$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d28809f-8cfb-3998-8512-a97c14ab144b.roa File: 3d28809f-8cfb-3998-8512-a97c14ab144b.roa (raw, json) Hash identifier: Y3tsBDoK4i2VCM1Xse5nzKEDSNYuRiiNT27o7YWAwdo= Subject key identifier: 32:DE:C1:87:6B:3A:47:39:89:E8:B2:3A:D3:7C:16:7C:0F:27:15:1D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5ACFF9D46DF83CD9B68380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d28809f-8cfb-3998-8512-a97c14ab144b.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33287 IP address blocks: 71.224.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5a:cf:f9:d4:6d:f8:3c:d9:b6:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=c4093f73-e723-42b5-9993-1ccc12644d4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c0:f3:20:c0:0a:26:ed:4b:0a:43:d9:52:71: be:0e:e7:12:60:a0:5b:0b:62:78:1f:9d:f8:92:99: d9:81:c0:a9:9c:16:f6:3c:d3:92:30:ab:b8:e3:37: 5d:e2:0a:c3:73:73:81:09:79:6b:58:d9:e2:60:17: a3:66:44:c7:dc:f4:bd:87:bf:e2:e3:8d:6c:39:eb: e2:9d:10:54:43:f1:9b:d6:7c:7f:ed:e3:1c:ca:76: 06:a9:fe:3a:cb:d0:86:0e:c9:98:dc:fd:07:71:5c: 53:7a:42:a9:40:e9:99:81:c3:89:c2:0a:1c:b9:ef: 5e:92:66:0f:11:38:19:7f:3d:39:f2:c4:d8:52:8a: e6:f2:63:a6:96:6f:fb:93:a2:f9:97:87:8b:df:7b: 43:86:34:64:a9:5a:a5:94:0e:e4:24:ca:0b:32:af: 58:3d:15:db:02:c9:63:62:ab:ed:6d:f6:71:48:fc: b4:c2:b0:8e:ea:67:0c:97:9b:6d:ff:5c:89:cc:5e: 18:b2:c6:ec:97:bc:70:b5:8b:45:88:f5:87:97:02: 66:cc:f3:27:f2:18:eb:7b:db:50:74:8e:5c:5d:2a: 85:09:ff:7a:43:9f:6a:d8:6a:f3:fe:e8:a8:87:55: de:a5:d6:56:55:4d:06:3b:e5:bf:5c:0d:c4:c9:80: f1:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:DE:C1:87:6B:3A:47:39:89:E8:B2:3A:D3:7C:16:7C:0F:27:15:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d28809f-8cfb-3998-8512-a97c14ab144b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.224.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:30:e9:6f:be:c6:aa:32:b6:a9:a1:b9:71:b3:73:54:44:35: e0:81:ea:a4:72:c6:3c:9e:81:b6:32:5d:ee:2b:78:38:1c:6d: d5:ab:99:6b:5a:c9:5f:71:cc:51:c0:9a:03:65:4d:52:d5:ae: 22:87:2d:f3:9f:07:ae:a6:a7:16:7a:b0:08:93:94:b5:2b:0e: 18:a3:79:2f:2d:30:a0:87:89:f7:15:3a:80:9d:4d:24:d9:ff: b4:86:da:af:90:51:2d:13:a3:e4:08:32:10:cb:68:c4:51:8a: c1:94:e2:d8:84:76:b5:a0:b1:5c:97:04:22:bd:83:e8:6f:f0: e3:5a:e5:13:3b:08:10:70:2c:a5:42:5d:35:bc:21:6c:f9:06: e0:c9:61:77:7a:b3:76:9f:f0:7d:04:5e:13:7e:b3:cd:fa:b6: b7:6c:8d:91:9f:fe:de:b9:58:75:08:8e:cb:09:71:10:af:4d: ff:27:59:46:ff:25:7e:7d:63:ad:b5:ec:bd:f3:5e:a1:43:05: 93:d9:55:40:a4:7f:82:f6:57:0c:4d:3e:9b:87:2e:d4:c0:b6: 01:ae:13:99:14:61:2e:e3:29:fc:8f:40:73:ac:6b:18:08:0a: 08:9e:15:f2:6c:3a:0d:30:53:54:45:6c:d1:fb:e9:91:5f:7b: dc:9b:58:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWs/51G34PNm2g4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YzQwOTNmNzMtZTcyMy00MmI1LTk5OTMtMWNjYzEyNjQ0ZDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8DzIMAKJu1LCkPZUnG+DucSYKBbC2J4H534 kpnZgcCpnBb2PNOSMKu44zdd4grDc3OBCXlrWNniYBejZkTH3PS9h7/i441sOevi nRBUQ/Gb1nx/7eMcynYGqf46y9CGDsmY3P0HcVxTekKpQOmZgcOJwgocue9ekmYP ETgZfz058sTYUorm8mOmlm/7k6L5l4eL33tDhjRkqVqllA7kJMoLMq9YPRXbAslj YqvtbfZxSPy0wrCO6mcMl5tt/1yJzF4Yssbsl7xwtYtFiPWHlwJmzPMn8hjre9tQ dI5cXSqFCf96Q59q2Grz/uioh1XepdZWVU0GO+W/XA3EyYDxyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLewYdrOkc5ieiyOtN8FnwPJxUdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2QyODgwOWYtOGNmYi0z OTk4LTg1MTItYTk3YzE0YWIxNDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR+AoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALow6W++xqoytqmhuXGzc1RENeCB6qRyxjyegbYyXe4reDgcbdWrmWta yV9xzFHAmgNlTVLVriKHLfOfB66mpxZ6sAiTlLUrDhijeS8tMKCHifcVOoCdTSTZ /7SG2q+QUS0To+QIMhDLaMRRisGU4tiEdrWgsVyXBCK9g+hv8ONa5RM7CBBwLKVC XTW8IWz5BuDJYXd6s3af8H0EXhN+s836trdsjZGf/t65WHUIjssJcRCvTf8nWUb/ JX59Y6217L3zXqFDBZPZVUCkf4L2VwxNPpuHLtTAtgGuE5kUYS7jKfyPQHOsaxgI CgieFfJsOg0wU1RFbNH76ZFfe9ybWMg= -----END CERTIFICATE-----Generated at Sun Mar 1 20:54:18 2026 by rpki-client