$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0afc6a21-9d4c-3258-a40c-4cf0198e7515.roa File: 0afc6a21-9d4c-3258-a40c-4cf0198e7515.roa (raw, json) Hash identifier: z9rlV+buYsyiH9rOck/TZhIqQA5crALoKerrY4kNGQU= Subject key identifier: 1E:33:B4:7D:D8:1A:25:CF:CA:FE:F4:24:70:13:D8:96:FC:82:BE:D4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE582B746F5B63ED0DCD4C60 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0afc6a21-9d4c-3258-a40c-4cf0198e7515.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 71.194.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:2b:74:6f:5b:63:ed:0d:cd:4c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=8403076d-cabe-47c0-8a86-f2da9a3fb942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b5:fc:bb:af:47:3a:31:4f:d3:43:ca:1f:e2: 29:de:c8:52:11:83:55:e3:e4:22:73:27:0c:f7:8a: f8:15:43:6d:b6:4c:bb:d1:c7:d0:67:59:1d:7f:71: 60:b5:21:2b:68:41:b5:50:6e:ad:b1:cd:0d:d4:9a: 39:b6:f3:65:cb:74:7d:2d:46:29:f9:df:e7:91:91: 02:2f:f3:62:db:b5:06:2d:59:08:4f:14:e9:d2:7d: c9:50:b5:38:52:67:25:89:21:6f:e1:15:e7:5e:f2: 5b:08:96:a5:8a:f2:60:77:6e:3a:ea:6b:b8:33:82: 1b:e2:cc:cb:28:a4:15:3a:50:c5:05:a0:a0:86:32: 4d:dd:36:80:6e:58:f7:43:68:65:2c:f1:3a:1d:cb: a0:5c:9f:83:91:b8:d0:b2:ee:de:92:d9:c2:50:8c: 08:f5:0f:35:b3:22:12:46:40:17:40:21:2f:87:2a: 9c:83:6b:d8:9b:b9:28:aa:f1:09:30:ee:a7:25:8e: 74:08:dc:ad:ab:ba:47:a5:ed:ec:d2:91:3a:94:04: b9:bc:d3:b2:31:0e:05:1d:74:83:35:c8:71:4e:18: 11:07:8d:78:41:87:90:d6:30:e5:1d:18:48:9d:60: 5d:35:26:62:5e:59:3d:17:4a:9e:d2:58:97:37:73: 76:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:33:B4:7D:D8:1A:25:CF:CA:FE:F4:24:70:13:D8:96:FC:82:BE:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0afc6a21-9d4c-3258-a40c-4cf0198e7515.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.194.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:12:19:42:6a:6b:ae:42:68:23:79:d7:0f:dc:03:be:ef:f8: a9:e6:8e:4e:90:c1:cd:59:7a:89:db:78:23:17:16:b7:68:09: c0:4b:cd:d3:72:35:1a:1a:e4:af:ac:1c:83:0e:f1:0d:27:53: ed:06:91:4e:6a:57:59:01:77:ed:fb:33:1d:d4:6e:e6:10:07: 58:19:5e:da:80:4f:8a:d8:33:c3:0a:3d:52:7b:df:b8:97:70: bb:2d:09:cb:88:a6:ad:80:84:a0:f3:bc:44:7e:9f:fc:7d:6a: 11:42:1f:03:11:1c:5a:f7:24:0b:0f:99:68:c1:b4:fd:7f:13: 9b:13:0c:02:04:cf:1b:52:63:5e:49:ae:c3:1b:48:b4:d8:fb: bc:10:fb:b5:67:6c:e5:07:32:59:e0:e7:ff:6d:8f:38:0d:97: 7f:38:61:2d:23:b4:12:82:aa:b8:57:06:09:9a:e0:4c:95:d6: a1:3c:89:30:37:c9:9e:86:5c:d2:e2:0a:99:10:72:61:7e:29: c8:1d:1f:43:49:d1:22:22:b5:dd:33:c6:60:c7:bd:b6:14:59: c1:5a:5b:94:80:8b:1d:c4:67:cd:3e:8b:0d:30:75:74:db:40: 63:ce:5e:5d:89:3f:c7:90:8b:2f:36:7a:a3:73:ad:a4:7d:cd: 5e:ab:90:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWCt0b1tj7Q3NTGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ODQwMzA3NmQtY2FiZS00N2MwLThhODYtZjJkYTlhM2ZiOTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrX8u69HOjFP00PKH+Ip3shSEYNV4+QicycM 94r4FUNttky70cfQZ1kdf3FgtSEraEG1UG6tsc0N1Jo5tvNly3R9LUYp+d/nkZEC L/Ni27UGLVkITxTp0n3JULU4UmcliSFv4RXnXvJbCJalivJgd2466mu4M4Ib4szL KKQVOlDFBaCghjJN3TaAblj3Q2hlLPE6HcugXJ+DkbjQsu7ektnCUIwI9Q81syIS RkAXQCEvhyqcg2vYm7koqvEJMO6nJY50CNytq7pHpe3s0pE6lAS5vNOyMQ4FHXSD NchxThgRB414QYeQ1jDlHRhInWBdNSZiXlk9F0qe0liXN3N2+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4ztH3YGiXPyv70JHAT2Jb8gr7UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGFmYzZhMjEtOWQ0Yy0z MjU4LWE0MGMtNGNmMDE5OGU3NTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR8JYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8SGUJqa65CaCN51w/cA77v+Knmjk6Qwc1ZeonbeCMXFrdoCcBLzdNy NRoa5K+sHIMO8Q0nU+0GkU5qV1kBd+37Mx3UbuYQB1gZXtqAT4rYM8MKPVJ737iX cLstCcuIpq2AhKDzvER+n/x9ahFCHwMRHFr3JAsPmWjBtP1/E5sTDAIEzxtSY15J rsMbSLTY+7wQ+7VnbOUHMlng5/9tjzgNl384YS0jtBKCqrhXBgma4EyV1qE8iTA3 yZ6GXNLiCpkQcmF+KcgdH0NJ0SIitd0zxmDHvbYUWcFaW5SAix3EZ80+iw0wdXTb QGPOXl2JP8eQiy82eqNzraR9zV6rkHQ= -----END CERTIFICATE-----Generated at Sun Mar 1 23:13:45 2026 by rpki-client