$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f86dbd45-f434-3a27-a8b8-e585a09b39a2.roa File: f86dbd45-f434-3a27-a8b8-e585a09b39a2.roa (raw, json) Hash identifier: nRohyjJZHTkHPQ7a5NRXiiwCs5NRK+ipHe78tbdbmcg= Subject key identifier: F7:68:D5:A7:34:35:A6:70:B6:52:A1:FE:67:B8:8B:F6:A8:DC:9F:50 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5A3B2105A4D86B7A9B8F00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f86dbd45-f434-3a27-a8b8-e585a09b39a2.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33659 IP address blocks: 73.199.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5a:3b:21:05:a4:d8:6b:7a:9b:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=2ea874e3-cbe7-4232-999c-8eae34e92fad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:98:b7:49:9d:c5:7a:8f:c9:36:4f:5f:b4:69: 1c:90:35:a7:ee:49:30:e8:e8:79:ff:4d:3a:aa:0b: 5c:05:d8:28:9d:95:b7:73:3c:4d:96:1f:7d:9e:87: e2:96:61:0a:94:bd:71:76:d0:4f:02:92:c7:c9:fc: 23:be:67:5d:d8:38:df:58:8c:02:f2:a0:5d:8d:6e: a5:ab:74:37:54:ed:f0:b7:b0:03:fe:bc:78:06:04: 6a:2e:38:15:53:78:9d:39:a5:73:20:0a:44:cd:8f: 72:0a:3b:a9:c3:53:c2:ef:bc:b2:24:9d:91:57:fa: 3f:8d:d6:ea:b9:72:36:68:28:ad:b5:b4:1a:f3:ea: 4b:cd:73:db:34:1c:03:1b:bd:9b:2d:5e:06:6e:85: 4c:ad:75:a3:a9:e5:04:74:e6:35:7f:9a:db:5b:26: f8:de:10:1c:1c:1e:8d:32:1d:07:85:7e:1a:d6:09: f0:fb:64:77:08:41:91:f4:72:81:d1:b0:b8:cb:ad: 94:d9:69:f4:f7:57:9a:e1:ac:98:26:71:14:35:79: 1e:df:a6:f1:14:82:b6:86:f8:d7:e7:d3:25:3d:eb: d5:f6:9c:39:82:d5:df:10:fb:37:98:a2:fb:1a:fd: 29:f2:fa:4c:e6:e2:13:45:79:fe:83:7c:a8:51:1b: 53:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:68:D5:A7:34:35:A6:70:B6:52:A1:FE:67:B8:8B:F6:A8:DC:9F:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f86dbd45-f434-3a27-a8b8-e585a09b39a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.199.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:26:d3:af:25:d6:bf:b5:33:69:b6:9f:8f:f6:17:59:d3:ca: 0d:53:95:9f:56:23:76:16:77:5b:5b:ee:5a:42:ca:93:0b:df: 83:ac:75:d7:fa:1a:28:b3:5c:34:15:1f:eb:b9:0b:ad:1b:da: e0:fa:c2:5b:09:99:28:4d:6a:84:d8:6a:8b:47:7a:25:59:3f: 9b:3d:d5:f5:7c:19:e3:3c:d0:ca:d0:d7:2c:43:86:21:45:89: ae:dc:d7:30:8c:9d:d4:92:65:78:aa:7d:94:43:7c:43:bc:3e: c5:28:56:3c:30:a2:25:78:6e:7a:44:67:68:fa:8f:05:4d:5e: 07:88:d7:c8:60:f0:68:d8:a9:90:05:6e:64:06:7e:45:d5:98: ea:cc:8b:78:d2:8f:91:9f:ec:de:bb:54:1c:b7:99:83:26:50: 8f:16:bd:d9:e8:f3:28:3c:c1:9f:85:5e:35:60:05:49:28:9e: de:1f:8f:e6:92:56:0a:6c:57:e3:0d:18:4d:4b:1f:c5:02:29: 2b:0c:13:dc:91:22:ec:eb:43:03:34:5d:48:6a:c9:99:47:33: fc:b8:23:c0:a5:af:e4:06:0d:79:ff:91:4f:c5:01:aa:67:09: a5:eb:57:1b:8b:44:3a:42:53:e3:af:9e:d6:c9:35:bc:cd:19: 89:07:88:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWjshBaTYa3qbjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MmVhODc0ZTMtY2JlNy00MjMyLTk5OWMtOGVhZTM0ZTkyZmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZi3SZ3Feo/JNk9ftGkckDWn7kkw6Oh5/006 qgtcBdgonZW3czxNlh99nofilmEKlL1xdtBPApLHyfwjvmdd2DjfWIwC8qBdjW6l q3Q3VO3wt7AD/rx4BgRqLjgVU3idOaVzIApEzY9yCjupw1PC77yyJJ2RV/o/jdbq uXI2aCittbQa8+pLzXPbNBwDG72bLV4GboVMrXWjqeUEdOY1f5rbWyb43hAcHB6N Mh0HhX4a1gnw+2R3CEGR9HKB0bC4y62U2Wn091ea4ayYJnEUNXke36bxFIK2hvjX 59MlPevV9pw5gtXfEPs3mKL7Gv0p8vpM5uITRXn+g3yoURtT9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPdo1ac0NaZwtlKh/me4i/ao3J9QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjg2ZGJkNDUtZjQzNC0z YTI3LWE4YjgtZTU4NWEwOWIzOWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASccQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACIm068l1r+1M2m2n4/2F1nTyg1TlZ9WI3YWd1tb7lpCypML34Osddf6 GiizXDQVH+u5C60b2uD6wlsJmShNaoTYaotHeiVZP5s91fV8GeM80MrQ1yxDhiFF ia7c1zCMndSSZXiqfZRDfEO8PsUoVjwwoiV4bnpEZ2j6jwVNXgeI18hg8GjYqZAF bmQGfkXVmOrMi3jSj5Gf7N67VBy3mYMmUI8Wvdno8yg8wZ+FXjVgBUkont4fj+aS VgpsV+MNGE1LH8UCKSsME9yRIuzrQwM0XUhqyZlHM/y4I8Clr+QGDXn/kU/FAapn CaXrVxuLRDpCU+OvntbJNbzNGYkHiKw= -----END CERTIFICATE-----Generated at Mon Mar 2 09:49:10 2026 by rpki-client