$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be7f2241-bd47-30f4-ad8c-16cbf65f1b4f.roa File: be7f2241-bd47-30f4-ad8c-16cbf65f1b4f.roa (raw, json) Hash identifier: CRMCvsDTCGua4Rv708plkfKeWLJhdA8/R86TAm3Ww3M= Subject key identifier: 9A:CC:4A:C4:07:F5:63:BC:99:89:B2:F3:2D:B5:BC:20:68:9C:5C:B9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE58CB1979BAB2DF29F93F00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be7f2241-bd47-30f4-ad8c-16cbf65f1b4f.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 71.204.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:cb:19:79:ba:b2:df:29:f9:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=23cfef59-b1e9-4424-9375-5c6fdcc77bc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3c:00:13:33:41:3f:61:2a:df:9d:6b:44:42: ab:02:88:42:07:b6:c7:e2:d9:92:81:1e:11:81:e8: 29:8e:5b:04:ab:2d:c0:39:e5:fd:e0:e2:53:0c:63: 15:53:5b:a2:26:7d:90:c1:8b:d4:58:35:a1:af:ae: cf:03:d2:9d:36:41:fa:fa:aa:7e:5c:f7:a1:0f:f6: a2:e5:ba:ad:7f:c4:f5:79:55:c1:4e:d8:92:31:7d: 67:fe:77:29:84:8e:73:e3:c5:5c:0f:97:e4:3d:69: b5:c9:7b:13:ee:00:2e:d2:e7:30:f0:5e:ed:76:68: 8e:24:0c:5a:20:de:58:00:03:82:77:d7:b1:64:75: 54:a6:a0:fd:fc:2e:fd:2a:91:79:17:a5:d5:1a:1f: a1:65:3c:7f:e0:ef:b5:18:7f:ee:cf:cb:61:6e:b9: 06:5e:d3:9b:f3:21:13:4a:80:51:19:70:cb:39:58: 3d:8f:6c:3c:dd:20:70:74:be:e1:d0:4e:84:6f:cd: 6f:f1:51:ef:4b:5e:60:98:1c:33:01:75:fc:e2:01: 1d:41:37:de:d9:ae:5d:a5:e6:0d:7f:e6:bf:89:58: 56:c4:3a:a3:cb:c7:90:b7:43:0e:43:c9:b2:23:4b: d6:a6:20:70:52:d1:6f:52:13:49:6e:81:17:c2:d2: d8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:CC:4A:C4:07:F5:63:BC:99:89:B2:F3:2D:B5:BC:20:68:9C:5C:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be7f2241-bd47-30f4-ad8c-16cbf65f1b4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.204.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:e7:46:41:86:4b:3c:02:e0:89:83:01:d0:f1:02:af:1e:41: 43:44:93:ed:be:55:c9:12:dd:16:11:ae:e5:49:b6:71:b6:27: 06:68:ed:3e:4f:f7:2c:a2:9f:93:a6:79:3a:9d:0d:5c:fa:ba: 78:d2:e1:af:75:3b:84:59:95:3e:56:d8:02:1e:94:1f:68:59: e9:73:60:69:1d:8c:a8:7b:34:54:7e:dc:e0:c1:8c:84:69:1d: b0:55:c8:01:25:67:43:80:13:99:50:b1:4c:be:9c:92:61:ed: 5f:78:25:26:a0:6f:de:96:3c:91:67:b5:c4:a8:59:eb:06:e3: f4:09:38:5f:65:a4:72:f0:f1:41:64:dd:d2:09:ab:3a:80:5a: a6:29:4b:60:c7:ff:06:11:48:49:02:bd:33:05:41:b3:df:25: 4c:2b:06:86:59:5e:b1:89:1b:f5:7a:cd:f9:10:86:e4:0a:e6: 44:3e:4c:24:2b:ab:db:65:f5:cb:e2:ad:d8:1d:6f:e4:ad:3c: 7a:d8:74:f2:cd:e4:a4:99:ee:8b:18:86:3e:9f:f0:4a:21:ae: fd:33:1f:8a:95:23:a6:82:84:2d:9c:a3:e7:2f:10:6a:98:b5: 82:1d:25:9a:15:2d:ba:19:6d:71:13:37:03:ed:17:eb:3c:54: 5d:27:af:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWMsZebqy3yn5PwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MjNjZmVmNTktYjFlOS00NDI0LTkzNzUtNWM2ZmRjYzc3YmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzwAEzNBP2Eq351rREKrAohCB7bH4tmSgR4R gegpjlsEqy3AOeX94OJTDGMVU1uiJn2QwYvUWDWhr67PA9KdNkH6+qp+XPehD/ai 5bqtf8T1eVXBTtiSMX1n/ncphI5z48VcD5fkPWm1yXsT7gAu0ucw8F7tdmiOJAxa IN5YAAOCd9exZHVUpqD9/C79KpF5F6XVGh+hZTx/4O+1GH/uz8thbrkGXtOb8yET SoBRGXDLOVg9j2w83SBwdL7h0E6Eb81v8VHvS15gmBwzAXX84gEdQTfe2a5dpeYN f+a/iVhWxDqjy8eQt0MOQ8myI0vWpiBwUtFvUhNJboEXwtLYZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJrMSsQH9WO8mYmy8y21vCBonFy5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmU3ZjIyNDEtYmQ0Ny0z MGY0LWFkOGMtMTZjYmY2NWYxYjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR8yoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3nRkGGSzwC4ImDAdDxAq8eQUNEk+2+VckS3RYRruVJtnG2JwZo7T5P 9yyin5OmeTqdDVz6unjS4a91O4RZlT5W2AIelB9oWelzYGkdjKh7NFR+3ODBjIRp HbBVyAElZ0OAE5lQsUy+nJJh7V94JSagb96WPJFntcSoWesG4/QJOF9lpHLw8UFk 3dIJqzqAWqYpS2DH/wYRSEkCvTMFQbPfJUwrBoZZXrGJG/V6zfkQhuQK5kQ+TCQr q9tl9cvirdgdb+StPHrYdPLN5KSZ7osYhj6f8Eohrv0zH4qVI6aChC2co+cvEGqY tYIdJZoVLboZbXETNwPtF+s8VF0nr6A= -----END CERTIFICATE-----Generated at Sun Mar 1 18:47:33 2026 by rpki-client