$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1b6aeb48-6310-3a10-bc35-9178ac146feb.roa File: 1b6aeb48-6310-3a10-bc35-9178ac146feb.roa (raw, json) Hash identifier: AnFF3QHwHVDPWmqWJrPao7v+T8IKeEYOX3sEnsLgSb0= Subject key identifier: 1B:FA:05:80:FE:C5:1D:48:F6:D2:23:CC:62:06:79:FA:0F:AB:24:54 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE582FAF0294015337AEA260 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1b6aeb48-6310-3a10-bc35-9178ac146feb.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 71.239.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:2f:af:02:94:01:53:37:ae:a2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=1a0f61e7-b241-4e3c-b2cf-7a005708fdae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ee:e4:31:8c:a9:ff:6f:ac:16:9a:53:08:3e: 26:bb:ce:12:e9:fb:f7:4b:c2:aa:e3:c9:86:80:de: a8:6b:71:09:39:a2:a9:77:e3:1d:1e:2f:6e:4b:8b: df:c9:e4:e8:45:b7:55:a7:f7:ac:d7:80:4c:df:4c: 02:55:f4:41:63:16:ed:a7:50:56:50:30:38:98:77: 4d:cf:40:0a:19:43:2e:53:fa:a1:09:e0:32:af:d8: 84:d5:a7:a8:63:2b:3e:83:10:68:cb:ea:8f:f6:35: a6:0a:be:78:8b:8c:c4:15:e5:7a:98:59:50:23:01: 83:a3:ee:e4:88:94:70:96:64:b3:58:ed:4d:17:ef: cb:82:36:cf:40:86:be:6f:93:6a:5d:6c:4c:cb:d7: 64:7f:dc:a1:dc:66:b7:62:b5:ef:1b:b0:8d:f5:24: 25:5e:8b:c3:cb:39:ea:ef:5e:e1:40:55:f1:26:9a: 49:5d:63:4a:d4:60:4c:58:7a:8c:4d:2e:b3:25:e8: bb:e7:a8:88:27:ab:cf:a6:b3:5f:68:39:eb:d5:4c: 23:70:3e:96:49:e0:89:4a:8d:33:86:4b:e9:fd:22: 42:c5:a0:c4:de:e4:f0:55:dc:e2:89:4a:f6:7b:2f: 0a:73:f1:a7:53:22:7c:65:69:35:ef:02:53:61:df: 23:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:FA:05:80:FE:C5:1D:48:F6:D2:23:CC:62:06:79:FA:0F:AB:24:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1b6aeb48-6310-3a10-bc35-9178ac146feb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.239.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:e1:fc:49:9b:8c:f3:20:b6:13:f9:50:1f:35:3f:b5:28:6c: 6d:57:5b:7c:d4:f9:f1:6a:96:fd:9a:a3:b4:48:85:c0:c9:68: 4d:d8:f9:e2:bb:df:92:68:86:ca:c0:74:df:73:23:ba:ef:42: 90:12:6c:df:b0:29:48:a0:9e:3a:92:db:00:4b:73:3f:7b:40: 16:2b:12:18:34:66:a9:d5:7f:ed:61:70:c5:b8:c8:e8:cd:07: 0b:51:6a:d0:99:87:4d:7d:93:79:8c:fe:13:b2:bd:f7:28:78: eb:6b:d1:3e:73:04:c5:8f:55:bd:00:9f:b4:f3:d3:34:4f:5f: ae:23:3c:73:cc:80:90:1e:23:b1:38:4f:c9:a7:f0:00:8f:7d: 85:21:ea:5d:fc:c6:88:b9:0b:e8:4a:4d:95:9e:90:23:d4:af: 86:b7:21:3c:b2:e3:71:28:b2:a0:00:c1:ee:20:37:db:db:44: 2e:45:3f:c9:5f:b7:d3:c8:ca:39:59:5b:1b:68:a8:46:fc:89: 74:ef:93:f5:86:bf:b0:ee:89:14:e9:1b:c9:c2:48:2a:ec:66: 22:7f:e0:27:21:79:0e:12:bb:4e:0f:99:e4:01:c7:58:57:e3: cf:10:c5:8c:16:25:a7:ba:81:a8:ae:d1:86:a9:de:df:de:ed: e0:c8:ea:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWC+vApQBUzeuomAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MWEwZjYxZTctYjI0MS00ZTNjLWIyY2YtN2EwMDU3MDhmZGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+7kMYyp/2+sFppTCD4mu84S6fv3S8Kq48mG gN6oa3EJOaKpd+MdHi9uS4vfyeToRbdVp/es14BM30wCVfRBYxbtp1BWUDA4mHdN z0AKGUMuU/qhCeAyr9iE1aeoYys+gxBoy+qP9jWmCr54i4zEFeV6mFlQIwGDo+7k iJRwlmSzWO1NF+/LgjbPQIa+b5NqXWxMy9dkf9yh3Ga3YrXvG7CN9SQlXovDyznq 717hQFXxJppJXWNK1GBMWHqMTS6zJei756iIJ6vPprNfaDnr1UwjcD6WSeCJSo0z hkvp/SJCxaDE3uTwVdziiUr2ey8Kc/GnUyJ8ZWk17wJTYd8jmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBv6BYD+xR1I9tIjzGIGefoPqyRUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWI2YWViNDgtNjMxMC0z YTEwLWJjMzUtOTE3OGFjMTQ2ZmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR+8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKDh/EmbjPMgthP5UB81P7UobG1XW3zU+fFqlv2ao7RIhcDJaE3Y+eK7 35JohsrAdN9zI7rvQpASbN+wKUignjqS2wBLcz97QBYrEhg0ZqnVf+1hcMW4yOjN BwtRatCZh019k3mM/hOyvfcoeOtr0T5zBMWPVb0An7Tz0zRPX64jPHPMgJAeI7E4 T8mn8ACPfYUh6l38xoi5C+hKTZWekCPUr4a3ITyy43EosqAAwe4gN9vbRC5FP8lf t9PIyjlZWxtoqEb8iXTvk/WGv7DuiRTpG8nCSCrsZiJ/4CcheQ4Su04PmeQBx1hX 488QxYwWJae6gaiu0Yap3t/e7eDI6q0= -----END CERTIFICATE-----Generated at Sun Mar 1 18:44:16 2026 by rpki-client