$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0285402f-a8f7-3fe3-ba1e-1f69d8e11be5.roa File: 0285402f-a8f7-3fe3-ba1e-1f69d8e11be5.roa (raw, json) Hash identifier: 7Z/4K720rGFIWNTWHBeZajDqhtT8WkySuztu9hRZ8Co= Subject key identifier: A1:82:27:5E:4C:54:57:4B:F0:4D:70:81:87:44:48:4E:B7:47:5D:C4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5BC9AD5229D1F8A3A16780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0285402f-a8f7-3fe3-ba1e-1f69d8e11be5.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 71.201.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5b:c9:ad:52:29:d1:f8:a3:a1:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=8e449a12-77b6-4266-97eb-b1ea1ad042a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:77:93:e0:24:3e:43:af:37:64:6b:c1:c3:a2: 49:7e:16:d8:53:3b:de:37:4b:5d:21:3d:d7:95:b5: 3e:ce:c9:79:34:b1:7f:89:6c:3e:86:5a:ba:ef:b2: 6f:f8:09:24:83:80:a0:0e:46:70:68:5a:1b:86:17: c2:e6:0f:55:63:4c:0d:b1:5c:51:90:fa:de:23:e3: 62:5b:c5:4e:d5:81:8b:73:43:c3:cd:0c:2a:2e:77: 73:06:f6:37:9c:45:75:4c:b9:ba:2e:c0:10:79:67: 6e:97:a9:5c:0a:84:a4:6d:31:51:83:db:0e:36:b5: 0b:4b:93:9d:44:e5:49:28:7d:b9:ff:ef:61:82:df: b4:75:73:72:0b:a9:03:ed:d5:8f:70:48:00:5e:f9: 5a:19:5b:a6:5e:16:e7:32:c4:14:6b:3d:09:76:32: 37:79:42:17:fc:bc:ab:72:28:09:05:b5:9d:96:78: d9:87:46:b5:d6:70:fe:cc:d8:d2:60:a2:af:37:dc: 0d:2d:10:87:cd:18:e1:29:79:e9:1a:5c:0a:50:c2: 82:69:78:7e:db:4c:eb:9d:14:41:8c:81:86:9f:ca: cb:a7:a0:3f:45:df:74:4f:96:51:15:ec:c6:6c:2d: c4:a7:d6:f4:31:a9:9c:c5:ab:ab:98:35:f2:5c:ee: c3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:82:27:5E:4C:54:57:4B:F0:4D:70:81:87:44:48:4E:B7:47:5D:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0285402f-a8f7-3fe3-ba1e-1f69d8e11be5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.201.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:03:52:2e:4e:e3:01:44:dd:62:32:bb:64:7a:a8:c9:c1:f9: 29:55:f5:fd:e6:51:d4:fe:39:8b:0c:67:0c:d7:73:16:78:15: fe:d2:3a:06:15:cf:2a:1d:b3:d6:ac:83:30:c1:bb:65:84:dc: 0a:45:97:05:bf:b3:21:22:3c:eb:fc:e2:a9:46:5f:5a:b3:59: 42:5b:1b:6a:34:f1:a2:e0:df:a4:4e:97:5c:39:66:17:dd:f3: ca:64:e9:51:42:94:a8:ff:2e:ca:c8:27:e7:9f:12:64:d9:32: 0d:79:60:35:d2:5b:4b:42:25:27:ec:bc:1c:ed:0a:23:de:24: ae:40:ec:55:f5:30:72:9b:d1:06:01:63:bb:0e:ae:9b:5c:d6: 8f:e1:2e:12:34:95:cc:1d:38:b7:fd:eb:80:34:54:2d:d0:23: 15:84:34:9f:4c:b8:76:02:1b:38:6d:f3:5f:19:b6:ff:d5:b9: c0:2f:06:24:e2:66:3f:57:cd:45:9f:e1:de:1f:b4:52:a1:8f: 66:8c:3f:9c:11:a2:ba:19:c8:0f:b6:8c:dc:17:3b:15:16:d0: f5:a7:d5:ea:9a:c0:6a:8e:13:74:57:91:e2:dc:d1:fc:61:42: b5:df:07:55:b6:d4:48:6a:d0:a4:3f:e7:e2:6f:53:0d:6c:75: 62:dd:7c:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuW8mtUinR+KOhZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk OGU0NDlhMTItNzdiNi00MjY2LTk3ZWItYjFlYTFhZDA0MmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHeT4CQ+Q683ZGvBw6JJfhbYUzveN0tdIT3X lbU+zsl5NLF/iWw+hlq677Jv+Akkg4CgDkZwaFobhhfC5g9VY0wNsVxRkPreI+Ni W8VO1YGLc0PDzQwqLndzBvY3nEV1TLm6LsAQeWdul6lcCoSkbTFRg9sONrULS5Od ROVJKH25/+9hgt+0dXNyC6kD7dWPcEgAXvlaGVumXhbnMsQUaz0JdjI3eUIX/Lyr cigJBbWdlnjZh0a11nD+zNjSYKKvN9wNLRCHzRjhKXnpGlwKUMKCaXh+20zrnRRB jIGGn8rLp6A/Rd90T5ZRFezGbC3Ep9b0MamcxaurmDXyXO7DiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGCJ15MVFdL8E1wgYdESE63R13EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDI4NTQwMmYtYThmNy0z ZmUzLWJhMWUtMWY2OWQ4ZTExYmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR8kEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEDUi5O4wFE3WIyu2R6qMnB+SlV9f3mUdT+OYsMZwzXcxZ4Ff7SOgYV zyods9asgzDBu2WE3ApFlwW/syEiPOv84qlGX1qzWUJbG2o08aLg36ROl1w5Zhfd 88pk6VFClKj/LsrIJ+efEmTZMg15YDXSW0tCJSfsvBztCiPeJK5A7FX1MHKb0QYB Y7sOrptc1o/hLhI0lcwdOLf964A0VC3QIxWENJ9MuHYCGzht818Ztv/VucAvBiTi Zj9XzUWf4d4ftFKhj2aMP5wRoroZyA+2jNwXOxUW0PWn1eqawGqOE3RXkeLc0fxh QrXfB1W21Ehq0KQ/5+JvUw1sdWLdfBc= -----END CERTIFICATE-----Generated at Sun Mar 1 20:42:38 2026 by rpki-client