$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc8ee0fd-0ac4-38cf-b622-d2925a10c2d7.roa File: cc8ee0fd-0ac4-38cf-b622-d2925a10c2d7.roa (raw, json) Hash identifier: 97b1n2r/VphKubB3TI+6tXwNCP2RU0Eka0Y+FwlsS6Q= Subject key identifier: DB:27:09:30:0D:6F:30:30:80:DF:8F:A3:7E:54:D6:B2:8F:C9:94:BD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5D602B8F4DF47CD6D75CC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc8ee0fd-0ac4-38cf-b622-d2925a10c2d7.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 71.202.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5d:60:2b:8f:4d:f4:7c:d6:d7:5c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=58e25f67-ffc5-429d-b574-a16cecdd9918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:80:34:d4:34:d9:c1:80:ff:83:0b:e4:52:4a: 6d:23:86:57:82:e5:55:a0:5f:f1:3d:7d:74:ac:04: 6d:af:3e:58:49:f4:5e:b0:01:e9:29:b2:4d:94:dc: ef:07:0f:f3:63:ba:43:55:39:db:89:7e:fe:2c:33: f9:c2:4d:fc:bf:c2:9c:39:8e:48:88:c4:96:2b:1c: 0e:26:03:bb:8b:9c:3a:42:04:f9:a0:78:76:01:f1: 5b:8e:9c:83:ae:ce:74:bc:54:42:c6:26:c5:5f:22: a9:44:43:76:8b:d3:18:aa:be:bf:af:f0:63:0c:97: cd:97:11:ac:ba:7d:d2:40:39:cc:ad:96:29:6b:5d: 8a:13:71:71:38:93:64:31:9f:e0:f0:31:f1:ee:a8: f4:31:22:8e:58:55:a7:0b:9e:97:de:a8:39:07:c2: 3c:e8:4c:41:d6:09:92:2f:47:88:11:7c:58:a8:8d: ad:7a:19:71:c6:d5:ad:b0:a8:39:0d:75:6d:cf:39: 34:b9:f6:9d:3c:62:a2:3e:ea:ea:0b:80:46:f0:71: c5:0a:3b:e7:73:07:98:f4:d6:e5:03:54:19:c6:16: 3b:9d:37:76:54:19:0a:87:69:39:29:36:74:74:5c: b8:d3:fd:ab:b6:5d:92:91:d5:58:5a:8e:38:07:1c: 7b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:27:09:30:0D:6F:30:30:80:DF:8F:A3:7E:54:D6:B2:8F:C9:94:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc8ee0fd-0ac4-38cf-b622-d2925a10c2d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.202.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:71:91:cb:45:09:16:8f:f2:e5:81:b2:71:70:75:e5:ed:ca: 62:60:e1:aa:db:c7:24:4c:f3:b9:07:53:9d:64:f7:3b:36:ee: c6:eb:22:29:36:bf:92:c2:b7:bf:9d:a6:2a:b5:be:7c:6e:01: c4:0d:50:35:2c:c3:f7:a6:a7:47:d4:62:14:5b:6c:8e:3e:a5: 0e:1d:0f:b2:a1:b2:39:ca:f4:42:d2:00:9b:54:05:07:1f:1b: 3d:28:74:24:e6:a3:55:86:9e:47:47:94:ff:d6:b3:e6:4c:aa: 30:f6:79:ba:b1:3b:0a:c7:f4:83:98:64:c4:66:19:01:80:26: b0:18:fb:2e:70:37:09:1f:2b:99:55:2e:1c:3c:4e:6b:f8:43: fe:50:ac:2b:db:b6:20:06:69:12:63:db:85:6e:11:ec:10:da: 49:6e:33:c5:84:1d:4d:ef:80:ac:1c:e3:71:c2:4f:c7:20:fa: 0d:96:4d:e8:56:a8:c6:0c:51:42:08:70:7d:47:95:ca:09:e8: 3d:bb:7f:21:d7:a4:8c:e5:7d:11:97:fa:57:5e:68:42:4a:14: e8:0d:47:fa:53:78:8c:a2:39:31:bc:bd:63:dd:4a:a2:a3:1e: 38:02:b1:db:34:1f:ff:ee:5c:25:dc:e5:0e:76:cf:0c:1c:d6: 25:4c:29:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXWArj030fNbXXMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NThlMjVmNjctZmZjNS00MjlkLWI1NzQtYTE2Y2VjZGQ5OTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoA01DTZwYD/gwvkUkptI4ZXguVVoF/xPX10 rARtrz5YSfResAHpKbJNlNzvBw/zY7pDVTnbiX7+LDP5wk38v8KcOY5IiMSWKxwO JgO7i5w6QgT5oHh2AfFbjpyDrs50vFRCxibFXyKpREN2i9MYqr6/r/BjDJfNlxGs un3SQDnMrZYpa12KE3FxOJNkMZ/g8DHx7qj0MSKOWFWnC56X3qg5B8I86ExB1gmS L0eIEXxYqI2tehlxxtWtsKg5DXVtzzk0ufadPGKiPurqC4BG8HHFCjvncweY9Nbl A1QZxhY7nTd2VBkKh2k5KTZ0dFy40/2rtl2SkdVYWo44Bxx7+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNsnCTANbzAwgN+Po35U1rKPyZS9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2M4ZWUwZmQtMGFjNC0z OGNmLWI2MjItZDI5MjVhMTBjMmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR8psMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNxkctFCRaP8uWBsnFwdeXtymJg4arbxyRM87kHU51k9zs27sbrIik2 v5LCt7+dpiq1vnxuAcQNUDUsw/emp0fUYhRbbI4+pQ4dD7KhsjnK9ELSAJtUBQcf Gz0odCTmo1WGnkdHlP/Ws+ZMqjD2ebqxOwrH9IOYZMRmGQGAJrAY+y5wNwkfK5lV Lhw8Tmv4Q/5QrCvbtiAGaRJj24VuEewQ2kluM8WEHU3vgKwc43HCT8cg+g2WTehW qMYMUUIIcH1HlcoJ6D27fyHXpIzlfRGX+ldeaEJKFOgNR/pTeIyiOTG8vWPdSqKj HjgCsds0H//uXCXc5Q52zwwc1iVMKZ0= -----END CERTIFICATE-----Generated at Sun Mar 1 23:02:03 2026 by rpki-client