$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfa18ba0-35fa-316a-94a8-ea57a1ce80a4.roa File: dfa18ba0-35fa-316a-94a8-ea57a1ce80a4.roa (raw, json) Hash identifier: oT8q6sCfQWuDfNEZkOIzTfcSQinvRpb9VZXIto2d1mE= Subject key identifier: 29:EB:47:5E:BA:EA:99:5A:AC:CC:0F:3D:96:06:ED:CD:C7:6C:03:5D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5797078364A9E627B27780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfa18ba0-35fa-316a-94a8-ea57a1ce80a4.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33659 IP address blocks: 73.199.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:97:07:83:64:a9:e6:27:b2:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=dc5b63ef-953b-437e-ab7a-a9f06d58a7d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e3:9b:b7:80:bd:46:b0:88:3a:d5:c9:78:6c: b6:01:a8:c6:e7:95:a7:7f:47:07:f6:ee:d9:5c:68: bd:d2:ad:29:3b:81:49:16:32:79:ef:c3:a5:d2:42: b1:38:12:a0:0d:38:1a:d3:19:d9:60:bc:5a:3c:88: cf:e6:67:1a:12:58:54:08:29:1b:c9:44:c0:e7:bb: 59:d1:d2:ca:32:f6:a9:a8:7c:16:26:69:ce:9a:d2: 6b:e7:12:e6:07:25:19:06:35:60:0b:92:1d:34:81: e4:34:16:9f:f3:b8:80:9b:0a:38:a7:da:85:d0:a6: f9:0d:e1:97:b5:fa:80:41:e4:95:e9:c5:95:97:26: df:34:01:2c:44:f4:a7:f6:84:3f:b1:ab:5f:cb:c5: 88:05:d4:09:8a:5f:2b:79:84:da:ab:06:7d:65:d1: 7d:62:dc:fa:8b:cb:3f:9a:93:13:0d:86:60:99:8c: 03:60:ee:e9:f1:ba:59:fd:36:03:bb:e9:b0:50:8c: 57:f8:e5:9c:7b:11:c9:67:62:f2:ff:f3:93:a0:14: 61:29:99:63:f1:97:2f:d4:c1:2a:98:1b:93:74:84: 74:69:c2:61:83:66:56:30:f7:5d:47:e6:f5:17:9e: f8:1d:ae:d9:35:46:b8:6c:88:0c:a5:07:23:86:1a: 58:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:EB:47:5E:BA:EA:99:5A:AC:CC:0F:3D:96:06:ED:CD:C7:6C:03:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfa18ba0-35fa-316a-94a8-ea57a1ce80a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.199.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:5e:03:38:97:58:33:7a:da:87:8a:a4:c0:af:c2:a9:aa:0a: 2b:1a:56:2a:0e:91:d5:af:da:c9:4e:66:82:c6:a3:a0:f0:ee: 2d:72:f2:ff:c7:40:32:b3:14:ed:9a:a7:0e:77:6f:70:ca:9d: b9:96:dd:0a:82:71:cd:47:90:28:14:3e:68:95:55:de:25:93: d5:f7:cb:bd:43:c5:78:20:c0:bd:0a:7a:b8:c8:4a:82:35:30: 7d:a5:d2:aa:ca:1a:f7:2b:ba:91:ef:aa:29:49:a2:e6:80:ca: 39:25:0d:5b:f4:9e:54:48:b9:c4:af:39:be:1c:61:ff:37:3b: 1a:e6:31:32:6f:8b:bc:a2:40:4d:df:a2:e4:bc:17:c4:89:5c: cf:a1:b9:d3:49:1a:cd:55:10:ec:4b:d1:4b:2f:c1:c8:15:30: a5:7b:84:84:37:54:52:40:0c:c2:d9:a9:fd:88:df:04:07:dd: 11:29:2f:54:a6:c8:ae:7b:26:3b:ec:d9:ea:ef:8b:29:54:a2: 4e:c3:6f:50:7e:0d:c6:3e:5d:eb:d2:b4:13:97:da:5b:56:40: 85:6d:d0:65:13:f0:de:bc:e6:7a:e4:3b:1a:fb:63:f6:c6:e9: 5c:0e:f3:8d:76:28:df:b2:43:76:89:78:cf:8b:22:13:98:01: fa:c6:66:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuV5cHg2Sp5ieyd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZGM1YjYzZWYtOTUzYi00MzdlLWFiN2EtYTlmMDZkNThhN2Q5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OObt4C9RrCIOtXJeGy2AajG55Wnf0cH9u7Z XGi90q0pO4FJFjJ578Ol0kKxOBKgDTga0xnZYLxaPIjP5mcaElhUCCkbyUTA57tZ 0dLKMvapqHwWJmnOmtJr5xLmByUZBjVgC5IdNIHkNBaf87iAmwo4p9qF0Kb5DeGX tfqAQeSV6cWVlybfNAEsRPSn9oQ/satfy8WIBdQJil8reYTaqwZ9ZdF9Ytz6i8s/ mpMTDYZgmYwDYO7p8bpZ/TYDu+mwUIxX+OWcexHJZ2Ly//OToBRhKZlj8Zcv1MEq mBuTdIR0acJhg2ZWMPddR+b1F574Ha7ZNUa4bIgMpQcjhhpY5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCnrR1666plarMwPPZYG7c3HbANdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGZhMThiYTAtMzVmYS0z MTZhLTk0YTgtZWE1N2ExY2U4MGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCScdsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9eAziXWDN62oeKpMCvwqmqCisaVioOkdWv2slOZoLGo6Dw7i1y8v/H QDKzFO2apw53b3DKnbmW3QqCcc1HkCgUPmiVVd4lk9X3y71DxXggwL0KerjISoI1 MH2l0qrKGvcrupHvqilJouaAyjklDVv0nlRIucSvOb4cYf83OxrmMTJvi7yiQE3f ouS8F8SJXM+hudNJGs1VEOxL0UsvwcgVMKV7hIQ3VFJADMLZqf2I3wQH3REpL1Sm yK57Jjvs2erviylUok7Db1B+DcY+XevStBOX2ltWQIVt0GUT8N685nrkOxr7Y/bG 6VwO8412KN+yQ3aJeM+LIhOYAfrGZuk= -----END CERTIFICATE-----Generated at Sun Mar 1 18:43:24 2026 by rpki-client