$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd069b29-5fe4-310a-8e13-daa4a649aae4.roa File: dd069b29-5fe4-310a-8e13-daa4a649aae4.roa (raw, json) Hash identifier: NG9xECGnDLR7XCyLGy6H+7rBk8D+hpJwUNJpqouoPZQ= Subject key identifier: AB:36:90:A7:3B:49:83:C9:3B:1A:25:4E:1D:2A:3B:CA:6B:CC:10:55 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE574984F660B9FA128BD700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd069b29-5fe4-310a-8e13-daa4a649aae4.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33660 IP address blocks: 71.199.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:49:84:f6:60:b9:fa:12:8b:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=d5d124ef-3939-4cbf-83ec-693518ef5531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b0:a9:60:25:e2:9f:a8:5a:f8:cf:7d:51:b0: d1:da:c2:d6:1f:f1:34:d4:07:35:af:be:55:a6:a7: 3a:70:13:0f:27:d9:a7:b4:b4:87:2d:e8:3c:86:74: 69:a2:fd:62:44:f1:3c:37:73:37:bb:2a:6e:e0:d3: a3:94:93:84:a8:c6:89:29:4b:95:98:5d:40:f3:52: 2a:e5:b4:80:04:dc:e7:bd:55:89:fd:ff:d7:84:71: 35:28:27:6f:b7:2b:bd:fe:ae:f8:53:e4:a2:35:96: 12:70:dd:6e:93:ab:fe:c4:59:84:58:a2:92:8e:e4: b1:bb:55:2e:88:b1:7d:c7:a5:5f:ab:52:fd:31:aa: 9b:19:b9:f4:27:27:87:8c:b3:03:89:95:c5:6f:56: 22:bb:7d:df:ff:90:d2:29:a5:85:6f:2c:5f:bd:37: b5:9c:59:be:d6:0f:35:84:1f:15:12:29:b1:a7:3a: 23:58:23:96:fa:fe:66:74:7b:e5:9d:72:f1:df:bd: 18:2e:a0:8e:74:96:1c:68:09:f3:e9:42:61:46:4f: 44:3e:e4:b0:28:d4:17:c6:8d:ca:ab:0d:a7:18:15: 80:37:9c:f3:02:1e:c0:e9:1f:82:28:95:48:f0:0c: 46:2a:b0:99:62:94:b2:c6:39:c7:a2:e3:81:84:d8: 23:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:36:90:A7:3B:49:83:C9:3B:1A:25:4E:1D:2A:3B:CA:6B:CC:10:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd069b29-5fe4-310a-8e13-daa4a649aae4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.199.16.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:95:b7:7f:a9:19:e3:0e:44:75:25:66:5c:e1:97:93:96:0d: 7d:86:e1:f7:40:f4:64:9d:42:1a:7e:74:07:a8:8d:37:f0:61: eb:04:c1:df:44:7f:27:94:71:bd:7a:bd:eb:40:4f:bb:14:1a: 70:c0:19:53:68:46:eb:da:d5:0a:23:69:9b:e7:05:52:9a:32: 45:8a:45:f4:30:e2:9f:1e:16:27:91:73:41:13:24:2a:8d:8d: fc:f4:b7:5d:7e:23:0b:d8:10:da:4d:bf:48:fe:20:ec:df:35: 4a:c0:80:f0:cb:3b:dc:ea:d0:95:f4:23:89:d6:83:65:d3:d6: 2a:d0:87:1c:b7:1c:71:b2:d6:96:38:02:a6:5d:e8:1a:8f:95: 55:41:1f:25:55:7d:57:6c:6c:c3:1d:1e:c4:0a:31:60:96:9d: 51:da:a8:7e:f3:5b:29:a2:6b:76:b1:6c:24:e3:f8:4f:16:f2: 1f:26:57:8c:17:64:98:98:53:30:8d:92:ac:15:75:68:ee:74: de:39:69:79:9b:1c:4e:07:0f:d7:c9:f5:9f:16:c4:8f:e3:2e: 32:f8:82:2e:cd:21:98:00:ac:0c:db:7a:33:9c:d5:74:6f:9b: f1:4b:cf:d2:e6:1f:19:d7:ba:7a:9b:33:07:65:23:50:6d:64: 87:5d:87:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuV0mE9mC5+hKL1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZDVkMTI0ZWYtMzkzOS00Y2JmLTgzZWMtNjkzNTE4ZWY1NTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbCpYCXin6ha+M99UbDR2sLWH/E01Ac1r75V pqc6cBMPJ9mntLSHLeg8hnRpov1iRPE8N3M3uypu4NOjlJOEqMaJKUuVmF1A81Iq 5bSABNznvVWJ/f/XhHE1KCdvtyu9/q74U+SiNZYScN1uk6v+xFmEWKKSjuSxu1Uu iLF9x6Vfq1L9MaqbGbn0JyeHjLMDiZXFb1Yiu33f/5DSKaWFbyxfvTe1nFm+1g81 hB8VEimxpzojWCOW+v5mdHvlnXLx370YLqCOdJYcaAnz6UJhRk9EPuSwKNQXxo3K qw2nGBWAN5zzAh7A6R+CKJVI8AxGKrCZYpSyxjnHouOBhNgjswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKs2kKc7SYPJOxolTh0qO8przBBVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGQwNjliMjktNWZlNC0z MTBhLThlMTMtZGFhNGE2NDlhYWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR8cQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWVt3+pGeMORHUlZlzhl5OWDX2G4fdA9GSdQhp+dAeojTfwYesEwd9E fyeUcb16vetAT7sUGnDAGVNoRuva1QojaZvnBVKaMkWKRfQw4p8eFieRc0ETJCqN jfz0t11+IwvYENpNv0j+IOzfNUrAgPDLO9zq0JX0I4nWg2XT1irQhxy3HHGy1pY4 AqZd6BqPlVVBHyVVfVdsbMMdHsQKMWCWnVHaqH7zWymia3axbCTj+E8W8h8mV4wX ZJiYUzCNkqwVdWjudN45aXmbHE4HD9fJ9Z8WxI/jLjL4gi7NIZgArAzbejOc1XRv m/FLz9LmHxnXunqbMwdlI1BtZIddh1w= -----END CERTIFICATE-----Generated at Mon Mar 2 00:57:45 2026 by rpki-client