$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e7f47c80-9092-38b0-bd1c-8303b1fc6c08.roa File: e7f47c80-9092-38b0-bd1c-8303b1fc6c08.roa (raw, json) Hash identifier: RE+mQItBiAoTYFZzMOGcjg/wVRlbKI298MBgl+GlbLE= Subject key identifier: 92:46:5C:2F:69:34:EA:17:79:AB:29:26:2B:F4:70:CB:69:B5:CC:C0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE57BE5FC00648A3EFA64180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e7f47c80-9092-38b0-bd1c-8303b1fc6c08.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33287 IP address blocks: 71.224.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:be:5f:c0:06:48:a3:ef:a6:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=a8a0e0a9-1ad1-48c8-b4ff-844b79dbe455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:61:05:a1:ec:3c:e7:db:e5:71:d2:ec:25:75: c5:93:17:2b:09:85:74:ff:ec:a1:35:3c:65:e2:10: db:26:e7:9d:6c:ca:e7:09:69:e1:69:52:ad:1c:69: 3c:df:1e:d8:2d:dd:f9:68:bb:39:9b:8e:64:da:20: a5:27:ac:20:84:88:af:25:1d:01:84:ab:d0:b7:d2: bc:3c:62:fe:d0:b9:f7:58:34:db:f7:9a:94:38:43: e1:0a:75:3e:05:de:d1:9d:6c:ba:6f:e5:27:55:57: 49:a7:3a:1a:d7:c8:e3:df:54:28:40:f2:50:86:b0: d2:18:27:55:53:2a:f5:09:ff:ea:4c:51:b2:9c:2b: 36:7d:d2:d4:70:47:98:03:3d:54:39:44:5f:7e:0b: 6d:11:00:92:55:96:6c:02:78:56:65:98:7a:cc:9e: 26:6b:81:34:0b:a4:25:99:10:33:0f:61:1c:fb:81: 18:14:97:5b:8d:87:73:92:52:91:28:46:09:b3:9a: b5:96:70:cc:4a:63:81:6a:c0:13:92:ee:00:39:9f: f8:9e:99:4a:88:92:b2:62:e7:f2:43:cc:59:d5:23: 41:8d:6c:60:58:87:21:0e:c2:d1:b1:c4:4c:fa:fd: 70:47:76:70:9a:7b:b9:95:5d:dd:53:06:9f:86:b2: c6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:46:5C:2F:69:34:EA:17:79:AB:29:26:2B:F4:70:CB:69:B5:CC:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e7f47c80-9092-38b0-bd1c-8303b1fc6c08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.224.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:a5:37:d7:3e:b2:e5:7a:20:7f:dd:31:80:28:bf:9f:38:95: 0f:b7:db:fe:cf:bc:dc:d5:f0:11:b2:bd:6e:59:7c:be:79:32: 8b:1c:9a:84:be:a5:08:9a:b2:33:86:3e:cd:ec:5b:1d:fa:b7: aa:e3:e6:0c:40:16:f9:fe:61:34:9c:28:0d:a9:12:d6:6c:a8: 72:e8:9b:9f:2c:04:81:ee:0d:72:d9:c8:8d:6f:87:e9:85:29: b0:29:5f:0c:a3:11:17:75:4d:17:65:38:cc:09:f0:ab:0e:4d: bd:e5:b4:71:dc:df:18:95:b9:7c:d7:13:21:b9:11:29:ab:68: c5:a0:a8:4c:b8:ac:bf:33:6a:ef:be:68:d2:ba:03:69:bd:a5: 03:5b:34:a4:64:0d:34:79:7c:41:82:ae:e4:18:fd:14:a0:53: 3c:d1:14:e7:8a:d6:6b:f9:3b:99:68:24:17:ff:4c:2d:b9:76: e1:27:12:0e:15:d6:21:d0:7f:69:a9:ce:bc:a9:74:43:52:c7: fe:6f:3a:46:5d:f8:3e:1d:9b:5b:92:69:e8:07:f4:84:9b:1b: 6d:8b:ef:7f:de:d9:2e:49:a8:5d:c8:cd:86:89:b5:5d:1b:70: b2:15:8e:e1:91:69:3c:23:fc:c4:58:72:c6:d3:62:8a:24:cc: fb:20:7b:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuV75fwAZIo++mQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YThhMGUwYTktMWFkMS00OGM4LWI0ZmYtODQ0Yjc5ZGJlNDU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmEFoew859vlcdLsJXXFkxcrCYV0/+yhNTxl 4hDbJuedbMrnCWnhaVKtHGk83x7YLd35aLs5m45k2iClJ6wghIivJR0BhKvQt9K8 PGL+0Ln3WDTb95qUOEPhCnU+Bd7RnWy6b+UnVVdJpzoa18jj31QoQPJQhrDSGCdV Uyr1Cf/qTFGynCs2fdLUcEeYAz1UOURffgttEQCSVZZsAnhWZZh6zJ4ma4E0C6Ql mRAzD2Ec+4EYFJdbjYdzklKRKEYJs5q1lnDMSmOBasATku4AOZ/4nplKiJKyYufy Q8xZ1SNBjWxgWIchDsLRscRM+v1wR3Zwmnu5lV3dUwafhrLGhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJGXC9pNOoXeaspJiv0cMtptczAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTdmNDdjODAtOTA5Mi0z OGIwLWJkMWMtODMwM2IxZmM2YzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAR+D9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWlN9c+suV6IH/dMYAov584lQ+32/7PvNzV8BGyvW5ZfL55MoscmoS+ pQiasjOGPs3sWx36t6rj5gxAFvn+YTScKA2pEtZsqHLom58sBIHuDXLZyI1vh+mF KbApXwyjERd1TRdlOMwJ8KsOTb3ltHHc3xiVuXzXEyG5ESmraMWgqEy4rL8zau++ aNK6A2m9pQNbNKRkDTR5fEGCruQY/RSgUzzRFOeK1mv5O5loJBf/TC25duEnEg4V 1iHQf2mpzrypdENSx/5vOkZd+D4dm1uSaegH9ISbG22L73/e2S5JqF3IzYaJtV0b cLIVjuGRaTwj/MRYcsbTYookzPsgexU= -----END CERTIFICATE-----Generated at Sun Mar 1 20:53:29 2026 by rpki-client