$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9af3301e-2087-3865-8e61-5daa25aa6117.roa File: 9af3301e-2087-3865-8e61-5daa25aa6117.roa (raw, json) Hash identifier: Kmfj25kAfjAG1jV8M6kT43uv/fCqcg0jN93FwvHSKh0= Subject key identifier: 32:E3:F3:A5:DB:58:BB:00:84:13:8A:26:F5:F6:4B:62:3C:59:CA:30 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5927D4130B2F1913764A00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9af3301e-2087-3865-8e61-5daa25aa6117.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33660 IP address blocks: 71.199.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:59:27:d4:13:0b:2f:19:13:76:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=5dcec1b0-5c83-4d6d-9124-a0ace3cd0a80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ed:21:ef:a2:ce:0b:6b:e0:1f:b6:bf:82:67: 73:8e:06:e2:cc:c8:fb:ef:2a:19:ef:51:0b:90:a3: 80:3d:eb:66:af:8d:c3:20:7e:c2:57:24:e3:36:2b: 61:6f:90:06:d4:f4:a1:af:d9:00:47:96:04:a2:b8: 42:f5:74:72:58:27:de:15:0f:1a:49:82:ea:63:b2: fa:8a:e6:d9:6a:14:a5:31:63:89:8d:c6:60:c2:ad: 39:77:7a:4a:d6:f6:00:ee:4d:e6:33:92:18:12:33: 34:22:44:da:ca:7a:ab:91:87:59:2d:29:88:ec:3d: f5:11:d3:dd:04:fd:51:01:a3:de:96:3e:5e:cc:c4: 2e:c6:56:03:bb:3c:09:03:a4:ee:61:ac:1d:9a:99: ef:d7:f8:7d:d2:b1:76:ae:8f:c3:cc:c9:30:9d:ee: 02:f0:04:1f:ee:26:28:02:ce:a1:e2:1e:f0:ed:54: 8d:e8:7a:6e:da:1f:ca:ac:06:43:1b:47:8d:8b:11: 59:40:3c:f3:a2:0c:3f:c5:3f:16:b0:f7:99:d1:0c: e6:3f:11:79:61:e1:af:41:90:0b:be:2f:43:8d:f3: df:5d:c5:f1:68:94:50:e2:5a:fb:d4:19:bc:a3:b2: b0:ad:cf:fc:a2:b7:c6:89:a7:bf:d1:4c:39:d3:b9: bb:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:E3:F3:A5:DB:58:BB:00:84:13:8A:26:F5:F6:4B:62:3C:59:CA:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9af3301e-2087-3865-8e61-5daa25aa6117.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.199.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:83:dd:5f:49:47:00:b1:a3:87:26:8e:ec:04:14:e0:d6:50: 5c:a5:94:4f:ee:86:ff:88:e2:3f:f1:f5:b7:e9:b9:e4:e8:de: dc:a8:c2:6c:02:9c:9f:cd:95:5b:d6:85:88:fd:6f:b5:04:9b: 9b:60:82:7a:e2:32:37:d5:fa:02:c8:d2:42:a5:f1:e5:ca:bd: 32:ae:64:aa:4b:5c:e4:95:1d:04:12:84:73:d9:fe:8d:5a:7d: 70:f5:68:bd:41:47:dc:f8:e1:38:04:d0:6c:fe:95:c4:a7:a0: ff:86:dc:75:35:cd:09:1e:ac:87:c6:28:33:f2:3f:2f:b7:49: c7:02:b9:fb:d6:6b:fb:5d:53:89:e3:2e:60:02:4b:43:07:37: b0:6f:b5:4f:6d:06:05:1e:d7:29:e3:c2:50:f9:0e:60:1b:07: b9:6a:7e:10:19:b4:9a:50:03:87:78:3d:d6:c3:ba:73:95:21: e1:93:fc:0e:0a:25:e3:a0:60:4d:2e:5a:1f:80:44:d3:bf:35: b4:2d:41:5c:1e:97:33:98:5f:cf:ea:7f:07:ba:2c:c1:48:b7: 29:f7:cf:ba:26:45:8e:e4:a3:a1:ba:a2:30:ed:e9:d4:2d:1c: e3:c1:88:51:3d:e8:77:94:78:d9:f2:20:1e:66:b0:01:1d:80: fc:56:e8:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWSfUEwsvGRN2SgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NWRjZWMxYjAtNWM4My00ZDZkLTkxMjQtYTBhY2UzY2QwYTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoO0h76LOC2vgH7a/gmdzjgbizMj77yoZ71EL kKOAPetmr43DIH7CVyTjNithb5AG1PShr9kAR5YEorhC9XRyWCfeFQ8aSYLqY7L6 iubZahSlMWOJjcZgwq05d3pK1vYA7k3mM5IYEjM0IkTaynqrkYdZLSmI7D31EdPd BP1RAaPelj5ezMQuxlYDuzwJA6TuYawdmpnv1/h90rF2ro/DzMkwne4C8AQf7iYo As6h4h7w7VSN6Hpu2h/KrAZDG0eNixFZQDzzogw/xT8WsPeZ0QzmPxF5YeGvQZAL vi9DjfPfXcXxaJRQ4lr71Bm8o7Kwrc/8orfGiae/0Uw507m7uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLj86XbWLsAhBOKJvX2S2I8WcowMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWFmMzMwMWUtMjA4Ny0z ODY1LThlNjEtNWRhYTI1YWE2MTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR8csMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqD3V9JRwCxo4cmjuwEFODWUFyllE/uhv+I4j/x9bfpueTo3tyowmwC nJ/NlVvWhYj9b7UEm5tggnriMjfV+gLI0kKl8eXKvTKuZKpLXOSVHQQShHPZ/o1a fXD1aL1BR9z44TgE0Gz+lcSnoP+G3HU1zQkerIfGKDPyPy+3SccCufvWa/tdU4nj LmACS0MHN7BvtU9tBgUe1ynjwlD5DmAbB7lqfhAZtJpQA4d4PdbDunOVIeGT/A4K JeOgYE0uWh+ARNO/NbQtQVwelzOYX8/qfwe6LMFItyn3z7omRY7ko6G6ojDt6dQt HOPBiFE96HeUeNnyIB5msAEdgPxW6Fk= -----END CERTIFICATE-----Generated at Mon Mar 2 01:16:58 2026 by rpki-client