$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afe40f82-5662-3ce7-805b-025eac710a51.roa File: afe40f82-5662-3ce7-805b-025eac710a51.roa (raw, json) Hash identifier: p4lG+Ezoten9ISCd17wmqlMiZGhh9kESQDSlNX3Q4g4= Subject key identifier: 14:C3:23:66:FF:70:3F:93:4E:36:90:54:CC:57:02:76:34:FC:77:2B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE57BED9B459DACE9221AFC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afe40f82-5662-3ce7-805b-025eac710a51.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33287 IP address blocks: 71.225.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:be:d9:b4:59:da:ce:92:21:af:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=90f2c3f1-2493-4598-a010-47d5dc0a3971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c7:81:89:96:00:db:9f:68:af:ea:5c:6f:5d: ae:6f:1e:a3:41:6f:3e:81:dc:00:a4:7c:c2:c1:62: f9:78:ac:19:97:dd:8b:51:ad:e3:c6:b8:bb:ec:b0: c0:c6:8d:d2:14:fd:10:49:5c:31:2c:4d:6c:95:e2: 37:be:c5:e3:24:f5:d7:37:c8:d0:e7:d2:da:8b:41: a7:f4:65:06:c3:75:4a:03:5c:4d:c4:0e:13:f2:34: 52:a0:4b:2a:cf:63:f1:05:97:80:df:4e:8b:a0:02: b1:98:55:bc:f2:17:cf:af:5b:64:c5:9c:dd:52:7d: 0e:f9:d2:ea:0c:4f:21:ae:75:ef:2e:14:94:0d:ba: 09:d0:9b:29:9c:4e:89:1e:b9:a2:2d:f3:0d:b5:69: b0:5d:2c:14:8b:26:0f:cd:dd:91:da:9c:df:48:91: 4b:66:5e:c2:69:68:26:32:d4:50:c8:d8:75:3d:49: 50:b3:9b:18:05:c3:cd:2d:2d:5c:26:72:3a:ae:8f: dc:00:06:d7:c8:03:d0:2c:38:8a:b4:54:93:d3:a2: f2:d0:37:84:70:da:d0:63:23:41:23:98:34:cb:9c: ad:5d:b0:0d:04:9f:a5:62:58:e1:9b:39:70:a9:1c: 50:c5:d1:03:8c:02:50:3b:b5:d9:60:8d:d6:78:b9: c2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C3:23:66:FF:70:3F:93:4E:36:90:54:CC:57:02:76:34:FC:77:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afe40f82-5662-3ce7-805b-025eac710a51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.225.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:a8:aa:33:7c:1f:b2:34:ae:c3:ab:69:22:24:c9:99:f7:ed: 1f:a3:78:55:6e:6b:5a:ff:a2:fd:b5:bd:0e:9e:b4:38:23:a1: 37:9b:0f:20:f0:c2:fa:c0:30:0e:a2:c9:e9:89:eb:87:cd:a4: b7:6b:d0:4f:37:d3:31:50:cc:fc:87:2f:45:9a:b7:45:ae:52: 42:49:48:e3:a6:27:42:65:66:0e:e0:88:0d:a1:e0:ac:fd:f7: 30:71:af:1c:72:51:d2:26:31:b1:1b:0d:8e:43:db:ed:cb:05: da:22:1c:b1:5f:1d:19:f6:3f:3d:e5:46:47:4f:e0:2c:d5:81: 03:83:e1:9b:23:65:11:d7:d2:ea:1a:2e:55:a7:4d:a1:5b:79: 41:0a:a8:4b:99:a5:a8:f8:cf:fd:c3:4c:22:35:ff:1d:28:d8: ca:92:77:5c:5e:4f:fa:72:af:8f:ef:83:24:33:4b:67:8d:8e: 5d:b1:01:b5:91:66:07:6c:b6:3b:c1:f8:22:b2:cd:a5:38:90: 30:c2:60:5c:aa:20:ce:34:51:a7:7b:da:c6:d8:8f:45:c6:44: 20:a0:3d:3e:8e:8e:b8:cf:bd:5c:ad:6b:39:6e:03:9a:c5:4b: 02:92:17:19:dc:d0:b3:0e:8e:47:cc:61:6e:1f:de:bc:56:9c: 25:48:c2:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuV77ZtFnazpIhr8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk OTBmMmMzZjEtMjQ5My00NTk4LWEwMTAtNDdkNWRjMGEzOTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhseBiZYA259or+pcb12ubx6jQW8+gdwApHzC wWL5eKwZl92LUa3jxri77LDAxo3SFP0QSVwxLE1sleI3vsXjJPXXN8jQ59Lai0Gn 9GUGw3VKA1xNxA4T8jRSoEsqz2PxBZeA306LoAKxmFW88hfPr1tkxZzdUn0O+dLq DE8hrnXvLhSUDboJ0JspnE6JHrmiLfMNtWmwXSwUiyYPzd2R2pzfSJFLZl7CaWgm MtRQyNh1PUlQs5sYBcPNLS1cJnI6ro/cAAbXyAPQLDiKtFST06Ly0DeEcNrQYyNB I5g0y5ytXbANBJ+lYljhmzlwqRxQxdEDjAJQO7XZYI3WeLnCcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBTDI2b/cD+TTjaQVMxXAnY0/HcrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWZlNDBmODItNTY2Mi0z Y2U3LTgwNWItMDI1ZWFjNzEwYTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR+F4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALyoqjN8H7I0rsOraSIkyZn37R+jeFVua1r/ov21vQ6etDgjoTebDyDw wvrAMA6iyemJ64fNpLdr0E830zFQzPyHL0Wat0WuUkJJSOOmJ0JlZg7giA2h4Kz9 9zBxrxxyUdImMbEbDY5D2+3LBdoiHLFfHRn2Pz3lRkdP4CzVgQOD4ZsjZRHX0uoa LlWnTaFbeUEKqEuZpaj4z/3DTCI1/x0o2MqSd1xeT/pyr4/vgyQzS2eNjl2xAbWR ZgdstjvB+CKyzaU4kDDCYFyqIM40Uad72sbYj0XGRCCgPT6OjrjPvVytazluA5rF SwKSFxnc0LMOjkfMYW4f3rxWnCVIwvE= -----END CERTIFICATE-----Generated at Mon Mar 2 09:33:08 2026 by rpki-client