77:88:7e:3b:93:6c:5b:40:12:d8:1e:20:c0:25: de:c5:8b:25:e2:3b:aa:cd:b3:d0:f1:06:f6:eb:05:cb:ed:a5: ff:77:ee:b2:b9:ce:6a:41:d5:bc:cc:63:58:32:68:1b:cc:39: 12:aa:94:22:de:88:36:fb:3f:55:35:a3:6e:4b:c5:7b:5a:52: e9:91:a8:a6:f1:e3:b3:11:7b:9e:76:55:48:b6:d1:fd:c7:50: 5e:cd:85:0d:77:5f:17:2a:24:6d:bd:2a:bb:16:e0:34:02:22: 5f:e5:12:c4:cb:6a:b7:73:70:02:ca:c9:8d:73:e1:b7:35:a6: bd:51:67:c5:7d:97:23:8d:3e:75:13:1b:ae:16:0d:db:60:dd: 3e:37:7d:6e:20:8f:a6:81:4d:1f:eb:07:17:f2:d7:53:96:97: 22:2f:21:ea:b3:b2:23:46:08:6a:ed:75:f3:58:82:8d:67:33: ac:f1:a6:96:cf:68:49:f4:74:e9:f7:f6:69:6e:73:1f:3c:fd: d8:99:97:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWb7uOqmVhdmaKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NGYwMDNhNjEtZjI4My00OThjLTkzYzQtZDJjYjdhZWY5MGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8mVWXRNlvzzZzMKE0DOLFLGSw4brtOo02ym l9cvZ9p4UhET/OMOEegfF01wmZ3TZ33nXEVwRTMJp0MFczfTlNsndHR7dqau1iGx XgHwahMJIs8yPbaKSbvfE4iPBdc3UlKZKX22rzP/zWcl7aALdXk39UnIZxIecXzO si+aLpPA/5OHgb6qfS6WpIAVqw/XxeMSPUJXZyQfmVGFGsP3N11jgygKo+OX5DDS krXUqnxlR7ID9taY4qTo8MgsnLCr9kO5I49j8twtArkyRPcZYtkS38qGmGgZKM90 bJ6fPFN2X3RaDzOm0tOdfxqS53F+FRK0vTarGd1l04Ag1IMtBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB5PFJzvk0VZ8T8uwt34YaMqUbSLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjU5MTdjOTMtMTJkMS0z ZDNmLWFhOGQtNTgxNjQ3YjVhYThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASR36MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNwHfpX2LI6kdHBfurzn+syGQkgTVjHIStxlTJfNxZ4blOv2MbIjJm4 EUES+7ZVO1zUM6uvl2eB5HR3iH47k2xbQBLYHiDAJd7FiyXiO6rNs9DxBvbrBcvt pf937rK5zmpB1bzMY1gyaBvMORKqlCLeiDb7P1U1o25LxXtaUumRqKbx47MRe552 VUi20f3HUF7NhQ13XxcqJG29KrsW4DQCIl/lEsTLardzcALKyY1z4bc1pr1RZ8V9 lyONPnUTG64WDdtg3T43fW4gj6aBTR/rBxfy11OWlyIvIeqzsiNGCGrtdfNYgo1n M6zxppbPaEn0dOn39mlucx88/diZlxc= -----END CERTIFICATE-----Generated at Mon Mar 2 00:36:58 2026 by rpki-client