$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5522e7fc-2d6e-3a91-8d23-b6ece5710723.roa File: 5522e7fc-2d6e-3a91-8d23-b6ece5710723.roa (raw, json) Hash identifier: vySwVCggz9calQu3McS64fvrIVZ6/OIX2maAA5T+d7g= Subject key identifier: 9B:77:1F:25:8B:FA:D5:B0:A4:56:6A:47:78:19:68:DF:B5:4B:1D:60 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE582C9CFB988475E6DF7480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5522e7fc-2d6e-3a91-8d23-b6ece5710723.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 71.201.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:2c:9c:fb:98:84:75:e6:df:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=be51ef4d-1eb7-46ab-9ba4-98fde857fa34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ac:d7:64:4f:15:bf:42:63:68:81:4c:06:11: 0b:d2:7e:65:17:02:61:27:b4:ef:8b:78:4e:4f:99: 19:2c:d4:74:77:84:7b:2d:a6:21:89:12:b0:9b:1e: e3:5c:b7:c8:5a:b6:bb:90:79:06:4a:5d:3a:be:20: 43:d8:4b:33:f7:9b:ed:c8:33:47:73:46:cc:78:6a: db:76:64:18:53:bc:f1:79:ba:24:d3:21:bf:ee:76: 86:5e:36:3c:20:ee:d5:7b:0c:ef:dd:0c:aa:d9:3a: 06:c4:8e:44:5b:dc:29:85:a3:e0:41:97:5d:b1:c2: c6:2c:4b:7a:d3:75:fb:09:15:16:dc:49:15:49:37: d1:1a:9f:61:33:78:9e:41:f8:62:02:f5:23:18:7f: f4:06:14:10:ab:61:12:42:71:74:c0:37:53:2d:85: 48:49:4b:80:68:8b:17:31:5c:c6:65:dd:a1:73:b2: 16:19:0e:1e:05:c8:fe:37:1a:40:b6:13:a5:94:6d: 56:16:ff:85:8d:cf:8f:be:73:2b:f1:8a:56:fc:b7: 9e:31:dc:ea:aa:7a:89:83:35:b9:f8:73:19:58:5a: 49:4b:31:de:6b:4d:aa:16:7d:ca:04:88:85:a3:27: 3c:e3:47:f4:d0:91:e0:bc:55:c2:41:5d:5a:0a:c6: d2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:77:1F:25:8B:FA:D5:B0:A4:56:6A:47:78:19:68:DF:B5:4B:1D:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5522e7fc-2d6e-3a91-8d23-b6ece5710723.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.201.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:52:ef:e2:d6:07:3c:dd:75:6b:b1:20:fe:5d:b7:8c:e4:06: d0:f1:74:73:ce:b6:81:3b:52:12:37:00:e3:06:82:33:b4:35: d2:da:06:31:05:cf:5f:88:5f:66:05:be:da:1f:90:2a:f6:ec: be:7b:fd:8c:37:f2:a5:9d:7f:ee:e0:09:dc:36:c5:eb:d9:06: 1d:ac:44:f7:f4:39:a0:67:6c:6f:f6:d7:e4:96:7f:28:6f:c8: 70:da:9c:a1:64:6a:b8:4a:20:32:67:f9:ba:f8:be:4e:55:be: e3:8b:f5:7d:dc:c4:cc:95:a3:09:ec:c1:b3:74:c0:7e:51:c3: 2b:c0:a3:b2:7b:9b:74:bb:26:cc:a5:b4:ba:07:a1:26:34:9f: c9:4a:29:7a:45:76:de:69:e6:63:80:ea:c4:8b:65:f7:ba:b5: 73:e2:0e:96:3b:51:b5:ec:b6:59:9b:0b:df:c4:0e:98:91:38: 9a:ac:87:d3:41:01:8c:14:ee:d0:78:e4:ed:32:e4:04:9e:00: a0:00:99:f9:96:ff:cb:55:8f:b7:93:ed:3d:dc:9c:e0:52:88: 65:56:ca:0f:a7:7e:8a:3f:d8:15:4d:e0:0a:77:1f:95:53:2e: db:91:52:68:13:b1:b1:2d:e6:c7:95:17:c2:22:eb:d1:f8:59: 50:9c:74:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWCyc+5iEdebfdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YmU1MWVmNGQtMWViNy00NmFiLTliYTQtOThmZGU4NTdmYTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4KzXZE8Vv0JjaIFMBhEL0n5lFwJhJ7Tvi3hO T5kZLNR0d4R7LaYhiRKwmx7jXLfIWra7kHkGSl06viBD2Esz95vtyDNHc0bMeGrb dmQYU7zxebok0yG/7naGXjY8IO7Vewzv3Qyq2ToGxI5EW9wphaPgQZddscLGLEt6 03X7CRUW3EkVSTfRGp9hM3ieQfhiAvUjGH/0BhQQq2ESQnF0wDdTLYVISUuAaIsX MVzGZd2hc7IWGQ4eBcj+NxpAthOllG1WFv+Fjc+PvnMr8YpW/LeeMdzqqnqJgzW5 +HMZWFpJSzHea02qFn3KBIiFoyc840f00JHgvFXCQV1aCsbSgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJt3HyWL+tWwpFZqR3gZaN+1Sx1gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTUyMmU3ZmMtMmQ2ZS0z YTkxLThkMjMtYjZlY2U1NzEwNzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR8nQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJS7+LWBzzddWuxIP5dt4zkBtDxdHPOtoE7UhI3AOMGgjO0NdLaBjEF z1+IX2YFvtofkCr27L57/Yw38qWdf+7gCdw2xevZBh2sRPf0OaBnbG/21+SWfyhv yHDanKFkarhKIDJn+br4vk5VvuOL9X3cxMyVownswbN0wH5RwyvAo7J7m3S7Jsyl tLoHoSY0n8lKKXpFdt5p5mOA6sSLZfe6tXPiDpY7UbXstlmbC9/EDpiROJqsh9NB AYwU7tB45O0y5ASeAKAAmfmW/8tVj7eT7T3cnOBSiGVWyg+nfoo/2BVN4Ap3H5VT LtuRUmgTsbEt5seVF8Ii69H4WVCcdO8= -----END CERTIFICATE-----Generated at Sun Mar 1 23:14:36 2026 by rpki-client