$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/886b30be-febb-3db4-b5a0-2ed118e11c50.roa File: 886b30be-febb-3db4-b5a0-2ed118e11c50.roa (raw, json) Hash identifier: 5TblMWBDt9OapIZS3rHmJab3l+FGzYkaK6ZCFiz7g3c= Subject key identifier: 43:D7:98:FB:61:EE:53:2A:A1:C0:3A:77:62:B7:BE:F1:13:B9:FB:C1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE578EC66A0EDC919F8D4900 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/886b30be-febb-3db4-b5a0-2ed118e11c50.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33659 IP address blocks: 73.196.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:8e:c6:6a:0e:dc:91:9f:8d:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=4b7d7c3d-24e1-48e7-965f-bdffe9b29f0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:99:d6:cb:33:76:1f:a3:29:8e:51:27:e9:71: 6c:bd:46:e9:b4:92:61:93:aa:95:67:e4:9b:b7:d8: 0d:90:47:d0:9d:65:77:46:c2:2d:19:94:94:a5:9a: b8:00:c5:8a:71:2b:44:04:a4:41:65:39:84:29:d7: 7c:e4:24:b6:0b:d6:9f:7e:fb:5b:4f:1b:63:6e:a2: 54:40:12:fa:e2:77:c9:95:60:08:05:70:2a:dd:50: ef:e6:bf:53:ca:6d:be:35:87:8b:bd:45:4e:09:86: 11:2b:d0:79:8b:6e:1d:c1:cd:e9:c9:4d:f7:fc:c8: 50:98:d5:23:9d:e0:9c:17:f9:93:44:0b:88:ff:d3: 97:ac:96:66:37:15:a3:33:c1:93:f8:9b:38:b1:e0: 5c:98:a1:21:1c:c2:08:57:66:03:7a:b2:1f:73:09: 20:6d:76:10:25:87:f1:79:e7:ee:df:14:c7:a4:ef: 7d:6f:15:b3:8f:6f:f2:9a:ae:fd:01:6c:84:8f:2d: 92:f0:a7:4b:11:52:2b:f1:5e:1c:8a:fa:00:1c:eb: 4e:01:f9:4b:67:6c:1c:a7:d0:91:4e:35:10:51:58: 77:74:bb:3e:cf:0e:e6:c8:ed:61:45:4f:ee:18:87: 57:18:c9:73:89:ea:fd:07:39:26:9a:9c:0b:a0:56: 9f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D7:98:FB:61:EE:53:2A:A1:C0:3A:77:62:B7:BE:F1:13:B9:FB:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/886b30be-febb-3db4-b5a0-2ed118e11c50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.196.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:47:4c:c1:ca:5a:97:8c:19:b9:f7:88:e8:72:67:de:bc:bf: c0:8e:cc:dd:5d:4b:b4:bc:8a:06:94:11:9a:f2:d6:ca:93:55: 8f:73:11:54:d2:8d:a1:bc:6b:c9:23:a8:d9:6a:bd:00:85:5d: bf:93:15:1b:9b:36:84:be:89:6d:0a:66:56:64:ab:1f:0a:1a: a0:52:5d:b0:03:40:2e:3b:3f:45:8c:83:11:9e:0c:aa:0e:7d: 88:a5:3c:f0:71:e1:64:8c:8a:16:aa:78:c8:d0:4a:19:9b:37: 78:32:15:d5:12:ba:26:2b:0c:91:df:d0:8a:45:e9:8c:38:66: f1:52:95:27:2c:d9:58:ed:e4:e3:ba:2a:8f:57:5f:26:1e:e7: 42:b0:48:ed:1b:b3:ab:01:13:5e:88:47:2f:0c:a3:60:5f:09: 56:21:5b:8c:5b:b7:c0:6d:eb:2f:64:53:fb:a5:a4:c7:6b:37: 91:42:60:cf:35:5c:b4:65:a9:cc:a7:00:dd:f2:2c:c2:3c:31: 89:be:06:da:3c:6e:34:af:6d:81:f9:e4:0e:9a:4a:b1:50:18: 53:fe:14:96:5d:6d:96:da:73:43:06:7b:05:ca:a1:4e:20:1f: 68:56:1e:57:0b:54:87:90:40:6c:c0:70:05:d8:98:79:e0:bb: b8:9a:c0:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuV47Gag7ckZ+NSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NGI3ZDdjM2QtMjRlMS00OGU3LTk2NWYtYmRmZmU5YjI5ZjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZnWyzN2H6MpjlEn6XFsvUbptJJhk6qVZ+Sb t9gNkEfQnWV3RsItGZSUpZq4AMWKcStEBKRBZTmEKdd85CS2C9affvtbTxtjbqJU QBL64nfJlWAIBXAq3VDv5r9Tym2+NYeLvUVOCYYRK9B5i24dwc3pyU33/MhQmNUj neCcF/mTRAuI/9OXrJZmNxWjM8GT+Js4seBcmKEhHMIIV2YDerIfcwkgbXYQJYfx eefu3xTHpO99bxWzj2/ymq79AWyEjy2S8KdLEVIr8V4civoAHOtOAflLZ2wcp9CR TjUQUVh3dLs+zw7myO1hRU/uGIdXGMlzier9BzkmmpwLoFafwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPXmPth7lMqocA6d2K3vvETufvBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODg2YjMwYmUtZmViYi0z ZGI0LWI1YTAtMmVkMTE4ZTExYzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBScTgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJHTMHKWpeMGbn3iOhyZ968v8COzN1dS7S8igaUEZry1sqTVY9zEVTS jaG8a8kjqNlqvQCFXb+TFRubNoS+iW0KZlZkqx8KGqBSXbADQC47P0WMgxGeDKoO fYilPPBx4WSMihaqeMjQShmbN3gyFdUSuiYrDJHf0IpF6Yw4ZvFSlScs2Vjt5OO6 Ko9XXyYe50KwSO0bs6sBE16IRy8Mo2BfCVYhW4xbt8Bt6y9kU/ulpMdrN5FCYM81 XLRlqcynAN3yLMI8MYm+Bto8bjSvbYH55A6aSrFQGFP+FJZdbZbac0MGewXKoU4g H2hWHlcLVIeQQGzAcAXYmHngu7iawKQ= -----END CERTIFICATE-----Generated at Sun Mar 1 21:00:00 2026 by rpki-client