$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4ccaafe6-134c-377c-b7c3-b7e4de86bd5e.roa File: 4ccaafe6-134c-377c-b7c3-b7e4de86bd5e.roa (raw, json) Hash identifier: 9c0Fups+OS7WnR0WF4gVJVM5Tt4yH0iCvpd1gtOo5dw= Subject key identifier: 10:DD:9F:2D:89:CA:EF:34:7B:79:B2:D7:1A:FC:A5:E3:04:1D:33:F8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5BC6847753ECF30B70DAB0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4ccaafe6-134c-377c-b7c3-b7e4de86bd5e.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 71.201.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5b:c6:84:77:53:ec:f3:0b:70:da:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=5c433553-83ce-42ea-b2d5-efcd93df3873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:bd:bc:0a:d9:86:77:fc:86:05:dc:76:3b:7f: f8:09:d8:64:3d:f1:52:dc:e5:67:d3:f9:61:d2:13: a1:8f:d7:6b:7e:37:7f:f9:9d:eb:5a:a4:79:bc:29: 25:34:16:40:51:da:de:93:e7:12:77:19:6e:f4:ad: 09:90:f3:65:f5:ca:90:f7:69:41:bb:be:82:fb:e9: ac:69:fc:bb:d0:f4:41:b5:c0:15:51:ec:23:b4:18: 1e:86:46:1b:83:ab:01:86:a6:4f:90:6c:ea:f6:8f: 9d:c3:98:26:3f:c6:59:d6:4f:01:b6:c4:52:1f:d2: 47:ff:5f:8a:12:fd:39:3d:0c:f4:e3:d4:38:b7:e6: 72:c3:1e:08:ef:5c:91:38:a9:4f:cb:f7:a5:04:2e: 95:00:bc:33:87:4d:19:10:3c:71:96:f9:d0:70:d4: 27:e1:e0:52:5f:3b:bc:e1:e3:98:3c:a1:d6:3d:75: 07:ea:76:c2:ba:ef:34:f2:d9:89:21:a4:0e:0d:4e: 9f:8f:92:ec:f4:ad:46:a7:7f:53:96:86:37:ac:0c: a0:4d:3c:ea:3e:cd:fa:99:9b:6d:f0:d4:4d:21:e8: 32:b5:7a:17:98:e9:5b:f7:d7:15:a5:74:fb:e3:ac: f0:89:0b:ca:d0:15:ae:b7:1e:53:3c:c9:76:6c:3e: c9:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:DD:9F:2D:89:CA:EF:34:7B:79:B2:D7:1A:FC:A5:E3:04:1D:33:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4ccaafe6-134c-377c-b7c3-b7e4de86bd5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.201.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d2:6d:e6:ad:05:41:98:44:40:84:25:fc:98:4d:83:97:97:4a: 92:b1:fe:cc:5f:aa:f5:ed:ba:98:ec:ee:b6:ef:22:01:46:6d: 99:fa:ea:d9:a4:dc:96:6b:48:ea:86:19:56:e7:e6:ac:3d:95: f4:95:a2:b6:23:5d:39:36:e8:bd:63:c4:3a:ea:4c:ec:e8:3e: 91:89:ee:b4:71:9d:9f:5b:b6:fb:f7:97:f6:63:39:90:79:73: 14:88:24:c4:db:32:9c:25:ce:33:1d:41:d1:2c:6c:0d:a4:22: 67:1b:05:30:2b:8f:86:5c:ae:43:d8:06:14:bc:15:1f:c7:5b: 2f:85:0d:85:88:f1:a0:ba:f2:42:c7:13:79:5f:0e:00:42:34: 83:cd:9a:6e:29:14:58:cd:38:ca:ef:04:c8:e5:9f:cb:36:66: b8:a3:97:59:ae:73:42:3b:d6:20:ee:2e:cc:94:ce:59:68:6d: af:c9:18:b0:07:dc:d8:e8:4a:d6:58:33:3b:fa:c8:11:ea:69: 3f:7b:6d:ef:09:8c:80:74:87:52:7f:3f:80:dc:19:25:af:13: cd:cb:92:ca:86:d6:c7:4b:f8:9f:d0:22:83:29:f6:1f:34:a9: 4c:67:c6:45:cf:d7:78:f1:45:7a:8b:9f:dc:81:50:be:69:28: 9f:95:e3:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuW8aEd1Ps8wtw2rAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NWM0MzM1NTMtODNjZS00MmVhLWIyZDUtZWZjZDkzZGYzODczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgr28CtmGd/yGBdx2O3/4CdhkPfFS3OVn0/lh 0hOhj9drfjd/+Z3rWqR5vCklNBZAUdrek+cSdxlu9K0JkPNl9cqQ92lBu76C++ms afy70PRBtcAVUewjtBgehkYbg6sBhqZPkGzq9o+dw5gmP8ZZ1k8BtsRSH9JH/1+K Ev05PQz049Q4t+Zywx4I71yROKlPy/elBC6VALwzh00ZEDxxlvnQcNQn4eBSXzu8 4eOYPKHWPXUH6nbCuu808tmJIaQODU6fj5Ls9K1Gp39TloY3rAygTTzqPs36mZtt 8NRNIegytXoXmOlb99cVpXT746zwiQvK0BWutx5TPMl2bD7JmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBDdny2Jyu80e3my1xr8peMEHTP4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGNjYWFmZTYtMTM0Yy0z NzdjLWI3YzMtYjdlNGRlODZiZDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR8moMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANJt5q0FQZhEQIQl/JhNg5eXSpKx/sxfqvXtupjs7rbvIgFGbZn66tmk 3JZrSOqGGVbn5qw9lfSVorYjXTk26L1jxDrqTOzoPpGJ7rRxnZ9btvv3l/ZjOZB5 cxSIJMTbMpwlzjMdQdEsbA2kImcbBTArj4ZcrkPYBhS8FR/HWy+FDYWI8aC68kLH E3lfDgBCNIPNmm4pFFjNOMrvBMjln8s2Zrijl1muc0I71iDuLsyUzlloba/JGLAH 3NjoStZYMzv6yBHqaT97be8JjIB0h1J/P4DcGSWvE83LksqG1sdL+J/QIoMp9h80 qUxnxkXP13jxRXqLn9yBUL5pKJ+V4/M= -----END CERTIFICATE-----Generated at Sun Mar 1 20:40:40 2026 by rpki-client