$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/5c71001e-a55c-33db-bcc0-223bccba2b97.roa File: 5c71001e-a55c-33db-bcc0-223bccba2b97.roa (raw, json) Hash identifier: alKVG9D1L9f31g3H4XYcc7lmWxlADGenGrC25+NI8oA= Subject key identifier: B9:8B:41:26:C9:06:AC:5E:0B:08:A5:45:6A:04:79:35:C0:84:D8:7E Certificate issuer: /CN=ad6556d7-60a4-4318-9d11-464fb8396d3e Certificate serial: 010D0C9F4328584CBF172702A5CA542AF8268600 Authority key identifier: 5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/5c71001e-a55c-33db-bcc0-223bccba2b97.roa Signing time: Wed 04 Feb 2026 02:00:31 +0000 ROA not before: Wed 04 Feb 2026 02:00:31 +0000 ROA not after: Tue 05 May 2026 01:00:31 +0000 asID: 393220 IP address blocks: 199.71.0.0/24 maxlen: 24 2001:500:31::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bf:17:27:02:a5:ca:54:2a:f8:26:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad6556d7-60a4-4318-9d11-464fb8396d3e Validity Not Before: Feb 4 02:00:31 2026 GMT Not After : May 5 01:00:31 2026 GMT Subject: CN=89c7c512-79c5-42bb-8631-d4005acb2a43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a9:c1:e0:6e:f8:c0:da:c8:59:29:fa:0c:20: 97:c3:9e:b6:f2:61:4a:0b:96:ab:71:b2:26:5f:10: 0a:e9:56:c3:3a:1b:1e:5f:da:bc:ed:83:f5:0c:8b: b6:f2:6c:77:55:da:0e:d2:c4:f7:a5:94:e2:ff:88: 69:8c:18:20:53:6d:bb:52:06:8d:b4:11:49:3b:36: fa:4a:d1:8b:de:47:5d:76:6e:2b:1f:72:53:c5:3c: 4e:79:d6:87:01:f9:b5:a4:3c:eb:58:a5:fa:15:f4: 1b:ae:0f:96:c8:8e:76:3b:fd:4c:21:20:68:2b:ae: cf:e0:3c:fa:ef:d2:e9:99:53:43:02:e6:42:f1:cc: 79:d2:3e:26:4b:01:80:70:f1:d8:92:a2:78:83:7c: 1c:08:25:49:c0:bb:55:2c:b0:6d:c8:cf:c3:15:dd: 38:4e:cf:40:b9:d9:ee:a3:9e:6b:b7:1e:26:aa:f4: 92:f2:0c:6a:79:88:e3:38:e3:04:3d:8d:97:a4:ed: db:ef:36:df:b6:6a:06:dd:2b:4a:cc:df:40:e0:b4: 5a:71:6f:d3:fc:19:37:a4:95:54:15:93:1d:4b:ce: a5:fb:6e:c4:8f:e0:fb:f6:fd:5e:92:5b:13:01:9c: f7:0c:3b:52:fe:70:82:6c:bf:90:63:98:ce:30:8d: d1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:8B:41:26:C9:06:AC:5E:0B:08:A5:45:6A:04:79:35:C0:84:D8:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/5c71001e-a55c-33db-bcc0-223bccba2b97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl X509v3 Authority Key Identifier: keyid:5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer sbgp-ipAddrBlock: critical IPv4: 199.71.0.0/24 IPv6: 2001:500:31::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:9e:95:15:c8:5d:3c:21:79:a8:dc:3b:69:1d:32:6a:08:4b: 13:fd:3d:1c:8d:c0:08:98:5b:52:35:fc:1e:3b:e0:ea:6a:9e: 