$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/959c4230-9117-3d7a-b837-34befb0b8236.roa File: 959c4230-9117-3d7a-b837-34befb0b8236.roa (raw, json) Hash identifier: MUbyc8a8hxIghpiFRR8D2LP3/soMm/JeG3CuTBU34as= Subject key identifier: 8A:17:87:51:F3:7F:04:E2:3A:C0:61:B1:19:76:97:D0:1B:30:16:2F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5AD6F74C40629882B12A00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/959c4230-9117-3d7a-b837-34befb0b8236.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33287 IP address blocks: 71.225.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5a:d6:f7:4c:40:62:98:82:b1:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=a90b1b27-d669-4921-b6dd-18053bcc553b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4c:88:2c:2c:60:01:f8:e8:5b:d0:f5:f2:46: 8a:94:ca:11:fc:0c:b7:52:33:08:19:72:42:57:a1: a2:1a:35:47:89:a4:61:65:32:d4:75:c1:73:df:13: a7:da:a6:e8:30:c6:59:00:ab:60:40:12:4e:45:f8: 93:67:a8:ee:ef:79:0a:b2:47:61:85:40:41:a5:32: 28:fd:af:f2:20:cd:8c:43:92:00:40:23:8f:8f:ed: e0:27:63:f1:e6:cb:f6:fb:92:33:cc:8f:f8:9a:eb: ad:ea:68:59:c0:8d:eb:2e:d4:a8:46:71:9c:0a:04: bf:c9:16:ea:ae:f7:20:6b:a3:73:69:b3:7c:34:a3: c5:63:c7:cc:9e:35:a8:2d:35:99:ca:e1:72:f0:3c: d5:96:1b:5f:28:14:14:af:36:ae:6a:65:b8:0c:7c: 1c:02:67:95:38:2d:e9:ae:49:ba:c3:d9:ce:06:29: 79:38:39:17:1e:b1:33:22:7a:59:36:8c:97:f2:81: 30:36:6a:72:f5:25:9a:8b:19:85:80:f4:24:31:db: 24:fa:39:6d:a4:15:10:d2:52:48:d1:85:6c:f3:3b: 85:80:d0:bd:61:09:d4:0e:3c:fb:19:35:fc:1f:a3: d7:72:08:75:5c:8c:ba:5a:04:eb:f6:f4:82:26:b5: 4a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:17:87:51:F3:7F:04:E2:3A:C0:61:B1:19:76:97:D0:1B:30:16:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/959c4230-9117-3d7a-b837-34befb0b8236.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.225.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:1f:03:33:23:25:7a:7b:8c:91:62:8f:01:85:d3:8e:aa:0c: 04:21:7f:73:ca:fb:05:14:b8:2c:1f:3b:2f:27:96:df:fa:62: 92:54:56:f1:22:ce:71:2f:c5:b8:8e:27:f0:9d:ba:72:53:6b: 0f:83:d1:c3:61:60:89:d4:8d:3e:9b:f5:cd:3b:e2:b2:d4:bd: 16:6d:0c:3f:38:b8:16:db:50:44:49:e8:92:5c:42:dc:36:07: d6:a4:8c:d9:77:1d:02:5c:e0:e8:ba:2a:ef:20:4b:ef:0f:a9: fa:8a:6e:5a:c0:16:2b:d8:2b:3f:b3:bd:a4:4b:22:ad:e4:6c: 2a:b8:42:7e:6c:9d:db:75:37:92:94:f4:e0:b6:39:e3:9d:38: ba:fa:06:c5:3d:e0:d8:61:6a:58:9d:97:5e:55:ba:6f:e1:17: c2:79:98:cf:be:3a:92:ef:f2:ac:c3:3d:41:5f:d5:5f:27:ee: b3:37:2b:20:2e:13:83:d6:00:c3:d1:9a:2d:0f:99:b3:5d:51: 7b:8c:03:81:ec:3f:f8:87:ca:cd:b9:d9:01:ea:ef:1e:32:f8: 81:79:bf:22:11:c0:c5:22:d1:89:69:73:02:2e:a2:8e:59:b7: e4:62:c6:03:f6:10:33:5a:de:f8:fd:16:f3:f9:27:d4:44:38: 36:33:43:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWtb3TEBimIKxKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YTkwYjFiMjctZDY2OS00OTIxLWI2ZGQtMTgwNTNiY2M1NTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0yILCxgAfjoW9D18kaKlMoR/Ay3UjMIGXJC V6GiGjVHiaRhZTLUdcFz3xOn2qboMMZZAKtgQBJORfiTZ6ju73kKskdhhUBBpTIo /a/yIM2MQ5IAQCOPj+3gJ2Px5sv2+5IzzI/4muut6mhZwI3rLtSoRnGcCgS/yRbq rvcga6NzabN8NKPFY8fMnjWoLTWZyuFy8DzVlhtfKBQUrzauamW4DHwcAmeVOC3p rkm6w9nOBil5ODkXHrEzInpZNoyX8oEwNmpy9SWaixmFgPQkMdsk+jltpBUQ0lJI 0YVs8zuFgNC9YQnUDjz7GTX8H6PXcgh1XIy6WgTr9vSCJrVKlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIoXh1HzfwTiOsBhsRl2l9AbMBYvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTU5YzQyMzAtOTExNy0z ZDdhLWI4MzctMzRiZWZiMGI4MjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAR+HHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8fAzMjJXp7jJFijwGF046qDAQhf3PK+wUUuCwfOy8nlt/6YpJUVvEi znEvxbiOJ/CdunJTaw+D0cNhYInUjT6b9c074rLUvRZtDD84uBbbUERJ6JJcQtw2 B9akjNl3HQJc4Oi6Ku8gS+8PqfqKblrAFivYKz+zvaRLIq3kbCq4Qn5sndt1N5KU 9OC2OeOdOLr6BsU94Nhhalidl15Vum/hF8J5mM++OpLv8qzDPUFf1V8n7rM3KyAu E4PWAMPRmi0PmbNdUXuMA4HsP/iHys252QHq7x4y+IF5vyIRwMUi0YlpcwIuoo5Z t+RixgP2EDNa3vj9FvP5J9REODYzQ64= -----END CERTIFICATE-----Generated at Sun Mar 1 18:58:25 2026 by rpki-client