$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7df17b0-ce99-3614-b213-a64b7c208faa.roa File: f7df17b0-ce99-3614-b213-a64b7c208faa.roa (raw, json) Hash identifier: +P+zZ9bvpG6QczwB2HccvPeIYkdQAzfMVy3fpAZQwCE= Subject key identifier: 44:67:F0:2D:0A:60:3D:89:88:C5:90:C1:8D:5D:F8:04:94:77:55:11 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE582E43CFD1012A708F8EE0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7df17b0-ce99-3614-b213-a64b7c208faa.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 71.228.34.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:2e:43:cf:d1:01:2a:70:8f:8e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=b0461a59-a7ef-4d94-952b-a4c0f24fed22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b3:8c:ad:4e:40:16:66:01:d7:31:9d:d0:b1: 18:77:b4:d9:7f:64:6d:33:d9:01:60:3c:c7:cd:ee: bf:dd:62:21:72:13:f4:8a:b4:1b:1e:08:a0:7b:a7: 06:f9:cf:55:c2:04:78:04:d6:35:be:f1:2e:52:1d: f7:d2:aa:c4:2e:a3:7d:38:91:99:27:ef:dd:2a:a8: ab:28:52:cb:7f:fc:d3:b3:6e:ba:81:5e:2f:c8:49: 04:79:2a:e1:8a:0f:33:53:32:b6:58:7c:f4:64:c6: 9f:49:28:5f:48:2a:20:f8:a8:9c:cd:d5:35:5d:26: 67:a0:56:1c:18:aa:3b:b9:a8:79:52:4f:39:1a:30: 7b:9e:ac:cc:a7:87:10:e7:fd:d3:79:fb:f4:9d:0f: 28:9b:8a:3b:99:b7:ec:9c:e4:dd:0f:8a:51:43:6d: 98:27:5c:fd:90:8b:64:55:23:0a:38:5a:51:a5:12: 50:7f:d3:06:9a:70:f6:38:2f:5c:ce:54:c1:28:c2: 5d:62:7e:b5:e3:10:fc:fc:45:89:d9:12:04:5f:77: f9:91:79:c9:50:ae:f4:01:66:b9:5e:fc:06:3e:ed: 6a:d8:d3:d2:a3:23:3a:ae:88:44:26:87:7f:43:a5: 2a:fd:b2:6b:a7:5d:dd:a9:83:d0:52:c0:fa:69:f5: 65:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:67:F0:2D:0A:60:3D:89:88:C5:90:C1:8D:5D:F8:04:94:77:55:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7df17b0-ce99-3614-b213-a64b7c208faa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.228.34.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:94:08:aa:8a:30:96:4e:83:b2:8e:80:82:5f:0f:2a:69:0a: 6c:20:98:68:16:0e:4c:bf:16:5e:28:30:88:f5:25:3c:7c:bf: 8e:d1:3f:a7:ce:58:7b:c8:ff:f5:2c:95:88:55:75:df:b5:d2: 0b:86:41:97:bc:81:28:f2:3c:0a:8e:e2:4f:1a:58:b9:a3:bd: 01:d0:a7:bc:d1:07:0b:f3:b0:e9:58:ed:ea:8e:68:8e:eb:24: e2:d9:98:f8:14:d8:2c:97:7b:b5:65:4f:fa:85:08:9d:ae:3a: 9c:81:2b:0a:c2:3c:41:eb:de:4c:a9:a4:c8:9d:13:ec:a3:63: da:41:f9:27:be:54:72:ef:1e:c7:30:50:3e:84:28:58:d1:e2: 91:4e:3b:03:9b:e6:de:95:f5:fe:e2:ee:bf:3d:ea:55:79:4b: 6f:c6:1b:48:7f:71:18:65:5a:86:27:c8:e8:f3:60:96:12:2b: 72:f4:be:ef:9e:f3:c3:a5:93:a0:30:e9:01:64:21:4f:85:b1: f7:66:b8:87:1f:ce:70:59:04:22:04:2d:ae:27:d2:6a:94:2a: 73:e1:07:a2:22:2b:5d:88:ad:9a:66:61:a4:0f:95:27:e5:be: 5e:09:cc:6f:b1:20:2a:7b:e7:43:c1:4b:db:da:d4:0c:dd:05: 98:a6:79:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWC5Dz9EBKnCPjuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YjA0NjFhNTktYTdlZi00ZDk0LTk1MmItYTRjMGYyNGZlZDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLOMrU5AFmYB1zGd0LEYd7TZf2RtM9kBYDzH ze6/3WIhchP0irQbHgige6cG+c9VwgR4BNY1vvEuUh330qrELqN9OJGZJ+/dKqir KFLLf/zTs266gV4vyEkEeSrhig8zUzK2WHz0ZMafSShfSCog+KiczdU1XSZnoFYc GKo7uah5Uk85GjB7nqzMp4cQ5/3Tefv0nQ8om4o7mbfsnOTdD4pRQ22YJ1z9kItk VSMKOFpRpRJQf9MGmnD2OC9czlTBKMJdYn614xD8/EWJ2RIEX3f5kXnJUK70AWa5 XvwGPu1q2NPSoyM6rohEJod/Q6Uq/bJrp13dqYPQUsD6afVllwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERn8C0KYD2JiMWQwY1d+ASUd1URMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjdkZjE3YjAtY2U5OS0z NjE0LWIyMTMtYTY0YjdjMjA4ZmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+QiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECUCKqKMJZOg7KOgIJfDyppCmwgmGgWDky/Fl4oMIj1JTx8v47RP6fO WHvI//UslYhVdd+10guGQZe8gSjyPAqO4k8aWLmjvQHQp7zRBwvzsOlY7eqOaI7r JOLZmPgU2CyXe7VlT/qFCJ2uOpyBKwrCPEHr3kyppMidE+yjY9pB+Se+VHLvHscw UD6EKFjR4pFOOwOb5t6V9f7i7r896lV5S2/GG0h/cRhlWoYnyOjzYJYSK3L0vu+e 88Olk6Aw6QFkIU+FsfdmuIcfznBZBCIELa4n0mqUKnPhB6IiK12IrZpmYaQPlSfl vl4JzG+xICp750PBS9va1AzdBZimeU4= -----END CERTIFICATE-----Generated at Sun Mar 1 18:35:09 2026 by rpki-client