$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/943bcbc0-b8a5-3dcb-8ba3-818ff225fba4.roa File: 943bcbc0-b8a5-3dcb-8ba3-818ff225fba4.roa (raw, json) Hash identifier: vcAzRuUUI6OB4E+OT/zTZttzkwx5ur9dRSTuT5c5Nk8= Subject key identifier: D3:B5:28:C9:20:04:D4:A9:8F:8E:AA:22:37:2A:55:66:61:0E:2E:69 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE582812B2463F24F91179E0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/943bcbc0-b8a5-3dcb-8ba3-818ff225fba4.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 71.194.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:28:12:b2:46:3f:24:f9:11:79:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=86649f66-6abc-4698-8375-50233ffc6acf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c4:7f:b4:b6:78:2c:a4:d5:6e:25:8d:d7:bc: 3a:07:3f:eb:11:15:2e:6c:38:b3:1d:2c:a9:99:94: 53:f6:7b:fb:19:f9:94:6f:ad:86:0d:0d:eb:4b:35: b9:d1:00:83:03:41:27:83:df:68:f0:db:f0:8e:c4: 77:b4:29:1d:ab:b1:79:19:2b:f6:bf:ea:67:f6:b9: 14:89:32:62:a0:1e:24:7f:df:0f:af:e9:7b:92:d4: b0:c9:45:36:c2:2d:64:1e:86:1a:34:98:d5:49:90: 64:1f:1e:94:10:09:29:48:2b:5d:3d:7e:ed:ea:da: 52:59:1e:77:6e:91:c1:19:6a:10:a7:90:5b:82:2c: 0b:b2:d5:80:10:2d:ae:d3:71:ab:1d:f2:bf:08:e9: b9:b3:05:67:d3:21:c2:83:77:67:6b:9c:63:3c:57: 0c:52:c3:1e:34:c2:b8:dc:f4:fc:bb:19:c8:47:1a: a7:44:ff:66:11:77:8f:cb:e4:55:57:83:68:10:fa: d0:c6:40:0e:e4:9f:70:e4:77:0e:4f:44:89:c0:20: 31:81:c7:87:9a:78:95:9f:cc:bc:7e:fd:92:01:61: ed:05:d4:32:42:c3:5a:8f:4f:c0:42:89:7f:25:c1: b3:20:dd:9a:8d:d7:64:02:f9:88:f5:33:37:e8:46: 31:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:B5:28:C9:20:04:D4:A9:8F:8E:AA:22:37:2A:55:66:61:0E:2E:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/943bcbc0-b8a5-3dcb-8ba3-818ff225fba4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.194.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:90:80:4f:ad:52:cc:b8:31:49:6d:60:e1:fb:6b:20:c9:21: 7f:cf:53:7b:64:d0:91:7a:db:30:71:cb:87:e3:c0:d7:79:85: 0b:a3:1b:0e:df:27:1c:49:f0:c3:81:94:86:53:11:32:ea:26: 7b:dd:9b:c6:cb:69:04:d9:0d:36:b4:9a:52:17:29:d8:ef:62: bd:b7:4c:fd:9f:fd:62:96:20:b3:e1:47:7e:09:4f:3b:76:13: 2c:82:58:7f:78:35:25:2f:79:4d:c6:5f:78:4a:d0:3c:39:14: ac:64:7f:f6:71:dd:8d:0a:c7:51:c1:82:5c:6c:93:03:ec:14: af:58:2a:11:fa:85:2d:1d:41:91:3f:1a:f9:5e:c6:74:6c:fd: 57:8d:bf:2e:46:47:95:bf:02:8a:37:9a:78:ea:bc:82:d3:8e: 20:ee:a2:39:8b:05:0d:0d:ec:5f:39:2a:66:8d:b4:5c:f0:e3: b5:74:7c:46:41:1a:7f:f3:d8:34:1d:07:99:db:cc:3f:38:76: 3b:99:ea:0a:37:fa:be:a5:61:66:df:a9:85:9f:0f:e8:52:5c: 9b:2b:30:3d:2a:3a:9d:0e:48:d4:c9:72:a2:22:0d:72:c0:73: eb:2e:5b:7d:dd:ea:2d:d7:11:95:32:91:8d:27:13:1a:38:fb: 95:3e:70:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWCgSskY/JPkReeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ODY2NDlmNjYtNmFiYy00Njk4LTgzNzUtNTAyMzNmZmM2YWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMR/tLZ4LKTVbiWN17w6Bz/rERUubDizHSyp mZRT9nv7GfmUb62GDQ3rSzW50QCDA0Eng99o8NvwjsR3tCkdq7F5GSv2v+pn9rkU iTJioB4kf98Pr+l7ktSwyUU2wi1kHoYaNJjVSZBkHx6UEAkpSCtdPX7t6tpSWR53 bpHBGWoQp5BbgiwLstWAEC2u03GrHfK/COm5swVn0yHCg3dna5xjPFcMUsMeNMK4 3PT8uxnIRxqnRP9mEXePy+RVV4NoEPrQxkAO5J9w5HcOT0SJwCAxgceHmniVn8y8 fv2SAWHtBdQyQsNaj0/AQol/JcGzIN2ajddkAvmI9TM36EYx/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNO1KMkgBNSpj46qIjcqVWZhDi5pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTQzYmNiYzAtYjhhNS0z ZGNiLThiYTMtODE4ZmYyMjVmYmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR8JsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADaQgE+tUsy4MUltYOH7ayDJIX/PU3tk0JF62zBxy4fjwNd5hQujGw7f JxxJ8MOBlIZTETLqJnvdm8bLaQTZDTa0mlIXKdjvYr23TP2f/WKWILPhR34JTzt2 EyyCWH94NSUveU3GX3hK0Dw5FKxkf/Zx3Y0Kx1HBglxskwPsFK9YKhH6hS0dQZE/ GvlexnRs/VeNvy5GR5W/Aoo3mnjqvILTjiDuojmLBQ0N7F85KmaNtFzw47V0fEZB Gn/z2DQdB5nbzD84djuZ6go3+r6lYWbfqYWfD+hSXJsrMD0qOp0OSNTJcqIiDXLA c+suW33d6i3XEZUykY0nExo4+5U+cIo= -----END CERTIFICATE-----Generated at Sun Mar 1 22:47:09 2026 by rpki-client