$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2321a1b9-7dd4-3909-895a-4658f19d8753.roa File: 2321a1b9-7dd4-3909-895a-4658f19d8753.roa (raw, json) Hash identifier: 2siEAymoSJWj25CJKErG7mjIgXI8J3om3SZo7v9bpiM= Subject key identifier: 3F:4E:1C:BD:36:D6:4A:13:5A:3E:7E:9C:47:96:8E:AB:39:FB:EE:77 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5D2B2F1775720DEF499168 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2321a1b9-7dd4-3909-895a-4658f19d8753.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 174.160.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5d:2b:2f:17:75:72:0d:ef:49:91:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=db45ab91-6e83-4591-80bb-68e0dc4566e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f4:28:40:c5:bf:75:30:7e:f8:74:bd:d2:7c: 56:e0:01:64:c6:2a:7b:53:57:f9:92:26:75:55:99: 95:8e:c8:89:53:bf:02:64:80:4d:a7:b8:aa:e7:a2: 1c:21:7e:a0:ac:3e:5e:49:f4:b7:0b:3f:d8:99:3c: 49:ef:a3:ca:f4:4e:b0:a2:f6:64:f3:54:e7:4a:38: 74:99:cd:8f:01:60:91:e4:f3:f7:39:0d:d2:10:f7: 6a:ee:cd:7f:c7:e1:1c:3f:b5:64:16:51:22:0d:7f: 24:dd:4a:64:8e:29:78:86:59:68:d3:ee:be:10:ea: 37:af:8b:59:19:f3:65:13:4a:06:d7:fd:20:cd:0e: d5:20:45:99:d6:cf:44:04:05:cc:86:91:da:ce:77: c3:f2:08:99:89:5f:d1:33:2c:0b:32:19:ba:bd:d2: e1:e1:bb:a9:bc:db:3d:ac:1f:38:59:5b:f5:21:53: cd:62:b6:04:28:40:1e:f8:d7:e2:f1:ed:de:a6:cf: bd:1a:13:ce:20:a3:d0:a2:9d:53:59:6a:b7:8c:b6: 7e:d0:4a:8a:36:55:d1:d4:60:31:85:61:2a:ef:85: a3:5c:1e:d7:04:62:3a:0e:b5:0d:95:83:b7:20:4f: 4b:c1:cc:5b:76:f9:81:28:a3:2b:40:0e:8d:15:1c: 48:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:4E:1C:BD:36:D6:4A:13:5A:3E:7E:9C:47:96:8E:AB:39:FB:EE:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2321a1b9-7dd4-3909-895a-4658f19d8753.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.160.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:8a:61:cd:49:4a:c8:af:92:45:fc:20:d4:3d:e7:ef:df:b4: f6:25:3b:21:81:f6:14:58:22:b6:a8:85:78:8d:85:6d:69:a3: a2:da:b5:b2:3a:83:3d:97:a6:38:e4:9d:d7:a0:cb:12:3c:9a: a8:78:6d:21:e7:ab:54:36:ee:e5:92:b1:9b:1a:77:94:18:a3: 1c:3d:83:42:05:1a:af:88:1d:03:d5:32:0d:5e:49:5d:d2:ed: c7:5b:1f:0c:bf:37:d5:83:4e:33:26:b3:70:a3:d4:8a:2b:8e: 0e:7e:ee:c6:0f:a0:ce:3c:b1:5b:e6:1d:fd:4c:af:88:54:f5: 1f:bf:03:a2:95:c7:06:e9:8a:7b:f8:ab:64:0f:00:b9:ba:53: f9:27:f9:1f:88:4e:54:1c:26:58:3e:3d:29:65:9f:30:8b:59: 3c:8c:14:8b:02:aa:5f:51:c2:e6:e8:40:65:33:4c:6f:1b:fb: 2a:a4:d8:93:6e:38:57:0b:2a:7d:76:f4:97:bb:3e:6b:fc:f8: 35:a6:35:61:e1:cf:1c:ee:af:8e:ad:ec:92:72:56:e0:4d:26: ff:f3:e1:cb:f8:ce:90:3e:55:76:ee:60:2d:94:95:d4:2c:4c: 8e:46:ec:17:09:6d:a9:1b:06:9b:81:ab:d8:23:ac:75:44:da: 6a:e9:3e:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXSsvF3VyDe9JkWgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZGI0NWFiOTEtNmU4My00NTkxLTgwYmItNjhlMGRjNDU2NmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPQoQMW/dTB++HS90nxW4AFkxip7U1f5kiZ1 VZmVjsiJU78CZIBNp7iq56IcIX6grD5eSfS3Cz/YmTxJ76PK9E6wovZk81TnSjh0 mc2PAWCR5PP3OQ3SEPdq7s1/x+EcP7VkFlEiDX8k3Upkjil4hllo0+6+EOo3r4tZ GfNlE0oG1/0gzQ7VIEWZ1s9EBAXMhpHaznfD8giZiV/RMywLMhm6vdLh4bupvNs9 rB84WVv1IVPNYrYEKEAe+Nfi8e3eps+9GhPOIKPQop1TWWq3jLZ+0EqKNlXR1GAx hWEq74WjXB7XBGI6DrUNlYO3IE9LwcxbdvmBKKMrQA6NFRxICQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD9OHL021koTWj5+nEeWjqs5++53MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjMyMWExYjktN2RkNC0z OTA5LTg5NWEtNDY1OGYxOWQ4NzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrqAoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKKYc1JSsivkkX8INQ95+/ftPYlOyGB9hRYIraohXiNhW1po6LatbI6 gz2XpjjkndegyxI8mqh4bSHnq1Q27uWSsZsad5QYoxw9g0IFGq+IHQPVMg1eSV3S 7cdbHwy/N9WDTjMms3Cj1Iorjg5+7sYPoM48sVvmHf1Mr4hU9R+/A6KVxwbpinv4 q2QPALm6U/kn+R+ITlQcJlg+PSllnzCLWTyMFIsCql9RwuboQGUzTG8b+yqk2JNu OFcLKn129Je7Pmv8+DWmNWHhzxzur46t7JJyVuBNJv/z4cv4zpA+VXbuYC2UldQs TI5G7BcJbakbBpuBq9gjrHVE2mrpPtE= -----END CERTIFICATE-----Generated at Mon Mar 2 12:19:42 2026 by rpki-client