$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88e7f1a1-f6ea-3108-b01d-b1bb78399589.roa File: 88e7f1a1-f6ea-3108-b01d-b1bb78399589.roa (raw, json) Hash identifier: PUpmuLYRpdq54i9CrLyxTsx20jTS2ysVdBMRGoVC5P4= Subject key identifier: C4:0D:55:54:04:A6:22:FD:14:5B:7F:A3:D1:FE:A8:93:47:56:14:87 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5AD7BFE6CDE53DC04F4200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88e7f1a1-f6ea-3108-b01d-b1bb78399589.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33287 IP address blocks: 71.225.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5a:d7:bf:e6:cd:e5:3d:c0:4f:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=e47b0949-0314-4264-9bbb-c152976d4cbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9f:9a:64:d1:81:e3:6a:54:21:c0:7b:bc:7b: e0:69:f7:32:ba:d0:50:be:ae:3e:94:36:00:70:7f: 61:60:c5:61:6f:65:42:00:58:8d:89:d6:14:4c:98: fc:a7:57:04:d6:77:bd:5a:ea:df:70:27:48:f8:e4: 9e:5f:bc:7f:c9:51:92:81:b1:9e:9e:08:b7:29:a6: db:7b:10:c8:3b:83:2e:e0:fc:b3:11:53:70:85:22: 0a:b3:30:ed:22:c6:9c:21:a5:a3:69:88:f0:39:b5: e9:74:df:92:d5:43:e6:37:7e:cc:25:58:cb:f8:8a: 7d:ee:4b:9e:94:7e:3e:6f:8c:7f:79:35:1f:d3:dd: 1e:13:2a:1d:d5:54:bd:2e:e6:b5:89:9b:23:82:17: 85:60:b5:47:f1:92:e2:b0:bc:e3:56:51:b9:fa:44: 26:b7:e8:d1:ed:77:f9:b3:3d:4c:0f:bb:18:01:69: 2f:e5:2d:e4:d0:88:40:72:c0:54:0d:9d:5c:4e:fd: 4f:59:bf:b7:c0:a0:e5:b3:74:e6:d3:df:00:5b:ae: 5f:b6:60:ff:cf:6b:09:99:85:bf:0e:37:b8:d4:4f: f9:af:b8:34:8c:9c:56:13:b7:87:eb:82:c7:2c:b5: 58:5a:80:6b:77:11:24:bb:94:94:86:ba:a6:75:0a: 04:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:0D:55:54:04:A6:22:FD:14:5B:7F:A3:D1:FE:A8:93:47:56:14:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88e7f1a1-f6ea-3108-b01d-b1bb78399589.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.225.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:20:0c:4f:2f:27:a7:5d:f4:3d:3d:a8:46:23:a5:93:ae:7b: a0:fc:d6:72:a3:ad:44:cc:9a:96:ec:45:48:91:9d:81:f6:ef: b2:a0:cf:2c:99:67:4a:5e:62:24:ab:a7:46:70:58:b0:d0:79: 15:eb:06:ce:38:1d:f0:1d:22:70:ed:e7:15:f1:38:b3:41:2f: 71:db:9a:6f:00:bc:7e:41:db:84:5b:b0:af:30:99:2b:bc:e1: b5:6f:66:4f:6a:c0:b6:6b:f2:55:00:8e:3a:91:11:2d:4d:6c: 17:b0:ae:44:03:07:41:c9:14:d0:07:c2:ed:05:ca:82:4a:c9: ab:9b:12:b9:e8:e6:21:54:2a:e6:54:c9:e6:d4:7a:31:3d:f5: fb:8c:61:c8:82:33:31:33:43:c3:f5:8c:48:ee:93:d8:d4:84: 2e:30:5f:97:66:31:23:71:8b:f8:0d:66:6f:1c:87:e5:1d:8d: e9:fd:69:52:ce:91:60:f4:ed:62:4c:52:ef:be:7e:10:ca:c5: 9b:2d:be:c7:93:5e:3f:4c:32:bf:af:7b:09:e1:d9:8f:1d:1e: a5:fb:19:44:39:f2:f8:98:85:1f:a2:96:1e:a0:e4:bf:f2:99: 19:42:9a:60:29:39:69:04:10:a5:26:05:4a:04:64:c7:65:86: aa:58:77:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWte/5s3lPcBPQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZTQ3YjA5NDktMDMxNC00MjY0LTliYmItYzE1Mjk3NmQ0Y2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJ+aZNGB42pUIcB7vHvgafcyutBQvq4+lDYA cH9hYMVhb2VCAFiNidYUTJj8p1cE1ne9WurfcCdI+OSeX7x/yVGSgbGengi3Kabb exDIO4Mu4PyzEVNwhSIKszDtIsacIaWjaYjwObXpdN+S1UPmN37MJVjL+Ip97kue lH4+b4x/eTUf090eEyod1VS9Lua1iZsjgheFYLVH8ZLisLzjVlG5+kQmt+jR7Xf5 sz1MD7sYAWkv5S3k0IhAcsBUDZ1cTv1PWb+3wKDls3Tm098AW65ftmD/z2sJmYW/ Dje41E/5r7g0jJxWE7eH64LHLLVYWoBrdxEku5SUhrqmdQoEKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQNVVQEpiL9FFt/o9H+qJNHVhSHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODhlN2YxYTEtZjZlYS0z MTA4LWIwMWQtYjFiYjc4Mzk5NTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR+HgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJUgDE8vJ6dd9D09qEYjpZOue6D81nKjrUTMmpbsRUiRnYH277KgzyyZ Z0peYiSrp0ZwWLDQeRXrBs44HfAdInDt5xXxOLNBL3Hbmm8AvH5B24RbsK8wmSu8 4bVvZk9qwLZr8lUAjjqRES1NbBewrkQDB0HJFNAHwu0FyoJKyaubErno5iFUKuZU yebUejE99fuMYciCMzEzQ8P1jEjuk9jUhC4wX5dmMSNxi/gNZm8ch+Udjen9aVLO kWD07WJMUu++fhDKxZstvseTXj9MMr+vewnh2Y8dHqX7GUQ58viYhR+ilh6g5L/y mRlCmmApOWkEEKUmBUoEZMdlhqpYdx4= -----END CERTIFICATE-----Generated at Sun Mar 1 21:02:33 2026 by rpki-client