$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a8b95bc-3c64-3e43-9f81-d552c291c44e.roa File: 1a8b95bc-3c64-3e43-9f81-d552c291c44e.roa (raw, json) Hash identifier: 7Iroqe3rJ5x0014PevTym39EqkzZVQ2Sl0Xw9kGWfu4= Subject key identifier: 44:1D:21:25:EF:75:41:95:07:E3:77:2C:EB:FD:95:3C:D1:DC:7C:A7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5D5BAC2BEF4BEB6278BE00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a8b95bc-3c64-3e43-9f81-d552c291c44e.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 71.198.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5d:5b:ac:2b:ef:4b:eb:62:78:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=8bee123b-3221-415d-b7c3-3ec3723dafa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:26:05:98:e6:f4:1c:ff:31:5e:da:24:86:b7: 18:3a:fa:2e:ac:68:9f:78:72:1b:6b:4f:66:00:47: 93:f5:c7:76:ca:51:9d:15:01:51:e1:22:0d:4d:e0: 42:ed:87:e7:d7:e3:39:04:fd:10:3f:b1:a1:c8:50: 2b:7f:f1:ef:f2:b1:df:72:6b:36:c7:ae:d8:6e:9e: bb:dc:8c:df:9a:b8:2f:22:8d:4c:9c:3c:0d:ed:08: b3:e5:e2:34:e5:34:ca:85:0b:20:ec:37:39:a2:64: e2:13:5c:b3:ef:0d:6e:ec:16:75:5d:39:a3:06:d2: de:52:a7:a5:dd:58:b7:46:18:01:0a:9d:95:a0:a1: e6:4e:3e:92:3c:0d:4b:d0:ca:ab:3c:c8:59:13:40: f3:ee:27:80:6f:65:61:93:1b:8f:9b:c0:4a:89:3b: b0:30:ca:c5:7e:77:c3:94:92:33:bf:3b:a4:f0:5c: ce:05:25:82:da:58:28:fa:9d:93:8f:b4:d5:65:18: 12:ed:5c:95:46:d8:5c:91:9b:af:4e:74:91:88:51: 22:94:b1:37:18:72:96:04:a8:52:8c:b1:c5:34:06: 64:bb:eb:8c:82:45:21:08:68:9d:c9:97:8c:44:56: e0:d4:f1:d6:13:cd:a1:8e:92:b9:9c:1f:b6:88:06: 44:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:1D:21:25:EF:75:41:95:07:E3:77:2C:EB:FD:95:3C:D1:DC:7C:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a8b95bc-3c64-3e43-9f81-d552c291c44e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.198.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:43:bf:ad:16:44:6e:76:bd:3e:9c:a3:5c:3e:c4:f0:76:4d: e9:19:cf:0c:57:d5:da:ae:62:a0:35:57:63:91:95:b3:ef:83: 60:d1:43:ca:04:55:c1:40:8c:91:8d:ba:25:f1:aa:74:fc:21: 2f:d2:7a:45:d4:75:0e:a3:b0:89:ce:b8:e6:d8:35:80:fd:a1: 64:6c:0a:c4:0f:e4:32:ed:83:e5:40:c3:bd:ff:78:70:65:c8: 50:14:2c:8b:3b:56:19:fa:1f:5d:bd:1b:20:fd:67:f7:6f:59: 4d:f7:d8:43:58:fd:5f:7c:6c:be:77:08:63:f5:48:62:1b:54: d1:10:4d:1a:a8:99:d5:d7:3f:9c:92:8b:9c:28:df:63:4a:50: 09:a3:33:da:ff:cd:ba:d5:6b:bb:3c:f3:40:b8:38:ae:7d:40: 15:6b:e0:e2:9a:77:2d:51:3b:c0:1c:3d:98:e7:d1:e5:21:6d: bc:bc:2f:05:e3:ba:96:1d:a0:c9:60:df:f5:48:14:41:32:77: 73:21:ef:ca:29:7d:fe:b2:55:19:4e:56:96:7a:8c:d6:89:a0: 1b:1d:d7:40:cf:86:9f:39:53:29:bf:c0:39:e8:52:9a:ca:13: fe:41:cb:ab:30:13:1f:c2:c4:bd:90:3a:fd:46:ea:40:43:d9: 4f:12:7b:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXVusK+9L62J4vgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk OGJlZTEyM2ItMzIyMS00MTVkLWI3YzMtM2VjMzcyM2RhZmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyYFmOb0HP8xXtokhrcYOvourGifeHIba09m AEeT9cd2ylGdFQFR4SINTeBC7Yfn1+M5BP0QP7GhyFArf/Hv8rHfcms2x67Ybp67 3IzfmrgvIo1MnDwN7Qiz5eI05TTKhQsg7Dc5omTiE1yz7w1u7BZ1XTmjBtLeUqel 3Vi3RhgBCp2VoKHmTj6SPA1L0MqrPMhZE0Dz7ieAb2VhkxuPm8BKiTuwMMrFfnfD lJIzvzuk8FzOBSWC2lgo+p2Tj7TVZRgS7VyVRthckZuvTnSRiFEilLE3GHKWBKhS jLHFNAZku+uMgkUhCGidyZeMRFbg1PHWE82hjpK5nB+2iAZEsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQdISXvdUGVB+N3LOv9lTzR3HynMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWE4Yjk1YmMtM2M2NC0z ZTQzLTlmODEtZDU1MmMyOTFjNDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAR8YQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ5Dv60WRG52vT6co1w+xPB2TekZzwxX1dquYqA1V2ORlbPvg2DRQ8oE VcFAjJGNuiXxqnT8IS/SekXUdQ6jsInOuObYNYD9oWRsCsQP5DLtg+VAw73/eHBl yFAULIs7Vhn6H129GyD9Z/dvWU332ENY/V98bL53CGP1SGIbVNEQTRqomdXXP5yS i5wo32NKUAmjM9r/zbrVa7s880C4OK59QBVr4OKady1RO8AcPZjn0eUhbby8LwXj upYdoMlg3/VIFEEyd3Mh78opff6yVRlOVpZ6jNaJoBsd10DPhp85Uym/wDnoUprK E/5By6swEx/CxL2QOv1G6kBD2U8Se5k= -----END CERTIFICATE-----Generated at Sun Mar 1 18:53:00 2026 by rpki-client