$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/e52ddde9-8035-3a15-9b3a-f71ce12301b2.roa File: e52ddde9-8035-3a15-9b3a-f71ce12301b2.roa (raw, json) Hash identifier: r7ocCm15+WXhMfvbc8Ef2vqfGjQm0LohP9wntllZZ3c= Subject key identifier: 59:5B:83:1F:27:BE:F7:99:8E:08:D3:A9:16:B2:64:40:B9:F5:D0:69 Certificate issuer: /CN=2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65 Certificate serial: 010D0C9F4328584CAE571A8B8D2303DEFCC23F80 Authority key identifier: FE:FC:FB:A5:07:E3:E4:59:51:89:82:45:0E:83:84:F3:DA:D5:28:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/e52ddde9-8035-3a15-9b3a-f71ce12301b2.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 10439 IP address blocks: 71.6.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:1a:8b:8d:23:03:de:fc:c2:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=a07881cd-aa81-409f-8d95-9bc873aff8e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:21:58:e5:15:d8:2e:f4:5f:d9:26:46:75:6e: 6c:48:38:13:97:4d:18:7d:d4:fb:2c:75:09:a9:c4: 89:da:ac:36:db:82:63:c1:b8:ba:f6:48:8b:54:f8: ba:2f:e9:cb:d0:fe:46:9e:88:ed:7e:70:9b:75:57: bc:45:86:ee:95:2c:9a:98:5d:a8:f1:71:e4:ed:80: 51:23:4a:bc:56:20:59:2a:56:41:7f:3e:35:89:84: 64:07:5d:df:74:dd:be:ca:ea:bb:9e:6e:a4:de:df: 01:a9:b1:25:6d:2e:5c:48:ce:d6:68:c0:c9:e0:e2: a7:43:c1:9b:34:22:e7:05:d1:33:27:e8:05:b7:8b: 02:73:d1:8f:09:e9:60:85:93:09:00:9d:dd:e3:90: 53:f2:f8:80:95:68:8a:39:cb:a1:1b:c4:2a:b6:fc: 18:02:6c:8f:ec:ad:d5:d6:a6:04:29:7f:0e:59:7c: b2:14:95:a3:0d:48:65:f0:96:73:8b:d0:81:ad:ef: 8a:a4:23:41:22:99:ba:f3:e6:32:5b:ce:f4:c0:05: 53:1a:c5:a9:17:91:20:fc:ec:59:9a:88:70:0c:44: 2a:44:09:04:87:c1:77:bf:9d:2b:36:7e:80:c2:51: 92:b7:5c:3f:42:a5:54:54:4f:cc:4c:80:d8:bc:ad: c1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:5B:83:1F:27:BE:F7:99:8E:08:D3:A9:16:B2:64:40:B9:F5:D0:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/e52ddde9-8035-3a15-9b3a-f71ce12301b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.crl X509v3 Authority Key Identifier: keyid:FE:FC:FB:A5:07:E3:E4:59:51:89:82:45:0E:83:84:F3:DA:D5:28:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.cer sbgp-ipAddrBlock: critical IPv4: 71.6.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:19:d8:c3:72:aa:3a:05:ab:78:c2:3d:05:e3:0c:66:21:cc: 9f:6e:4c:13:38:ac:66:cf:37:84:bd:e9:0c:ec:2b:55:5d:e3: ef:7d:42:8b:28:56:ec:02:5b:fa:86:7a:8c:6f:9f:d3:ab:98: 6f:4a:4c:6c:64:4a:50:38:d7:c7:85:26:65:f0:ca:5e:94:cc: 44:e9:4b:ea:8d:d4:38:20:ae:ae:d2:26:b1:4f:2a:50:bb:16: d0:72:ed:03:cf:3f:0d:aa:19:30:08:d3:1e:29:6c:99:ec:b9: 3b:7f:66:43:66:b5:38:e5:9d:4e:2b:76:60:fa:32:8e:8f:69: 65:99:7a:d2:12:9d:69:94:19:9a:73:16:c6:dc:88:33:8c:f2: 0b:d2:64:98:07:bc:9f:63:b0:96:19:ee:69:8c:e5:6e:62:84: a8:a1:97:95:45:ac:58:a8:3b:dc:ae:c9:86:cf:c8:c3:02:6d: b6:d7:59:6c:75:d9:b2:ce:b4:21:cb:67:64:f0:a4:38:be:fe: 52:04:95:b6:a8:df:1b:e8:d3:b9:0d:b6:25:32:5e:cb:d8:07: b2:07:cc:25:aa:cb:77:58:2d:b8:3c:7d:3a:58:15:e1:ea:a4: 12:15:f5:fa:53:fe:1b:00:2f:9c:2d:6b:28:3f:8f:cd:39:ba: 6f:81:ce:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVxqLjSMD3vzCP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmYyZWQ4N2UtMjdmOS00MTRjLWE3YWYtMmI1YjVmZmEz ZjY1MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YTA3ODgxY2QtYWE4MS00MDlmLThkOTUtOWJjODczYWZmOGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySFY5RXYLvRf2SZGdW5sSDgTl00YfdT7LHUJ qcSJ2qw224Jjwbi69kiLVPi6L+nL0P5GnojtfnCbdVe8RYbulSyamF2o8XHk7YBR I0q8ViBZKlZBfz41iYRkB13fdN2+yuq7nm6k3t8BqbElbS5cSM7WaMDJ4OKnQ8Gb NCLnBdEzJ+gFt4sCc9GPCelghZMJAJ3d45BT8viAlWiKOcuhG8QqtvwYAmyP7K3V 1qYEKX8OWXyyFJWjDUhl8JZzi9CBre+KpCNBIpm68+YyW870wAVTGsWpF5Eg/OxZ mohwDEQqRAkEh8F3v50rNn6AwlGSt1w/QqVUVE/MTIDYvK3BtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFlbgx8nvveZjgjTqRayZEC59dBpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yZjJl ZDg3ZS0yN2Y5LTQxNGMtYTdhZi0yYjViNWZmYTNmNjUvZTUyZGRkZTktODAzNS0z YTE1LTliM2EtZjcxY2UxMjMwMWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmYyZWQ4N2UtMjdmOS00MTRjLWE3 YWYtMmI1YjVmZmEzZjY1LzJmMmVkODdlLTI3ZjktNDE0Yy1hN2FmLTJiNWI1ZmZh M2Y2NS5jcmwwHwYDVR0jBBgwFoAU/vz7pQfj5FlRiYJFDoOE89rVKHswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yZjJlZDg3ZS0yN2Y5LTQxNGMtYTdhZi0yYjVi NWZmYTNmNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHRwaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgZ2MNyqjoFq3jCPQXjDGYhzJ9uTBM4rGbPN4S96QzsK1Vd4+99Qoso VuwCW/qGeoxvn9OrmG9KTGxkSlA418eFJmXwyl6UzETpS+qN1Dggrq7SJrFPKlC7 FtBy7QPPPw2qGTAI0x4pbJnsuTt/ZkNmtTjlnU4rdmD6Mo6PaWWZetISnWmUGZpz FsbciDOM8gvSZJgHvJ9jsJYZ7mmM5W5ihKihl5VFrFioO9yuyYbPyMMCbbbXWWx1 2bLOtCHLZ2TwpDi+/lIElbao3xvo07kNtiUyXsvYB7IHzCWqy3dYLbg8fTpYFeHq pBIV9fpT/hsAL5wtayg/j805um+BzpI= -----END CERTIFICATE-----Generated at Mon Mar 2 13:21:29 2026 by rpki-client