$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4541030a-eca6-32d8-a528-3c6e9e814d71.roa File: 4541030a-eca6-32d8-a528-3c6e9e814d71.roa (raw, json) Hash identifier: dWcucjSnYv/fcDQwae7utkaMXlkvfBQVB29WxSUly6g= Subject key identifier: 25:DE:97:DA:EE:18:EE:B8:D2:81:64:9B:13:20:6E:3C:5C:02:78:38 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5ACBFA54F8A592E61295C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4541030a-eca6-32d8-a528-3c6e9e814d71.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33287 IP address blocks: 69.253.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5a:cb:fa:54:f8:a5:92:e6:12:95:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=f969d869-4fc5-43a4-b03d-8a5b31175372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:7b:a9:67:3e:da:53:8b:f9:06:a4:4d:0b:09: 39:3d:48:e3:a9:3a:5c:41:60:16:5a:13:e6:4d:4e: c8:18:11:b2:a2:88:70:9c:58:b3:a2:2e:5b:89:23: 18:2c:17:8d:98:9d:4e:c5:4d:32:32:17:d3:96:85: 55:ca:34:e3:a1:e1:6f:a0:fc:67:e1:e9:ae:a9:99: 00:5b:20:6b:31:a6:9f:06:61:4a:11:06:52:82:99: b5:43:82:18:8d:d3:06:4b:ab:3a:04:52:2b:ac:2d: ec:16:d0:2a:63:e4:7c:07:a6:67:f1:68:20:f3:b7: ec:c2:28:97:22:79:9e:11:dd:43:93:b3:c3:f0:39: 4e:22:73:40:d9:a2:b1:51:03:df:55:8c:4b:54:2a: 09:db:54:56:a6:01:9f:52:16:fb:bc:2e:72:fc:dd: f6:0f:a8:03:93:03:b3:53:60:1c:67:0c:b9:43:ea: fd:60:c4:92:1e:8f:06:3c:2a:96:93:06:4f:dd:ab: ac:fc:ed:be:9e:32:82:50:2d:45:d7:bd:64:15:7b: 36:33:1a:02:af:0c:19:7d:02:24:12:86:19:c3:24: 57:de:34:c8:b4:3e:18:a1:e4:17:a3:24:a0:ac:cc: bf:95:35:59:68:7e:b2:55:d5:63:17:74:2a:90:12: 3f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:DE:97:DA:EE:18:EE:B8:D2:81:64:9B:13:20:6E:3C:5C:02:78:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4541030a-eca6-32d8-a528-3c6e9e814d71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 69.253.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dd:0e:67:e2:fd:7c:7f:a8:f1:a7:e8:87:4b:98:b3:c2:b1:1d: 66:53:eb:3b:78:fb:ce:89:06:ec:56:21:0e:17:47:cc:fe:c3: 9a:b8:0c:6d:6f:25:95:d0:80:b7:f6:4d:49:e1:41:4a:83:00: 8f:05:13:dd:25:2f:dd:b6:02:8f:c3:2e:79:36:84:f5:cd:08: 13:a1:6b:c4:0e:db:c3:fb:28:90:fe:57:59:ae:f7:86:91:a3: 9b:19:81:74:59:0d:be:71:7d:fa:e9:67:df:4b:22:a6:92:ae: 4e:56:9a:5e:ec:06:7f:02:86:38:a2:74:ad:05:69:98:23:1d: 39:cc:62:44:bc:19:f9:e1:f1:d4:af:20:99:e6:07:13:e8:a2: 23:bc:62:ff:65:fa:eb:da:a8:3d:de:75:f7:fb:8e:35:c8:f6: a0:69:19:68:a2:36:6f:e7:86:c3:94:32:47:2f:49:63:30:78: 9c:aa:7d:77:4c:a5:d5:12:1e:4e:f2:fa:08:11:ac:b0:10:93: 96:99:6d:1d:4b:5b:3c:d8:d5:09:93:17:a5:9c:2a:9f:d1:67: 49:0a:ab:89:93:1e:fa:d3:c2:fe:a7:ae:a9:39:cc:88:ec:87: 0e:86:63:81:de:c2:fd:72:99:bb:ed:ad:5e:9b:9f:24:31:3d: a6:5d:77:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWsv6VPilkuYSlcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk Zjk2OWQ4NjktNGZjNS00M2E0LWIwM2QtOGE1YjMxMTc1MzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXupZz7aU4v5BqRNCwk5PUjjqTpcQWAWWhPm TU7IGBGyoohwnFizoi5biSMYLBeNmJ1OxU0yMhfTloVVyjTjoeFvoPxn4emuqZkA WyBrMaafBmFKEQZSgpm1Q4IYjdMGS6s6BFIrrC3sFtAqY+R8B6Zn8Wgg87fswiiX InmeEd1Dk7PD8DlOInNA2aKxUQPfVYxLVCoJ21RWpgGfUhb7vC5y/N32D6gDkwOz U2AcZwy5Q+r9YMSSHo8GPCqWkwZP3aus/O2+njKCUC1F171kFXs2MxoCrwwZfQIk EoYZwyRX3jTItD4YoeQXoySgrMy/lTVZaH6yVdVjF3QqkBI/GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCXel9ruGO640oFkmxMgbjxcAng4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDU0MTAzMGEtZWNhNi0z MmQ4LWE1MjgtM2M2ZTllODE0ZDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRf3AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAN0OZ+L9fH+o8afoh0uYs8KxHWZT6zt4+86JBuxWIQ4XR8z+w5q4DG1v JZXQgLf2TUnhQUqDAI8FE90lL922Ao/DLnk2hPXNCBOha8QO28P7KJD+V1mu94aR o5sZgXRZDb5xffrpZ99LIqaSrk5Wml7sBn8ChjiidK0FaZgjHTnMYkS8Gfnh8dSv IJnmBxPooiO8Yv9l+uvaqD3edff7jjXI9qBpGWiiNm/nhsOUMkcvSWMweJyqfXdM pdUSHk7y+ggRrLAQk5aZbR1LWzzY1QmTF6WcKp/RZ0kKq4mTHvrTwv6nrqk5zIjs hw6GY4Hewv1ymbvtrV6bnyQxPaZdd24= -----END CERTIFICATE-----Generated at Sun Mar 1 18:53:23 2026 by rpki-client