$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28977272-1f59-3db2-bc71-6f0f1a8bc56f.roa File: 28977272-1f59-3db2-bc71-6f0f1a8bc56f.roa (raw, json) Hash identifier: 7x0wk3WhNy8lsWAFzXt2cTkRrAXrF8/yBlelXO7R5xw= Subject key identifier: A6:2B:D1:96:DE:E0:B8:6B:86:8B:2D:14:3F:F5:43:32:14:F6:BC:E3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5CB21C7C14A9B4F5332040 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28977272-1f59-3db2-bc71-6f0f1a8bc56f.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 76.139.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5c:b2:1c:7c:14:a9:b4:f5:33:20:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=09691c06-1128-4407-85cf-78bfd151a58a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:0d:b5:92:5d:3f:ef:6e:93:36:6f:43:05:9a: a8:99:ee:af:b3:a8:e1:7f:c5:e9:74:0f:8e:fa:76: 63:42:05:2c:6b:3c:3c:e3:11:91:87:1c:0f:c9:5c: 9b:93:4a:85:70:fa:aa:f8:e9:2b:5d:b5:ff:b4:03: fa:c1:c3:ec:62:dc:67:cc:48:64:1a:92:22:34:e7: 7a:b3:2f:61:19:ca:02:36:0d:52:02:f9:5c:b8:d5: cd:a0:67:b6:bc:8d:1e:f5:e0:b5:06:01:30:d9:3d: 50:d0:0a:5a:ec:45:58:fc:cf:71:da:db:68:5a:da: 51:ff:98:ed:12:16:e1:76:00:7c:65:35:08:60:e7: e0:a1:9e:73:78:ea:d6:10:fc:5f:e2:6b:77:94:75: 83:23:8c:d4:53:a5:5b:63:fc:1c:f9:0a:49:2f:20: d0:68:6c:dc:0e:1e:79:59:f3:6b:a5:9d:a2:d0:a0: 73:92:7c:2e:cc:5b:df:19:3c:00:67:58:77:0e:f6: b4:43:70:69:99:1b:9b:79:0c:97:46:bb:17:cf:c0: 37:8f:9f:7e:cc:4e:cc:4f:3e:5c:d9:2b:fc:31:0a: 14:08:ac:0b:00:32:4c:db:3b:36:ac:fa:0b:5c:db: 22:95:2c:b7:cf:33:dd:79:73:0d:e1:31:05:72:d3: 07:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:2B:D1:96:DE:E0:B8:6B:86:8B:2D:14:3F:F5:43:32:14:F6:BC:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28977272-1f59-3db2-bc71-6f0f1a8bc56f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.139.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:b5:98:5a:fb:e9:63:32:d2:81:47:e7:20:ad:75:27:90:b6: 5b:39:f0:d2:2d:b8:d6:a0:fc:a8:31:4a:d6:1e:f4:5f:4f:b4: ee:7f:7b:83:17:98:4b:aa:08:80:43:1a:6e:2b:50:6e:7b:bf: 0d:a9:a1:c6:69:e2:af:fe:60:be:d4:17:20:31:b4:03:2a:73: db:32:b5:14:d4:05:ac:8d:af:8c:17:b7:43:7e:8c:77:81:f6: 7a:73:8d:52:d7:6c:fd:9a:df:5e:dd:bd:5e:65:ff:62:65:55: 81:6a:21:3f:eb:b2:2b:8a:e3:eb:f3:82:56:a4:b5:06:f1:3f: e7:8f:4b:c7:3d:70:11:2d:81:27:82:da:9a:95:bb:42:90:9d: 62:cd:94:18:b7:ab:10:e3:bd:9b:af:1e:65:f6:f2:f8:96:fc: 37:f4:4f:d4:72:69:2c:e0:27:cd:40:52:f8:5b:f2:9e:fb:15: bf:33:34:13:9b:b9:be:63:f2:f6:c6:2e:f9:ab:e5:83:bc:df: c4:9c:8b:d4:dc:9f:43:38:a5:37:4f:84:6a:fd:93:48:0a:fd: ff:bc:18:21:62:08:d7:f3:b4:c4:73:87:e8:66:86:55:b9:e1: 38:ed:16:b3:e0:fe:46:c3:e3:d7:5e:13:28:cd:00:dd:12:5e: 79:f9:9c:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXLIcfBSptPUzIEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MDk2OTFjMDYtMTEyOC00NDA3LTg1Y2YtNzhiZmQxNTFhNThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhw21kl0/726TNm9DBZqome6vs6jhf8XpdA+O +nZjQgUsazw84xGRhxwPyVybk0qFcPqq+OkrXbX/tAP6wcPsYtxnzEhkGpIiNOd6 sy9hGcoCNg1SAvlcuNXNoGe2vI0e9eC1BgEw2T1Q0Apa7EVY/M9x2ttoWtpR/5jt EhbhdgB8ZTUIYOfgoZ5zeOrWEPxf4mt3lHWDI4zUU6VbY/wc+QpJLyDQaGzcDh55 WfNrpZ2i0KBzknwuzFvfGTwAZ1h3Dva0Q3BpmRubeQyXRrsXz8A3j59+zE7MTz5c 2Sv8MQoUCKwLADJM2zs2rPoLXNsilSy3zzPdeXMN4TEFctMHiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKYr0Zbe4LhrhostFD/1QzIU9rzjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjg5NzcyNzItMWY1OS0z ZGIyLWJjNzEtNmYwZjFhOGJjNTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTIt4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABG1mFr76WMy0oFH5yCtdSeQtls58NItuNag/KgxStYe9F9PtO5/e4MX mEuqCIBDGm4rUG57vw2pocZp4q/+YL7UFyAxtAMqc9sytRTUBayNr4wXt0N+jHeB 9npzjVLXbP2a317dvV5l/2JlVYFqIT/rsiuK4+vzglaktQbxP+ePS8c9cBEtgSeC 2pqVu0KQnWLNlBi3qxDjvZuvHmX28viW/Df0T9RyaSzgJ81AUvhb8p77Fb8zNBOb ub5j8vbGLvmr5YO838Sci9Tcn0M4pTdPhGr9k0gK/f+8GCFiCNfztMRzh+hmhlW5 4TjtFrPg/kbD49deEyjNAN0SXnn5nAw= -----END CERTIFICATE-----Generated at Mon Mar 2 02:54:09 2026 by rpki-client