$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f38ddd18-1f0c-348d-8da1-8d27fc37cd57.roa File: f38ddd18-1f0c-348d-8da1-8d27fc37cd57.roa (raw, json) Hash identifier: 5X5/4JWfCB8pU6+GXJIbiFCKhDeKx/6wbA79HKvLWHs= Subject key identifier: D6:05:FC:A7:95:B2:2F:1B:FC:8C:5E:7B:A4:45:4A:D9:16:A7:F7:78 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5C0DE7D0D1A1C516479980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f38ddd18-1f0c-348d-8da1-8d27fc37cd57.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 73.208.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5c:0d:e7:d0:d1:a1:c5:16:47:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=bdc01236-b258-4af3-acb5-56e433b8997b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:54:6a:ac:96:9c:66:3e:26:fa:7f:a7:f7:33: 6e:49:b4:ab:4b:09:f0:db:25:be:4e:cb:b7:c6:33: ea:f3:2d:4d:b2:9d:a1:77:40:7a:2e:3d:0b:dc:e6: 9f:33:9d:17:be:5a:84:52:03:cd:fa:74:da:bb:18: ff:65:51:e3:49:a8:c0:46:4b:fd:3d:6a:b1:19:53: fe:2f:fc:17:9d:6e:42:af:f2:db:24:53:2f:72:61: 25:47:01:cb:ee:6d:1c:09:20:f5:88:47:01:d7:87: fd:89:1f:bc:06:c1:5f:c3:b5:17:14:67:88:10:9b: f4:22:df:e6:ba:f6:93:62:4c:57:33:e1:d6:29:c5: ea:c0:b1:fd:da:14:2e:0e:1c:fa:10:c2:e3:4a:17: 87:90:65:38:a0:f2:0b:61:c3:fb:0e:c8:b0:73:3a: 70:83:6a:ea:ae:28:2c:9b:aa:74:b8:a4:56:71:43: eb:5c:7a:6e:47:44:e4:14:81:1b:42:89:52:e8:81: 04:2d:4f:64:91:0b:7d:d6:49:bd:c8:00:b8:b9:c6: 9b:fd:f7:6f:70:3c:b4:e0:71:8c:00:95:fc:92:66: 30:26:37:e7:88:d3:49:26:04:67:18:d9:d6:e8:4c: a5:b9:64:af:4f:c4:45:5e:9e:f4:94:57:c2:17:a0: aa:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:05:FC:A7:95:B2:2F:1B:FC:8C:5E:7B:A4:45:4A:D9:16:A7:F7:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f38ddd18-1f0c-348d-8da1-8d27fc37cd57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.208.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:61:19:bd:60:23:49:4b:5a:6f:a4:5c:3f:b7:a2:a9:45:eb: ba:a8:fd:f3:16:e7:49:32:34:69:dc:c8:b4:d0:67:6f:a4:95: 29:34:76:a0:6d:1c:2d:1b:dd:d2:ba:84:a1:5a:5d:c5:02:69: af:e4:f4:67:42:98:13:5b:51:1c:45:82:5f:30:6b:7a:69:9a: 85:b4:9a:5d:ed:f1:44:43:53:5b:b0:0c:40:2b:81:cc:55:e7: 3a:05:30:26:37:06:c9:0c:dc:a9:f4:e1:e8:83:9e:dd:a2:17: 08:46:93:42:49:2f:ca:f2:bc:7b:50:86:15:db:29:11:ae:b2: 8f:7b:4d:be:0a:0d:28:e3:1e:20:d0:c3:e8:ab:30:c5:78:de: 69:6d:11:ef:05:ec:eb:af:34:87:e6:9c:c6:6c:0d:dc:ee:5e: 69:61:73:64:5f:7b:0a:b1:17:c2:1f:82:83:c4:a8:bb:2b:c7: 90:c3:0d:37:fd:e8:f6:57:0a:4e:d4:3e:43:13:c3:54:5c:47: 56:62:89:ff:68:4a:9e:4e:32:36:b5:56:68:d5:ad:cb:6b:47: 9d:07:9e:de:93:bd:83:a3:6f:c2:29:a4:71:aa:41:11:43:5f: e6:20:56:8b:14:4b:af:e4:63:84:f8:4a:f9:e3:cb:c8:cd:cd: b2:60:27:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXA3n0NGhxRZHmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YmRjMDEyMzYtYjI1OC00YWYzLWFjYjUtNTZlNDMzYjg5OTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA61RqrJacZj4m+n+n9zNuSbSrSwnw2yW+Tsu3 xjPq8y1Nsp2hd0B6Lj0L3OafM50XvlqEUgPN+nTauxj/ZVHjSajARkv9PWqxGVP+ L/wXnW5Cr/LbJFMvcmElRwHL7m0cCSD1iEcB14f9iR+8BsFfw7UXFGeIEJv0It/m uvaTYkxXM+HWKcXqwLH92hQuDhz6EMLjSheHkGU4oPILYcP7Dsiwczpwg2rqrigs m6p0uKRWcUPrXHpuR0TkFIEbQolS6IEELU9kkQt91km9yAC4ucab/fdvcDy04HGM AJX8kmYwJjfniNNJJgRnGNnW6EyluWSvT8RFXp70lFfCF6CqPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYF/KeVsi8b/Ixee6RFStkWp/d4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjM4ZGRkMTgtMWYwYy0z NDhkLThkYTEtOGQyN2ZjMzdjZDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASdDcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1hGb1gI0lLWm+kXD+3oqlF67qo/fMW50kyNGncyLTQZ2+klSk0dqBt HC0b3dK6hKFaXcUCaa/k9GdCmBNbURxFgl8wa3ppmoW0ml3t8URDU1uwDEArgcxV 5zoFMCY3BskM3Kn04eiDnt2iFwhGk0JJL8ryvHtQhhXbKRGuso97Tb4KDSjjHiDQ w+irMMV43mltEe8F7OuvNIfmnMZsDdzuXmlhc2RfewqxF8IfgoPEqLsrx5DDDTf9 6PZXCk7UPkMTw1RcR1Ziif9oSp5OMja1VmjVrctrR50Hnt6TvYOjb8IppHGqQRFD X+YgVosUS6/kY4T4Svnjy8jNzbJgJ/k= -----END CERTIFICATE-----Generated at Sun Mar 1 18:36:52 2026 by rpki-client