$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99e385e9-eb9f-382f-a1c9-9acbaa4695b8.roa File: 99e385e9-eb9f-382f-a1c9-9acbaa4695b8.roa (raw, json) Hash identifier: 9sfvxFDNBaxcq8tIre+Y91Y7IFJDJvZ8T3oa1Ni1FPI= Subject key identifier: FF:4A:03:B2:C1:EC:F1:FA:CE:E2:0D:5C:66:C0:11:A2:B4:87:D0:10 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5C43909F320E62560CD600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99e385e9-eb9f-382f-a1c9-9acbaa4695b8.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 73.247.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5c:43:90:9f:32:0e:62:56:0c:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=e274700c-b7ff-4fa5-834e-faf7b6fe72ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:67:65:6a:e6:bd:a9:18:38:a6:32:97:52:5a: b7:e0:99:0f:bf:68:6d:7c:15:84:d3:3c:ba:4e:d4: 14:83:6d:6d:99:ee:f4:c6:8d:6c:c8:67:db:0d:0e: ae:bb:9d:f4:58:87:10:54:7b:41:5a:dc:9b:5e:6d: 6b:00:6b:ac:b5:6f:6a:be:74:34:1e:ed:6c:2c:54: 09:92:d5:1e:78:7b:28:dd:96:29:a4:7d:15:e1:dc: 8e:d9:66:c1:99:fa:c0:b6:cb:ca:ff:5b:0f:70:a2: 4e:a4:8f:5b:d5:49:e6:4a:af:09:42:25:53:08:a5: 79:04:1e:e7:18:79:7f:6b:b7:7c:8b:7f:14:f2:27: 0f:24:9a:4c:a4:e7:8c:be:64:83:51:68:4f:bf:49: 8b:b6:20:d4:55:a5:e3:f2:98:7f:e6:75:4e:dd:ae: ee:b5:9f:34:63:d3:7c:1d:21:f3:16:2f:a2:a9:59: c9:63:d3:0a:55:4c:95:7b:a7:83:1d:ec:79:9d:03: eb:61:c2:c2:6d:1d:3c:db:0f:8b:d9:3d:8c:0e:62: 88:46:9c:90:6f:5c:1b:2e:b2:97:56:92:ba:64:b6: d7:9f:2b:7f:07:17:c6:6e:a5:35:8e:9a:eb:07:7e: 45:26:64:ec:59:c7:78:0a:93:97:cf:00:8f:d5:7f: 17:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:4A:03:B2:C1:EC:F1:FA:CE:E2:0D:5C:66:C0:11:A2:B4:87:D0:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99e385e9-eb9f-382f-a1c9-9acbaa4695b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.247.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:1e:e6:45:06:b5:db:ee:44:9e:b4:e4:e3:74:89:0b:e0:be: f1:73:32:e2:e4:91:f5:16:20:7c:44:91:4f:c8:c7:e3:57:44: 9d:31:38:78:08:8e:a5:ed:82:88:06:56:89:06:9e:d7:d5:92: 58:42:61:a3:3e:77:95:a7:c6:98:5a:c8:6a:78:24:dc:ab:c0: 9d:32:80:02:9b:60:83:2c:ba:fd:5a:90:53:5c:a6:db:c9:72: 51:1b:29:42:7d:db:dd:55:bb:a2:8a:e3:73:1f:0a:70:c2:c0: f3:66:49:43:bc:77:60:0c:c9:09:10:ab:f0:93:17:b0:e9:11: 81:fb:56:29:42:42:4b:77:98:35:7f:91:09:fe:ce:3e:9c:81: 11:8c:71:2e:94:17:90:f3:0e:e8:b3:72:b7:18:ab:30:ae:ba: f8:12:0a:8a:ce:f7:4a:3c:a0:26:8d:49:f2:55:32:45:d7:83: 77:c9:3d:37:ed:df:f9:86:68:25:7a:8e:cb:27:0a:3b:63:82: 3c:b8:1a:3f:7a:20:8b:d0:09:cc:99:07:f1:de:86:e2:03:0b: ba:ed:04:6e:63:96:80:d0:d4:fb:34:d1:f9:37:ab:a5:50:3b: 59:9e:64:c5:99:dc:0a:a3:b5:ae:39:89:e0:21:7f:d9:05:52: 73:d8:f8:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXEOQnzIOYlYM1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZTI3NDcwMGMtYjdmZi00ZmE1LTgzNGUtZmFmN2I2ZmU3MmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Gdlaua9qRg4pjKXUlq34JkPv2htfBWE0zy6 TtQUg21tme70xo1syGfbDQ6uu530WIcQVHtBWtybXm1rAGustW9qvnQ0Hu1sLFQJ ktUeeHso3ZYppH0V4dyO2WbBmfrAtsvK/1sPcKJOpI9b1UnmSq8JQiVTCKV5BB7n GHl/a7d8i38U8icPJJpMpOeMvmSDUWhPv0mLtiDUVaXj8ph/5nVO3a7utZ80Y9N8 HSHzFi+iqVnJY9MKVUyVe6eDHex5nQPrYcLCbR082w+L2T2MDmKIRpyQb1wbLrKX VpK6ZLbXnyt/BxfGbqU1jprrB35FJmTsWcd4CpOXzwCP1X8X6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP9KA7LB7PH6zuINXGbAEaK0h9AQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTllMzg1ZTktZWI5Zi0z ODJmLWExYzktOWFjYmFhNDY5NWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSffsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACge5kUGtdvuRJ605ON0iQvgvvFzMuLkkfUWIHxEkU/Ix+NXRJ0xOHgI jqXtgogGVokGntfVklhCYaM+d5WnxphayGp4JNyrwJ0ygAKbYIMsuv1akFNcptvJ clEbKUJ9291Vu6KK43MfCnDCwPNmSUO8d2AMyQkQq/CTF7DpEYH7VilCQkt3mDV/ kQn+zj6cgRGMcS6UF5DzDuizcrcYqzCuuvgSCorO90o8oCaNSfJVMkXXg3fJPTft 3/mGaCV6jssnCjtjgjy4Gj96IIvQCcyZB/HehuIDC7rtBG5jloDQ1Ps00fk3q6VQ O1meZMWZ3Aqjta45ieAhf9kFUnPY+PU= -----END CERTIFICATE-----Generated at Sun Mar 1 19:14:53 2026 by rpki-client