$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3121740a-f046-3a87-83fd-6bdb3bbd6cd3.roa File: 3121740a-f046-3a87-83fd-6bdb3bbd6cd3.roa (raw, json) Hash identifier: ZAQ+OJ6N6eahsWUi2+/6fVXswY0fv2v9V5zjRm2tidE= Subject key identifier: B8:45:FF:E1:47:76:E6:DD:63:58:B4:96:CC:BF:EF:98:04:5F:CD:0A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5889EB0FFA5F754CA7E580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3121740a-f046-3a87-83fd-6bdb3bbd6cd3.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 76.16.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:89:eb:0f:fa:5f:75:4c:a7:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=d45f857e-c5ae-4704-9421-c8b35a4495c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e6:fb:22:b7:72:04:50:03:8a:4f:7e:ef:6a: 81:36:3c:ec:96:e3:e9:d9:3f:15:c3:59:bc:3d:e5: 7a:3a:d5:75:69:fa:ec:99:56:76:92:8b:16:78:41: b8:a0:f5:5a:32:88:29:91:36:b5:f6:4d:39:32:42: eb:bd:47:a9:1a:60:96:7b:30:70:46:e2:0c:2d:96: e0:c3:58:f3:11:40:6f:f0:90:9f:69:a3:93:bf:73: 45:16:45:8e:a6:f5:a2:8e:85:81:42:3d:14:ea:f3: cf:54:4b:f7:38:69:06:ea:ce:58:80:cb:88:ae:1a: dc:3d:4c:48:4a:58:44:30:08:90:d1:f6:89:ec:ed: 1d:d2:49:b5:71:17:79:6c:7f:f9:56:fa:7a:89:f8: c0:4a:e4:da:c0:50:7f:ee:fb:a9:5f:66:2d:bc:c8: 95:6a:29:e6:15:7f:e5:eb:a1:00:3c:26:31:64:83: fd:2e:01:08:41:80:04:0e:be:f4:bc:c3:db:14:7a: 8d:fe:a2:aa:c3:d3:99:6f:c5:32:8b:81:07:83:5a: b2:0c:35:35:ad:96:e2:45:45:03:d7:9c:5e:35:e4: c2:c8:0c:ce:fd:76:1e:f4:8a:ce:5e:9f:f4:09:4d: 25:8d:da:90:c6:a4:0e:4a:79:27:86:41:4c:8e:ce: 06:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:45:FF:E1:47:76:E6:DD:63:58:B4:96:CC:BF:EF:98:04:5F:CD:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3121740a-f046-3a87-83fd-6bdb3bbd6cd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.16.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:92:68:d1:7d:d4:f8:fc:f2:d5:a0:8d:e9:29:a1:65:6a:9a: ea:46:fe:00:76:b1:74:4e:49:fc:f2:9d:9b:81:dc:d6:bd:ef: 93:22:95:a5:d7:f7:41:e7:5a:27:11:81:2b:72:6f:63:50:c1: 15:6a:01:ea:78:d7:c9:d2:9b:de:55:fa:6d:34:19:39:62:6e: 73:ac:54:c8:ff:56:2a:cd:0e:ec:93:9c:77:4b:ff:fa:91:04: 92:68:07:1a:fc:20:0c:c7:1b:ea:64:29:59:de:5a:39:cd:35: 45:be:ec:68:c0:72:6d:2c:c0:34:d5:f2:e9:7c:fe:53:ff:dd: 9c:de:a3:9a:6b:97:e6:82:d1:53:c9:6a:44:06:d8:16:c7:06: 82:6c:48:61:f5:bc:bf:d2:02:71:b3:19:6d:3f:04:d1:79:81: a3:75:c9:92:21:f3:db:06:42:3f:c8:14:be:a3:1a:ed:ef:ce: 40:e1:c8:7c:01:00:ea:73:f0:b9:8d:c7:15:ed:71:1b:ae:7a: fa:49:79:0d:11:5f:5c:ce:44:27:e1:e3:82:b4:42:c5:3c:f6: 0f:21:2b:21:34:98:54:2f:fd:a1:6d:ef:28:36:52:f1:43:71: 9b:21:d5:ea:f6:5d:1a:fb:62:8f:d4:bd:7f:87:26:8d:f2:5d: 84:84:30:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWInrD/pfdUyn5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZDQ1Zjg1N2UtYzVhZS00NzA0LTk0MjEtYzhiMzVhNDQ5NWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+b7IrdyBFADik9+72qBNjzsluPp2T8Vw1m8 PeV6OtV1afrsmVZ2kosWeEG4oPVaMogpkTa19k05MkLrvUepGmCWezBwRuIMLZbg w1jzEUBv8JCfaaOTv3NFFkWOpvWijoWBQj0U6vPPVEv3OGkG6s5YgMuIrhrcPUxI SlhEMAiQ0faJ7O0d0km1cRd5bH/5Vvp6ifjASuTawFB/7vupX2YtvMiVainmFX/l 66EAPCYxZIP9LgEIQYAEDr70vMPbFHqN/qKqw9OZb8Uyi4EHg1qyDDU1rZbiRUUD 15xeNeTCyAzO/XYe9IrOXp/0CU0ljdqQxqQOSnknhkFMjs4GuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLhF/+FHdubdY1i0lsy/75gEX80KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzEyMTc0MGEtZjA0Ni0z YTg3LTgzZmQtNmJkYjNiYmQ2Y2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTBCYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMeSaNF91Pj88tWgjekpoWVqmupG/gB2sXROSfzynZuB3Na975MilaXX 90HnWicRgStyb2NQwRVqAep418nSm95V+m00GTlibnOsVMj/VirNDuyTnHdL//qR BJJoBxr8IAzHG+pkKVneWjnNNUW+7GjAcm0swDTV8ul8/lP/3Zzeo5prl+aC0VPJ akQG2BbHBoJsSGH1vL/SAnGzGW0/BNF5gaN1yZIh89sGQj/IFL6jGu3vzkDhyHwB AOpz8LmNxxXtcRuuevpJeQ0RX1zORCfh44K0QsU89g8hKyE0mFQv/aFt7yg2UvFD cZsh1er2XRr7Yo/UvX+HJo3yXYSEMJg= -----END CERTIFICATE-----Generated at Mon Mar 2 03:13:47 2026 by rpki-client