$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aed2b5b6-ecc4-3c36-adfa-53432e17c522.roa File: aed2b5b6-ecc4-3c36-adfa-53432e17c522.roa (raw, json) Hash identifier: RZDjVeTZOnGROo49M9DJnvc6UiOQOQQeV/9BxFNGvwg= Subject key identifier: 8F:91:64:FF:B4:E3:3D:63:86:A0:B3:51:2A:80:A9:E0:AB:9B:E7:11 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5BC57FB6E8A500EAF47B20 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aed2b5b6-ecc4-3c36-adfa-53432e17c522.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 71.201.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5b:c5:7f:b6:e8:a5:00:ea:f4:7b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=a34fad42-3d83-45bc-8801-98142d88d949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:17:80:74:64:3e:f6:10:a8:a7:b4:3c:b2:ff: e9:8b:42:a9:7f:e4:40:2e:83:cb:31:ab:14:ae:90: 45:1a:80:be:99:7f:be:26:62:72:f9:bf:be:17:cf: d7:fe:d8:8b:27:6e:cc:fe:74:9b:e0:49:45:48:ca: 5d:b6:c5:3e:d4:90:8e:7c:29:9d:62:da:4d:38:f6: c2:ff:95:42:0c:34:bf:2e:61:91:3e:f9:d1:eb:18: 8f:ba:6f:87:03:b6:f3:f2:71:3d:20:35:5a:e7:bf: 78:04:dc:ce:21:82:75:81:a0:ee:2d:13:9e:ed:fe: 4e:82:fb:c8:18:1c:13:67:80:53:de:f9:51:52:56: 8b:20:87:b3:c3:7f:6d:32:84:9e:e1:12:9f:e1:fb: 2a:43:53:91:51:4f:c3:84:15:c3:6c:bd:36:03:44: 12:09:72:7d:8c:a5:9b:c2:de:b5:9c:f8:63:61:e1: 8e:49:2c:eb:0e:c3:5b:ca:bd:b2:2e:70:3a:5f:1a: 97:3e:c6:f0:e4:ff:40:3e:b1:53:6b:29:5e:50:d1: d0:5c:ee:94:bb:1f:3e:2b:f6:52:3b:e5:f9:25:16: ae:2f:15:b9:a5:c8:47:6e:7e:56:59:fb:e6:fa:3b: 76:38:1f:28:b1:3f:4b:30:f4:cb:e0:bc:74:b6:93: 89:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:91:64:FF:B4:E3:3D:63:86:A0:B3:51:2A:80:A9:E0:AB:9B:E7:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aed2b5b6-ecc4-3c36-adfa-53432e17c522.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.201.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:9f:b6:70:b7:1d:88:09:45:46:65:76:19:ba:3b:18:1e:be: e1:0a:a4:b4:a2:c7:eb:fa:f8:ec:27:d7:e8:8a:2e:20:2f:58: ee:40:b0:ac:20:55:1b:36:16:ef:68:bc:1d:c8:7c:65:94:41: 1a:bd:20:d9:29:21:fb:19:81:71:52:6b:48:27:71:88:fa:af: 31:6b:62:27:cc:ea:43:de:15:4d:bc:df:e7:38:81:e1:e5:4c: 8f:85:d4:47:d5:62:15:85:3c:6b:4f:a7:e3:3d:e0:98:2f:43: cd:fa:88:1b:69:d3:99:98:f8:ec:63:89:70:7b:9a:21:18:f9: c6:d1:14:87:ac:4b:e0:8f:65:73:1e:75:fa:14:b2:32:51:5a: 75:a9:f1:e0:0c:b1:91:20:20:ed:9c:15:55:4c:43:43:11:44: b4:88:bc:80:0d:d7:19:1b:90:a1:70:f7:eb:b6:f4:aa:1e:88: fb:c0:02:c8:e0:b5:c1:63:54:5c:9d:58:f1:29:b5:10:26:bb: 7f:aa:28:e5:7a:bf:aa:74:a5:54:a7:79:a8:b7:d2:f8:79:b0: 45:4d:2b:65:3f:28:90:c1:e0:fa:db:eb:ce:c7:63:11:f4:b3: 57:99:7f:ef:39:84:01:a0:01:a3:cb:96:4c:68:a0:9b:29:86: ca:2b:a4:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuW8V/tuilAOr0eyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YTM0ZmFkNDItM2Q4My00NWJjLTg4MDEtOTgxNDJkODhkOTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmReAdGQ+9hCop7Q8sv/pi0Kpf+RALoPLMasU rpBFGoC+mX++JmJy+b++F8/X/tiLJ27M/nSb4ElFSMpdtsU+1JCOfCmdYtpNOPbC /5VCDDS/LmGRPvnR6xiPum+HA7bz8nE9IDVa5794BNzOIYJ1gaDuLROe7f5OgvvI GBwTZ4BT3vlRUlaLIIezw39tMoSe4RKf4fsqQ1ORUU/DhBXDbL02A0QSCXJ9jKWb wt61nPhjYeGOSSzrDsNbyr2yLnA6XxqXPsbw5P9APrFTayleUNHQXO6Uux8+K/ZS O+X5JRauLxW5pchHbn5WWfvm+jt2OB8osT9LMPTL4Lx0tpOJPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+RZP+04z1jhqCzUSqAqeCrm+cRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWVkMmI1YjYtZWNjNC0z YzM2LWFkZmEtNTM0MzJlMTdjNTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR8mYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISftnC3HYgJRUZldhm6OxgevuEKpLSix+v6+Own1+iKLiAvWO5AsKwg VRs2Fu9ovB3IfGWUQRq9INkpIfsZgXFSa0gncYj6rzFrYifM6kPeFU283+c4geHl TI+F1EfVYhWFPGtPp+M94JgvQ836iBtp05mY+OxjiXB7miEY+cbRFIesS+CPZXMe dfoUsjJRWnWp8eAMsZEgIO2cFVVMQ0MRRLSIvIAN1xkbkKFw9+u29KoeiPvAAsjg tcFjVFydWPEptRAmu3+qKOV6v6p0pVSneai30vh5sEVNK2U/KJDB4Prb687HYxH0 s1eZf+85hAGgAaPLlkxooJsphsorpCs= -----END CERTIFICATE-----Generated at Mon Mar 2 00:26:00 2026 by rpki-client