$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e291c7a-af11-34db-af86-63029a7763ea.roa File: 0e291c7a-af11-34db-af86-63029a7763ea.roa (raw, json) Hash identifier: ic0VJfwgDDO2wpFRbLYQUs/9AwJs9qM7C5cAAuezZro= Subject key identifier: 40:A0:B1:2C:D7:25:76:C6:0C:28:77:5C:99:51:0C:FE:12:77:E1:CA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE58C5906E4BD5D0B55A4000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e291c7a-af11-34db-af86-63029a7763ea.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 67.188.24.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:c5:90:6e:4b:d5:d0:b5:5a:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=113bfa4b-9647-4b74-9a58-fd5ca274f040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a6:6a:bb:2b:eb:eb:25:5b:35:63:18:b9:11: 0c:dc:4f:22:d2:85:6e:89:81:70:61:bb:dc:f4:49: f2:d8:2b:53:76:6b:3d:be:3f:3e:67:2e:74:a6:98: 88:14:08:26:a1:a3:6f:8b:02:d7:5b:4f:27:39:a2: eb:84:91:81:26:02:63:22:0c:41:2e:f3:4c:3b:f2: 1f:0e:ac:80:56:b8:55:98:92:04:5b:c7:52:81:ce: 28:6a:11:09:1d:aa:f9:38:ff:c6:69:5a:b4:c0:d8: 5f:1e:9a:e8:45:79:73:5f:9b:01:4e:7d:72:9e:68: fd:38:93:bf:e0:41:eb:91:1e:11:80:57:ee:84:e9: 32:af:80:c4:21:70:c3:c0:0c:37:7c:04:21:5f:dc: 08:d5:59:cd:b0:64:79:3a:00:af:fb:b8:f1:ba:13: a3:b3:46:f3:b9:45:35:97:fb:91:9a:d1:52:dc:a6: 65:c1:72:4c:5b:b6:da:5f:4d:1b:6e:9c:08:c1:4e: d9:f1:5f:25:28:7c:57:79:76:f3:05:a5:66:b7:28: 15:a8:b7:b3:f1:4c:18:52:ee:e8:4f:3d:ce:9f:9d: 44:b0:8d:7f:88:e7:75:02:06:e8:e4:69:5d:0d:54: 3f:8b:3f:af:52:f0:3b:80:78:b3:01:30:b6:35:f6: a2:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:A0:B1:2C:D7:25:76:C6:0C:28:77:5C:99:51:0C:FE:12:77:E1:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e291c7a-af11-34db-af86-63029a7763ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.188.24.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:c3:56:9b:6b:1d:dc:7b:b5:3b:21:30:b9:c6:da:42:f3:8a: c5:82:ac:4b:bf:1c:4d:8d:29:15:25:e3:06:48:fa:c0:14:e9: e6:9d:d1:42:04:49:61:86:5f:b7:b8:c9:8f:66:d5:a4:b3:aa: 6e:c9:68:e1:3c:90:3e:d7:e2:6e:0f:98:3f:46:70:23:ea:df: 1a:ab:43:67:af:c6:d5:97:77:da:c5:e9:c4:77:d5:c8:7d:9d: eb:7a:93:3b:58:33:af:9b:fe:8a:d9:ae:b2:56:da:2f:8a:ef: 7a:13:c8:7d:4e:c8:69:99:0c:5c:5f:e4:12:54:f0:30:88:f8: 2c:2b:88:13:ef:b9:eb:bc:54:fb:9f:7b:ae:88:ec:c0:10:92: 20:b7:da:86:4c:32:86:e0:be:09:34:56:21:b5:c3:38:33:b4: dd:10:87:93:07:79:56:aa:c4:83:d7:b3:cd:fb:29:26:17:88: d0:4e:20:cb:26:a4:76:0a:af:7d:14:7f:fe:7f:65:0f:ae:70: 61:bd:36:76:1f:ca:fc:f0:f4:db:5e:6c:58:37:19:70:84:1a: 13:d0:e6:85:4a:f4:d8:34:24:0e:71:7c:4c:72:f3:1d:41:98: bd:3a:29:ee:a7:8a:e1:27:df:4c:40:db:b0:28:b8:0b:83:74: 84:92:95:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWMWQbkvV0LVaQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MTEzYmZhNGItOTY0Ny00Yjc0LTlhNTgtZmQ1Y2EyNzRmMDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6Zquyvr6yVbNWMYuREM3E8i0oVuiYFwYbvc 9Eny2CtTdms9vj8+Zy50ppiIFAgmoaNviwLXW08nOaLrhJGBJgJjIgxBLvNMO/If DqyAVrhVmJIEW8dSgc4oahEJHar5OP/GaVq0wNhfHproRXlzX5sBTn1ynmj9OJO/ 4EHrkR4RgFfuhOkyr4DEIXDDwAw3fAQhX9wI1VnNsGR5OgCv+7jxuhOjs0bzuUU1 l/uRmtFS3KZlwXJMW7baX00bbpwIwU7Z8V8lKHxXeXbzBaVmtygVqLez8UwYUu7o Tz3On51EsI1/iOd1Agbo5GldDVQ/iz+vUvA7gHizATC2Nfai0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECgsSzXJXbGDCh3XJlRDP4Sd+HKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGUyOTFjN2EtYWYxMS0z NGRiLWFmODYtNjMwMjlhNzc2M2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ7wYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALbDVptrHdx7tTshMLnG2kLzisWCrEu/HE2NKRUl4wZI+sAU6ead0UIE SWGGX7e4yY9m1aSzqm7JaOE8kD7X4m4PmD9GcCPq3xqrQ2evxtWXd9rF6cR31ch9 net6kztYM6+b/orZrrJW2i+K73oTyH1OyGmZDFxf5BJU8DCI+CwriBPvueu8VPuf e66I7MAQkiC32oZMMobgvgk0ViG1wzgztN0Qh5MHeVaqxIPXs837KSYXiNBOIMsm pHYKr30Uf/5/ZQ+ucGG9NnYfyvzw9NtebFg3GXCEGhPQ5oVK9Ng0JA5xfExy8x1B mL06Ke6niuEn30xA27AouAuDdISSlRQ= -----END CERTIFICATE-----Generated at Sun Mar 1 18:59:16 2026 by rpki-client