$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c255342e-fcc8-3df9-888e-880654a5f3c6.roa File: c255342e-fcc8-3df9-888e-880654a5f3c6.roa (raw, json) Hash identifier: 3waHKqzUZ1kGRg94LoJc+uuHjwEcf2AtO3Sl+snsmxM= Subject key identifier: 50:F6:E8:A2:17:46:EA:CB:31:47:FD:FF:38:9B:C2:51:D3:C9:A0:25 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5ACA0B6BC91A6204FA5300 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c255342e-fcc8-3df9-888e-880654a5f3c6.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33287 IP address blocks: 69.253.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5a:ca:0b:6b:c9:1a:62:04:fa:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=e4041022-7ced-422d-a407-e5ff34bcd0bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:19:17:6f:b9:20:07:8f:0c:e6:98:c5:45:c6: 3c:90:22:dd:cf:a8:31:23:7e:f9:97:96:d2:62:6f: 39:d4:4e:89:03:70:7c:7c:1a:42:c9:95:5e:97:49: fc:1b:d9:21:91:d3:cf:d8:c9:95:90:e8:e0:3d:46: b9:92:53:eb:43:42:67:2c:9b:d1:fd:ae:81:52:f4: f9:13:0b:af:10:37:38:d9:3b:1b:dd:55:1d:1a:9c: b5:0d:82:9e:64:49:c9:db:a4:21:87:b8:d8:4b:44: a8:19:1f:a8:ad:83:e6:b5:e7:33:b3:d0:9e:61:b7: 4f:1f:e7:c4:29:24:ae:61:21:b6:f6:0b:1a:c0:7b: c2:49:6a:fa:d0:a7:b6:99:84:43:ea:c6:49:29:07: 3e:60:17:fb:53:df:b4:4a:c3:0d:4b:5f:a3:ce:6d: 35:dd:7f:71:05:4d:f9:2f:85:bc:3e:1a:b0:0e:2e: 6f:db:77:90:f8:65:8e:9c:d6:cd:c3:66:80:d1:8d: ff:88:bb:27:c2:03:65:ff:d2:54:c8:dc:dd:09:6f: ff:a9:55:17:27:ef:55:bc:39:2f:1a:60:9c:98:13: 5c:95:f5:3c:8c:05:95:4e:85:09:25:90:89:c3:f0: 9d:09:39:24:b0:fa:78:1b:45:4d:98:c5:ad:f6:cc: 78:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:F6:E8:A2:17:46:EA:CB:31:47:FD:FF:38:9B:C2:51:D3:C9:A0:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c255342e-fcc8-3df9-888e-880654a5f3c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 69.253.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:a8:fd:c9:48:8c:a2:bf:25:fa:f1:ee:5e:86:9b:b7:10:bc: 22:e9:23:c3:25:e1:b0:ac:ce:28:91:59:8d:20:a4:54:99:f0: 2c:89:ac:bc:67:f7:6c:2d:97:9f:23:ba:74:50:ee:ba:81:8c: a4:ec:12:30:5e:90:b9:a5:6e:7b:93:19:88:53:63:c1:29:17: 39:96:f4:a4:0b:e6:94:52:a9:ae:b1:64:0e:59:a2:7e:10:54: 82:60:f6:90:38:8f:e3:55:d8:69:a4:e3:c3:2a:85:e3:8f:85: 3e:08:25:5b:dd:ce:f8:78:3a:98:0f:8c:dc:9e:0e:d5:46:04: 4e:13:17:94:7b:a4:af:c4:22:cb:36:76:94:11:e5:93:f2:1c: 79:63:00:7a:79:fb:1c:7f:b4:a9:f0:4c:c2:e7:52:9f:58:34: 80:d5:3c:5d:18:cd:90:2a:a0:dd:82:53:d4:30:21:6c:e7:2e: 49:63:cf:1d:82:e4:ac:d7:ad:d4:39:e0:cd:a1:b7:89:8f:76: ff:73:fc:d8:0e:30:fb:7f:31:dd:2f:4a:96:58:a4:6f:e0:3e: f1:24:e6:db:78:c6:ad:0f:8a:0a:66:dd:3c:7b:a4:4e:51:8c: b6:86:b7:fa:53:55:cf:e6:5f:46:e8:2a:db:e2:f0:d6:18:75: 0b:46:ac:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWsoLa8kaYgT6UwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZTQwNDEwMjItN2NlZC00MjJkLWE0MDctZTVmZjM0YmNkMGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6hkXb7kgB48M5pjFRcY8kCLdz6gxI375l5bS Ym851E6JA3B8fBpCyZVel0n8G9khkdPP2MmVkOjgPUa5klPrQ0JnLJvR/a6BUvT5 EwuvEDc42Tsb3VUdGpy1DYKeZEnJ26Qhh7jYS0SoGR+orYPmteczs9CeYbdPH+fE KSSuYSG29gsawHvCSWr60Ke2mYRD6sZJKQc+YBf7U9+0SsMNS1+jzm013X9xBU35 L4W8PhqwDi5v23eQ+GWOnNbNw2aA0Y3/iLsnwgNl/9JUyNzdCW//qVUXJ+9VvDkv GmCcmBNclfU8jAWVToUJJZCJw/CdCTkksPp4G0VNmMWt9sx4JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFD26KIXRurLMUf9/zibwlHTyaAlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzI1NTM0MmUtZmNjOC0z ZGY5LTg4OGUtODgwNjU0YTVmM2M2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARf12MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOo/clIjKK/Jfrx7l6Gm7cQvCLpI8Ml4bCsziiRWY0gpFSZ8CyJrLxn 92wtl58junRQ7rqBjKTsEjBekLmlbnuTGYhTY8EpFzmW9KQL5pRSqa6xZA5Zon4Q VIJg9pA4j+NV2Gmk48MqheOPhT4IJVvdzvh4OpgPjNyeDtVGBE4TF5R7pK/EIss2 dpQR5ZPyHHljAHp5+xx/tKnwTMLnUp9YNIDVPF0YzZAqoN2CU9QwIWznLkljzx2C 5KzXrdQ54M2ht4mPdv9z/NgOMPt/Md0vSpZYpG/gPvEk5tt4xq0Pigpm3Tx7pE5R jLaGt/pTVc/mX0boKtvi8NYYdQtGrEo= -----END CERTIFICATE-----Generated at Sun Mar 1 19:17:45 2026 by rpki-client