$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fb5b3b8d-e45b-3500-b050-75e059372d00.roa File: fb5b3b8d-e45b-3500-b050-75e059372d00.roa (raw, json) Hash identifier: YPYDGWjgeHLKPrwJkdKLseOkCac4gc1NNIdCxev6Hj4= Subject key identifier: 9D:F2:57:AD:8A:88:1A:35:05:69:98:DB:FD:31:3A:19:88:04:19:41 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5A6B4EE3F8D12865805500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fb5b3b8d-e45b-3500-b050-75e059372d00.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33659 IP address blocks: 73.248.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5a:6b:4e:e3:f8:d1:28:65:80:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=8b1459e5-499f-4434-a7a1-aaa92da924c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:69:22:f2:10:6e:91:70:3a:0a:48:5a:ad:ce: 48:a9:ec:49:8e:94:73:32:84:a7:c6:93:c1:60:22: 49:9c:78:16:e9:e2:fe:24:6f:87:1e:ef:15:cc:91: d7:58:a5:02:ef:c4:cc:c6:99:91:bd:55:79:08:f8: 58:ec:39:a2:8c:19:eb:b3:21:af:76:80:d3:c3:4b: ab:4f:d3:1c:c6:ac:d6:30:75:15:f7:25:8b:a4:93: 1b:a5:31:29:4d:b4:35:0d:ca:40:b8:29:e2:f4:85: 2d:d5:2f:58:e3:f7:fd:a7:e9:aa:6b:12:44:a6:ed: 79:c2:2c:5e:3e:2b:5a:80:23:09:fe:d0:bc:b9:a2: 3c:b3:d2:f8:6d:70:c3:62:15:4b:16:f3:15:db:f5: f6:52:e8:32:d8:c2:c9:4b:86:17:1c:91:9c:d9:c9: 98:bf:b7:22:a2:d6:f3:87:54:dd:dd:07:2e:84:dc: bf:26:2e:e7:98:4a:b5:59:77:16:d7:8f:7f:b7:01: bd:e2:62:76:ce:2b:92:61:ee:13:86:3e:1d:41:d4: 20:74:89:66:d9:c0:16:2b:9f:78:79:c5:c0:e3:06: 20:b7:36:9a:1b:eb:db:06:6f:6e:2b:98:2c:60:22: 9c:e7:89:7d:cc:ed:d1:a5:ae:9e:15:98:09:9e:2a: 2c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:F2:57:AD:8A:88:1A:35:05:69:98:DB:FD:31:3A:19:88:04:19:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fb5b3b8d-e45b-3500-b050-75e059372d00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.248.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:95:d0:01:95:80:29:f7:0a:9d:9a:93:6c:96:53:12:83:43: 3a:5c:5c:8c:b8:d8:af:8f:3f:77:19:32:0a:63:aa:35:86:ef: f5:83:c4:c1:0a:3f:bd:53:16:22:9f:99:7e:37:0d:c1:9c:09: 9c:d6:1d:89:8f:41:14:af:ba:3c:69:71:4b:97:d7:ae:31:d7: 16:5c:e0:55:13:c5:3b:66:8d:3d:9e:f7:d6:a1:52:47:d1:2d: a2:43:55:cf:41:35:05:bf:21:e7:2e:4c:e6:d2:f6:46:a5:3b: c9:80:1e:b4:63:66:69:53:5f:52:d0:df:2e:d2:e6:bf:cc:64: fb:18:7f:b7:24:58:4f:80:aa:7a:00:87:e3:60:33:02:ea:fe: 7d:4a:76:79:f5:91:ed:fa:89:d4:4d:ec:9d:eb:62:61:db:ba: 5c:e0:02:df:64:2d:12:f8:8e:40:c3:1f:9e:b8:cf:87:21:c9: 6d:c0:99:a5:29:17:da:48:bd:cd:90:cd:99:d6:ef:13:1b:b8: c6:ee:8c:68:29:23:87:0b:15:d0:b5:40:7f:f1:cd:db:fe:65: df:65:b7:ca:cb:2d:e4:5d:ae:9a:1e:a8:33:6b:84:e5:81:3a: 44:04:1e:d5:ad:9e:ee:88:f4:a0:b5:73:54:06:c8:42:d2:8d: 8e:63:5a:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWmtO4/jRKGWAVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk OGIxNDU5ZTUtNDk5Zi00NDM0LWE3YTEtYWFhOTJkYTkyNGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmki8hBukXA6Ckharc5IqexJjpRzMoSnxpPB YCJJnHgW6eL+JG+HHu8VzJHXWKUC78TMxpmRvVV5CPhY7DmijBnrsyGvdoDTw0ur T9McxqzWMHUV9yWLpJMbpTEpTbQ1DcpAuCni9IUt1S9Y4/f9p+mqaxJEpu15wixe PitagCMJ/tC8uaI8s9L4bXDDYhVLFvMV2/X2Uugy2MLJS4YXHJGc2cmYv7ciotbz h1Td3QcuhNy/Ji7nmEq1WXcW149/twG94mJ2ziuSYe4Thj4dQdQgdIlm2cAWK594 ecXA4wYgtzaaG+vbBm9uK5gsYCKc54l9zO3Rpa6eFZgJnios9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3yV62KiBo1BWmY2/0xOhmIBBlBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmI1YjNiOGQtZTQ1Yi0z NTAwLWIwNTAtNzVlMDU5MzcyZDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSfjuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuV0AGVgCn3Cp2ak2yWUxKDQzpcXIy42K+PP3cZMgpjqjWG7/WDxMEK P71TFiKfmX43DcGcCZzWHYmPQRSvujxpcUuX164x1xZc4FUTxTtmjT2e99ahUkfR LaJDVc9BNQW/IecuTObS9kalO8mAHrRjZmlTX1LQ3y7S5r/MZPsYf7ckWE+AqnoA h+NgMwLq/n1Kdnn1ke36idRN7J3rYmHbulzgAt9kLRL4jkDDH564z4chyW3AmaUp F9pIvc2QzZnW7xMbuMbujGgpI4cLFdC1QH/xzdv+Zd9lt8rLLeRdrpoeqDNrhOWB OkQEHtWtnu6I9KC1c1QGyELSjY5jWgI= -----END CERTIFICATE-----Generated at Sun Mar 1 22:39:44 2026 by rpki-client