$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c09f8681-33e4-3641-9d2f-a44eaf4a595d.roa File: c09f8681-33e4-3641-9d2f-a44eaf4a595d.roa (raw, json) Hash identifier: cZ95hCm3RonukTThY0aPztin65afuNnIP0i/ee1RJhs= Subject key identifier: D5:7A:8C:6D:72:6D:AA:6E:18:F0:1D:04:92:92:E1:C9:D1:13:0B:26 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5BCAB209521545737E1480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c09f8681-33e4-3641-9d2f-a44eaf4a595d.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 71.201.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5b:ca:b2:09:52:15:45:73:7e:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=db27f2e9-0b4c-4398-9a68-68adf2490eb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:bf:37:43:14:17:cc:06:c3:ee:3a:7e:f5:90: 42:81:31:55:69:a2:ec:83:05:4b:92:53:0d:af:3b: 40:6d:8e:16:96:fb:6b:c7:c2:e9:90:3c:5e:35:b7: fd:67:33:d8:a9:0d:38:8e:54:da:80:22:b4:25:eb: d0:58:01:5f:03:e1:75:d6:cc:14:52:38:94:0a:c4: 5d:77:e7:90:4c:22:b1:0f:b8:ee:91:e3:59:da:58: cd:95:92:12:cc:e7:a1:6d:ee:0a:d9:ea:51:58:ab: 2c:36:61:ea:4c:ee:2d:ff:46:68:09:72:3a:46:4b: af:5f:f6:1a:d6:66:8c:18:dc:03:8e:a4:b5:29:ba: e0:d5:7a:1f:c7:dc:6c:22:a2:6e:ba:a4:e6:40:3c: 95:84:f9:58:63:87:f8:2e:20:4d:ef:71:16:ac:85: 42:98:4f:33:bf:89:af:e4:8a:22:dc:45:7d:33:26: fc:9a:b2:3c:e1:75:1e:a0:24:ee:17:56:84:bb:8a: d2:ab:68:81:d1:7c:17:8a:58:6e:f5:6e:67:2a:a6: 74:df:85:92:c5:6f:96:dc:69:ed:98:72:2c:c1:07: b6:1f:2d:8c:e3:0d:5e:4b:65:88:02:c1:5e:4a:29: 93:1c:ae:c4:79:e3:13:d0:00:2e:27:9d:9a:23:3b: 50:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:7A:8C:6D:72:6D:AA:6E:18:F0:1D:04:92:92:E1:C9:D1:13:0B:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c09f8681-33e4-3641-9d2f-a44eaf4a595d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.201.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:a5:54:9c:da:cd:77:7e:0b:0a:97:6f:52:40:3b:d2:96:54: 68:14:25:44:ed:1a:c3:bf:fe:97:fc:48:e7:fc:39:85:b8:a4: 6e:d0:e0:90:ca:54:13:62:96:2f:da:18:77:34:5f:dd:63:ab: fb:76:d0:3f:a6:be:5a:cf:40:15:ff:dd:c2:98:7e:8e:21:c5: 4b:05:6e:63:73:8f:dd:2f:70:fa:b1:fe:b6:e8:d1:8d:cc:39: 9f:f2:2d:65:97:7d:4b:12:c1:a9:fe:78:04:0d:08:de:3e:67: 76:c8:68:84:d9:e4:0a:f9:47:9e:2f:8c:8c:0c:b9:bd:18:b1: 7f:be:db:f1:a8:fa:0a:f7:c7:e7:d6:71:6c:9f:a8:9a:45:17: 3c:f0:d3:18:6c:db:1e:cd:93:f4:70:6b:be:0f:61:eb:43:e8: d2:c3:26:18:62:19:e7:9d:11:92:70:c7:f9:5f:c8:ed:bd:13: 6b:18:5e:9b:d7:68:57:ac:2b:60:55:93:90:6b:06:49:13:9f: 71:48:64:54:78:7c:45:32:eb:2d:f6:b2:1e:2f:a9:08:90:ff: 79:c7:31:e3:6f:d8:23:a8:d2:06:7c:8f:3e:f3:55:d8:0c:79: 3d:6a:99:ec:d4:35:1f:48:43:92:e8:94:1e:74:5c:43:09:d2: 7d:11:a1:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuW8qyCVIVRXN+FIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZGIyN2YyZTktMGI0Yy00Mzk4LTlhNjgtNjhhZGYyNDkwZWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhb83QxQXzAbD7jp+9ZBCgTFVaaLsgwVLklMN rztAbY4Wlvtrx8LpkDxeNbf9ZzPYqQ04jlTagCK0JevQWAFfA+F11swUUjiUCsRd d+eQTCKxD7jukeNZ2ljNlZISzOehbe4K2epRWKssNmHqTO4t/0ZoCXI6RkuvX/Ya 1maMGNwDjqS1Kbrg1Xofx9xsIqJuuqTmQDyVhPlYY4f4LiBN73EWrIVCmE8zv4mv 5Ioi3EV9Myb8mrI84XUeoCTuF1aEu4rSq2iB0XwXilhu9W5nKqZ034WSxW+W3Gnt mHIswQe2Hy2M4w1eS2WIAsFeSimTHK7EeeMT0AAuJ52aIztQNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNV6jG1ybapuGPAdBJKS4cnREwsmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzA5Zjg2ODEtMzNlNC0z NjQxLTlkMmYtYTQ0ZWFmNGE1OTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR8lQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKlVJzazXd+CwqXb1JAO9KWVGgUJUTtGsO//pf8SOf8OYW4pG7Q4JDK VBNili/aGHc0X91jq/t20D+mvlrPQBX/3cKYfo4hxUsFbmNzj90vcPqx/rbo0Y3M OZ/yLWWXfUsSwan+eAQNCN4+Z3bIaITZ5Ar5R54vjIwMub0YsX++2/Go+gr3x+fW cWyfqJpFFzzw0xhs2x7Nk/Rwa74PYetD6NLDJhhiGeedEZJwx/lfyO29E2sYXpvX aFesK2BVk5BrBkkTn3FIZFR4fEUy6y32sh4vqQiQ/3nHMeNv2COo0gZ8jz7zVdgM eT1qmezUNR9IQ5LolB50XEMJ0n0Rofk= -----END CERTIFICATE-----Generated at Sun Mar 1 18:37:11 2026 by rpki-client