$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0580b04d-bdfd-3604-b13f-94df1f2e2cce.roa File: 0580b04d-bdfd-3604-b13f-94df1f2e2cce.roa (raw, json) Hash identifier: kc2FRorro0sTwDRL9oqN8a7M7ZKbGoH60Nd9M1LlKB0= Subject key identifier: 40:14:A8:09:0C:59:35:9F:2A:1C:D2:5C:66:4C:A3:17:CF:C5:4B:62 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE587DF544EE3601A5F4D680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0580b04d-bdfd-3604-b13f-94df1f2e2cce.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 76.136.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:7d:f5:44:ee:36:01:a5:f4:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=810b323a-8367-4fc1-b7a9-02c38977e993 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:55:b9:59:bf:b8:b2:4c:7c:35:dc:62:17:3a: 6f:b6:e5:2e:99:01:b5:ad:67:6f:a1:ad:ce:c6:f2: de:95:7a:ad:22:5d:c1:2f:fb:72:8d:2e:28:9a:27: e5:9f:9b:b5:63:b8:49:77:1f:a6:f8:72:4d:98:3d: 73:6d:d0:3c:16:4d:e3:91:70:eb:af:78:49:e6:59: 4c:8a:f1:5d:17:4b:77:bd:99:da:e1:af:d9:3c:cc: 1d:41:96:6f:5f:c9:7f:84:4c:74:2a:7f:96:98:92: 2b:8f:25:5c:c7:c3:91:f2:09:91:31:51:67:21:07: 2e:cb:cf:f5:11:68:ad:cb:70:15:e1:6a:eb:cc:75: 56:8e:8b:50:00:d0:26:dd:e9:47:5d:2e:50:a0:51: 0c:81:4b:28:6f:3f:55:53:1c:f9:47:22:5e:71:f0: c0:77:4a:7e:d2:1f:41:a4:bd:cb:eb:73:04:65:d6: fb:68:3c:88:7c:53:6a:b7:6d:2d:24:a0:26:0c:23: 59:0b:6f:55:c3:46:08:32:89:5b:49:b5:1e:8c:bc: d3:f7:26:52:e5:a0:19:a3:f9:c7:5b:14:5d:55:74: 25:97:98:a1:c1:b5:b4:d1:8e:94:19:7b:ec:32:7c: f0:e7:d4:dc:12:72:1e:4d:8b:ed:88:3e:da:30:72: f0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:14:A8:09:0C:59:35:9F:2A:1C:D2:5C:66:4C:A3:17:CF:C5:4B:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0580b04d-bdfd-3604-b13f-94df1f2e2cce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.136.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:1b:f4:ca:ea:42:9e:5f:de:a2:e5:b5:45:ba:3e:62:8c:0c: 43:0b:e7:c0:b0:c5:1c:b4:9e:9e:b9:b3:d7:ca:cd:35:c8:f5: 52:89:96:74:d3:8a:0a:8b:f3:0b:02:32:7d:f9:a3:da:55:cc: a0:c4:be:8c:44:3e:b2:6e:1d:6a:08:17:31:e0:a9:55:50:39: 27:51:15:30:ed:f7:5b:9a:f8:46:c5:5c:2c:71:b1:96:0d:20: ec:c9:2b:09:d6:75:a1:34:d4:06:93:bf:ae:9c:d7:17:83:9e: 29:9c:ad:69:bd:fd:0f:61:43:b1:a2:2a:52:08:5d:b6:b8:f0: f2:fb:21:a5:7d:c1:a9:3f:12:ea:52:5a:e4:d4:26:ef:fb:8a: f4:fd:a1:41:50:b1:4a:93:a7:fb:55:a8:9a:ad:bc:04:88:c7: 13:83:b1:d1:54:fc:68:fc:aa:22:d9:a6:51:3f:2d:10:56:84: fc:d3:42:2c:b2:bc:be:9b:3f:60:b1:59:e0:8f:10:ab:f6:7a: 91:d2:07:ff:3d:a2:4d:8f:ee:d2:a9:3d:7d:69:57:98:77:55: 73:cd:e8:d0:5b:0f:5b:e0:1f:61:fd:ff:49:2e:f7:eb:21:80: 5a:9d:1c:a5:ab:53:fc:f8:76:24:9e:bf:1d:65:fc:ad:28:cd: 03:15:39:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWH31RO42AaX01oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ODEwYjMyM2EtODM2Ny00ZmMxLWI3YTktMDJjMzg5NzdlOTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolW5Wb+4skx8NdxiFzpvtuUumQG1rWdvoa3O xvLelXqtIl3BL/tyjS4omifln5u1Y7hJdx+m+HJNmD1zbdA8Fk3jkXDrr3hJ5llM ivFdF0t3vZna4a/ZPMwdQZZvX8l/hEx0Kn+WmJIrjyVcx8OR8gmRMVFnIQcuy8/1 EWity3AV4WrrzHVWjotQANAm3elHXS5QoFEMgUsobz9VUxz5RyJecfDAd0p+0h9B pL3L63MEZdb7aDyIfFNqt20tJKAmDCNZC29Vw0YIMolbSbUejLzT9yZS5aAZo/nH WxRdVXQll5ihwbW00Y6UGXvsMnzw59TcEnIeTYvtiD7aMHLwWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEAUqAkMWTWfKhzSXGZMoxfPxUtiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDU4MGIwNGQtYmRmZC0z NjA0LWIxM2YtOTRkZjFmMmUyY2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTIioMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEb9MrqQp5f3qLltUW6PmKMDEML58CwxRy0np65s9fKzTXI9VKJlnTT igqL8wsCMn35o9pVzKDEvoxEPrJuHWoIFzHgqVVQOSdRFTDt91ua+EbFXCxxsZYN IOzJKwnWdaE01AaTv66c1xeDnimcrWm9/Q9hQ7GiKlIIXba48PL7IaV9wak/EupS WuTUJu/7ivT9oUFQsUqTp/tVqJqtvASIxxODsdFU/Gj8qiLZplE/LRBWhPzTQiyy vL6bP2CxWeCPEKv2epHSB/89ok2P7tKpPX1pV5h3VXPN6NBbD1vgH2H9/0ku9+sh gFqdHKWrU/z4diSevx1l/K0ozQMVOck= -----END CERTIFICATE-----Generated at Sun Mar 1 22:34:12 2026 by rpki-client