$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d09c0b18-dbca-38ca-8b52-2b304e25addc.roa File: d09c0b18-dbca-38ca-8b52-2b304e25addc.roa (raw, json) Hash identifier: +QkuFEw3XRcLSWiSkODLMQK3TcgTd8BxEIZYrPHq8eI= Subject key identifier: C7:BE:16:D5:16:F0:89:D9:78:08:52:E2:F8:C6:94:C8:D0:B6:38:0E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5BCC3C2BE3E7B1EA4FF100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d09c0b18-dbca-38ca-8b52-2b304e25addc.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 71.228.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5b:cc:3c:2b:e3:e7:b1:ea:4f:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=a5f4aee6-6b01-4c74-9c1b-a477aacba012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7f:ff:5b:5a:e5:b8:a2:e2:4c:38:b9:b7:db: e7:4e:34:53:d9:1a:f3:2e:41:57:bf:ee:8c:02:f4: 98:5d:b2:4d:2f:5d:7a:af:da:cf:f2:72:4e:2b:f9: e5:68:af:e2:5c:66:50:c9:95:c2:43:3b:dd:17:35: ef:96:3c:00:35:5c:65:f0:4f:5a:d8:b5:57:c5:09: 87:c3:74:44:8a:63:52:f6:1c:84:65:5f:d4:49:21: 54:23:5a:a5:eb:7e:8b:a5:92:f0:4c:1e:de:19:7f: 28:2d:81:32:ef:d2:a2:9e:e3:15:8b:63:f0:b7:dd: 93:71:a0:48:f1:4f:09:cb:2c:36:c7:af:34:0b:50: 0b:60:58:23:c5:74:90:0f:bd:55:dd:92:1f:b3:70: 50:c8:86:ac:ba:9b:2c:12:54:f8:61:83:de:13:d3: 72:77:e2:5f:31:6f:b6:af:8e:c8:51:8c:4d:54:95: 4e:1d:61:ef:e6:d6:ea:4c:e8:ee:cf:ba:f6:4d:bb: 7c:f6:9b:24:0c:69:d9:29:7a:c1:aa:85:92:71:ba: 1e:32:81:56:55:a6:20:72:81:a4:0f:49:94:64:1e: a5:a0:82:7a:ce:e3:d0:f0:23:6e:3e:26:92:4f:b4: 0f:fc:2a:fb:89:a5:b8:cb:69:9f:a6:db:85:1f:73: 79:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:BE:16:D5:16:F0:89:D9:78:08:52:E2:F8:C6:94:C8:D0:B6:38:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d09c0b18-dbca-38ca-8b52-2b304e25addc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.228.60.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:c2:3c:97:dc:d7:de:9f:ed:f6:4f:9f:46:ab:2d:49:ad:7e: aa:62:2d:fa:8a:66:67:56:77:c3:39:fc:d2:85:90:59:8f:f0: 29:63:7b:9a:67:56:0e:37:fb:23:cb:11:c4:13:82:96:87:bb: a3:e2:0e:56:32:5b:65:93:da:ce:b9:20:5d:06:e9:cc:1b:05: 2c:dc:ac:9e:f4:2c:ef:84:cf:e1:af:65:4c:87:3e:36:58:88: b9:63:1b:df:2c:0b:f1:50:c4:8a:0a:24:f0:22:7d:93:aa:72: fd:ea:17:90:74:e1:84:d5:e2:a5:fc:4f:f3:e7:82:14:73:38: f8:61:dd:dc:2b:06:f1:87:a8:c6:76:77:e2:2a:df:7a:a0:75: 2a:1f:dd:d9:ca:58:fc:67:a6:eb:60:cd:3d:2d:a9:ce:90:c7: 50:b8:48:84:87:e5:50:ca:23:f7:ac:78:e2:06:37:d6:1a:80: a9:16:87:67:4a:d9:4c:f2:f5:5e:10:4e:f5:29:72:c9:27:e9: 6e:8d:cc:d5:4f:22:9e:71:da:cf:d9:b6:39:ec:a6:ae:91:50: 47:8b:14:9e:1b:e3:9a:6c:a2:20:1f:90:f1:51:47:f2:24:b7: cc:a8:a9:35:71:35:e5:d4:2e:b9:65:eb:b7:48:45:47:e0:90: d7:85:6f:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuW8w8K+PnsepP8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YTVmNGFlZTYtNmIwMS00Yzc0LTljMWItYTQ3N2FhY2JhMDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApH//W1rluKLiTDi5t9vnTjRT2RrzLkFXv+6M AvSYXbJNL116r9rP8nJOK/nlaK/iXGZQyZXCQzvdFzXvljwANVxl8E9a2LVXxQmH w3REimNS9hyEZV/USSFUI1ql636LpZLwTB7eGX8oLYEy79KinuMVi2Pwt92TcaBI 8U8Jyyw2x680C1ALYFgjxXSQD71V3ZIfs3BQyIasupssElT4YYPeE9Nyd+JfMW+2 r47IUYxNVJVOHWHv5tbqTOjuz7r2Tbt89pskDGnZKXrBqoWScboeMoFWVaYgcoGk D0mUZB6loIJ6zuPQ8CNuPiaST7QP/Cr7iaW4y2mfptuFH3N5bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMe+FtUW8InZeAhS4vjGlMjQtjgOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDA5YzBiMTgtZGJjYS0z OGNhLThiNTItMmIzMDRlMjVhZGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+Q8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3CPJfc196f7fZPn0arLUmtfqpiLfqKZmdWd8M5/NKFkFmP8Clje5pn Vg43+yPLEcQTgpaHu6PiDlYyW2WT2s65IF0G6cwbBSzcrJ70LO+Ez+GvZUyHPjZY iLljG98sC/FQxIoKJPAifZOqcv3qF5B04YTV4qX8T/PnghRzOPhh3dwrBvGHqMZ2 d+Iq33qgdSof3dnKWPxnputgzT0tqc6Qx1C4SISH5VDKI/eseOIGN9YagKkWh2dK 2Uzy9V4QTvUpcskn6W6NzNVPIp5x2s/Ztjnspq6RUEeLFJ4b45psoiAfkPFRR/Ik t8yoqTVxNeXULrll67dIRUfgkNeFbxY= -----END CERTIFICATE-----Generated at Sun Mar 1 20:36:47 2026 by rpki-client