$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf9a40f0-6999-3e9a-860d-c84c134acd1e.roa File: bf9a40f0-6999-3e9a-860d-c84c134acd1e.roa (raw, json) Hash identifier: hSyUeixxgJMbnB/h0w8pXPS26HJGh0jTHKfjVaeERYU= Subject key identifier: D5:D3:69:7C:FC:A4:6F:E0:C1:12:FF:AB:5B:D1:17:1F:5F:80:6F:B8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE58CA8EA82036AD06F6F3C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf9a40f0-6999-3e9a-860d-c84c134acd1e.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 71.202.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:ca:8e:a8:20:36:ad:06:f6:f3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=cba5d668-3317-4cce-95d3-9d30ad2e2de7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:49:59:92:9c:8f:fb:e5:1b:e1:3e:30:5e:a0: 61:a3:c5:e9:34:78:80:4d:7b:d7:a7:8e:55:24:6a: a7:bf:4f:5d:ef:2a:f2:1a:8f:82:64:2e:c2:7b:74: 1d:28:d4:37:99:bf:d1:33:a6:f9:7d:85:60:bb:4e: 38:20:ef:ab:ae:5d:76:4e:1b:eb:72:89:2a:e1:72: a9:f8:2f:87:97:8e:20:c1:4e:83:0d:f8:0f:87:35: ad:fc:6b:b4:df:b1:bf:4c:39:24:01:e7:59:5c:51: ee:a4:92:f6:be:45:55:77:db:aa:3b:e4:3a:32:e3: 9e:9e:32:e7:1d:aa:b2:76:94:13:7e:3e:d1:a0:93: 95:4f:93:87:6d:a3:89:0c:e0:03:a3:80:62:ef:db: 3d:5b:d9:2e:70:cb:61:e9:26:24:7e:dd:a2:79:ef: 7f:ec:51:be:18:16:56:4b:ea:7b:8a:ee:9a:af:79: a3:54:cc:b2:98:c9:42:cb:19:c9:cb:0c:02:48:b1: 87:8d:89:c8:63:f7:70:c5:f1:50:dc:4a:08:49:61: db:12:da:da:57:3c:55:ef:59:0c:d4:ac:6b:87:2c: 86:45:29:a5:4e:26:9e:83:7b:e7:8e:43:36:fa:fd: ed:61:15:83:43:92:56:70:99:ce:ad:cb:32:cc:63: e3:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D3:69:7C:FC:A4:6F:E0:C1:12:FF:AB:5B:D1:17:1F:5F:80:6F:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf9a40f0-6999-3e9a-860d-c84c134acd1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.202.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:cc:fa:2d:3b:bb:63:d1:1f:b9:31:37:f0:19:7f:51:b4:46: b5:d9:ec:22:57:f3:61:73:64:86:be:74:14:f4:c0:0a:5d:5d: fd:0b:5e:ec:bd:38:45:8f:54:c6:7f:ae:ee:e5:39:6f:b0:cd: 1a:ce:d0:e0:89:f3:b1:9b:24:83:6d:fb:89:41:4c:e9:8a:c8: 08:52:39:06:23:71:ef:09:c3:5e:56:5f:98:29:bd:27:69:2b: 91:1a:57:ba:6e:66:39:4e:56:0b:3e:07:7f:a7:60:37:65:b5: d5:85:12:89:4f:4f:ec:3e:e5:97:1d:b4:2f:53:8f:a4:c0:96: d3:7e:2e:d1:46:93:9a:fa:9d:4c:97:d2:0f:13:2e:aa:bd:dc: c0:fe:22:16:06:8f:d6:4c:83:eb:f1:bb:19:c2:aa:1b:c5:9f: b6:e0:3a:a7:39:7d:35:4e:c7:4e:27:53:88:89:45:33:04:8c: 34:a8:0a:e4:6c:16:1a:d8:76:01:9c:86:1a:fa:07:23:47:cd: 7e:56:8e:ae:6b:1d:f3:fb:b0:fd:ab:b0:42:cc:2b:74:c7:b4: a1:bf:96:d0:bf:51:ad:61:87:be:b7:b4:65:86:ac:b6:3d:88: 36:fd:f2:4a:8e:b3:d0:08:85:0c:38:98:0e:77:ae:c8:d3:71: 4b:49:a8:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWMqOqCA2rQb288AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk Y2JhNWQ2NjgtMzMxNy00Y2NlLTk1ZDMtOWQzMGFkMmUyZGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0lZkpyP++Ub4T4wXqBho8XpNHiATXvXp45V JGqnv09d7yryGo+CZC7Ce3QdKNQ3mb/RM6b5fYVgu044IO+rrl12Thvrcokq4XKp +C+Hl44gwU6DDfgPhzWt/Gu037G/TDkkAedZXFHupJL2vkVVd9uqO+Q6MuOenjLn HaqydpQTfj7RoJOVT5OHbaOJDOADo4Bi79s9W9kucMth6SYkft2iee9/7FG+GBZW S+p7iu6ar3mjVMyymMlCyxnJywwCSLGHjYnIY/dwxfFQ3EoISWHbEtraVzxV71kM 1KxrhyyGRSmlTiaeg3vnjkM2+v3tYRWDQ5JWcJnOrcsyzGPjxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXTaXz8pG/gwRL/q1vRFx9fgG+4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmY5YTQwZjAtNjk5OS0z ZTlhLTg2MGQtYzg0YzEzNGFjZDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR8owMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKrM+i07u2PRH7kxN/AZf1G0RrXZ7CJX82FzZIa+dBT0wApdXf0LXuy9 OEWPVMZ/ru7lOW+wzRrO0OCJ87GbJINt+4lBTOmKyAhSOQYjce8Jw15WX5gpvSdp K5EaV7puZjlOVgs+B3+nYDdltdWFEolPT+w+5ZcdtC9Tj6TAltN+LtFGk5r6nUyX 0g8TLqq93MD+IhYGj9ZMg+vxuxnCqhvFn7bgOqc5fTVOx04nU4iJRTMEjDSoCuRs FhrYdgGchhr6ByNHzX5Wjq5rHfP7sP2rsELMK3THtKG/ltC/Ua1hh763tGWGrLY9 iDb98kqOs9AIhQw4mA53rsjTcUtJqEs= -----END CERTIFICATE-----Generated at Sun Mar 1 19:03:18 2026 by rpki-client