$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1b3686c2-b913-3b5a-9a2a-b164895a9c05.roa File: 1b3686c2-b913-3b5a-9a2a-b164895a9c05.roa (raw, json) Hash identifier: noHe+FaBDsY0WkL/CMkyuTL51NX3SVhwC5+MiejrGDQ= Subject key identifier: FC:12:D4:A8:B1:85:88:F7:08:13:B1:CC:4D:A4:C3:E8:62:78:42:D6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5886A579DEFA8F82F1B0E0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1b3686c2-b913-3b5a-9a2a-b164895a9c05.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 76.150.206.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:86:a5:79:de:fa:8f:82:f1:b0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=53e55f72-5bdf-4a94-a1b9-2f1538b12c5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f0:5f:87:82:3d:b2:51:e7:1b:62:76:21:9b: 62:e7:62:19:20:2b:38:ef:6b:9d:79:02:7b:2d:2b: ae:cb:8d:22:8b:a5:41:4b:7b:c2:99:d0:78:09:40: 7c:8a:2a:23:ee:f5:f3:ab:c6:91:6d:8e:4e:7e:b8: df:08:4d:c5:c8:c0:b8:31:7e:30:60:67:1e:eb:b1: 7a:1f:fe:8f:00:10:80:3f:58:51:03:06:b1:7a:44: 32:c7:d9:5a:3c:fe:5b:8f:50:8a:49:47:7a:9d:88: e2:5b:a6:7a:48:d1:87:e8:58:48:53:6a:bf:7d:7e: fd:1e:80:a8:16:74:8f:97:9a:ff:d8:88:e2:0a:2f: 56:31:cd:26:48:a0:4f:92:12:9a:40:79:92:eb:5a: 56:67:49:7b:9a:40:52:50:1b:11:6a:35:d0:cd:1a: bb:2e:2f:7c:57:03:2f:d0:cd:df:ac:c8:8a:ec:a5: 87:c5:2d:7a:53:ce:b5:d4:ab:09:e9:ff:54:59:2e: 77:31:a7:b0:ef:91:86:0e:27:45:5d:b8:bf:bc:07: 7e:92:f0:f8:0a:ba:bf:6d:59:fb:72:2f:87:14:54: 31:df:cf:07:10:45:35:88:c1:95:59:47:62:6f:3f: 8a:98:05:53:b5:25:c8:64:d9:9b:4f:9d:bf:a0:d3: 76:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:12:D4:A8:B1:85:88:F7:08:13:B1:CC:4D:A4:C3:E8:62:78:42:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1b3686c2-b913-3b5a-9a2a-b164895a9c05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.150.206.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:10:3d:be:64:a9:9f:0e:bd:c4:e8:f6:27:5f:9a:c8:08:39: cd:e0:25:a3:76:ea:56:22:fa:98:1e:4f:c3:9e:7c:f7:33:73: 4f:8f:1f:77:55:91:23:87:b6:bc:ec:9c:02:fc:7f:b7:48:06: e2:f8:97:42:13:44:c7:ed:c7:9c:0b:c5:19:0a:b7:0b:33:52: 70:ea:70:93:38:8b:2a:36:9d:d8:7e:b9:6c:7d:46:ca:ca:80: e4:c9:88:f7:b6:01:58:84:22:51:87:d3:15:d3:b8:89:06:42: c3:d8:92:4f:09:47:74:61:70:33:c2:0d:b3:e9:6f:52:2b:bb: f0:17:72:c6:7e:64:85:47:e2:3d:c6:40:d8:ec:ff:b6:cb:f5: 1e:28:73:5e:c8:72:8e:bd:ea:af:c6:3e:99:7e:95:5e:5c:0e: ff:39:59:99:01:5a:17:84:8f:51:25:02:d1:ee:01:b1:9c:d8: 4d:48:d7:80:6c:25:5d:2a:12:4a:d2:e5:2a:ef:11:1f:16:63: ba:32:27:9c:ec:1b:d2:be:32:e1:df:ee:9c:da:87:0d:d1:5c: 51:51:9f:13:3d:e1:7e:1e:7f:d9:da:94:3a:3b:92:67:8c:0b: eb:5a:17:0b:da:43:61:8b:9e:9d:4a:89:ca:97:e0:df:bb:0c: f2:ab:36:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWIaled76j4LxsOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NTNlNTVmNzItNWJkZi00YTk0LWExYjktMmYxNTM4YjEyYzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/Bfh4I9slHnG2J2IZti52IZICs472udeQJ7 LSuuy40ii6VBS3vCmdB4CUB8iioj7vXzq8aRbY5OfrjfCE3FyMC4MX4wYGce67F6 H/6PABCAP1hRAwaxekQyx9laPP5bj1CKSUd6nYjiW6Z6SNGH6FhIU2q/fX79HoCo FnSPl5r/2IjiCi9WMc0mSKBPkhKaQHmS61pWZ0l7mkBSUBsRajXQzRq7Li98VwMv 0M3frMiK7KWHxS16U8611KsJ6f9UWS53Maew75GGDidFXbi/vAd+kvD4Crq/bVn7 ci+HFFQx388HEEU1iMGVWUdibz+KmAVTtSXIZNmbT52/oNN2hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPwS1KixhYj3CBOxzE2kw+hieELWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWIzNjg2YzItYjkxMy0z YjVhLTlhMmEtYjE2NDg5NWE5YzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTJbOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoQPb5kqZ8OvcTo9idfmsgIOc3gJaN26lYi+pgeT8OefPczc0+PH3dV kSOHtrzsnAL8f7dIBuL4l0ITRMftx5wLxRkKtwszUnDqcJM4iyo2ndh+uWx9RsrK gOTJiPe2AViEIlGH0xXTuIkGQsPYkk8JR3RhcDPCDbPpb1Iru/AXcsZ+ZIVH4j3G QNjs/7bL9R4oc17Ico696q/GPpl+lV5cDv85WZkBWheEj1ElAtHuAbGc2E1I14Bs JV0qEkrS5SrvER8WY7oyJ5zsG9K+MuHf7pzahw3RXFFRnxM94X4ef9nalDo7kmeM C+taFwvaQ2GLnp1KicqX4N+7DPKrNqM= -----END CERTIFICATE-----Generated at Sun Mar 1 23:10:58 2026 by rpki-client