$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/539b2feb-90f1-3f26-ab4e-1631ad078475.roa File: 539b2feb-90f1-3f26-ab4e-1631ad078475.roa (raw, json) Hash identifier: hsrYHVmjeNnFXSF4gtvblvx21un/z/9r3lhShuQp9bk= Subject key identifier: F0:82:B6:78:C7:CB:A4:49:D3:DB:D6:3E:70:E6:72:3E:21:49:32:96 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5BCB70E407CE6C2A314500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/539b2feb-90f1-3f26-ab4e-1631ad078475.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 71.228.24.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5b:cb:70:e4:07:ce:6c:2a:31:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=434c92b4-9c64-4afc-8d8e-a5ea866ac87f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7a:6f:d6:e9:bc:0b:ba:3d:d5:24:20:0f:2a: 1d:4d:e2:a0:27:30:38:da:74:b3:16:2c:66:31:be: 6f:5b:d2:27:78:50:2e:41:88:a9:27:79:f4:97:0f: 5d:3e:7d:53:3d:03:bb:35:6a:c3:a6:12:ec:ee:35: 1b:d8:9a:c9:6d:fa:a6:21:66:a5:80:1a:fc:32:d0: f1:08:8b:f9:c7:2b:de:8b:ad:51:ca:69:f7:63:fb: 18:f5:44:33:a7:62:17:bf:e0:c7:3d:3a:e3:00:e0: 2c:1a:06:1c:96:77:db:35:0c:b2:34:a1:ce:f4:13: 0b:c9:01:86:e3:a5:33:f6:db:07:a3:f0:ff:50:90: 33:32:90:a8:3c:b2:6f:46:4a:5e:7d:3f:11:90:6b: 43:6a:fb:76:21:de:26:b1:02:b6:79:94:c8:d2:b4: e7:69:bb:fc:62:bf:32:ac:f7:a6:67:b1:d9:6a:4f: b4:27:4e:a2:fc:8e:8a:ba:4a:28:82:f0:0d:c8:2c: 23:63:83:33:a9:5a:6a:a8:6a:8e:c4:c9:60:4e:a4: 7a:73:f6:14:e5:40:db:54:a1:9a:d7:03:1e:bb:b9: 1e:44:26:69:c6:33:86:fe:7c:ef:73:93:69:3a:4c: 84:30:1a:12:49:fd:30:72:f6:f2:a8:c4:f0:be:10: 2f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:82:B6:78:C7:CB:A4:49:D3:DB:D6:3E:70:E6:72:3E:21:49:32:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/539b2feb-90f1-3f26-ab4e-1631ad078475.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.228.24.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d3:b8:f5:47:6b:aa:fc:fc:d4:ae:a4:ff:5e:55:75:eb:10:c2: 4a:67:1b:74:5e:0a:bd:29:8a:87:b2:3a:52:16:79:77:cd:e6: 95:2a:f4:05:a3:34:e5:77:be:8d:4b:6f:7d:0d:54:af:22:d7: 82:76:25:3f:c6:2a:6c:52:82:85:13:5f:52:77:b3:1a:1e:de: 8b:a7:83:57:03:7d:83:03:0a:54:98:a8:b0:88:ea:89:1d:5a: d2:6e:0c:1d:c1:74:c2:6e:5b:40:6f:de:eb:e6:87:cc:a3:c9: 7b:26:d7:f6:7d:b4:ac:55:e9:6a:16:7f:a0:e2:13:4b:85:4a: df:5d:87:80:de:04:09:49:25:51:48:ed:44:b5:69:1c:fc:eb: 8b:37:17:f0:b3:04:ae:29:66:70:21:27:8b:96:c2:8c:ad:49: e0:5a:a9:81:5e:83:f6:b1:05:eb:9d:c0:f4:a8:8c:ad:6a:d2: f1:9b:bc:41:cd:7d:b6:9a:61:ce:24:14:5e:b8:90:e6:07:ff: 68:7a:6b:03:21:71:eb:1c:ae:72:18:c6:fd:17:bb:a0:9e:47: 47:d1:88:70:f8:2e:09:cb:96:6b:32:f9:c2:8f:3f:9a:67:73: 35:c8:0f:35:59:ab:c2:a4:d9:26:ae:ea:be:35:75:f0:dc:bb: b6:f6:07:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuW8tw5AfObCoxRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NDM0YzkyYjQtOWM2NC00YWZjLThkOGUtYTVlYTg2NmFjODdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXpv1um8C7o91SQgDyodTeKgJzA42nSzFixm Mb5vW9IneFAuQYipJ3n0lw9dPn1TPQO7NWrDphLs7jUb2JrJbfqmIWalgBr8MtDx CIv5xyvei61Rymn3Y/sY9UQzp2IXv+DHPTrjAOAsGgYclnfbNQyyNKHO9BMLyQGG 46Uz9tsHo/D/UJAzMpCoPLJvRkpefT8RkGtDavt2Id4msQK2eZTI0rTnabv8Yr8y rPemZ7HZak+0J06i/I6KukoogvANyCwjY4MzqVpqqGqOxMlgTqR6c/YU5UDbVKGa 1wMeu7keRCZpxjOG/nzvc5NpOkyEMBoSSf0wcvbyqMTwvhAvrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPCCtnjHy6RJ09vWPnDmcj4hSTKWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTM5YjJmZWItOTBmMS0z ZjI2LWFiNGUtMTYzMWFkMDc4NDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+QYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANO49Udrqvz81K6k/15VdesQwkpnG3ReCr0pioeyOlIWeXfN5pUq9AWj NOV3vo1Lb30NVK8i14J2JT/GKmxSgoUTX1J3sxoe3oung1cDfYMDClSYqLCI6okd WtJuDB3BdMJuW0Bv3uvmh8yjyXsm1/Z9tKxV6WoWf6DiE0uFSt9dh4DeBAlJJVFI 7US1aRz864s3F/CzBK4pZnAhJ4uWwoytSeBaqYFeg/axBeudwPSojK1q0vGbvEHN fbaaYc4kFF64kOYH/2h6awMhcescrnIYxv0Xu6CeR0fRiHD4LgnLlmsy+cKPP5pn czXIDzVZq8Kk2Sau6r41dfDcu7b2B6s= -----END CERTIFICATE-----Generated at Sun Mar 1 20:35:11 2026 by rpki-client