86:f0:97:b4:5d:7f:88:8b:ff:f3:dc:93:3b:36:86:7b:2f:68: 99:33:f2:5b:e2:26:00:d3:52:08:dc:62:a4:e1:a5:d3:6a:c6: 00:7b:76:19:a6:c4:6d:49:0b:4e:60:dd:51:db:78:85:9f:a4: 98:ad:41:e8:3e:01:69:d0:99:a6:6e:4f:5b:3d:f4:78:ed:f3: 4d:3b:02:9a:27:c7:44:2a:ed:44:cc:2a:35:02:aa:25:22:52: 8c:3d:82:c3:ef:66:b2:51:25:62:6d:53:2f:3a:9f:25:38:f5: 40:08:7f:a2:20:20:b8:cd:83:80:50:de:7f:9a:1a:60:26:8f: 66:25:49:4c:4b:26:05:08:89:b9:64:bb:df:25:b5:48:10:c6: 1b:41:c2:5a:06:ed:4d:17:d0:19:c4:73:4e:62:f9:0a:86:21: 54:f1:14:ab:60:3c:d4:f6:71:da:bc:1e:19:9c:02:c4:3f:13: 03:cb:0a:48:a5:60:1b:5f:15:ec:a5:08:9b:5c:d2:7a:7c:a3: f9:5d:94:c3:34:41:67:34:f1:38:08:2a:5f:38:3f:eb:39:67: c6:ea:67:ae -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEy/FycCpcpUKvgmhgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWQ2NTU2ZDctNjBhNC00MzE4LTlkMTEtNDY0ZmI4Mzk2 ZDNlMB4XDTI2MDIwNDAyMDAzMVoXDTI2MDUwNTAxMDAzMVowLzEtMCsGA1UEAxMk ODljN2M1MTItNzljNS00MmJiLTg2MzEtZDQwMDVhY2IyYTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqnB4G74wNrIWSn6DCCXw5628mFKC5arcbIm XxAK6VbDOhseX9q87YP1DIu28mx3VdoO0sT3pZTi/4hpjBggU227UgaNtBFJOzb6 StGL3kdddm4rH3JTxTxOedaHAfm1pDzrWKX6FfQbrg+WyI52O/1MISBoK67P4Dz6 79LpmVNDAuZC8cx50j4mSwGAcPHYkqJ4g3wcCCVJwLtVLLBtyM/DFd04Ts9Audnu o55rtx4mqvSS8gxqeYjjOOMEPY2XpO3b7zbftmoG3StKzN9A4LRacW/T/Bk3pJVU FZMdS86l+27Ej+D79v1eklsTAZz3DDtS/nCCbL+QY5jOMI3RUwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFLmLQSbJBqxeCwilRWoEeTXAhNh+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hZDY1 NTZkNy02MGE0LTQzMTgtOWQxMS00NjRmYjgzOTZkM2UvNWM3MTAwMWUtYTU1Yy0z M2RiLWJjYzAtMjIzYmNjYmEyYjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYWQ2NTU2ZDctNjBhNC00MzE4LTlk MTEtNDY0ZmI4Mzk2ZDNlL2FkNjU1NmQ3LTYwYTQtNDMxOC05ZDExLTQ2NGZiODM5 NmQzZS5jcmwwHwYDVR0jBBgwFoAUXcH9mmOFwY9GUkq4xGL1NCS8r44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hZDY1NTZkNy02MGE0LTQzMTgtOWQxMS00NjRm YjgzOTZkM2UuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAx0cAMA8E AgACMAkDBwAgAQUAADEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAnp6VFchdPCF5qNw7aR0yaghLE/09HI3A CJhbUjX8Hjvg6mqehvCXtF1/iIv/89yTOzaGey9omTPyW+ImANNSCNxipOGl02rG AHt2GabEbUkLTmDdUdt4hZ+kmK1B6D4BadCZpm5PWz30eO3zTTsCmifHRCrtRMwq NQKqJSJSjD2Cw+9mslElYm1TLzqfJTj1QAh/oiAguM2DgFDef5oaYCaPZiVJTEsm BQiJuWS73yW1SBDGG0HCWgbtTRfQGcRzTmL5CoYhVPEUq2A81PZx2rweGZwCxD8T A8sKSKVgG18V7KUIm1zSenyj+V2UwzRBZzTxOAgqXzg/6zlnxupnrg== -----END CERTIFICATE-----Generated at Mon Mar 2 20:14:50 2026 by rpki-client