$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4d57186-d73f-31ff-aa09-7b9c295d0c70.roa File: a4d57186-d73f-31ff-aa09-7b9c295d0c70.roa (raw, json) Hash identifier: fksSJBh3K1E33PZKh4Sq7S1ezIo4Pe0DQuqz2AVu63E= Subject key identifier: FD:E0:75:27:06:D5:1F:C0:81:18:52:A5:98:78:E7:3F:5E:75:39:41 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CA061F215D031AD2655B00700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4d57186-d73f-31ff-aa09-7b9c295d0c70.roa Signing time: Sat 24 Jan 2026 02:00:31 +0000 ROA not before: Sat 24 Jan 2026 02:00:31 +0000 ROA not after: Fri 24 Apr 2026 01:00:31 +0000 asID: 7725 IP address blocks: 71.204.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a0:61:f2:15:d0:31:ad:26:55:b0:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 24 02:00:31 2026 GMT Not After : Apr 24 01:00:31 2026 GMT Subject: CN=83b8b086-9929-4827-ab2c-c442c623b55b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:29:cd:72:ed:b9:35:94:83:77:00:c6:45:89: 3f:87:8c:8d:42:41:94:20:a1:58:4b:db:9e:85:58: 2e:f7:10:7d:f5:ca:46:1e:e9:9e:78:bc:e5:c8:7c: 75:4a:dd:33:12:c4:62:fc:a2:4f:53:fa:d9:e8:29: 01:07:1f:c9:1b:dc:09:5f:9c:4d:7f:37:b3:31:11: 52:79:bf:88:8f:f2:ef:31:cb:33:c8:d4:55:dd:f5: 36:0c:b6:79:47:00:13:12:af:90:a2:86:8b:8b:cd: 9a:6b:74:c3:63:2a:98:12:32:d7:80:df:f6:ba:e0: 90:40:29:c7:ed:e5:be:70:69:ff:e9:5e:e0:5e:eb: 4b:a2:18:84:63:25:0f:bf:df:bc:03:94:b1:4a:c8: f9:a9:bc:db:72:dc:cc:f9:32:f6:9e:f2:ff:68:bd: 66:36:fd:f6:68:e2:f0:8a:86:c8:b1:22:74:f5:c7: cd:88:6f:ee:7c:df:dc:9e:13:5d:ca:b9:b8:7a:05: 2e:5c:a5:d3:36:21:96:7c:85:c9:2a:16:a9:c1:8e: 6b:f0:06:a0:85:00:fc:b6:dc:0b:c9:d2:a3:ba:a9: 7c:70:05:38:69:01:9b:ee:81:c5:b5:ae:19:9b:8e: 1e:51:a1:b0:e6:07:d0:ed:f7:30:5e:0d:88:4f:51: bd:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:E0:75:27:06:D5:1F:C0:81:18:52:A5:98:78:E7:3F:5E:75:39:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4d57186-d73f-31ff-aa09-7b9c295d0c70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.204.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:fc:92:82:90:05:22:ef:fa:19:1c:70:4d:42:89:db:50:13: 93:3f:57:54:3d:ea:52:57:46:55:f3:03:71:ce:a0:27:8a:6f: fb:f5:26:24:99:0b:70:68:c4:b6:39:ec:7b:bf:57:71:8d:c1: bc:fd:fe:44:70:e7:96:58:d8:c2:7f:8b:f0:92:ce:2a:f6:12: 54:d9:f2:2d:71:18:b5:2c:82:ef:fe:76:93:29:98:22:24:cd: f9:2c:6c:bd:9d:80:b3:e8:b1:0a:be:79:52:c7:78:21:c7:ed: 9a:82:45:5a:c0:4d:b8:a1:1b:6a:2d:6b:48:86:ca:f9:16:2f: 9e:c8:f5:78:80:a6:fb:9e:b1:66:5d:eb:a6:dc:67:25:f7:59: 9f:ba:d1:7e:c2:88:ae:0f:40:ad:c4:1f:d1:6d:c7:a2:a5:35: e9:c5:30:a3:7f:d7:2e:a4:53:bb:d3:e7:04:41:74:ad:f7:ba: 25:f4:a3:58:d1:81:6f:b2:a5:24:fa:77:72:b8:eb:06:43:96: a2:1a:6a:74:cb:ed:91:7f:ac:da:b9:2d:c3:8d:2f:b2:0b:84: 5a:c9:e9:61:8f:7d:bc:80:5c:17:de:c3:ec:16:53:ab:3d:76: b8:56:e2:e5:e3:07:f9:66:9b:f9:8c:f6:f4:18:ce:00:d5:9d: 71:93:3b:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEygYfIV0DGtJlWwBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyNDAyMDAzMVoXDTI2MDQyNDAxMDAzMVowLzEtMCsGA1UEAxMk ODNiOGIwODYtOTkyOS00ODI3LWFiMmMtYzQ0MmM2MjNiNTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSnNcu25NZSDdwDGRYk/h4yNQkGUIKFYS9ue hVgu9xB99cpGHumeeLzlyHx1St0zEsRi/KJPU/rZ6CkBBx/JG9wJX5xNfzezMRFS eb+Ij/LvMcszyNRV3fU2DLZ5RwATEq+QooaLi82aa3TDYyqYEjLXgN/2uuCQQCnH 7eW+cGn/6V7gXutLohiEYyUPv9+8A5SxSsj5qbzbctzM+TL2nvL/aL1mNv32aOLw iobIsSJ09cfNiG/ufN/cnhNdyrm4egUuXKXTNiGWfIXJKhapwY5r8AaghQD8ttwL ydKjuql8cAU4aQGb7oHFta4Zm44eUaGw5gfQ7fcwXg2IT1G9HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP3gdScG1R/AgRhSpZh45z9edTlBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTRkNTcxODYtZDczZi0z MWZmLWFhMDktN2I5YzI5NWQwYzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR8xWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFP8koKQBSLv+hkccE1CidtQE5M/V1Q96lJXRlXzA3HOoCeKb/v1JiSZ C3BoxLY57Hu/V3GNwbz9/kRw55ZY2MJ/i/CSzir2ElTZ8i1xGLUsgu/+dpMpmCIk zfksbL2dgLPosQq+eVLHeCHH7ZqCRVrATbihG2ota0iGyvkWL57I9XiApvuesWZd 66bcZyX3WZ+60X7CiK4PQK3EH9Ftx6KlNenFMKN/1y6kU7vT5wRBdK33uiX0o1jR gW+ypST6d3K46wZDlqIaanTL7ZF/rNq5LcONL7ILhFrJ6WGPfbyAXBfew+wWU6s9 drhW4uXjB/lmm/mM9vQYzgDVnXGTO4M= -----END CERTIFICATE-----Generated at Sun Mar 1 18:42:51 2026 by rpki-client