$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04f3ef71-639b-32b3-adb9-a2b3618b1c1e.roa File: 04f3ef71-639b-32b3-adb9-a2b3618b1c1e.roa (raw, json) Hash identifier: D39FiVe5n5uPdemTyATjRUFoRgwpFhcGzuRNkjRKNFQ= Subject key identifier: DF:19:A9:A6:E9:2E:BD:C7:5E:D5:D7:5F:20:EE:25:F8:CA:89:EB:DF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5BC884C1720BDEDBD352A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04f3ef71-639b-32b3-adb9-a2b3618b1c1e.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 71.201.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5b:c8:84:c1:72:0b:de:db:d3:52:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=8a56ade5-7f83-4263-a000-c85fbb032dd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:65:23:fe:a6:67:76:86:e8:be:45:6b:2a:8e: 47:6f:a3:6a:9e:86:b8:af:8d:3b:cf:82:24:0c:92: 4c:14:25:86:e3:7e:d5:08:e3:0f:62:ac:25:49:a2: ad:c1:2b:87:62:f2:8f:2e:bd:c5:ea:78:b0:99:c5: dc:22:8a:92:1f:6a:23:7a:69:62:f9:ae:bb:23:11: b7:62:fd:47:02:99:6f:fb:0e:de:3f:ae:6f:66:f8: 99:04:96:87:94:fc:78:ea:9f:a5:a3:74:16:50:b9: 4a:c5:fa:07:f0:be:7c:14:8c:3a:2c:ca:97:f7:a7: dc:6f:be:2a:38:6c:8d:26:d8:08:ee:06:3c:b8:03: dc:a4:ef:0b:3d:46:e9:1d:49:fa:81:61:cf:22:be: e3:6a:93:25:bc:3d:ad:1f:4a:4f:7d:75:2d:a2:c7: d4:f6:04:22:82:d7:98:5d:52:10:01:c7:59:eb:63: 30:cf:21:c7:77:01:05:f6:80:ce:13:e3:a1:6a:c4: db:44:b8:e6:3d:ed:85:94:5f:de:f3:c4:bb:df:b9: 40:63:0c:a0:96:ff:97:1a:c0:e1:3c:e3:10:4f:45: ff:20:74:3a:69:b5:99:6b:54:68:ef:9d:13:51:2a: 97:90:12:d5:58:65:6d:45:18:4b:5c:d5:b3:11:7c: 78:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:19:A9:A6:E9:2E:BD:C7:5E:D5:D7:5F:20:EE:25:F8:CA:89:EB:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04f3ef71-639b-32b3-adb9-a2b3618b1c1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.201.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:e5:61:7d:68:0c:7a:c3:2c:cc:8b:6f:13:a6:62:59:22:ae: 09:96:d3:2c:e4:da:f6:2b:e2:6e:e7:54:6f:c4:1c:0c:3f:f4: a4:4e:3c:ef:c7:2d:a3:3f:73:20:49:39:0b:28:35:32:d7:7e: 0d:b7:9e:29:4b:cf:2c:ee:57:f5:70:85:c9:01:2d:52:b4:ed: 43:57:f4:d0:2b:ae:d6:e5:23:c2:c3:b1:23:57:4e:bd:9e:32: 8b:80:a4:d6:e9:ce:96:b1:c6:0c:85:ea:06:9f:ad:5c:c6:bc: aa:44:7a:e3:fd:e8:5a:df:d3:09:06:f1:33:ea:a3:6f:34:be: 43:5b:52:12:27:8f:19:b4:66:0d:c6:3c:c1:2a:97:f7:26:f5: 66:66:f6:86:f3:d2:46:ed:db:23:ea:a5:f1:c2:d6:4f:b3:01: ae:58:78:e0:bb:fe:34:fd:1a:af:2a:1d:87:65:c2:64:a1:dd: e5:f7:d4:e0:57:f9:85:51:81:34:d9:3f:f7:d3:93:16:31:ca: b9:5a:c8:fe:17:82:a7:a9:eb:be:14:20:f1:f0:41:48:07:32: 4e:12:b2:f2:ad:3f:43:36:c9:13:99:8d:31:82:91:93:61:50: 83:46:cd:c0:af:1e:82:31:c7:8e:75:cc:b8:d5:a9:92:23:f9: aa:98:29:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuW8iEwXIL3tvTUqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk OGE1NmFkZTUtN2Y4My00MjYzLWEwMDAtYzg1ZmJiMDMyZGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmUj/qZndobovkVrKo5Hb6Nqnoa4r407z4Ik DJJMFCWG437VCOMPYqwlSaKtwSuHYvKPLr3F6niwmcXcIoqSH2ojemli+a67IxG3 Yv1HAplv+w7eP65vZviZBJaHlPx46p+lo3QWULlKxfoH8L58FIw6LMqX96fcb74q OGyNJtgI7gY8uAPcpO8LPUbpHUn6gWHPIr7japMlvD2tH0pPfXUtosfU9gQigteY XVIQAcdZ62MwzyHHdwEF9oDOE+OhasTbRLjmPe2FlF/e88S737lAYwyglv+XGsDh POMQT0X/IHQ6abWZa1Ro750TUSqXkBLVWGVtRRhLXNWzEXx4KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN8ZqabpLr3HXtXXXyDuJfjKievfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDRmM2VmNzEtNjM5Yi0z MmIzLWFkYjktYTJiMzYxOGIxYzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR8kcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETlYX1oDHrDLMyLbxOmYlkirgmW0yzk2vYr4m7nVG/EHAw/9KROPO/H LaM/cyBJOQsoNTLXfg23nilLzyzuV/VwhckBLVK07UNX9NArrtblI8LDsSNXTr2e MouApNbpzpaxxgyF6gafrVzGvKpEeuP96Frf0wkG8TPqo280vkNbUhInjxm0Zg3G PMEql/cm9WZm9obz0kbt2yPqpfHC1k+zAa5YeOC7/jT9Gq8qHYdlwmSh3eX31OBX +YVRgTTZP/fTkxYxyrlayP4Xgqep674UIPHwQUgHMk4SsvKtP0M2yROZjTGCkZNh UINGzcCvHoIxx451zLjVqZIj+aqYKQA= -----END CERTIFICATE-----Generated at Sun Mar 1 18:49:40 2026 by rpki-client