$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c8f2ea1-6461-356c-8be7-4d7dbeb98380.roa File: 2c8f2ea1-6461-356c-8be7-4d7dbeb98380.roa (raw, json) Hash identifier: Y42xDKrrlGdWRfLnYzbBPbv/YWEM1cgqMwUOVIHoSaE= Subject key identifier: 4B:FB:23:6D:30:08:29:FA:4F:B0:85:75:C6:A0:F6:11:6F:CE:18:FA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5D63900A7853973A2C6000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c8f2ea1-6461-356c-8be7-4d7dbeb98380.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 71.204.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5d:63:90:0a:78:53:97:3a:2c:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=5298cd95-b31a-4b6a-8e12-71f9daf815f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:df:7c:a0:9e:9c:c5:29:7d:2c:e9:4e:38:12: f5:c1:5a:37:78:43:e2:f8:42:02:19:10:5c:9a:53: 81:63:c8:65:51:ae:f7:16:9f:89:d4:df:06:33:5c: 63:b7:17:39:13:14:1e:48:a2:5f:1a:d2:02:6a:ae: a2:ba:4c:2b:1a:6a:7b:a1:17:47:7d:0f:a2:d5:03: bb:36:b9:4d:69:a7:9a:48:36:ec:2c:9d:49:c5:08: 07:2a:58:c5:00:a7:8f:f2:e0:fb:64:60:b2:9b:5e: b7:7e:7e:d9:cf:4e:f4:42:f0:de:2f:3d:95:e8:b8: e0:be:29:35:ae:e8:f2:f6:20:53:fd:47:30:2f:19: e3:1c:ee:a4:55:aa:fe:ac:70:57:0b:87:85:cb:5c: d3:98:ca:39:dd:60:61:32:96:08:d2:5e:3f:df:05: 26:f4:44:4f:f6:d4:16:93:93:8b:0d:c3:09:37:5a: f3:75:23:4a:c7:54:4f:07:91:b2:89:e3:b5:3e:2f: 5c:4e:09:e1:79:5f:64:c3:c3:b2:1d:74:9c:79:18: 2c:c9:00:e7:15:70:cb:cb:d1:20:3d:41:e7:69:04: 3c:b0:5d:76:e8:d3:89:ca:6e:21:bf:08:c6:09:bb: f3:95:35:52:1f:b2:5d:23:a1:52:a6:c7:57:4c:28: 63:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:FB:23:6D:30:08:29:FA:4F:B0:85:75:C6:A0:F6:11:6F:CE:18:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c8f2ea1-6461-356c-8be7-4d7dbeb98380.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.204.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:fa:d4:9a:34:91:2d:d2:e0:37:23:b8:d2:87:6d:15:bb:1a: 4b:97:5d:82:e7:e2:ef:8e:83:9c:53:09:c5:22:b4:c5:e4:05: 55:32:e2:f5:1d:ae:18:b1:e1:4c:d5:92:98:e1:d1:83:55:4a: e6:32:28:d4:96:06:55:d5:43:a7:dd:61:64:fe:65:4e:fc:dc: d1:ec:d9:a5:f9:a7:f5:8b:05:36:28:77:ff:ce:06:b7:bb:72: 1b:f5:8b:12:9d:2a:7a:47:c8:b3:7d:b8:27:60:5d:9a:52:cc: 23:be:09:31:11:00:12:38:c3:05:3f:dd:2b:fd:3f:85:7e:7b: 18:78:d0:d5:0f:17:ef:8c:68:07:90:0b:69:66:45:81:dd:c8: 1f:d4:ff:75:53:86:f9:4b:18:f3:64:74:b9:a8:ab:24:1b:b7: 74:d6:cf:2f:cd:e5:71:b2:6a:f5:99:b8:9b:65:61:b2:9b:dd: 82:a5:04:03:dd:cc:ad:30:6a:3c:7a:40:c3:4b:38:d1:57:33: 49:13:f9:73:5b:4a:45:81:16:88:26:94:c7:39:5b:d4:fc:20: 99:33:e2:ee:58:35:e9:52:3d:4e:ec:fb:3a:c2:46:cb:52:cf: 46:29:91:17:3c:ef:3d:5d:a0:8a:1c:17:37:e9:38:91:c0:00: 5a:ff:be:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXWOQCnhTlzosYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NTI5OGNkOTUtYjMxYS00YjZhLThlMTItNzFmOWRhZjgxNWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhN98oJ6cxSl9LOlOOBL1wVo3eEPi+EICGRBc mlOBY8hlUa73Fp+J1N8GM1xjtxc5ExQeSKJfGtICaq6iukwrGmp7oRdHfQ+i1QO7 NrlNaaeaSDbsLJ1JxQgHKljFAKeP8uD7ZGCym163fn7Zz070QvDeLz2V6Ljgvik1 rujy9iBT/UcwLxnjHO6kVar+rHBXC4eFy1zTmMo53WBhMpYI0l4/3wUm9ERP9tQW k5OLDcMJN1rzdSNKx1RPB5GyieO1Pi9cTgnheV9kw8OyHXSceRgsyQDnFXDLy9Eg PUHnaQQ8sF126NOJym4hvwjGCbvzlTVSH7JdI6FSpsdXTChjEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEv7I20wCCn6T7CFdcag9hFvzhj6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmM4ZjJlYTEtNjQ2MS0z NTZjLThiZTctNGQ3ZGJlYjk4MzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR8ySMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJv61Jo0kS3S4DcjuNKHbRW7GkuXXYLn4u+Og5xTCcUitMXkBVUy4vUd rhix4UzVkpjh0YNVSuYyKNSWBlXVQ6fdYWT+ZU783NHs2aX5p/WLBTYod//OBre7 chv1ixKdKnpHyLN9uCdgXZpSzCO+CTERABI4wwU/3Sv9P4V+exh40NUPF++MaAeQ C2lmRYHdyB/U/3VThvlLGPNkdLmoqyQbt3TWzy/N5XGyavWZuJtlYbKb3YKlBAPd zK0wajx6QMNLONFXM0kT+XNbSkWBFogmlMc5W9T8IJkz4u5YNelSPU7s+zrCRstS z0YpkRc87z1doIocFzfpOJHAAFr/vlk= -----END CERTIFICATE-----Generated at Sun Mar 1 18:29:30 2026 by rpki-client