$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a2999a5-21f7-386f-be3c-e9bf59a7d282.roa File: 8a2999a5-21f7-386f-be3c-e9bf59a7d282.roa (raw, json) Hash identifier: mWHN3T3JQK/xGlTDt2LWRDFaT4V7j+gk2ldhXxDZsF8= Subject key identifier: 41:E1:E2:16:11:80:83:B8:EB:7B:5A:C5:07:CD:CF:EE:DF:5A:A6:AB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5851006F434B8E532E5D20 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a2999a5-21f7-386f-be3c-e9bf59a7d282.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 73.211.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:51:00:6f:43:4b:8e:53:2e:5d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=b3d6a128-bb6c-4c72-96e9-bf2715157131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:58:4f:71:89:a3:a3:ca:fa:6e:b5:bc:83:cc: 2b:f5:e6:0c:03:83:4e:67:3c:fc:f2:29:2c:e7:08: 26:f6:13:1c:ec:ff:7f:c7:15:2b:22:a7:b9:38:53: 47:66:db:a4:b6:25:d7:2b:6d:b3:0b:f2:c2:ee:10: 5e:40:d8:64:a3:dc:e7:86:83:be:93:d5:45:4a:3e: c1:a6:ce:e1:fa:bd:a9:32:06:8e:3f:e3:8f:b8:bd: e5:2a:47:0c:03:af:e7:55:56:bc:97:6b:c5:dd:e0: e2:cc:da:52:3e:9f:71:fe:be:67:92:15:0f:1e:0a: 58:b3:56:88:34:d2:e0:75:0a:8a:4a:c3:6d:3a:36: 44:e6:a0:63:91:b0:ae:89:d6:7b:e8:25:0c:11:b1: a9:2e:88:7e:97:b7:74:f5:05:11:4f:86:be:ab:23: 33:6f:c2:5a:6a:bc:3e:9c:7a:9d:a8:e3:63:29:99: eb:aa:79:e1:fd:72:53:9f:52:79:46:50:63:41:c7: 1d:bc:e7:9e:86:19:6b:ea:c3:bc:5d:db:1b:df:a4: 4b:4f:2d:12:f4:fb:01:c5:8e:74:df:ea:35:fb:9d: e6:4c:d2:21:86:8c:f1:b3:0d:dd:d9:7e:58:e0:67: 76:79:48:79:e6:08:d2:f3:48:0c:3e:63:64:9e:4f: f6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E1:E2:16:11:80:83:B8:EB:7B:5A:C5:07:CD:CF:EE:DF:5A:A6:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a2999a5-21f7-386f-be3c-e9bf59a7d282.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.211.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:e8:d1:20:2a:1c:6b:77:b4:7a:27:93:f6:26:ca:c2:ab:42: b5:cf:2a:71:6c:07:7c:4f:09:99:4c:d8:f6:a6:43:87:f6:5b: 2e:8c:d9:4d:8b:44:87:99:84:67:3b:13:c7:f7:a6:92:89:8f: 94:e1:98:05:63:4a:e7:5a:0b:de:39:55:4e:d2:a2:64:dc:f3: 47:71:f0:30:5c:7d:99:7a:e5:23:13:9d:23:fe:e4:1b:8d:2a: 26:f7:27:ea:38:c0:21:9f:8c:31:95:93:16:61:2f:1d:4f:4f: 82:ea:1e:00:22:4c:1b:fe:f6:fb:3d:45:ca:82:a2:62:ec:fc: 2a:6f:6c:71:00:2b:bb:d5:a2:4c:73:98:22:5f:3e:ea:d7:c7: 94:63:09:89:81:a4:a7:8a:44:0f:19:5b:09:0f:b5:d7:20:10: 4f:fa:e7:8d:73:1d:87:fd:b4:c6:a1:7e:b6:5d:1d:6c:b9:c1: 65:ce:f5:85:e0:1b:f3:d1:1f:8a:90:22:8b:34:46:b1:ba:6b: 7b:c3:bb:a2:5f:93:df:c0:d8:54:02:fd:0d:7b:c8:98:fd:a9: 74:14:d5:fd:2c:7b:54:df:77:96:0f:7b:c8:c2:68:46:c3:05: f4:5a:a0:11:55:fd:e8:78:c9:70:1c:1d:9a:9c:c9:67:60:8a: 43:0c:a4:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWFEAb0NLjlMuXSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YjNkNmExMjgtYmI2Yy00YzcyLTk2ZTktYmYyNzE1MTU3MTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglhPcYmjo8r6brW8g8wr9eYMA4NOZzz88iks 5wgm9hMc7P9/xxUrIqe5OFNHZtuktiXXK22zC/LC7hBeQNhko9znhoO+k9VFSj7B ps7h+r2pMgaOP+OPuL3lKkcMA6/nVVa8l2vF3eDizNpSPp9x/r5nkhUPHgpYs1aI NNLgdQqKSsNtOjZE5qBjkbCuidZ76CUMEbGpLoh+l7d09QURT4a+qyMzb8Jaarw+ nHqdqONjKZnrqnnh/XJTn1J5RlBjQccdvOeehhlr6sO8Xdsb36RLTy0S9PsBxY50 3+o1+53mTNIhhozxsw3d2X5Y4Gd2eUh55gjS80gMPmNknk/2/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEHh4hYRgIO463taxQfNz+7fWqarMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGEyOTk5YTUtMjFmNy0z ODZmLWJlM2MtZTliZjU5YTdkMjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSdNAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALLo0SAqHGt3tHonk/YmysKrQrXPKnFsB3xPCZlM2PamQ4f2Wy6M2U2L RIeZhGc7E8f3ppKJj5ThmAVjSudaC945VU7SomTc80dx8DBcfZl65SMTnSP+5BuN Kib3J+o4wCGfjDGVkxZhLx1PT4LqHgAiTBv+9vs9RcqComLs/CpvbHEAK7vVokxz mCJfPurXx5RjCYmBpKeKRA8ZWwkPtdcgEE/6541zHYf9tMahfrZdHWy5wWXO9YXg G/PRH4qQIos0RrG6a3vDu6Jfk9/A2FQC/Q17yJj9qXQU1f0se1Tfd5YPe8jCaEbD BfRaoBFV/eh4yXAcHZqcyWdgikMMpBE= -----END CERTIFICATE-----Generated at Sun Mar 1 20:31:26 2026 by rpki-client