$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f5edf48-b99c-3a07-9d88-e0d11099ef77.roa File: 9f5edf48-b99c-3a07-9d88-e0d11099ef77.roa (raw, json) Hash identifier: biCMOtRoSvRiIYaurxGwQMCzGvvdUfZT+pnHrrRmNvY= Subject key identifier: 5F:4A:5A:F5:0B:73:5B:94:0D:6A:08:B6:B4:FD:36:7A:6F:81:46:05 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE58CAE00104853A7D2FDD00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f5edf48-b99c-3a07-9d88-e0d11099ef77.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 71.204.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:ca:e0:01:04:85:3a:7d:2f:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=2b075cd5-fefc-4314-9f1e-ffce05d8746d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a3:34:33:af:27:3e:99:2e:fc:ec:60:8f:f5: 0a:a0:5b:8a:6e:e6:87:82:21:b7:9a:0f:46:4c:09: ad:86:31:8d:53:0d:9f:db:3e:2b:93:86:48:6e:bb: 95:9f:c9:34:37:10:27:95:13:d8:1f:de:1c:94:ce: 5d:66:d2:42:0f:01:53:31:2e:f3:1c:7b:3c:c3:1c: 7f:13:90:34:1d:f7:dd:72:a3:13:0a:13:4a:a6:40: 86:68:40:58:78:a1:bf:32:d3:91:ae:e6:06:8a:01: 03:3d:5c:d8:18:b0:93:98:bc:32:3a:0e:b9:07:5d: f0:15:5f:96:7b:8e:87:69:d6:46:43:1d:c6:ba:09: f3:fe:39:61:6b:9b:f9:4b:f6:b2:1e:ea:5b:23:05: ff:28:df:68:46:fb:cd:0e:45:67:69:66:57:07:4a: 2b:65:0b:05:c2:38:92:c7:f5:4e:d7:b3:a5:08:92: 8b:a8:c9:34:b9:a6:4e:ba:fc:66:4e:c5:91:b0:20: 75:10:c5:31:be:6f:74:02:f3:81:be:6c:f7:a9:aa: ad:88:08:62:4c:0c:20:ce:96:70:6d:6c:db:ad:13: 11:37:1c:a4:ed:e4:59:7b:ee:63:fa:a3:44:5d:fa: 7d:96:92:a1:07:95:47:c0:50:ca:57:2c:91:d5:3e: ad:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:4A:5A:F5:0B:73:5B:94:0D:6A:08:B6:B4:FD:36:7A:6F:81:46:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f5edf48-b99c-3a07-9d88-e0d11099ef77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.204.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d3:11:b1:6b:7b:06:31:68:da:94:42:3d:e0:be:34:84:77:ac: ab:86:be:67:de:56:14:bc:e8:38:00:62:51:6e:8b:54:08:31: c8:7e:ce:5d:73:d1:b3:ec:b3:63:8a:7c:42:74:27:a6:2c:1f: af:74:5a:da:fe:4c:60:0b:f5:51:c8:3a:28:fd:f6:40:e7:af: 03:37:2f:66:72:7d:8c:df:85:eb:b3:a8:9b:a8:42:09:32:b7: 33:1d:b0:e9:68:0e:f3:98:04:5a:c2:7b:d7:07:14:60:55:4e: 79:81:d7:d3:a0:3b:19:70:29:ff:a6:a4:d5:56:1f:b2:1a:23: 69:bb:b9:03:96:31:e0:3d:f6:0f:58:b0:6a:62:6a:3d:3b:19: 53:a6:9b:c3:33:73:51:14:09:c1:21:2c:52:56:cc:71:e0:3a: 36:6c:c3:11:4d:ca:75:85:3d:4a:11:2f:e5:e4:79:1b:9a:57: 96:0c:e7:0b:9a:88:01:79:a8:c8:e5:66:43:b4:a0:41:d1:85: 02:bf:72:82:4b:df:83:c5:0f:9e:f3:12:a4:80:84:41:de:b9: c4:59:f1:8e:d3:49:74:4a:58:3d:b0:bd:f6:cd:46:43:7c:51: a7:e5:ac:d1:b0:db:9b:d9:fc:00:f0:f9:50:17:26:50:1c:8a: bd:34:3c:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWMrgAQSFOn0v3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MmIwNzVjZDUtZmVmYy00MzE0LTlmMWUtZmZjZTA1ZDg3NDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaM0M68nPpku/Oxgj/UKoFuKbuaHgiG3mg9G TAmthjGNUw2f2z4rk4ZIbruVn8k0NxAnlRPYH94clM5dZtJCDwFTMS7zHHs8wxx/ E5A0HffdcqMTChNKpkCGaEBYeKG/MtORruYGigEDPVzYGLCTmLwyOg65B13wFV+W e46HadZGQx3Gugnz/jlha5v5S/ayHupbIwX/KN9oRvvNDkVnaWZXB0orZQsFwjiS x/VO17OlCJKLqMk0uaZOuvxmTsWRsCB1EMUxvm90AvOBvmz3qaqtiAhiTAwgzpZw bWzbrRMRNxyk7eRZe+5j+qNEXfp9lpKhB5VHwFDKVyyR1T6tpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9KWvULc1uUDWoItrT9NnpvgUYFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWY1ZWRmNDgtYjk5Yy0z YTA3LTlkODgtZTBkMTEwOTllZjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR8yYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANMRsWt7BjFo2pRCPeC+NIR3rKuGvmfeVhS86DgAYlFui1QIMch+zl1z 0bPss2OKfEJ0J6YsH690Wtr+TGAL9VHIOij99kDnrwM3L2ZyfYzfheuzqJuoQgky tzMdsOloDvOYBFrCe9cHFGBVTnmB19OgOxlwKf+mpNVWH7IaI2m7uQOWMeA99g9Y sGpiaj07GVOmm8Mzc1EUCcEhLFJWzHHgOjZswxFNynWFPUoRL+XkeRuaV5YM5wua iAF5qMjlZkO0oEHRhQK/coJL34PFD57zEqSAhEHeucRZ8Y7TSXRKWD2wvfbNRkN8 UaflrNGw25vZ/ADw+VAXJlAcir00PJ0= -----END CERTIFICATE-----Generated at Sun Mar 1 18:27:24 2026 by rpki-client