$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/958fe6da-c4a3-31f7-a487-52458f691b6b.roa File: 958fe6da-c4a3-31f7-a487-52458f691b6b.roa (raw, json) Hash identifier: Xo+RCG83YeLPD1SZYcA2NebuIMWGjqjzML6SOrvHX0s= Subject key identifier: 88:9C:7A:A0:B2:70:B3:92:CF:85:D2:B2:E8:90:71:69:C3:F9:B4:AB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE593044571F549AE8B3D700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/958fe6da-c4a3-31f7-a487-52458f691b6b.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33660 IP address blocks: 73.228.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:59:30:44:57:1f:54:9a:e8:b3:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=a64a8e91-d4a2-4a95-94a6-6857c08b5533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:01:fb:78:dc:d1:21:0d:d0:56:cb:2d:20:ab: ed:36:02:84:cf:bf:95:44:4f:ec:ba:8f:98:f4:13: e5:a2:91:a7:53:77:eb:5e:4f:c3:b9:e2:64:45:e1: 9f:76:c0:a4:a2:d1:58:29:4b:9b:5e:8d:34:28:ea: 18:4e:ff:47:54:b7:0c:81:59:84:e1:c9:63:f4:2e: 30:c8:45:a0:ee:50:3d:62:f3:09:bc:ca:91:d4:00: bc:c9:f5:41:92:db:36:f6:fa:d0:9e:c1:82:ea:21: b0:55:08:59:04:29:ab:22:15:0b:7d:ed:86:56:53: 8b:54:50:13:54:2b:80:82:d5:51:91:63:42:49:db: e4:89:5f:f2:8d:69:0e:e4:6c:8b:14:ca:f3:18:ef: e2:a5:66:45:f3:ab:a8:b6:e0:db:4a:51:36:83:c6: 3e:46:34:f2:b9:9b:5a:f1:45:2f:b1:d6:6a:3d:fd: 31:eb:bf:34:4e:6b:53:03:49:58:db:e9:95:d8:30: 8d:e0:27:63:e6:f7:f4:8f:06:e8:2b:d8:7f:78:1c: f1:57:6b:ae:d4:3d:9b:b8:70:4d:17:28:da:ac:43: 99:94:ba:e2:2c:9b:01:66:ea:e3:f8:7a:27:a1:a3: 9d:44:30:53:87:6c:49:b4:70:ff:b1:97:ff:bb:c6: 3c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:9C:7A:A0:B2:70:B3:92:CF:85:D2:B2:E8:90:71:69:C3:F9:B4:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/958fe6da-c4a3-31f7-a487-52458f691b6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.228.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:f7:90:5e:54:47:f6:aa:7f:2c:1b:d8:3b:62:42:e2:5a:d2: 09:05:6d:50:e4:80:b2:97:5c:3f:0e:45:f0:ea:a0:59:4f:20: b0:70:13:a0:05:ef:d6:e2:33:a1:c5:1e:c9:42:4c:01:a6:f9: 62:f7:43:0b:d7:e7:e4:f0:a5:22:b1:52:ca:68:32:43:99:e5: 3d:0b:20:be:04:9c:ce:a9:7d:16:94:98:b9:b9:21:38:c2:f5: 41:ab:7a:1b:05:38:30:8a:cd:5a:c9:15:49:ac:b5:bc:53:2f: 6b:87:88:06:7b:af:a4:fe:4a:16:22:ed:44:65:57:11:f0:18: 20:50:45:c4:1c:0e:7a:aa:ea:2d:c7:62:96:7f:7b:b1:41:0a: a4:12:b3:2e:b4:a3:96:f7:70:45:ce:ca:40:13:6b:ba:dc:f0: d5:c7:82:06:d0:0d:67:d1:7d:02:e1:c5:82:0f:13:4c:8d:93: 6a:de:f7:d1:51:15:2c:a2:d7:72:05:44:28:48:38:29:c0:52: 49:b6:b8:06:d5:ea:a5:68:8a:d2:0b:0b:7d:bb:65:bf:a4:7b: 7e:4c:67:c8:c7:39:9d:02:38:1f:f1:73:7e:e8:4c:a9:0a:29: de:1d:4a:71:6d:1a:b6:bd:f9:7b:20:b8:d4:e8:4f:e4:f6:05: a6:a3:c5:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWTBEVx9Umuiz1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YTY0YThlOTEtZDRhMi00YTk1LTk0YTYtNjg1N2MwOGI1NTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wH7eNzRIQ3QVsstIKvtNgKEz7+VRE/suo+Y 9BPlopGnU3frXk/DueJkReGfdsCkotFYKUubXo00KOoYTv9HVLcMgVmE4clj9C4w yEWg7lA9YvMJvMqR1AC8yfVBkts29vrQnsGC6iGwVQhZBCmrIhULfe2GVlOLVFAT VCuAgtVRkWNCSdvkiV/yjWkO5GyLFMrzGO/ipWZF86uotuDbSlE2g8Y+RjTyuZta 8UUvsdZqPf0x6780TmtTA0lY2+mV2DCN4Cdj5vf0jwboK9h/eBzxV2uu1D2buHBN FyjarEOZlLriLJsBZurj+HonoaOdRDBTh2xJtHD/sZf/u8Y8rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIiceqCycLOSz4XSsuiQcWnD+bSrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTU4ZmU2ZGEtYzRhMy0z MWY3LWE0ODctNTI0NThmNjkxYjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSeREMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA73kF5UR/aqfywb2DtiQuJa0gkFbVDkgLKXXD8ORfDqoFlPILBwE6AF 79biM6HFHslCTAGm+WL3QwvX5+TwpSKxUspoMkOZ5T0LIL4EnM6pfRaUmLm5ITjC 9UGrehsFODCKzVrJFUmstbxTL2uHiAZ7r6T+ShYi7URlVxHwGCBQRcQcDnqq6i3H YpZ/e7FBCqQSsy60o5b3cEXOykATa7rc8NXHggbQDWfRfQLhxYIPE0yNk2re99FR FSyi13IFRChIOCnAUkm2uAbV6qVoitILC327Zb+ke35MZ8jHOZ0COB/xc37oTKkK Kd4dSnFtGra9+XsguNToT+T2Baajxfo= -----END CERTIFICATE-----Generated at Sun Mar 1 20:49:40 2026 by rpki-client