$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6c67b1e0-e603-31d2-9511-7263b77062b4.roa File: 6c67b1e0-e603-31d2-9511-7263b77062b4.roa (raw, json) Hash identifier: kNRUNyUmXTPM6/DAwSGVoJJ+3H9gd31hpK1BAi0ZisM= Subject key identifier: 21:D0:29:CE:CA:FE:6E:EA:3F:75:4C:8E:97:70:E6:EA:7A:39:B1:81 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE58E4BE4F78A5EBAFE11180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6c67b1e0-e603-31d2-9511-7263b77062b4.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 73.231.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:e4:be:4f:78:a5:eb:af:e1:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=6743a380-46e9-4194-8c1c-dd9eba61298a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:74:2d:e9:96:21:7c:bf:af:8b:50:fb:8b:0f: 53:e1:10:77:a3:87:e8:36:1a:d4:dc:91:95:36:6c: d9:d1:c6:d9:fc:d7:ed:3e:9c:2f:35:ac:7c:ca:c5: 53:83:4e:98:bd:a0:46:54:c7:ce:d0:6a:e7:42:70: 91:10:ce:93:af:b8:89:17:69:5c:2f:87:c3:28:aa: 87:0e:c9:44:7a:80:fe:10:70:bd:dd:35:aa:79:a1: b5:f2:98:8d:08:e2:e7:a4:9a:be:4b:72:49:d7:11: c3:b0:48:ac:74:cf:2c:84:f7:e6:30:45:a2:0a:73: 1b:71:c3:d2:7d:5d:3a:fd:72:c9:08:02:26:36:93: 55:53:99:c8:64:1b:4c:72:3a:d5:a4:be:92:e5:ae: 9a:7e:85:1c:cc:82:63:45:6a:fc:78:6d:31:e6:32: 21:ae:a8:dc:fe:cd:bc:28:5c:4e:b1:a2:0e:ce:6e: f5:2d:46:59:bc:68:c5:b0:31:64:c4:7a:45:e3:81: 8c:d3:77:b6:fe:20:19:3c:18:07:74:b5:f6:4d:df: 3b:d3:68:f7:46:78:18:0a:11:2e:31:85:8e:3e:70: cb:4e:40:5f:90:ce:40:88:b7:8d:6b:06:53:c4:33: f9:8f:1f:29:da:18:f4:7c:d2:64:d3:83:8b:76:88: 6b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:D0:29:CE:CA:FE:6E:EA:3F:75:4C:8E:97:70:E6:EA:7A:39:B1:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6c67b1e0-e603-31d2-9511-7263b77062b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.231.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:88:39:ed:2a:0c:0e:c9:7a:b8:32:14:a5:57:fc:72:bb:ac: 91:5e:40:90:4e:62:1b:dc:32:b0:04:cb:35:d4:79:6b:ca:5b: d0:c2:93:44:56:ef:1d:be:e9:da:89:ff:e5:7e:ef:31:94:b4: 47:73:d4:f6:f8:d7:fa:45:19:70:0a:e4:1a:02:1b:89:f6:08: d9:a4:76:9b:43:e4:59:c5:16:bc:ee:82:7d:88:88:97:9f:69: 43:61:5a:39:43:d4:3c:9b:11:27:6c:2a:bf:e0:41:8a:f5:64: a0:25:79:f7:b6:58:85:ae:50:e6:ad:e1:11:f8:ec:ff:30:df: 43:c9:1d:0f:5b:ae:b3:63:f1:86:80:d8:6b:17:3b:da:7a:1c: f2:29:02:aa:88:ce:1a:8f:26:ce:9b:da:fc:d1:20:17:89:cd: 0a:5f:45:c6:78:a3:4d:3c:22:80:49:c6:37:6b:72:a0:47:ab: 6b:b8:10:c9:c1:c4:25:c8:79:54:de:f3:b9:a0:f4:39:5a:3b: f1:a8:fc:d0:10:26:e3:29:a3:b9:16:b8:3d:38:da:ea:13:08: 0f:cf:89:49:4e:2c:47:6e:f7:5c:d0:bb:22:1e:b4:51:71:bd: 95:8d:dd:5a:63:9a:79:e0:6b:9c:d6:3c:dc:56:a2:83:88:85: 93:7a:68:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWOS+T3il66/hEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk Njc0M2EzODAtNDZlOS00MTk0LThjMWMtZGQ5ZWJhNjEyOThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnQt6ZYhfL+vi1D7iw9T4RB3o4foNhrU3JGV NmzZ0cbZ/NftPpwvNax8ysVTg06YvaBGVMfO0GrnQnCREM6Tr7iJF2lcL4fDKKqH DslEeoD+EHC93TWqeaG18piNCOLnpJq+S3JJ1xHDsEisdM8shPfmMEWiCnMbccPS fV06/XLJCAImNpNVU5nIZBtMcjrVpL6S5a6afoUczIJjRWr8eG0x5jIhrqjc/s28 KFxOsaIOzm71LUZZvGjFsDFkxHpF44GM03e2/iAZPBgHdLX2Td8702j3RngYChEu MYWOPnDLTkBfkM5AiLeNawZTxDP5jx8p2hj0fNJk04OLdohrOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHQKc7K/m7qP3VMjpdw5up6ObGBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNmM2N2IxZTAtZTYwMy0z MWQyLTk1MTEtNzI2M2I3NzA2MmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSedsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuIOe0qDA7JergyFKVX/HK7rJFeQJBOYhvcMrAEyzXUeWvKW9DCk0RW 7x2+6dqJ/+V+7zGUtEdz1Pb41/pFGXAK5BoCG4n2CNmkdptD5FnFFrzugn2IiJef aUNhWjlD1DybESdsKr/gQYr1ZKAlefe2WIWuUOat4RH47P8w30PJHQ9brrNj8YaA 2GsXO9p6HPIpAqqIzhqPJs6b2vzRIBeJzQpfRcZ4o008IoBJxjdrcqBHq2u4EMnB xCXIeVTe87mg9DlaO/Go/NAQJuMpo7kWuD042uoTCA/PiUlOLEdu91zQuyIetFFx vZWN3Vpjmnnga5zWPNxWooOIhZN6aAU= -----END CERTIFICATE-----Generated at Mon Mar 2 02:34:04 2026 by rpki-client