$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b91c78da-157e-3721-826d-7aacdc164a3d.roa File: b91c78da-157e-3721-826d-7aacdc164a3d.roa (raw, json) Hash identifier: Esj+mmQj2dDig9Pod34jtTcdsjyd/FG6zrEr8g3KQaw= Subject key identifier: 03:97:0F:38:EA:D4:79:8E:09:68:29:90:8A:2E:14:5D:0D:28:3B:47 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE582EBB9A8EC73724297230 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b91c78da-157e-3721-826d-7aacdc164a3d.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 71.239.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:2e:bb:9a:8e:c7:37:24:29:72:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=91ae7c75-69c8-4b28-a25f-7a54d09f88f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c0:64:58:49:4c:2c:a8:4a:59:e3:22:f1:58: d9:9c:c6:71:e4:f3:43:da:ca:b3:86:9c:67:33:48: 8e:40:db:63:2a:ce:53:64:e5:ed:d5:e0:a9:4f:7d: 6c:e7:55:3f:cf:2b:bb:20:69:26:00:c3:60:f5:d7: 17:01:6d:5e:c0:9c:6e:2f:9b:33:6d:b3:b0:2b:06: 6c:46:a0:04:4d:fc:94:71:7d:56:14:88:42:45:f9: 36:60:f0:e7:f4:5a:3d:13:87:66:07:e0:6a:54:d8: 6e:4b:d7:a3:cf:2d:71:3f:db:6e:2a:3b:54:ec:5b: 0d:3e:50:dd:5c:ac:25:40:fb:96:d1:58:17:58:64: ad:69:91:7f:f6:ed:b3:8d:72:c9:6c:31:4a:5b:e9: 69:c9:14:85:4a:16:02:a9:e9:af:47:51:84:15:07: d3:47:ad:71:44:92:c7:df:0b:71:54:53:c2:41:1e: 28:e5:de:3e:eb:81:36:96:05:6b:54:ec:a1:55:20: 65:0a:cf:8a:c2:fc:7d:3f:37:32:37:09:e3:7e:c8: 02:ba:6e:36:66:8c:fb:b6:af:13:7d:24:b8:44:61: 37:64:88:5d:02:9e:84:cc:4c:44:35:26:3b:36:06: 31:1d:4e:34:c7:c4:04:fd:d6:d8:5a:73:8e:ba:d3: 97:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:97:0F:38:EA:D4:79:8E:09:68:29:90:8A:2E:14:5D:0D:28:3B:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b91c78da-157e-3721-826d-7aacdc164a3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.239.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dd:01:75:76:48:12:04:96:03:a9:67:0b:c2:12:fd:1d:68:24: 15:fb:8c:16:a4:6a:fc:86:57:2a:81:9f:fe:18:57:32:31:00: 34:93:4e:35:7d:49:ef:de:33:ff:da:f8:cb:15:52:b2:f5:f9: 42:94:a3:44:a8:ae:75:ea:ed:fc:69:98:4b:8b:2e:5c:67:23: 7d:cc:7c:8d:ec:2e:4d:03:be:44:33:26:7b:f6:26:f5:5f:8f: 02:ab:03:e9:7b:c5:ac:b1:22:50:08:94:0f:85:5b:db:fe:e3: 51:27:93:a5:ac:1c:cf:f9:20:74:d1:1d:50:97:2e:2a:ee:51: dd:f5:f6:01:06:4b:f3:3b:89:73:cd:a7:3c:d5:00:72:9e:3c: 84:9a:0e:56:e1:b1:5f:27:a0:d1:3d:d7:b1:ae:98:53:3d:bc: e9:7b:32:64:df:4b:86:cc:94:57:47:1f:48:1b:4d:49:22:19: f2:bb:8a:cf:fa:75:68:38:e1:db:f1:53:f2:90:5f:64:37:f4: e7:04:76:52:c6:99:3d:ac:0a:b8:12:05:d7:74:79:e5:57:94: e8:b8:37:c1:a4:d4:6e:af:3b:1b:ac:62:d7:a5:88:fb:c0:cd: 4d:82:b7:26:76:95:8b:77:f2:b8:e0:8d:86:88:59:ef:f2:1e: 46:09:47:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWC67mo7HNyQpcjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk OTFhZTdjNzUtNjljOC00YjI4LWEyNWYtN2E1NGQwOWY4OGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsBkWElMLKhKWeMi8VjZnMZx5PND2sqzhpxn M0iOQNtjKs5TZOXt1eCpT31s51U/zyu7IGkmAMNg9dcXAW1ewJxuL5szbbOwKwZs RqAETfyUcX1WFIhCRfk2YPDn9Fo9E4dmB+BqVNhuS9ejzy1xP9tuKjtU7FsNPlDd XKwlQPuW0VgXWGStaZF/9u2zjXLJbDFKW+lpyRSFShYCqemvR1GEFQfTR61xRJLH 3wtxVFPCQR4o5d4+64E2lgVrVOyhVSBlCs+Kwvx9PzcyNwnjfsgCum42Zoz7tq8T fSS4RGE3ZIhdAp6EzExENSY7NgYxHU40x8QE/dbYWnOOutOXMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAOXDzjq1HmOCWgpkIouFF0NKDtHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjkxYzc4ZGEtMTU3ZS0z NzIxLTgyNmQtN2FhY2RjMTY0YTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR++UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAN0BdXZIEgSWA6lnC8IS/R1oJBX7jBakavyGVyqBn/4YVzIxADSTTjV9 Se/eM//a+MsVUrL1+UKUo0SornXq7fxpmEuLLlxnI33MfI3sLk0DvkQzJnv2JvVf jwKrA+l7xayxIlAIlA+FW9v+41Enk6WsHM/5IHTRHVCXLiruUd319gEGS/M7iXPN pzzVAHKePISaDlbhsV8noNE917GumFM9vOl7MmTfS4bMlFdHH0gbTUkiGfK7is/6 dWg44dvxU/KQX2Q39OcEdlLGmT2sCrgSBdd0eeVXlOi4N8Gk1G6vOxusYteliPvA zU2CtyZ2lYt38rjgjYaIWe/yHkYJR7g= -----END CERTIFICATE-----Generated at Mon Mar 2 02:30:59 2026 by rpki-client