$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87d83197-191d-308a-91d4-ceece4ae41b4.roa File: 87d83197-191d-308a-91d4-ceece4ae41b4.roa (raw, json) Hash identifier: 2a5qO+BNFU9tR7tsBjnzZ+1APCn4HMz6piTJQA4PmJ0= Subject key identifier: 3C:77:13:B8:B5:01:C4:22:A6:2A:D7:82:B0:CD:E7:FE:75:22:83:D7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE57BC738298422C1E556840 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87d83197-191d-308a-91d4-ceece4ae41b4.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33287 IP address blocks: 69.253.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:bc:73:82:98:42:2c:1e:55:68:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=558cbe37-26d9-4217-b0e9-6490f921fb4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:36:be:db:5e:23:31:fe:6a:ba:db:c8:be:6e: 8a:fe:a8:0f:ea:bc:36:be:de:37:a4:9c:90:21:67: f2:a1:49:96:64:50:12:88:4b:e5:b4:b3:4b:80:ac: 18:4f:c3:1f:b8:5e:49:0c:29:1b:aa:a1:df:3d:91: 63:c6:4b:42:ab:69:9b:dc:db:1a:5f:1b:23:21:d9: f3:f5:18:b7:06:d0:54:c4:af:5e:fb:36:86:de:b9: e1:95:f2:99:89:af:2a:62:ae:56:a6:e2:86:70:6b: d6:94:45:4e:bb:8d:19:5f:81:96:f3:a3:12:30:48: a2:23:d8:c2:18:45:04:dc:d4:81:c2:f7:4d:b5:ce: c8:98:a1:fc:fd:b9:68:ee:12:1c:66:6e:7e:31:64: 38:9e:c3:05:5d:15:55:cd:b3:5c:2e:8f:3e:33:c5: 12:c3:65:a6:44:29:20:45:22:a6:cb:6d:b7:a0:76: ad:4f:b9:75:9d:92:1c:9e:9d:30:eb:ac:9b:21:e4: ef:07:56:14:48:02:0b:73:88:47:26:59:33:d3:6d: 0d:a8:a9:05:0d:d7:bf:01:47:49:fd:3d:1d:1c:f3: 94:3f:89:60:92:2e:9c:b9:fa:51:e5:cf:f5:8d:99: f7:f1:32:a9:ba:52:6a:c0:9f:9e:5d:52:0f:bf:20: 75:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:77:13:B8:B5:01:C4:22:A6:2A:D7:82:B0:CD:E7:FE:75:22:83:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87d83197-191d-308a-91d4-ceece4ae41b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 69.253.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:94:0d:73:16:92:11:71:da:e7:14:dc:af:9a:81:22:cd:7f: f3:5d:bb:be:91:d1:81:03:fe:1d:da:45:55:29:e3:f9:4d:f0: c6:3b:b1:a5:d1:5c:25:26:46:9c:15:9c:04:e8:01:10:68:40: 87:4e:7a:d0:00:3f:54:5f:fa:40:a4:44:f7:82:bd:b2:a4:35: bb:45:63:36:f6:a5:4e:7b:36:c2:52:eb:6a:75:f5:fc:b5:dd: 99:22:f8:2b:9c:76:67:4e:81:b5:7f:18:37:47:81:4c:ca:f9: 26:bf:15:52:bf:5a:06:4e:20:5a:64:63:ff:2d:71:c1:f9:07: 52:14:9b:d6:b4:2b:98:18:67:06:67:bd:8d:a2:6a:17:13:cb: 5d:f9:09:a7:57:8a:dc:11:85:6c:d7:4f:57:9f:ca:41:65:a0: c2:b7:0d:e9:9f:2c:6c:ec:a0:30:a6:dd:c3:cc:c3:d0:41:dd: d8:4f:ef:0e:a7:8b:7f:83:95:51:ce:13:98:0a:d5:ad:01:41: 27:66:e1:2e:90:d2:c3:11:8c:17:72:6d:29:68:ca:4d:db:e9: d3:0a:83:c8:76:27:48:d7:67:39:60:85:c6:50:50:a9:b6:c1: 07:f7:5b:39:66:71:32:9d:68:01:c6:9a:2e:00:da:1d:da:a6: 11:df:c4:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuV7xzgphCLB5VaEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NTU4Y2JlMzctMjZkOS00MjE3LWIwZTktNjQ5MGY5MjFmYjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDa+214jMf5qutvIvm6K/qgP6rw2vt43pJyQ IWfyoUmWZFASiEvltLNLgKwYT8MfuF5JDCkbqqHfPZFjxktCq2mb3NsaXxsjIdnz 9Ri3BtBUxK9e+zaG3rnhlfKZia8qYq5WpuKGcGvWlEVOu40ZX4GW86MSMEiiI9jC GEUE3NSBwvdNtc7ImKH8/blo7hIcZm5+MWQ4nsMFXRVVzbNcLo8+M8USw2WmRCkg RSKmy223oHatT7l1nZIcnp0w66ybIeTvB1YUSAILc4hHJlkz020NqKkFDde/AUdJ /T0dHPOUP4lgki6cufpR5c/1jZn38TKpulJqwJ+eXVIPvyB1BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDx3E7i1AcQipirXgrDN5/51IoPXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODdkODMxOTctMTkxZC0z MDhhLTkxZDQtY2VlY2U0YWU0MWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRf3YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaUDXMWkhFx2ucU3K+agSLNf/Ndu76R0YED/h3aRVUp4/lN8MY7saXR XCUmRpwVnAToARBoQIdOetAAP1Rf+kCkRPeCvbKkNbtFYzb2pU57NsJS62p19fy1 3Zki+CucdmdOgbV/GDdHgUzK+Sa/FVK/WgZOIFpkY/8tccH5B1IUm9a0K5gYZwZn vY2iahcTy135CadXitwRhWzXT1efykFloMK3DemfLGzsoDCm3cPMw9BB3dhP7w6n i3+DlVHOE5gK1a0BQSdm4S6Q0sMRjBdybSloyk3b6dMKg8h2J0jXZzlghcZQUKm2 wQf3WzlmcTKdaAHGmi4A2h3aphHfxMU= -----END CERTIFICATE-----Generated at Mon Mar 2 02:35:11 2026 by rpki-client