$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a505bd1-0a73-3c21-951e-9aa08b492f75.roa File: 0a505bd1-0a73-3c21-951e-9aa08b492f75.roa (raw, json) Hash identifier: axJppBroLaCH+iAYgfv24s9cac5Duwmot2wcxPzUV7A= Subject key identifier: D9:21:13:C4:42:6C:A8:74:BE:7B:71:78:74:CF:0C:E2:5D:F0:5C:1A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5D5E9C11121CB2494B6080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a505bd1-0a73-3c21-951e-9aa08b492f75.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 71.198.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5d:5e:9c:11:12:1c:b2:49:4b:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=d24564d9-28ae-4ca3-9567-78d0689daf7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e3:ef:fd:77:5d:70:87:ce:06:5f:0e:75:8d: 8d:c1:1c:d2:17:d0:2d:35:00:2a:09:a6:3c:fe:a3: 73:88:75:aa:db:d4:d5:c3:aa:fa:1c:a4:0c:df:0d: 0a:1b:62:c4:87:84:81:a2:71:a2:97:41:f4:72:3d: 8c:00:95:c4:e0:6f:d1:55:77:b2:d6:81:04:c5:9e: be:e6:2a:54:e1:b4:ea:c7:2b:10:1e:11:95:3e:8e: d7:46:32:9c:07:f3:7c:c1:78:8a:96:f9:41:58:92: 07:e7:64:2d:f1:ff:45:04:79:b9:58:dd:1f:48:9b: 93:56:7a:36:bd:51:bf:53:a7:1b:43:d9:52:c1:22: ce:32:0c:d6:2b:07:70:4f:17:27:07:2f:57:5a:3f: 4a:47:76:83:e6:00:90:f6:c5:2e:45:df:84:13:2f: e6:42:4c:5e:d3:fb:3b:76:9d:6e:61:72:46:32:53: 7b:a1:1b:85:1b:98:58:6c:70:5e:8c:51:f2:41:b9: c5:d6:e4:aa:d8:09:c5:8b:b0:d1:2a:b4:ff:e2:41: c6:30:8d:79:65:a0:7f:2e:db:b4:46:38:ae:45:bb: 3e:bb:81:d2:70:30:8a:6f:d1:af:f1:b8:02:80:93: 9f:ec:a9:c7:12:3d:06:93:a4:51:47:6b:06:2c:ff: 76:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:21:13:C4:42:6C:A8:74:BE:7B:71:78:74:CF:0C:E2:5D:F0:5C:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a505bd1-0a73-3c21-951e-9aa08b492f75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.198.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:a1:67:5b:6f:40:bf:98:b3:cb:34:93:bd:5b:6c:82:18:04: a9:99:4f:a4:d8:de:0b:0b:b8:a4:9b:1d:6d:79:8d:69:e8:fa: 9e:64:e1:96:82:ce:61:4c:5a:5d:91:04:38:2a:14:bc:5c:19: 75:0b:82:68:09:7e:bd:23:df:ae:14:ea:fe:4c:f5:3a:ca:b4: 1a:3c:c7:ab:d9:14:78:ae:38:c4:12:db:4e:aa:de:a2:cf:c1: 8c:76:51:c3:35:aa:90:97:9b:b7:9f:d9:95:dd:4d:0c:18:34: 6a:c6:c3:25:14:e3:38:15:51:50:77:74:f5:fd:3d:d0:41:ec: a5:11:1d:a1:d3:12:de:40:3a:6a:a2:39:41:b7:85:21:f6:e7: ac:b2:fa:2b:fc:75:ef:c0:03:a9:5b:d8:53:f5:cf:81:dd:0e: c7:28:5f:56:87:dc:0b:92:23:c9:60:a7:35:1a:55:bf:86:48: 65:cc:e2:e8:89:a2:eb:94:f9:ad:e0:95:8c:00:2a:09:a3:38: 53:c3:b8:f7:c3:17:83:49:0c:86:af:21:6f:48:29:c6:3c:4f: 0a:a8:c4:ee:c0:67:ce:0b:15:ea:8f:73:f6:d7:16:dd:fc:b4: 72:a2:ec:60:29:c6:13:ce:36:21:37:87:73:35:08:72:a2:f9: 8c:d9:75:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXV6cERIcsklLYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZDI0NTY0ZDktMjhhZS00Y2EzLTk1NjctNzhkMDY4OWRhZjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOPv/XddcIfOBl8OdY2NwRzSF9AtNQAqCaY8 /qNziHWq29TVw6r6HKQM3w0KG2LEh4SBonGil0H0cj2MAJXE4G/RVXey1oEExZ6+ 5ipU4bTqxysQHhGVPo7XRjKcB/N8wXiKlvlBWJIH52Qt8f9FBHm5WN0fSJuTVno2 vVG/U6cbQ9lSwSLOMgzWKwdwTxcnBy9XWj9KR3aD5gCQ9sUuRd+EEy/mQkxe0/s7 dp1uYXJGMlN7oRuFG5hYbHBejFHyQbnF1uSq2AnFi7DRKrT/4kHGMI15ZaB/Ltu0 RjiuRbs+u4HScDCKb9Gv8bgCgJOf7KnHEj0Gk6RRR2sGLP92xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNkhE8RCbKh0vntxeHTPDOJd8FwaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGE1MDViZDEtMGE3My0z YzIxLTk1MWUtOWFhMDhiNDkyZjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR8bwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqhZ1tvQL+Ys8s0k71bbIIYBKmZT6TY3gsLuKSbHW15jWno+p5k4ZaC zmFMWl2RBDgqFLxcGXULgmgJfr0j364U6v5M9TrKtBo8x6vZFHiuOMQS206q3qLP wYx2UcM1qpCXm7ef2ZXdTQwYNGrGwyUU4zgVUVB3dPX9PdBB7KURHaHTEt5AOmqi OUG3hSH256yy+iv8de/AA6lb2FP1z4HdDscoX1aH3AuSI8lgpzUaVb+GSGXM4uiJ ouuU+a3glYwAKgmjOFPDuPfDF4NJDIavIW9IKcY8TwqoxO7AZ84LFeqPc/bXFt38 tHKi7GApxhPONiE3h3M1CHKi+YzZdfA= -----END CERTIFICATE-----Generated at Mon Mar 2 15:33:33 2026 by rpki-client