$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/78af9870-d025-39c4-a5c5-9759ecfd9d0c.roa File: 78af9870-d025-39c4-a5c5-9759ecfd9d0c.roa (raw, json) Hash identifier: 3H3rKFj9G6sKm8VAgZ8cL+rbDIBh4iTKHCIcRlEaxwg= Subject key identifier: D4:47:11:EB:5E:E1:B9:E2:7A:CD:A5:86:75:02:38:2A:F4:F1:8C:74 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5BC6ACA0C659D411616280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/78af9870-d025-39c4-a5c5-9759ecfd9d0c.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 71.201.180.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5b:c6:ac:a0:c6:59:d4:11:61:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=04b4c821-964f-48b7-9644-faee7ccc0bab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:97:46:73:04:a9:9b:6b:af:25:fb:9b:3a:fa: 44:38:9f:49:f5:2b:50:a4:c9:66:02:01:93:ac:15: 7b:c3:74:6c:aa:39:b6:58:12:4c:12:72:d1:8c:c7: 14:73:17:84:7b:21:58:48:c2:d5:d3:39:cb:fe:a5: 7a:b8:e9:4f:de:5e:88:de:09:d5:a3:4c:32:bd:ec: 2a:5a:ab:d1:86:17:2f:d6:48:21:95:a9:70:64:7a: 97:82:d5:44:4a:0f:bf:a4:85:47:7d:d5:d6:bd:9b: b1:40:ce:34:51:76:77:95:f5:5d:fb:c2:b3:02:e5: d1:6e:47:e6:cb:7a:f2:6b:79:c7:2b:f2:99:87:64: 5d:45:3d:80:34:10:59:21:24:5a:c0:84:5c:a5:e7: 83:16:be:bc:f2:ba:9d:50:5b:ec:6c:0b:ac:ec:c5: 5b:2f:84:8d:fc:e5:a7:27:a7:95:46:49:ec:f3:f4: 80:a7:f8:29:81:e5:a4:76:04:ea:ec:ea:a4:d5:a9: 5f:8a:8b:bf:19:cd:83:09:be:f4:70:ae:02:92:c1: 48:4e:88:83:06:b1:74:02:7f:60:9d:53:55:75:cd: bb:b1:57:aa:f8:f9:22:e6:4b:72:c8:13:25:dc:bd: ce:b8:7c:a5:fe:1d:3c:21:93:59:5e:72:f2:d0:23: 10:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:47:11:EB:5E:E1:B9:E2:7A:CD:A5:86:75:02:38:2A:F4:F1:8C:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/78af9870-d025-39c4-a5c5-9759ecfd9d0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.201.180.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:06:5c:10:80:7f:11:86:53:ca:ea:5e:0d:e8:a2:6e:a2:97: 8a:71:52:42:a3:a6:74:e4:34:61:3f:7b:2b:e1:b5:28:22:82: 5d:04:d2:85:1a:ac:d3:ce:8d:c5:0f:29:ea:1e:79:1a:f9:84: 4e:68:20:4d:c3:5d:c3:06:18:2d:9a:97:d6:02:81:3d:b4:83: 6e:4e:11:ef:1e:85:76:fe:46:21:ed:13:31:eb:eb:57:4b:58: ca:00:94:32:12:e0:4b:7a:ad:65:5e:ed:68:c9:69:86:58:fd: 91:8d:11:75:4a:ed:a1:b1:91:95:b6:c8:18:1b:ad:eb:be:fb: 69:81:62:46:ad:72:9a:73:f4:45:61:16:81:23:40:f8:c5:c6: af:1f:49:7c:b7:7e:dc:f5:14:24:f6:5a:6a:f9:df:cf:d7:82: 67:c2:26:c6:64:67:8a:47:a3:1b:45:48:ed:5d:ae:4f:29:fe: ff:82:45:38:00:3a:04:b1:ea:e9:80:5d:5d:f1:e0:81:86:0e: a4:3b:3f:f6:af:52:13:f0:b4:c6:74:ed:c3:d8:1e:bc:02:18: 43:66:60:ec:7c:ce:43:93:47:7c:5f:67:73:ab:9c:d5:37:4c: 2c:01:dc:28:46:fd:08:0c:80:d2:cb:da:b5:dc:28:57:76:00: 3f:54:9d:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuW8asoMZZ1BFhYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MDRiNGM4MjEtOTY0Zi00OGI3LTk2NDQtZmFlZTdjY2MwYmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpdGcwSpm2uvJfubOvpEOJ9J9StQpMlmAgGT rBV7w3Rsqjm2WBJMEnLRjMcUcxeEeyFYSMLV0znL/qV6uOlP3l6I3gnVo0wyvewq WqvRhhcv1kghlalwZHqXgtVESg+/pIVHfdXWvZuxQM40UXZ3lfVd+8KzAuXRbkfm y3rya3nHK/KZh2RdRT2ANBBZISRawIRcpeeDFr688rqdUFvsbAus7MVbL4SN/OWn J6eVRkns8/SAp/gpgeWkdgTq7Oqk1alfiou/Gc2DCb70cK4CksFIToiDBrF0An9g nVNVdc27sVeq+Pki5ktyyBMl3L3OuHyl/h08IZNZXnLy0CMQAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNRHEete4bnies2lhnUCOCr08Yx0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzhhZjk4NzAtZDAyNS0z OWM0LWE1YzUtOTc1OWVjZmQ5ZDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR8m0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYGXBCAfxGGU8rqXg3oom6il4pxUkKjpnTkNGE/eyvhtSgigl0E0oUa rNPOjcUPKeoeeRr5hE5oIE3DXcMGGC2al9YCgT20g25OEe8ehXb+RiHtEzHr61dL WMoAlDIS4Et6rWVe7WjJaYZY/ZGNEXVK7aGxkZW2yBgbreu++2mBYkatcppz9EVh FoEjQPjFxq8fSXy3ftz1FCT2Wmr538/XgmfCJsZkZ4pHoxtFSO1drk8p/v+CRTgA OgSx6umAXV3x4IGGDqQ7P/avUhPwtMZ07cPYHrwCGENmYOx8zkOTR3xfZ3OrnNU3 TCwB3ChG/QgMgNLL2rXcKFd2AD9Undc= -----END CERTIFICATE-----Generated at Sun Mar 1 18:59:25 2026 by rpki-client