$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5e3af072-4693-3fb1-a86a-538b614e4fda.roa File: 5e3af072-4693-3fb1-a86a-538b614e4fda.roa (raw, json) Hash identifier: 9RqmHwN/qpyqOsZGftUd9HKhVqw7kvQlMa29wyCiKrQ= Subject key identifier: 8C:54:2D:96:6A:35:78:8E:F0:D3:62:CF:7D:7B:69:93:21:60:E5:A8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE59A89C7B9540C7C20E8100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5e3af072-4693-3fb1-a86a-538b614e4fda.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33659 IP address blocks: 71.59.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:59:a8:9c:7b:95:40:c7:c2:0e:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=22a3bd85-b40b-46ea-9c4d-fe2e0230e32b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e3:d4:6e:50:41:74:e5:b3:4c:59:ef:75:85: 61:23:1d:20:9d:4c:13:cd:ad:f8:e8:90:a5:02:6a: 17:24:ec:26:8b:09:eb:1b:97:8b:24:87:1d:d0:9d: c7:70:a2:bd:48:be:f0:93:8f:cb:1b:ec:4b:42:9b: ac:36:e1:c7:26:e3:00:51:64:7e:bf:4d:a5:3c:f9: 84:e7:3c:54:20:b4:48:30:a7:16:50:55:3a:20:9e: c7:14:82:8f:90:9a:ee:a8:96:bd:1b:c5:b3:f6:ca: fc:6a:0b:b1:47:4f:13:80:ab:da:c6:76:62:db:c6: 6d:51:f6:51:9d:68:ab:30:3b:bf:51:cb:d9:72:72: e7:18:39:05:a3:ba:89:1e:d1:63:77:0f:89:bf:00: c4:80:b0:9e:6f:66:31:cd:7e:f8:39:2b:e6:a8:5b: 1d:cf:8c:eb:94:0c:ae:29:dd:76:cc:3a:7e:9e:6c: 93:6b:27:46:9f:0c:57:50:6b:ec:2a:4c:69:6e:ec: 27:90:0d:52:64:36:73:d5:db:b7:52:7f:d4:dd:d1: 8d:4e:8d:cd:c7:26:da:c3:86:82:ac:c1:ae:51:9a: 2c:d1:5c:3c:d0:68:2f:1a:1d:7d:f1:be:a4:26:ba: 6b:99:af:ec:82:a3:49:88:44:c0:61:78:17:b2:90: 0f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:54:2D:96:6A:35:78:8E:F0:D3:62:CF:7D:7B:69:93:21:60:E5:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5e3af072-4693-3fb1-a86a-538b614e4fda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.59.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:11:76:fd:74:a5:9b:cb:a0:d5:37:28:1d:7e:6a:80:1f:ae: 3d:85:1b:ad:fb:33:e9:1a:79:f3:54:f4:e6:a3:a0:5e:53:88: 24:f0:25:91:eb:2d:d2:10:ff:33:54:45:f1:69:f8:95:f0:fd: f4:05:37:0d:0a:9d:0a:57:9c:68:6a:39:8d:2c:11:35:6b:2c: 33:7b:e8:4e:9e:fa:5e:64:ec:54:4a:fb:26:e9:f8:67:3f:46: aa:c4:06:fa:c1:d9:69:65:96:80:e2:89:a5:cf:40:db:db:00: 9b:7e:e4:78:fa:7a:7e:b6:3f:fb:b2:58:47:54:0c:57:09:e7: e6:68:cf:11:c3:bd:29:84:8a:d7:65:90:a0:37:63:e9:dd:f2: e7:4b:4e:d2:b0:f7:55:41:24:ee:dd:b9:62:43:bc:b4:34:47: 42:f5:5f:43:a1:08:21:21:6d:ca:56:55:9b:d6:aa:42:7c:64: 98:4a:b7:7f:70:c8:d8:52:2f:52:c9:f4:d6:86:fe:ca:a3:13: f3:96:9e:7d:43:b1:ac:1a:91:cf:5d:fe:f7:2a:cd:d3:f3:9d: c8:74:e3:51:10:a7:33:7d:a7:3b:8e:eb:e1:6d:1f:82:51:1e: df:23:63:9a:60:ce:4b:44:c6:54:6f:e9:fd:e5:0a:71:5c:bd: f8:68:c2:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWaice5VAx8IOgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MjJhM2JkODUtYjQwYi00NmVhLTljNGQtZmUyZTAyMzBlMzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOPUblBBdOWzTFnvdYVhIx0gnUwTza346JCl AmoXJOwmiwnrG5eLJIcd0J3HcKK9SL7wk4/LG+xLQpusNuHHJuMAUWR+v02lPPmE 5zxUILRIMKcWUFU6IJ7HFIKPkJruqJa9G8Wz9sr8aguxR08TgKvaxnZi28ZtUfZR nWirMDu/UcvZcnLnGDkFo7qJHtFjdw+JvwDEgLCeb2YxzX74OSvmqFsdz4zrlAyu Kd12zDp+nmyTaydGnwxXUGvsKkxpbuwnkA1SZDZz1du3Un/U3dGNTo3Nxybaw4aC rMGuUZos0Vw80GgvGh198b6kJrprma/sgqNJiETAYXgXspAP2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIxULZZqNXiO8NNiz317aZMhYOWoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWUzYWYwNzItNDY5My0z ZmIxLWE4NmEtNTM4YjYxNGU0ZmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRztWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4Rdv10pZvLoNU3KB1+aoAfrj2FG637M+kaefNU9OajoF5TiCTwJZHr LdIQ/zNURfFp+JXw/fQFNw0KnQpXnGhqOY0sETVrLDN76E6e+l5k7FRK+ybp+Gc/ RqrEBvrB2WllloDiiaXPQNvbAJt+5Hj6en62P/uyWEdUDFcJ5+ZozxHDvSmEitdl kKA3Y+nd8udLTtKw91VBJO7duWJDvLQ0R0L1X0OhCCEhbcpWVZvWqkJ8ZJhKt39w yNhSL1LJ9NaG/sqjE/OWnn1Dsawakc9d/vcqzdPznch041EQpzN9pzuO6+FtH4JR Ht8jY5pgzktExlRv6f3lCnFcvfhowus= -----END CERTIFICATE-----Generated at Sun Mar 1 20:43:16 2026 by rpki-client