$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45188995-c1d5-3665-95ab-0b53524e9c01.roa File: 45188995-c1d5-3665-95ab-0b53524e9c01.roa (raw, json) Hash identifier: +g8iTTTbEV1FBO8t6lbCA7hxx0UVKk3bSGZ+T67v6qk= Subject key identifier: 49:6A:E8:7C:6B:87:1D:06:AE:77:FE:6E:A7:D8:BC:AC:B7:4D:72:B4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5BD2249D6452B984F46A80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45188995-c1d5-3665-95ab-0b53524e9c01.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 71.57.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5b:d2:24:9d:64:52:b9:84:f4:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=3dcc7dd6-e2ee-4ad3-8c80-1389564a3b02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:57:e2:16:36:e6:ad:5a:8f:e7:33:1f:c6:3d: fa:e2:a5:87:5c:77:d5:62:b2:e4:99:b9:0d:e8:9d: e1:fa:1f:f6:08:5e:b4:9b:be:cb:e2:7f:11:db:80: de:20:2a:6d:aa:1b:8f:99:dd:c0:b7:d9:cf:91:93: ca:56:6e:96:9a:c3:b9:cf:19:53:75:65:5d:d6:40: c8:ac:a4:83:44:39:47:27:e5:a9:64:5b:35:56:49: 32:46:66:18:59:fe:1f:e2:35:85:cd:f4:f6:3b:81: ea:7b:a8:dc:08:1c:89:83:71:cf:28:28:d1:69:74: b9:f0:6c:cf:dc:28:76:81:ae:74:48:6d:f1:a7:43: 1d:11:e8:05:20:5d:cd:07:dc:2b:54:bd:a5:1b:01: dd:80:aa:4e:34:5a:28:28:43:93:e7:41:98:1d:90: d7:72:2b:99:9f:39:e4:5b:27:10:40:a3:c3:9d:42: 32:45:2a:0e:54:57:57:79:4b:f0:7b:8c:82:b3:26: 9e:2a:e1:23:a0:b3:14:86:05:f2:b7:b8:00:42:d7: 34:30:d9:55:8e:cf:d5:f9:12:70:45:ef:39:9d:d8: 7b:02:fe:a4:65:b1:5a:41:d3:d0:c9:cd:bb:58:67: dc:d6:da:25:f7:33:a7:63:28:6f:e8:f6:63:88:56: c4:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:6A:E8:7C:6B:87:1D:06:AE:77:FE:6E:A7:D8:BC:AC:B7:4D:72:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45188995-c1d5-3665-95ab-0b53524e9c01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.57.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:22:47:87:52:c1:ea:f0:31:d9:b7:1a:bf:d5:a0:5b:cb:87: 63:38:98:51:49:2e:0b:f3:6d:2e:cc:e2:d5:c9:a7:7e:80:32: 66:30:6d:2d:05:4d:b3:f2:b2:41:b7:95:4c:57:fe:bc:a1:81: 7b:eb:98:90:90:13:ff:ae:92:8c:e5:ba:5c:04:57:4b:30:46: 75:e2:b3:bf:cc:58:12:a4:87:6d:88:fa:92:99:d0:03:84:5c: 2d:0d:34:03:41:99:8c:d4:2f:5d:81:0e:95:0b:9d:7f:29:3d: ce:77:05:7f:bf:22:45:5e:92:9d:33:b9:d5:fd:3a:40:be:81: 1b:e0:cc:d0:10:3a:36:d5:f5:7c:e5:63:20:da:fc:6a:d8:0c: 68:eb:67:c4:d7:28:53:97:7a:1f:b7:0e:c6:6a:a4:f1:3c:66: 61:79:40:06:cd:8a:84:2d:53:6d:bb:6f:73:7b:61:1c:01:5e: a4:7e:77:16:80:b8:39:ff:cc:c7:61:6d:02:f5:fd:7e:52:4f: f8:76:36:96:72:f0:df:d3:f2:84:48:1f:6a:01:5a:54:47:ec: da:ab:80:1e:0b:de:15:00:c0:5b:0f:a8:28:c7:65:d8:f7:46: 82:cd:e8:6a:48:9e:9a:88:5f:0a:e1:8e:cd:73:10:84:c3:f3: 5e:d2:04:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuW9IknWRSuYT0aoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk M2RjYzdkZDYtZTJlZS00YWQzLThjODAtMTM4OTU2NGEzYjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFfiFjbmrVqP5zMfxj364qWHXHfVYrLkmbkN 6J3h+h/2CF60m77L4n8R24DeICptqhuPmd3At9nPkZPKVm6WmsO5zxlTdWVd1kDI rKSDRDlHJ+WpZFs1VkkyRmYYWf4f4jWFzfT2O4Hqe6jcCByJg3HPKCjRaXS58GzP 3Ch2ga50SG3xp0MdEegFIF3NB9wrVL2lGwHdgKpONFooKEOT50GYHZDXciuZnznk WycQQKPDnUIyRSoOVFdXeUvwe4yCsyaeKuEjoLMUhgXyt7gAQtc0MNlVjs/V+RJw Re85ndh7Av6kZbFaQdPQyc27WGfc1tol9zOnYyhv6PZjiFbEFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElq6Hxrhx0Grnf+bqfYvKy3TXK0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDUxODg5OTUtYzFkNS0z NjY1LTk1YWItMGI1MzUyNGU5YzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRzlWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALAiR4dSwerwMdm3Gr/VoFvLh2M4mFFJLgvzbS7M4tXJp36AMmYwbS0F TbPyskG3lUxX/ryhgXvrmJCQE/+ukozlulwEV0swRnXis7/MWBKkh22I+pKZ0AOE XC0NNANBmYzUL12BDpULnX8pPc53BX+/IkVekp0zudX9OkC+gRvgzNAQOjbV9Xzl YyDa/GrYDGjrZ8TXKFOXeh+3DsZqpPE8ZmF5QAbNioQtU227b3N7YRwBXqR+dxaA uDn/zMdhbQL1/X5ST/h2NpZy8N/T8oRIH2oBWlRH7NqrgB4L3hUAwFsPqCjHZdj3 RoLN6GpInpqIXwrhjs1zEITD817SBPo= -----END CERTIFICATE-----Generated at Mon Mar 2 18:34:52 2026 by rpki-client