$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85d2f547-f4b6-3d1f-878a-7ec12dfaf959.roa File: 85d2f547-f4b6-3d1f-878a-7ec12dfaf959.roa (raw, json) Hash identifier: bBk+yeGatFt9d/9FjVMlQpvVIKd7eOgt6Btfc+qR2s0= Subject key identifier: B7:06:49:FD:C2:2B:35:BC:A3:48:04:1F:1C:3E:94:E7:0D:BB:0E:9C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE57BCFB8FC5E49F74B3A3F0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85d2f547-f4b6-3d1f-878a-7ec12dfaf959.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33287 IP address blocks: 69.253.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:bc:fb:8f:c5:e4:9f:74:b3:a3:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=1d9b5596-0ea8-469f-8a70-51db08eae5ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:af:e9:fc:d4:d0:64:20:93:63:ce:ac:09:42: 77:09:74:59:06:0c:3b:f9:a7:df:99:1d:8d:ec:7d: e9:ca:a3:4f:b4:9e:92:20:cd:e4:46:c9:bd:24:d4: 8a:9d:84:93:f8:c9:aa:d0:1d:b7:17:cb:56:10:7b: 2c:df:df:fa:68:e9:f7:28:b9:65:7d:53:c9:3e:e3: 9a:f2:cf:95:d1:a2:e6:74:6b:27:0c:45:02:c9:70: 37:c6:8c:53:92:4c:9e:61:1f:52:c5:52:c5:9c:9f: 1c:08:4b:e1:bc:1e:21:76:cf:3c:d5:22:1d:d6:a9: da:c2:82:0e:1b:ed:52:9a:33:4a:7b:97:78:0c:1b: 43:84:31:b0:e7:b2:e8:dd:fd:58:0f:80:33:39:85: dd:82:34:cf:8d:73:bf:21:27:e3:17:48:8d:a5:21: 17:f7:5e:bd:6b:f0:b1:85:b9:64:35:22:a3:b2:14: b4:f0:a0:bc:2b:97:e3:7d:53:d3:e2:69:d6:01:1a: 00:4f:35:b6:36:ac:f5:a1:22:8f:08:1e:49:9d:26: e6:0c:ac:25:c9:cd:3e:fe:0f:b6:d1:93:bc:f3:10: f4:71:ca:ff:05:f8:95:9c:ae:5b:af:f3:67:41:2a: 03:22:19:e7:01:3d:04:20:91:22:b4:44:6c:f9:d3: aa:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:06:49:FD:C2:2B:35:BC:A3:48:04:1F:1C:3E:94:E7:0D:BB:0E:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85d2f547-f4b6-3d1f-878a-7ec12dfaf959.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 69.253.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:fa:a4:8b:03:ef:92:93:a0:6a:41:6f:70:85:d5:84:9c:00: d1:34:1f:2c:1a:d6:85:59:75:45:b2:cc:0a:73:aa:8f:f9:67: bd:38:53:9b:fe:ec:9f:f5:92:7b:0c:a6:ee:e9:bf:b6:f7:ea: 3e:38:07:5e:bd:22:57:34:9f:42:30:d3:98:a3:08:fd:47:11: 4c:8f:0f:eb:de:a3:d1:cd:b0:8e:7a:88:04:d4:fa:8b:89:45: f7:0d:e8:a5:72:db:db:ab:50:c2:ac:b3:bb:b5:9f:a8:71:6b: 43:76:eb:d1:fa:67:2c:5c:4d:f0:3d:f0:ef:d2:96:80:99:60: 39:8e:02:d3:7b:49:b8:30:63:8d:c9:cf:a4:89:e8:1d:7c:e2: d4:14:ba:5b:f6:1e:8f:92:d7:38:35:d0:4b:1c:7b:05:67:bd: f5:4b:5c:a4:17:54:eb:ae:e3:1f:3d:91:d7:4c:33:1f:98:31: d2:2f:12:ca:e2:b9:03:d2:a4:0d:b4:d4:ad:06:c8:d6:28:23: eb:bf:42:19:dd:b6:65:8a:48:7e:e1:c4:b0:1f:38:9b:f4:03: c8:a5:e8:62:2a:82:a2:fd:b5:93:60:d5:c1:29:ec:cf:f3:b4: fd:28:9e:94:2a:db:5d:3f:d6:35:1a:11:fd:77:6d:80:4a:2e: e3:b1:5f:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuV7z7j8Xkn3Szo/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MWQ5YjU1OTYtMGVhOC00NjlmLThhNzAtNTFkYjA4ZWFlNWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6/p/NTQZCCTY86sCUJ3CXRZBgw7+affmR2N 7H3pyqNPtJ6SIM3kRsm9JNSKnYST+Mmq0B23F8tWEHss39/6aOn3KLllfVPJPuOa 8s+V0aLmdGsnDEUCyXA3xoxTkkyeYR9SxVLFnJ8cCEvhvB4hds881SId1qnawoIO G+1SmjNKe5d4DBtDhDGw57Lo3f1YD4AzOYXdgjTPjXO/ISfjF0iNpSEX9169a/Cx hblkNSKjshS08KC8K5fjfVPT4mnWARoATzW2Nqz1oSKPCB5JnSbmDKwlyc0+/g+2 0ZO88xD0ccr/BfiVnK5br/NnQSoDIhnnAT0EIJEitERs+dOqCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLcGSf3CKzW8o0gEHxw+lOcNuw6cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODVkMmY1NDctZjRiNi0z ZDFmLTg3OGEtN2VjMTJkZmFmOTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARf3/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABf6pIsD75KToGpBb3CF1YScANE0Hywa1oVZdUWyzApzqo/5Z704U5v+ 7J/1knsMpu7pv7b36j44B169Ilc0n0Iw05ijCP1HEUyPD+veo9HNsI56iATU+ouJ RfcN6KVy29urUMKss7u1n6hxa0N269H6ZyxcTfA98O/SloCZYDmOAtN7SbgwY43J z6SJ6B184tQUulv2Ho+S1zg10EscewVnvfVLXKQXVOuu4x89kddMMx+YMdIvEsri uQPSpA201K0GyNYoI+u/QhndtmWKSH7hxLAfOJv0A8il6GIqgqL9tZNg1cEp7M/z tP0onpQq210/1jUaEf13bYBKLuOxX9k= -----END CERTIFICATE-----Generated at Sun Mar 1 19:02:04 2026 by rpki-client