$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9da0788a-f690-348b-8e17-f6db70b5b1a3.roa File: 9da0788a-f690-348b-8e17-f6db70b5b1a3.roa (raw, json) Hash identifier: DaQvaGCidQyFaoQnr4Mwl0zd3lmHWfzOMSsNI6S7t/M= Subject key identifier: 9B:4D:D0:11:7D:CC:6C:B7:5D:E4:81:40:15:00:C3:66:A0:DA:54:D3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5773D2843C62C98A6ADC20 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9da0788a-f690-348b-8e17-f6db70b5b1a3.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33659 IP address blocks: 73.33.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:73:d2:84:3c:62:c9:8a:6a:dc:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=6fc60111-7c3c-43df-af07-fbafdbc8a64f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:79:8a:dc:89:1b:13:aa:72:b3:4b:73:a6:31: cc:19:d0:be:ad:66:98:17:40:20:c4:62:57:dd:2d: d5:92:59:17:26:2f:96:99:62:d4:e4:9d:a6:20:9d: 3e:9d:3e:9b:93:24:15:dc:72:b6:f6:66:95:ef:3e: 91:3e:5e:32:8c:69:8e:89:10:61:d2:b9:1b:28:c5: 60:02:c9:4c:25:97:b9:10:c1:80:1f:3a:b7:e3:a9: 63:ad:d1:7f:cc:1a:58:f9:cb:47:2f:70:8c:2a:c6: 2d:ed:f6:4b:ea:17:df:b3:cb:3a:48:4a:f4:24:e6: df:4a:c0:28:35:a1:51:4f:b5:3f:44:7d:71:bb:7a: 20:3b:5b:40:c7:3c:aa:10:54:2b:c0:37:f0:25:e8: f7:2a:52:6f:80:be:e8:f9:1a:23:57:fe:9e:25:54: 7a:84:fa:04:57:25:ba:5d:c1:27:c2:60:cc:d0:ce: 81:45:a8:59:d5:a6:05:e3:bc:16:d0:e1:e1:2b:e5: 1f:29:1d:a9:3f:55:d5:95:50:c4:bc:71:e2:1b:03: 17:ef:20:bf:0e:3e:9d:19:54:47:f8:01:ed:be:04: ec:64:08:27:4f:b8:b1:b1:0a:c5:ee:35:56:ba:2d: 3f:41:e0:4c:a2:ee:ba:3d:88:4e:28:21:ec:ef:7f: 92:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:4D:D0:11:7D:CC:6C:B7:5D:E4:81:40:15:00:C3:66:A0:DA:54:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9da0788a-f690-348b-8e17-f6db70b5b1a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.33.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:be:5c:c9:1b:6c:11:84:09:a2:98:8b:0d:90:3a:e6:bd:4f: 87:0d:fc:b4:79:f4:ff:76:9b:c5:45:04:7b:2c:65:09:79:db: c6:0c:5f:eb:f1:42:01:f0:fb:7b:da:02:07:6b:ae:ad:ad:d8: a2:85:d8:96:dd:bc:7e:69:66:37:7d:88:b8:a9:37:d6:51:b4: ea:a2:6a:25:54:d5:e7:46:aa:68:9d:03:16:cd:16:8a:4c:c4: 88:bd:3c:e0:0b:97:ad:56:2d:52:43:60:bd:43:9b:21:23:a1: d5:1b:e5:35:84:97:89:a4:88:33:ab:ed:ff:e6:34:d8:ab:cb: c8:9b:4c:01:c1:05:e6:c4:85:0d:84:25:c5:ae:00:5b:bc:56: 30:c7:12:c8:01:fb:20:73:d9:98:70:64:7a:96:95:78:52:87: ad:5c:7b:8d:04:4f:7f:21:b8:06:6c:d3:d7:47:99:e0:5a:6d: f0:9b:7f:3a:a6:47:46:65:3a:1f:3d:db:5a:cb:d2:6c:a9:bd: 40:db:ef:c8:28:10:f9:d7:81:c2:77:f2:ae:56:c0:b2:97:55: 5a:c4:d5:1d:99:1b:ed:73:60:1a:19:f8:b4:34:d2:d2:1c:85: 31:16:32:7c:70:cd:e4:0a:7e:37:bd:4d:34:3e:ba:17:b0:a1: ac:4d:15:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuV3PShDxiyYpq3CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NmZjNjAxMTEtN2MzYy00M2RmLWFmMDctZmJhZmRiYzhhNjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXmK3IkbE6pys0tzpjHMGdC+rWaYF0AgxGJX 3S3VklkXJi+WmWLU5J2mIJ0+nT6bkyQV3HK29maV7z6RPl4yjGmOiRBh0rkbKMVg AslMJZe5EMGAHzq346ljrdF/zBpY+ctHL3CMKsYt7fZL6hffs8s6SEr0JObfSsAo NaFRT7U/RH1xu3ogO1tAxzyqEFQrwDfwJej3KlJvgL7o+RojV/6eJVR6hPoEVyW6 XcEnwmDM0M6BRahZ1aYF47wW0OHhK+UfKR2pP1XVlVDEvHHiGwMX7yC/Dj6dGVRH +AHtvgTsZAgnT7ixsQrF7jVWui0/QeBMou66PYhOKCHs73+SDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJtN0BF9zGy3XeSBQBUAw2ag2lTTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWRhMDc4OGEtZjY5MC0z NDhiLThlMTctZjZkYjcwYjViMWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSSH4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHC+XMkbbBGECaKYiw2QOua9T4cN/LR59P92m8VFBHssZQl528YMX+vx QgHw+3vaAgdrrq2t2KKF2JbdvH5pZjd9iLipN9ZRtOqiaiVU1edGqmidAxbNFopM xIi9POALl61WLVJDYL1DmyEjodUb5TWEl4mkiDOr7f/mNNiry8ibTAHBBebEhQ2E JcWuAFu8VjDHEsgB+yBz2ZhwZHqWlXhSh61ce40ET38huAZs09dHmeBabfCbfzqm R0ZlOh8921rL0mypvUDb78goEPnXgcJ38q5WwLKXVVrE1R2ZG+1zYBoZ+LQ00tIc hTEWMnxwzeQKfje9TTQ+uhewoaxNFXQ= -----END CERTIFICATE-----Generated at Sun Mar 1 21:08:51 2026 by rpki-client