$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5445e36-8468-395c-8840-459228cfb75c.roa File: a5445e36-8468-395c-8840-459228cfb75c.roa (raw, json) Hash identifier: cnO2qf5Kh/lxV3t40oaQQwJEOlF95PI5p2xOppo2RZM= Subject key identifier: 63:7B:F5:1C:62:94:BF:34:53:9F:A2:44:E4:B8:9D:58:7C:CE:B5:AC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5ADEBAA5BEEEC01334A380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5445e36-8468-395c-8840-459228cfb75c.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33287 IP address blocks: 71.230.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5a:de:ba:a5:be:ee:c0:13:34:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=ca50a7b1-1d0e-4fb8-a31b-c48a80c3e10d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7b:cf:1a:f9:b4:cf:9f:63:35:ae:60:9d:33: b4:a9:fa:71:43:6b:37:48:c1:00:11:cd:80:de:3f: 9f:04:b9:b5:0d:0a:b0:1f:f1:d7:49:8a:b7:12:dc: fa:72:8b:f0:ea:0e:38:00:34:31:b5:ea:06:12:21: c9:52:d4:fa:63:12:4e:e3:bf:e1:bc:f9:2e:3e:60: 92:16:7d:d5:02:ba:a9:1a:40:cd:9e:60:f2:0a:cd: ea:d4:fb:a7:5d:be:51:91:49:7d:91:96:31:04:ad: 67:0f:7e:88:6d:d5:9f:f5:20:14:e3:10:f4:d0:01: a8:61:58:ff:df:79:1a:19:4e:03:05:c8:a9:99:8a: 30:bf:c0:c5:53:f6:32:ee:2d:b4:f4:65:ed:76:77: d2:2b:95:cd:5d:95:af:94:2d:73:1f:05:4e:5f:c1: a2:40:0a:94:01:b3:6e:97:6a:f1:91:5b:c2:21:ec: b8:0d:c1:b9:1c:63:d3:97:2a:46:00:9b:a0:21:08: 23:2a:28:76:84:6d:c1:99:b1:10:a4:8a:fa:84:9b: 66:b4:80:b9:9b:49:c6:fb:d0:d7:73:36:f0:fb:de: b7:02:04:e8:32:34:61:15:e7:a4:ce:3f:36:7b:67: 86:01:dd:3c:e7:92:99:e3:37:83:f8:40:2c:c0:61: 5d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:7B:F5:1C:62:94:BF:34:53:9F:A2:44:E4:B8:9D:58:7C:CE:B5:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5445e36-8468-395c-8840-459228cfb75c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.230.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:f3:9f:22:4e:49:77:2a:26:21:f4:01:ab:e6:43:5f:1b:fb: a8:29:e3:fb:4f:5e:58:cf:a2:fd:70:63:df:0e:e1:57:49:bf: 88:c7:d1:a2:35:e5:d9:a4:f2:f5:04:b9:62:7d:f6:ba:c8:b0: 98:0e:47:c6:4c:d8:58:4c:95:81:42:c6:d2:89:0f:6a:18:bd: fb:a0:cb:0c:e4:39:0f:55:f5:98:ad:34:9c:58:7a:a4:e0:5f: ab:a0:95:83:99:81:67:61:bd:08:1e:53:10:77:e5:2d:56:0b: 5f:ba:c6:8d:0e:dc:78:fb:d7:88:71:8e:6f:09:2f:45:06:62: b6:12:1f:06:4b:42:79:ae:15:66:67:69:17:12:af:97:13:65: a1:87:98:e9:a0:64:9d:a8:9c:60:7c:3d:d1:38:d7:a3:bf:09: b7:34:b7:22:62:f3:28:65:19:db:a6:9d:66:6f:c2:5f:b2:e9: 7d:d4:8b:f1:f0:da:cf:63:38:2f:06:8e:d8:5b:36:6c:e4:99: c6:51:50:f9:3b:6b:2c:74:36:1e:43:7e:d2:34:24:8f:e3:da: 6c:cf:1e:d6:8c:f7:ce:05:6a:b0:d1:fd:ea:05:7f:07:64:cb: d7:a6:fe:40:af:73:c1:ac:e3:fe:1d:6e:ad:64:79:5a:01:57: be:5a:a9:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWt66pb7uwBM0o4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk Y2E1MGE3YjEtMWQwZS00ZmI4LWEzMWItYzQ4YTgwYzNlMTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3vPGvm0z59jNa5gnTO0qfpxQ2s3SMEAEc2A 3j+fBLm1DQqwH/HXSYq3Etz6covw6g44ADQxteoGEiHJUtT6YxJO47/hvPkuPmCS Fn3VArqpGkDNnmDyCs3q1PunXb5RkUl9kZYxBK1nD36IbdWf9SAU4xD00AGoYVj/ 33kaGU4DBcipmYowv8DFU/Yy7i209GXtdnfSK5XNXZWvlC1zHwVOX8GiQAqUAbNu l2rxkVvCIey4DcG5HGPTlypGAJugIQgjKih2hG3BmbEQpIr6hJtmtIC5m0nG+9DX czbw+963AgToMjRhFeekzj82e2eGAd0855KZ4zeD+EAswGFdhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGN79RxilL80U5+iROS4nVh8zrWsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTU0NDVlMzYtODQ2OC0z OTVjLTg4NDAtNDU5MjI4Y2ZiNzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR+b4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKDznyJOSXcqJiH0AavmQ18b+6gp4/tPXljPov1wY98O4VdJv4jH0aI1 5dmk8vUEuWJ99rrIsJgOR8ZM2FhMlYFCxtKJD2oYvfugywzkOQ9V9ZitNJxYeqTg X6uglYOZgWdhvQgeUxB35S1WC1+6xo0O3Hj714hxjm8JL0UGYrYSHwZLQnmuFWZn aRcSr5cTZaGHmOmgZJ2onGB8PdE416O/Cbc0tyJi8yhlGdumnWZvwl+y6X3Ui/Hw 2s9jOC8GjthbNmzkmcZRUPk7ayx0Nh5DftI0JI/j2mzPHtaM984FarDR/eoFfwdk y9em/kCvc8Gs4/4dbq1keVoBV75aqfY= -----END CERTIFICATE-----Generated at Sun Mar 1 19:08:54 2026 by rpki-client