$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/19d89549-b76d-3561-af42-ee74919cc7dc.roa File: 19d89549-b76d-3561-af42-ee74919cc7dc.roa (raw, json) Hash identifier: 8k9866190JbrYGmQ8u2NxQQZ0Gnr0+Zbdl8rIPq+sv4= Subject key identifier: 43:B0:76:C0:ED:77:07:8E:0B:48:43:DF:01:F9:E9:CF:F6:DE:41:98 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584C751F23B0A23738CED5C2D720 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/19d89549-b76d-3561-af42-ee74919cc7dc.roa Signing time: Thu 08 Jan 2026 14:00:39 +0000 ROA not before: Thu 08 Jan 2026 14:00:39 +0000 ROA not after: Wed 08 Apr 2026 13:00:39 +0000 asID: 33662 IP address blocks: 174.171.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:75:1f:23:b0:a2:37:38:ce:d5:c2:d7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 8 14:00:39 2026 GMT Not After : Apr 8 13:00:39 2026 GMT Subject: CN=9da52997-c2be-4dac-9ea1-8179d6b7faa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:c6:2d:c0:a2:b3:0b:7b:4f:a9:f5:eb:e9:6c: 1c:1a:da:c4:b2:43:28:f0:48:82:b2:43:91:24:1a: 2a:16:2a:d2:a7:a2:f2:75:d6:46:cf:0e:62:f1:d6: b0:93:4f:f5:94:2f:ba:b9:69:31:9e:44:ef:86:16: 16:2a:b2:f7:ba:31:17:81:86:49:86:d0:0b:6b:2d: cc:2f:ba:47:68:82:3e:14:2d:1d:d4:e9:64:ca:24: 85:67:7f:3b:24:3e:f0:b4:f1:61:eb:de:13:ed:e7: 20:cb:db:78:1d:b8:62:c1:f9:49:10:c7:df:bb:ad: 53:af:2b:28:33:19:63:38:b6:ca:c2:53:81:7d:56: 51:47:6a:24:98:91:75:92:4b:76:61:9b:2a:00:5b: df:1a:63:51:f4:94:ac:1d:18:7d:d6:38:91:2f:f7: 19:01:67:7d:1b:18:08:a1:92:86:5c:56:ee:4f:05: 31:2d:14:9a:64:f7:98:f5:7e:9e:59:2c:4c:61:c4: 82:4c:85:4a:13:ab:01:d3:c2:3d:47:53:cb:01:a7: 16:67:30:e6:7e:e1:7a:fa:43:95:ac:dc:b8:ed:e0: 7b:a7:d9:00:a7:ef:f0:2e:45:71:7b:58:f7:4a:53: 6b:17:40:5e:68:77:9a:90:70:58:e3:45:8e:82:0f: 04:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:B0:76:C0:ED:77:07:8E:0B:48:43:DF:01:F9:E9:CF:F6:DE:41:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/19d89549-b76d-3561-af42-ee74919cc7dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.171.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:32:62:aa:5a:76:6e:f8:0a:e0:e8:a5:9f:43:80:c1:d8:e0: 30:61:7c:be:ab:6b:eb:3e:56:9f:71:f6:8d:31:da:fa:d0:65: 42:52:d1:56:dd:b0:c3:e2:9f:76:04:12:f6:54:e0:b7:e6:5e: 21:2f:a5:c7:40:a3:e4:0a:91:ee:09:8e:a8:f4:53:76:44:6b: 16:9e:da:ee:2f:ef:47:37:1d:dd:7e:f1:c5:ea:21:76:db:20: 0e:d3:54:c0:07:93:8a:15:f2:5d:38:2d:92:9a:fe:b2:07:ad: b2:a2:b8:15:bf:9c:f3:dd:d2:84:27:81:30:94:d1:af:e8:7a: cd:97:f4:92:ff:a4:7e:66:9b:85:3a:64:63:60:7c:37:82:46: 4f:18:a6:06:e5:18:33:af:f0:b3:a3:f9:e7:cc:da:74:25:43: 43:83:cd:6a:60:4e:ab:46:fc:9e:e3:94:43:58:0f:f6:98:b0: be:85:0a:d7:26:f1:9e:ed:f8:6a:de:20:a5:ae:17:53:65:08: e8:2a:43:ff:5a:d4:90:0a:d6:24:e6:9e:fd:de:7d:38:5c:27: 86:b1:02:8d:f7:5f:40:40:18:70:88:b0:33:a6:c7:5a:ed:23: b7:8f:d5:55:87:4a:e9:f0:37:69:37:64:fa:70:b4:6e:a2:bd: ba:bc:cd:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx1HyOwojc4ztXC1yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEwODE0MDAzOVoXDTI2MDQwODEzMDAzOVowLzEtMCsGA1UEAxMk OWRhNTI5OTctYzJiZS00ZGFjLTllYTEtODE3OWQ2YjdmYWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8YtwKKzC3tPqfXr6WwcGtrEskMo8EiCskOR JBoqFirSp6LyddZGzw5i8dawk0/1lC+6uWkxnkTvhhYWKrL3ujEXgYZJhtALay3M L7pHaII+FC0d1OlkyiSFZ387JD7wtPFh694T7ecgy9t4HbhiwflJEMffu61Tryso MxljOLbKwlOBfVZRR2okmJF1kkt2YZsqAFvfGmNR9JSsHRh91jiRL/cZAWd9GxgI oZKGXFbuTwUxLRSaZPeY9X6eWSxMYcSCTIVKE6sB08I9R1PLAacWZzDmfuF6+kOV rNy47eB7p9kAp+/wLkVxe1j3SlNrF0BeaHeakHBY40WOgg8EGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEOwdsDtdweOC0hD3wH56c/23kGYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTlkODk1NDktYjc2ZC0z NTYxLWFmNDItZWU3NDkxOWNjN2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrqtsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsyYqpadm74CuDopZ9DgMHY4DBhfL6ra+s+Vp9x9o0x2vrQZUJS0Vbd sMPin3YEEvZU4LfmXiEvpcdAo+QKke4Jjqj0U3ZEaxae2u4v70c3Hd1+8cXqIXbb IA7TVMAHk4oV8l04LZKa/rIHrbKiuBW/nPPd0oQngTCU0a/oes2X9JL/pH5mm4U6 ZGNgfDeCRk8YpgblGDOv8LOj+efM2nQlQ0ODzWpgTqtG/J7jlENYD/aYsL6FCtcm 8Z7t+GreIKWuF1NlCOgqQ/9a1JAK1iTmnv3efThcJ4axAo33X0BAGHCIsDOmx1rt I7eP1VWHSunwN2k3ZPpwtG6ivbq8zb0= -----END CERTIFICATE-----Generated at Mon Mar 2 06:38:12 2026 by rpki-client