$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/31013f64-83f6-3c99-864a-05d6b99c5bf0.roa File: 31013f64-83f6-3c99-864a-05d6b99c5bf0.roa (raw, json) Hash identifier: yeJ0Zl54iUCqcyx8kt21+58hW0vK+kILYmDXLWfrvsI= Subject key identifier: 64:B5:03:1A:7C:39:5B:21:81:91:48:49:20:C6:D6:AD:CA:66:70:16 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5D50FFEF35C8CE22FC0290 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/31013f64-83f6-3c99-864a-05d6b99c5bf0.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 67.188.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5d:50:ff:ef:35:c8:ce:22:fc:02:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=25aa9500-b756-4a4d-82e2-e2300f7aa8f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:68:da:1c:c9:ec:7b:0c:47:39:2c:79:b8:da: ce:a8:58:fc:ab:d2:ac:bf:4b:8f:c6:b0:72:3c:22: 8b:92:e2:85:e3:ef:54:e4:27:ef:23:48:a7:f3:5c: d8:0d:5d:5d:78:4e:ea:7e:dd:30:e0:6c:4d:bf:42: 76:88:3a:bd:57:50:43:26:b1:b3:c1:17:4b:dd:f0: f2:a8:80:d5:17:16:5f:e5:ec:70:ad:db:8f:42:b5: 7f:2f:e4:41:58:cc:26:ed:7c:14:5a:87:83:86:ee: 70:fd:65:a6:51:c2:1b:fe:ab:ef:2b:bb:dd:49:d3: ed:f0:18:a0:34:8b:bf:a5:21:b8:53:7e:aa:1e:8c: e2:59:8f:16:2b:5a:f6:88:70:96:9e:c0:16:eb:c3: 41:f2:4e:3d:c4:93:8a:59:4d:a0:31:3b:08:46:0e: 2a:c8:24:be:a0:c6:cc:98:c0:f5:f9:46:8b:d0:a3: 26:be:3c:db:13:80:87:06:0f:94:1f:e3:9a:1f:ec: cd:d1:30:c8:fe:34:33:cf:3b:5c:54:a3:07:ba:c1: 42:ac:40:22:9f:2d:bf:41:f4:b6:04:a8:dc:38:f7: 8e:8e:c2:d0:b3:b0:1a:8f:df:89:2d:a3:c5:93:f0: f5:26:f2:8c:3f:b4:ac:19:99:96:6e:75:4f:9e:2e: 6c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B5:03:1A:7C:39:5B:21:81:91:48:49:20:C6:D6:AD:CA:66:70:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/31013f64-83f6-3c99-864a-05d6b99c5bf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.188.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:04:92:5a:d7:fb:05:e5:98:76:79:8a:d0:b8:7f:4f:2b:a2: 7a:6d:12:f2:da:5b:48:ec:30:b4:7b:db:c1:9a:e8:02:b8:f2: 4b:63:84:34:a8:f2:69:57:7a:e6:d6:13:8c:c4:8b:76:16:14: a2:c8:9e:1a:1d:11:03:b0:bd:40:6f:b9:4e:b1:65:66:cc:5c: 04:21:2b:b3:d9:88:99:61:43:44:ee:2d:a2:b6:cc:53:20:5f: 25:ab:50:85:94:85:8f:b1:69:6b:10:24:14:46:fa:81:4c:b6: ce:7b:b6:f3:f9:35:9e:6b:28:70:f5:3f:81:73:76:12:b7:73: c1:e0:90:df:e6:88:c1:b6:cc:c7:09:db:60:ed:4d:45:46:dd: a9:42:ab:97:94:67:f2:46:59:13:d5:df:6d:9e:92:fd:51:b0: 72:11:74:78:2a:4a:b6:89:cc:27:53:dc:8d:6d:2d:ff:67:43: bf:5e:f9:3d:c7:e4:cb:84:03:cf:39:e1:0b:26:f0:c5:14:5f: ab:36:e1:1a:22:a6:61:0c:2b:8e:61:c3:e4:e3:6e:a0:d3:9f: 5b:66:89:68:58:17:a1:be:12:61:45:ff:c9:a4:21:15:5b:aa: 69:8d:3b:4c:15:69:5f:95:96:8b:de:e6:fb:f9:55:7b:27:f2: de:d3:3a:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXVD/7zXIziL8ApAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MjVhYTk1MDAtYjc1Ni00YTRkLTgyZTItZTIzMDBmN2FhOGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmjaHMnsewxHOSx5uNrOqFj8q9Ksv0uPxrBy PCKLkuKF4+9U5CfvI0in81zYDV1deE7qft0w4GxNv0J2iDq9V1BDJrGzwRdL3fDy qIDVFxZf5exwrduPQrV/L+RBWMwm7XwUWoeDhu5w/WWmUcIb/qvvK7vdSdPt8Big NIu/pSG4U36qHoziWY8WK1r2iHCWnsAW68NB8k49xJOKWU2gMTsIRg4qyCS+oMbM mMD1+UaL0KMmvjzbE4CHBg+UH+OaH+zN0TDI/jQzzztcVKMHusFCrEAiny2/QfS2 BKjcOPeOjsLQs7Aaj9+JLaPFk/D1JvKMP7SsGZmWbnVPni5sewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGS1Axp8OVshgZFISSDG1q3KZnAWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzEwMTNmNjQtODNmNi0z Yzk5LTg2NGEtMDVkNmI5OWM1YmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ7yQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcEklrX+wXlmHZ5itC4f08ronptEvLaW0jsMLR728Ga6AK48ktjhDSo 8mlXeubWE4zEi3YWFKLInhodEQOwvUBvuU6xZWbMXAQhK7PZiJlhQ0TuLaK2zFMg XyWrUIWUhY+xaWsQJBRG+oFMts57tvP5NZ5rKHD1P4FzdhK3c8HgkN/miMG2zMcJ 22DtTUVG3alCq5eUZ/JGWRPV322ekv1RsHIRdHgqSraJzCdT3I1tLf9nQ79e+T3H 5MuEA8854Qsm8MUUX6s24RoipmEMK45hw+TjbqDTn1tmiWhYF6G+EmFF/8mkIRVb qmmNO0wVaV+Vlove5vv5VXsn8t7TOt4= -----END CERTIFICATE-----Generated at Sun Mar 1 19:07:43 2026 by rpki-client