$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b31b6f20-8af1-3675-9247-86685e04300d.roa File: b31b6f20-8af1-3675-9247-86685e04300d.roa (raw, json) Hash identifier: 3wF0h9y5GOW6nVOJBBnJYLAZ3LfAThVbdV3Xwp8qvhQ= Subject key identifier: 5D:E1:89:95:5C:22:6F:50:18:6E:C1:CA:1E:D5:BB:D9:36:0D:24:D1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE582E79795078772F7BFEE0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b31b6f20-8af1-3675-9247-86685e04300d.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 71.228.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:2e:79:79:50:78:77:2f:7b:fe:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=abb63c48-88ee-45a5-8c33-90f4e98074aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b2:bf:c2:32:ab:70:f8:11:36:58:08:28:00: cf:0b:3f:7e:37:3e:7f:c7:d5:10:72:82:ea:3c:f1: 9a:57:0a:69:e4:07:c3:77:29:3f:1f:30:4d:28:c9: d0:9f:2c:c9:3d:b8:69:17:03:8a:5d:26:e0:52:b2: af:d0:09:8c:36:4f:6b:35:5b:af:e4:2f:4d:62:71: e0:91:f3:3b:57:f1:84:24:76:0b:c3:8d:11:48:dd: 81:53:d7:84:f6:d5:73:bb:bb:60:6f:07:9b:1e:e4: 0c:fd:77:06:e2:d7:f0:cb:2e:38:c8:b1:30:d4:ef: c0:32:5e:fb:a6:89:5d:b8:a6:72:31:d9:68:6f:01: 82:f4:d8:66:72:74:36:24:26:54:b7:30:09:83:c2: 79:35:d9:0d:7d:e1:7e:fd:99:67:7b:0f:42:af:d5: ea:7f:ac:da:14:08:7a:ca:53:ee:5f:dd:21:50:6b: 5f:2c:9d:3d:53:d4:b3:07:39:22:6b:0c:2c:f3:17: 5b:17:a2:37:51:94:40:29:82:f2:95:64:0a:ce:ac: bc:19:db:17:42:50:a3:ee:41:30:b9:01:3b:48:5a: 26:d4:6b:63:50:08:c9:f1:93:38:38:b6:92:d3:fb: 9e:63:e7:b1:9f:d4:9f:0b:a5:ea:ad:df:36:0e:88: 11:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:E1:89:95:5C:22:6F:50:18:6E:C1:CA:1E:D5:BB:D9:36:0D:24:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b31b6f20-8af1-3675-9247-86685e04300d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.228.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:4c:63:5b:f3:a4:81:c6:bc:3c:10:19:86:43:34:5a:d4:a2: 73:b0:c5:ca:83:9b:d5:80:1e:08:b5:21:86:34:5e:27:6c:6d: 95:e5:a1:44:d7:a3:1e:59:4e:e3:08:36:b1:09:0c:a3:e6:a4: 8f:4c:17:44:a4:d5:ad:b0:69:4c:47:b5:e2:aa:41:14:84:cb: 6e:ea:21:c9:c8:b4:f8:3b:3f:b2:e8:f2:6b:fe:83:c9:4c:5f: fb:01:86:2f:b2:17:f8:33:9e:d2:3c:e4:a2:cc:22:e7:40:d2: 5e:ac:68:01:a8:df:8c:2b:3c:11:7d:49:a7:6c:a0:78:86:d4: ea:3e:2b:e9:db:79:52:24:eb:d1:11:a5:1e:a3:d8:8d:51:7d: 07:54:27:0d:4c:bd:62:82:70:c7:63:7c:45:a2:1f:51:b1:1b: d0:b8:8d:68:e0:4d:ca:59:0c:66:1f:1a:ef:dc:7d:9b:f8:c6: d1:54:14:91:17:53:df:33:8c:80:46:61:80:f8:0c:8d:c7:23: fd:b1:4b:cc:b1:df:09:7e:9a:a3:ed:9b:4f:cb:63:20:41:dd: 9d:f2:6e:89:be:7b:5a:f5:65:f1:af:2a:5f:fc:c0:4d:aa:0d: 7f:47:34:fc:9f:7d:4d:64:99:02:fe:39:8f:b0:21:61:74:2d: 2d:15:f7:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWC55eVB4dy97/uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YWJiNjNjNDgtODhlZS00NWE1LThjMzMtOTBmNGU5ODA3NGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rK/wjKrcPgRNlgIKADPCz9+Nz5/x9UQcoLq PPGaVwpp5AfDdyk/HzBNKMnQnyzJPbhpFwOKXSbgUrKv0AmMNk9rNVuv5C9NYnHg kfM7V/GEJHYLw40RSN2BU9eE9tVzu7tgbwebHuQM/XcG4tfwyy44yLEw1O/AMl77 polduKZyMdlobwGC9NhmcnQ2JCZUtzAJg8J5NdkNfeF+/Zlnew9Cr9Xqf6zaFAh6 ylPuX90hUGtfLJ09U9SzBzkiawws8xdbF6I3UZRAKYLylWQKzqy8GdsXQlCj7kEw uQE7SFom1GtjUAjJ8ZM4OLaS0/ueY+exn9SfC6Xqrd82DogROwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3hiZVcIm9QGG7Byh7Vu9k2DSTRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjMxYjZmMjAtOGFmMS0z Njc1LTkyNDctODY2ODVlMDQzMDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+QwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERMY1vzpIHGvDwQGYZDNFrUonOwxcqDm9WAHgi1IYY0XidsbZXloUTX ox5ZTuMINrEJDKPmpI9MF0Sk1a2waUxHteKqQRSEy27qIcnItPg7P7Lo8mv+g8lM X/sBhi+yF/gzntI85KLMIudA0l6saAGo34wrPBF9SadsoHiG1Oo+K+nbeVIk69ER pR6j2I1RfQdUJw1MvWKCcMdjfEWiH1GxG9C4jWjgTcpZDGYfGu/cfZv4xtFUFJEX U98zjIBGYYD4DI3HI/2xS8yx3wl+mqPtm0/LYyBB3Z3ybom+e1r1ZfGvKl/8wE2q DX9HNPyffU1kmQL+OY+wIWF0LS0V94w= -----END CERTIFICATE-----Generated at Sun Mar 1 19:00:07 2026 by rpki-client