$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b87baa1-c08e-34b4-97c7-f9bcf21ab37a.roa File: 5b87baa1-c08e-34b4-97c7-f9bcf21ab37a.roa (raw, json) Hash identifier: 9WwQLjCkEzrJjJtJWVy0CToYfJtTTf849S4Q6O/v5Gc= Subject key identifier: C1:A3:0F:C9:34:21:F2:00:39:22:9A:13:51:A8:E5:CC:C6:79:AF:4B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5D5AC7604E6A4A8125C900 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b87baa1-c08e-34b4-97c7-f9bcf21ab37a.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 71.198.112.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5d:5a:c7:60:4e:6a:4a:81:25:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=5fb5dc7d-424f-4fb0-8fac-714a300e10e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:64:43:d2:3c:e4:bc:85:73:ab:a5:36:2f:ad: 26:51:7d:b4:2e:74:0b:24:65:5b:c1:be:43:6f:77: f9:af:54:df:d4:0e:2f:06:d8:87:ba:8b:e2:2a:ef: d4:ba:5e:3a:85:96:7e:f4:d0:2e:18:d3:6f:18:cb: c3:7f:a0:a7:38:7b:28:58:e5:8e:60:4c:fe:9e:e5: 96:79:43:a9:4d:2d:ba:80:74:5a:51:67:70:29:26: 17:7a:2b:d8:09:99:d1:32:4d:14:0d:7d:cf:e0:3e: 55:05:f5:d4:ef:74:d4:1d:2f:61:8a:7c:95:38:62: 06:db:71:02:e6:87:a2:ec:ed:53:ef:10:5c:d2:80: fe:b5:9f:95:09:90:f6:3e:e7:ef:b7:e5:ba:ba:77: 68:dc:e5:5c:65:64:ce:dd:3a:ff:64:75:e1:3c:7d: 59:0f:ac:00:6a:c1:b2:01:fe:f1:fb:cc:f3:4a:f7: f2:5c:55:10:30:5d:cc:a4:1b:4b:cb:0c:20:36:2c: 22:e2:cc:02:59:16:9b:79:56:b7:f4:34:a0:f5:58: 91:bb:5b:73:76:f3:0b:08:51:85:35:d3:8a:e2:6f: dc:5c:0c:17:12:d9:ca:e8:c6:5f:f9:59:2c:e2:21: 1a:3c:98:8a:ac:f4:56:26:44:a1:df:83:62:a5:01: b4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A3:0F:C9:34:21:F2:00:39:22:9A:13:51:A8:E5:CC:C6:79:AF:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b87baa1-c08e-34b4-97c7-f9bcf21ab37a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.198.112.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:8b:91:7e:8a:e2:b0:96:79:41:1c:14:f1:81:5c:df:08:68: ab:07:f2:92:fd:7d:c9:7f:de:7a:77:43:a1:1e:21:54:ce:bb: 61:d9:5d:15:c1:2c:53:50:b1:ed:6e:5b:2d:6c:0b:d9:87:d7: be:55:9b:90:e5:2c:87:ec:71:af:dd:8d:e0:e8:20:7f:b2:b7: af:9d:04:53:a7:14:a6:46:de:6e:61:a5:4c:91:55:9d:ca:ce: 35:4a:e4:1e:5c:b9:2e:b4:c5:9f:6e:1f:b4:a0:16:6d:43:91: d2:26:a1:68:0e:eb:61:95:5a:00:d0:83:ad:57:49:59:4b:d1: b4:36:50:29:6c:24:44:f0:cf:72:bc:47:b6:78:8e:e1:e0:02: ff:ec:f0:3a:f2:16:b3:db:99:b4:75:4f:9d:7d:91:60:d5:18: 78:76:2c:de:7b:f4:0a:bf:24:94:48:14:8f:a9:7d:27:1e:4c: 1a:35:34:45:01:4d:6a:af:ab:71:ce:2b:49:50:5a:29:cd:63: 8a:9c:fb:c7:64:f3:53:3a:68:1d:20:c2:d2:48:c7:a3:67:74: f8:78:f7:40:ea:d1:d3:89:0a:a2:48:38:08:84:b7:e2:74:5c: a7:71:f0:b3:ad:52:82:b0:64:f5:ff:e5:e9:fc:64:be:94:44: 78:da:e4:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXVrHYE5qSoElyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NWZiNWRjN2QtNDI0Zi00ZmIwLThmYWMtNzE0YTMwMGUxMGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGRD0jzkvIVzq6U2L60mUX20LnQLJGVbwb5D b3f5r1Tf1A4vBtiHuoviKu/Uul46hZZ+9NAuGNNvGMvDf6CnOHsoWOWOYEz+nuWW eUOpTS26gHRaUWdwKSYXeivYCZnRMk0UDX3P4D5VBfXU73TUHS9hinyVOGIG23EC 5oei7O1T7xBc0oD+tZ+VCZD2Pufvt+W6undo3OVcZWTO3Tr/ZHXhPH1ZD6wAasGy Af7x+8zzSvfyXFUQMF3MpBtLywwgNiwi4swCWRabeVa39DSg9ViRu1tzdvMLCFGF NdOK4m/cXAwXEtnK6MZf+Vks4iEaPJiKrPRWJkSh34NipQG0IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMGjD8k0IfIAOSKaE1Go5czGea9LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWI4N2JhYTEtYzA4ZS0z NGI0LTk3YzctZjliY2YyMWFiMzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR8ZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKLkX6K4rCWeUEcFPGBXN8IaKsH8pL9fcl/3np3Q6EeIVTOu2HZXRXB LFNQse1uWy1sC9mH175Vm5DlLIfsca/djeDoIH+yt6+dBFOnFKZG3m5hpUyRVZ3K zjVK5B5cuS60xZ9uH7SgFm1DkdImoWgO62GVWgDQg61XSVlL0bQ2UClsJETwz3K8 R7Z4juHgAv/s8DryFrPbmbR1T519kWDVGHh2LN579Aq/JJRIFI+pfSceTBo1NEUB TWqvq3HOK0lQWinNY4qc+8dk81M6aB0gwtJIx6NndPh490Dq0dOJCqJIOAiEt+J0 XKdx8LOtUoKwZPX/5en8ZL6URHja5Ek= -----END CERTIFICATE-----Generated at Sun Mar 1 19:04:28 2026 by rpki-client