$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/83931058-474e-3e3b-b499-ffcea75c43a7.roa File: 83931058-474e-3e3b-b499-ffcea75c43a7.roa (raw, json) Hash identifier: CzRzxSApPLM8JB51VsU/xY0ZzEbkEH5PvQc2hTd4Dh0= Subject key identifier: 1E:2F:93:74:F6:D6:41:3B:BB:03:07:36:8D:54:62:5D:A1:EC:94:F1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE582F7EC61C4AAD9DD56600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/83931058-474e-3e3b-b499-ffcea75c43a7.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 71.239.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:2f:7e:c6:1c:4a:ad:9d:d5:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=2b1708b9-103e-41e3-9c9d-7becf3c581dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4d:e4:e5:6e:a6:a1:43:93:fa:9d:f8:d1:b7: db:42:9c:f8:74:77:fb:4d:31:4f:ea:ba:24:85:34: e3:19:51:9c:50:4b:46:3d:87:14:1e:63:6a:e2:b7: 82:c4:18:65:80:68:ab:00:11:f5:c4:c8:cb:ce:32: 08:63:00:ff:16:d7:7c:fa:15:b1:91:b4:78:d5:c7: 9b:36:45:f7:71:fe:32:ad:ed:39:0a:c7:66:92:0e: 75:d5:11:28:ee:94:8c:47:84:c9:6c:3b:ff:7f:f0: 5b:2a:ab:b8:fe:f9:ea:87:3f:30:93:5f:34:3f:bb: f7:59:a1:b5:31:95:8c:04:68:97:cb:ad:b4:76:41: 07:fd:e5:89:e6:2a:e5:69:c1:d7:e5:fd:33:d3:e4: f1:ec:e1:f7:1b:bb:86:28:a8:03:e5:e7:43:8e:4d: b7:33:f3:25:95:b0:69:2c:18:31:84:b1:89:b2:a4: 15:bf:13:d2:e7:f5:b1:f3:a5:28:be:77:3e:c1:e6: 9c:7a:5c:6d:e7:cd:59:11:2f:71:ef:86:90:7b:80: 61:c7:ab:82:d7:0a:57:21:ad:1a:cb:f0:f3:03:03: cc:06:d1:3a:e1:94:89:63:04:9e:b2:a7:17:b7:f0: 57:7d:33:f9:25:d5:23:d0:4a:51:bd:cd:eb:35:53: bd:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:2F:93:74:F6:D6:41:3B:BB:03:07:36:8D:54:62:5D:A1:EC:94:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/83931058-474e-3e3b-b499-ffcea75c43a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.239.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:61:63:fd:27:45:f8:8b:d0:38:ae:a1:25:ec:ac:dc:20:48: f4:1c:14:f0:41:b0:67:61:be:d2:b1:bc:b4:f1:12:32:c0:7a: bc:50:0e:55:ce:13:70:8f:cb:23:10:dd:ba:0d:d9:0d:71:83: 9d:a8:e2:c7:ec:05:f9:fc:54:97:0d:44:9d:a6:f5:fa:16:cb: e0:b7:ba:72:5c:5b:11:8a:5b:21:9f:53:6b:e3:80:62:9b:dc: 25:9f:bb:54:80:79:f2:52:2f:4b:67:60:12:e8:18:6d:4c:65: 73:b5:27:e4:72:51:3f:0b:62:e9:5e:3f:64:11:4a:9d:59:81: fe:bd:ac:e5:f7:f9:05:88:d8:af:30:bc:9d:b6:e1:8c:80:7c: 28:19:12:b8:13:67:3b:15:e1:e9:33:c0:78:24:ec:95:52:98: 7f:90:f2:f7:ec:13:ef:e8:31:89:4f:1a:f6:41:b4:65:33:0e: 50:55:b9:83:9a:c2:b4:e0:dc:54:11:95:7f:2c:a4:a4:22:a6: 77:22:fe:c2:d2:b3:ec:4c:95:12:27:97:16:5e:92:ac:87:78: 71:28:f8:b6:a7:dd:f6:8e:ce:b7:5c:4b:bf:54:08:68:25:66: 9d:10:13:c4:43:00:80:53:31:74:7e:3a:c7:60:92:10:c1:f6: 68:21:4a:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWC9+xhxKrZ3VZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MmIxNzA4YjktMTAzZS00MWUzLTljOWQtN2JlY2YzYzU4MWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoE3k5W6moUOT+p340bfbQpz4dHf7TTFP6rok hTTjGVGcUEtGPYcUHmNq4reCxBhlgGirABH1xMjLzjIIYwD/Ftd8+hWxkbR41ceb NkX3cf4yre05Csdmkg511REo7pSMR4TJbDv/f/BbKqu4/vnqhz8wk180P7v3WaG1 MZWMBGiXy620dkEH/eWJ5irlacHX5f0z0+Tx7OH3G7uGKKgD5edDjk23M/MllbBp LBgxhLGJsqQVvxPS5/Wx86Uovnc+weacelxt581ZES9x74aQe4Bhx6uC1wpXIa0a y/DzAwPMBtE64ZSJYwSesqcXt/BXfTP5JdUj0EpRvc3rNVO9DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4vk3T21kE7uwMHNo1UYl2h7JTxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODM5MzEwNTgtNDc0ZS0z ZTNiLWI0OTktZmZjZWE3NWM0M2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR+8YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9hY/0nRfiL0DiuoSXsrNwgSPQcFPBBsGdhvtKxvLTxEjLAerxQDlXO E3CPyyMQ3boN2Q1xg52o4sfsBfn8VJcNRJ2m9foWy+C3unJcWxGKWyGfU2vjgGKb 3CWfu1SAefJSL0tnYBLoGG1MZXO1J+RyUT8LYuleP2QRSp1Zgf69rOX3+QWI2K8w vJ224YyAfCgZErgTZzsV4ekzwHgk7JVSmH+Q8vfsE+/oMYlPGvZBtGUzDlBVuYOa wrTg3FQRlX8spKQipnci/sLSs+xMlRInlxZekqyHeHEo+Lan3faOzrdcS79UCGgl Zp0QE8RDAIBTMXR+OsdgkhDB9mghSpo= -----END CERTIFICATE-----Generated at Sun Mar 1 18:54:08 2026 by rpki-client