$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9c97f6b7-d55c-3c7c-95eb-7cfe876b1301.roa File: 9c97f6b7-d55c-3c7c-95eb-7cfe876b1301.roa (raw, json) Hash identifier: Sij4StNFI84zoXf3kAQpOZGHXRDLqqgw6tR7KWH1RhQ= Subject key identifier: C7:75:2B:C1:F4:8C:4C:10:9C:D6:A7:30:E1:E9:2D:FD:7C:4B:72:B0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5D61035585BB74FDC70D00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9c97f6b7-d55c-3c7c-95eb-7cfe876b1301.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 71.202.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5d:61:03:55:85:bb:74:fd:c7:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=4315097d-012a-4ce7-b5b1-d19821b0ec1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:05:86:98:e6:0e:72:02:72:d9:bd:3c:c5:1b: 26:ca:a3:a1:a3:44:07:ae:1e:f6:23:c9:e6:1d:88: fc:08:57:46:4e:4c:e4:e9:49:de:a6:96:d1:d8:06: 58:40:6f:c6:92:28:48:31:cb:2b:da:43:43:b6:03: 3e:d5:46:53:0f:b1:6e:a8:e0:9c:49:4d:6b:bd:56: 0f:45:fe:2a:c7:cb:a8:e3:ed:2f:6f:6e:26:52:24: 2a:38:78:c3:2b:83:90:1f:1b:65:e3:0d:de:c0:47: 53:50:66:cc:07:64:e0:44:c6:cc:ce:8e:71:15:28: 10:2f:1e:cd:72:54:11:2c:94:a0:26:5e:d0:f5:0c: bd:c9:24:00:6c:2e:26:7d:cf:97:68:4f:86:88:77: d1:4a:45:37:00:34:14:aa:38:54:2f:2e:f8:ab:5c: 9c:dc:80:9d:05:7e:ef:cb:b0:34:91:12:da:95:44: 95:97:ec:de:44:45:0b:20:e8:5b:12:39:30:f7:af: 65:87:81:14:b0:cc:08:7b:3f:b9:c0:d4:80:70:62: 77:40:94:a0:eb:9b:67:d4:fa:86:0b:8c:2d:42:99: 73:d5:09:e0:0c:81:d5:8c:c7:3a:bd:04:8a:9e:8e: af:e6:b2:7a:05:72:14:09:f2:6f:e6:2f:49:21:39: 1f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:75:2B:C1:F4:8C:4C:10:9C:D6:A7:30:E1:E9:2D:FD:7C:4B:72:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9c97f6b7-d55c-3c7c-95eb-7cfe876b1301.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.202.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:b5:fc:b9:4c:0b:ed:27:d4:1f:b4:d9:e1:d6:bb:a1:67:32: cc:d8:20:61:4f:91:23:37:10:6d:23:e6:e4:7f:3e:b3:a1:71: b2:48:80:25:3f:40:a7:d7:37:46:1d:e9:87:0f:0a:21:b7:e2: d4:79:f2:02:2c:9f:57:49:f4:bc:23:41:d1:99:2d:4c:89:95: 1c:13:d1:dc:30:9e:1e:bd:23:00:70:1c:d9:f6:44:30:16:d0: 34:65:e0:71:6d:c3:35:c8:75:1c:38:5b:9e:6f:77:39:1f:2b: ed:5f:2c:99:98:c9:c7:d3:a3:a4:6f:1b:80:92:d7:bd:ac:42: 55:1a:8b:f8:0e:28:5e:a2:20:25:2b:ff:95:28:5a:65:90:b2: 3d:24:23:e8:71:7f:68:a0:2f:35:7a:38:86:82:e4:f0:50:6f: a6:02:18:e5:2a:0d:fd:ba:dd:0d:08:a4:74:82:23:4c:90:12: f4:dc:a6:c7:f1:63:06:72:49:2d:88:27:78:cc:91:d1:59:18: 8f:d5:e9:62:07:de:05:68:8a:06:82:6f:aa:30:fa:e8:3a:02: c6:af:e0:6c:f7:fd:94:31:07:74:34:4c:54:98:94:da:f1:22: 50:2c:ee:c2:cb:3a:a7:9c:4d:09:63:40:6f:5f:8f:d9:01:ad: 59:41:57:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXWEDVYW7dP3HDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NDMxNTA5N2QtMDEyYS00Y2U3LWI1YjEtZDE5ODIxYjBlYzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQWGmOYOcgJy2b08xRsmyqOho0QHrh72I8nm HYj8CFdGTkzk6UneppbR2AZYQG/GkihIMcsr2kNDtgM+1UZTD7FuqOCcSU1rvVYP Rf4qx8uo4+0vb24mUiQqOHjDK4OQHxtl4w3ewEdTUGbMB2TgRMbMzo5xFSgQLx7N clQRLJSgJl7Q9Qy9ySQAbC4mfc+XaE+GiHfRSkU3ADQUqjhULy74q1yc3ICdBX7v y7A0kRLalUSVl+zeREULIOhbEjkw969lh4EUsMwIez+5wNSAcGJ3QJSg65tn1PqG C4wtQplz1QngDIHVjMc6vQSKno6v5rJ6BXIUCfJv5i9JITkfqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMd1K8H0jEwQnNanMOHpLf18S3KwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWM5N2Y2YjctZDU1Yy0z YzdjLTk1ZWItN2NmZTg3NmIxMzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR8rMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIu1/LlMC+0n1B+02eHWu6FnMszYIGFPkSM3EG0j5uR/PrOhcbJIgCU/ QKfXN0Yd6YcPCiG34tR58gIsn1dJ9LwjQdGZLUyJlRwT0dwwnh69IwBwHNn2RDAW 0DRl4HFtwzXIdRw4W55vdzkfK+1fLJmYycfTo6RvG4CS172sQlUai/gOKF6iICUr /5UoWmWQsj0kI+hxf2igLzV6OIaC5PBQb6YCGOUqDf263Q0IpHSCI0yQEvTcpsfx YwZySS2IJ3jMkdFZGI/V6WIH3gVoigaCb6ow+ug6Asav4Gz3/ZQxB3Q0TFSYlNrx IlAs7sLLOqecTQljQG9fj9kBrVlBV/o= -----END CERTIFICATE-----Generated at Sun Mar 1 20:41:30 2026 by rpki-client