$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3206fe81-8d16-3df4-89f7-f634e75f2d6a.roa File: 3206fe81-8d16-3df4-89f7-f634e75f2d6a.roa (raw, json) Hash identifier: i7MLaRAj2B0DTiPTCO8GMpGx4pG8Vb/Y5zec16aC8Cw= Subject key identifier: A3:68:22:CD:BC:D4:61:F7:E3:16:AE:72:82:2A:2D:F7:D9:2E:90:35 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE58028A842138F5172DB4C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3206fe81-8d16-3df4-89f7-f634e75f2d6a.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 67.175.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:02:8a:84:21:38:f5:17:2d:b4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=598a5897-2cd4-458b-9ac4-ff726da84b09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:67:e8:a8:90:f2:04:35:db:66:a4:53:aa:2f: 4a:d9:25:13:d2:5a:9f:5d:f9:19:39:80:5c:33:d6: 71:47:3c:e5:b2:92:61:c8:9c:65:58:6d:f5:2b:1e: cf:df:64:7b:cc:7b:bc:a4:62:af:4e:47:c9:30:f7: 45:5b:57:99:42:61:f3:b0:99:0c:88:1f:1a:25:21: c0:96:c4:de:98:09:75:96:9d:4a:d3:8f:2b:73:35: cc:a9:86:64:0b:e1:78:ca:2f:12:2d:7a:b7:05:73: 49:e0:72:b1:e1:56:26:a9:69:d8:cd:1d:74:4e:59: 74:b3:f3:c5:70:f8:cf:6d:6b:77:c0:a4:7b:6d:13: c8:07:6d:a0:3d:8b:d0:fe:0a:b9:7e:03:22:a9:57: 46:6d:2f:fe:bc:f7:2a:a8:29:0c:95:3a:ef:47:ea: dd:dc:2c:78:cd:62:a8:0c:39:1b:52:81:81:34:60: cf:86:e7:56:83:d9:bf:42:d2:69:d5:56:ca:23:6c: 83:ad:1d:2e:46:50:b6:cf:38:63:06:92:02:92:2d: f9:4e:ea:c6:be:67:70:7d:7e:b1:63:0d:98:58:fe: 8a:12:2e:a8:2d:1f:74:33:57:e8:8f:ea:65:f7:d6: 04:21:f8:c4:83:f3:cf:17:a8:0f:e3:0a:3c:48:7d: c9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:68:22:CD:BC:D4:61:F7:E3:16:AE:72:82:2A:2D:F7:D9:2E:90:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3206fe81-8d16-3df4-89f7-f634e75f2d6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.175.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:a7:c4:7f:30:8f:81:1b:bc:33:58:cc:93:a3:1a:0c:25:e2: 06:b1:af:1c:e0:d6:f9:03:09:69:49:23:5c:5f:c6:bd:3d:70: 27:e1:d1:a8:78:96:29:9a:3c:22:36:da:4a:bd:5a:9e:72:4d: 4a:ca:54:b1:09:75:1c:89:bb:02:17:45:fe:40:12:d9:b0:cb: 05:47:49:2c:83:a3:99:3a:d3:62:6f:eb:49:c1:d6:5d:82:d1: b5:38:0e:29:60:6e:d8:0c:0c:de:31:01:68:4f:2c:0b:1a:e3: ea:53:d2:7c:1c:a9:47:43:47:aa:fc:44:aa:e0:c4:0a:e8:71: 22:33:0a:e8:ba:80:42:f3:d7:62:34:5a:98:3b:6a:97:c3:91: c8:85:a3:9e:e7:9a:67:3b:5d:a5:03:f9:a6:20:2e:c6:0f:5a: 8f:42:8f:47:95:56:ea:de:f7:e9:13:a9:7e:e2:b6:c2:ef:64: 1a:5b:da:88:05:cb:15:9f:c6:1e:da:37:39:47:7e:ac:ad:ac: e3:5b:01:9e:e7:44:e6:81:2b:3d:f8:06:9c:28:b5:36:e6:e7: df:a3:b0:81:18:6f:46:00:69:a8:66:b3:2e:64:76:db:56:70: b3:86:c3:64:b7:64:ef:69:dd:65:de:13:85:60:2c:61:20:ef: fa:c4:46:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWAKKhCE49RcttMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NTk4YTU4OTctMmNkNC00NThiLTlhYzQtZmY3MjZkYTg0YjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWfoqJDyBDXbZqRTqi9K2SUT0lqfXfkZOYBc M9ZxRzzlspJhyJxlWG31Kx7P32R7zHu8pGKvTkfJMPdFW1eZQmHzsJkMiB8aJSHA lsTemAl1lp1K048rczXMqYZkC+F4yi8SLXq3BXNJ4HKx4VYmqWnYzR10Tll0s/PF cPjPbWt3wKR7bRPIB22gPYvQ/gq5fgMiqVdGbS/+vPcqqCkMlTrvR+rd3Cx4zWKo DDkbUoGBNGDPhudWg9m/QtJp1VbKI2yDrR0uRlC2zzhjBpICki35TurGvmdwfX6x Yw2YWP6KEi6oLR90M1foj+pl99YEIfjEg/PPF6gP4wo8SH3J4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKNoIs281GH34xaucoIqLffZLpA1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzIwNmZlODEtOGQxNi0z ZGY0LTg5ZjctZjYzNGU3NWYyZDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ6/EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMqnxH8wj4EbvDNYzJOjGgwl4gaxrxzg1vkDCWlJI1xfxr09cCfh0ah4 limaPCI22kq9Wp5yTUrKVLEJdRyJuwIXRf5AEtmwywVHSSyDo5k602Jv60nB1l2C 0bU4DilgbtgMDN4xAWhPLAsa4+pT0nwcqUdDR6r8RKrgxArocSIzCui6gELz12I0 Wpg7apfDkciFo57nmmc7XaUD+aYgLsYPWo9Cj0eVVure9+kTqX7itsLvZBpb2ogF yxWfxh7aNzlHfqytrONbAZ7nROaBKz34BpwotTbm59+jsIEYb0YAaahmsy5kdttW cLOGw2S3ZO9p3WXeE4VgLGEg7/rERgQ= -----END CERTIFICATE-----Generated at Sun Mar 1 20:49:24 2026 by rpki-client