$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33110d3a-e068-38c0-a436-4924bc7013d1.roa File: 33110d3a-e068-38c0-a436-4924bc7013d1.roa (raw, json) Hash identifier: AJzOJjLZhTEkU+nVyLygqcqwNB3vyQ5L7zoEXbS19vM= Subject key identifier: E8:B9:9E:F5:7C:46:6E:72:35:4A:70:AD:6D:E5:F5:7F:79:D4:EB:81 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5E00C0BBD9365E122BF380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33110d3a-e068-38c0-a436-4924bc7013d1.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 76.133.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:00:c0:bb:d9:36:5e:12:2b:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=2cccb94d-31bd-41e9-b842-9694dd48ba05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:78:f6:87:0d:88:67:c1:6b:47:72:20:82:ca: 3b:d2:72:42:49:e3:af:da:40:9e:eb:b5:cd:c5:32: 5e:0d:8b:2d:ee:7b:73:22:8c:67:35:76:fd:bf:c8: d8:26:31:d5:d7:53:95:e1:27:17:84:d6:df:05:04: 94:7a:e0:01:8a:2f:26:6a:e3:3b:ac:b5:1d:d6:7c: 4d:1a:78:5e:c3:21:27:fd:22:0b:64:34:46:5d:9e: 89:b4:e8:88:f6:58:ab:9b:06:3a:e7:68:3c:74:ed: f1:15:a9:65:7b:94:72:5e:37:b1:6f:1c:b6:6e:1c: 1f:5c:89:b3:3f:ca:45:d1:c6:24:1e:3f:f2:6b:13: 89:7b:51:95:e9:5a:0c:2c:d9:2e:4c:f4:1d:6a:23: fb:a8:58:f1:14:f9:c0:33:a3:c7:49:6c:15:c8:a7: 09:b9:7e:61:35:72:6e:79:38:93:7d:75:4f:99:7c: 6f:e9:8f:5e:6b:e2:2e:9e:1e:c5:80:aa:4d:3d:83: 0c:e3:8e:45:50:ef:fb:5d:54:ee:c8:06:36:1f:2d: c6:5f:c9:ab:58:6c:59:a5:71:21:af:83:58:10:da: 85:98:c3:3c:80:90:9f:3b:cd:ca:2a:66:06:8b:53: 9e:a2:f6:ca:79:ee:32:14:74:5e:ca:b7:fe:10:f3: 7a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:B9:9E:F5:7C:46:6E:72:35:4A:70:AD:6D:E5:F5:7F:79:D4:EB:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33110d3a-e068-38c0-a436-4924bc7013d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.133.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:12:3b:c0:1a:41:25:6c:44:e4:c1:51:19:aa:46:20:24:83: ff:46:e0:de:d4:a6:6c:f4:87:f2:13:06:99:d3:9a:9e:62:c5: bc:52:17:ad:88:32:56:b1:34:97:e6:44:34:ec:7b:0f:ff:c4: 04:8b:f4:f4:51:94:e5:26:3d:b6:91:80:93:a4:41:0f:1f:9e: 62:bd:99:09:4e:33:12:a0:7d:71:65:2f:2b:c6:37:dc:01:fd: 9a:53:68:00:0b:98:ed:19:1d:b6:73:9c:84:79:7c:dd:0b:d7: 89:94:e9:29:da:b0:69:9b:a7:8b:ca:6c:48:bb:7e:89:7a:c8: 5c:9e:9c:5f:71:fa:a4:67:7b:b5:b0:17:bd:75:0c:17:45:1d: 4c:06:c6:2c:6b:8b:ef:e2:dc:3e:3c:4f:e2:57:87:6a:d5:a6: 6e:10:7d:62:7a:ad:f1:cb:73:25:b8:60:44:94:21:a3:a1:60: 35:d8:35:c4:1b:bd:d4:38:25:66:ef:71:db:d4:8e:93:d3:3d: a2:a7:8c:82:ff:ba:56:75:e6:ff:7e:a4:fb:38:cc:e2:2e:fd: b1:d6:d9:62:77:36:e8:a7:d4:29:ad:62:23:68:ca:f9:a9:76: 60:c3:7b:dc:c9:44:b1:ac:5e:ce:19:a8:60:d2:47:7c:77:c0: 12:d1:ae:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXgDAu9k2XhIr84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MmNjY2I5NGQtMzFiZC00MWU5LWI4NDItOTY5NGRkNDhiYTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3j2hw2IZ8FrR3Iggso70nJCSeOv2kCe67XN xTJeDYst7ntzIoxnNXb9v8jYJjHV11OV4ScXhNbfBQSUeuABii8mauM7rLUd1nxN GnhewyEn/SILZDRGXZ6JtOiI9lirmwY652g8dO3xFalle5RyXjexbxy2bhwfXImz P8pF0cYkHj/yaxOJe1GV6VoMLNkuTPQdaiP7qFjxFPnAM6PHSWwVyKcJuX5hNXJu eTiTfXVPmXxv6Y9ea+Iunh7FgKpNPYMM445FUO/7XVTuyAY2Hy3GX8mrWGxZpXEh r4NYENqFmMM8gJCfO83KKmYGi1OeovbKee4yFHReyrf+EPN6fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOi5nvV8Rm5yNUpwrW3l9X951OuBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzMxMTBkM2EtZTA2OC0z OGMwLWE0MzYtNDkyNGJjNzAxM2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIXqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8SO8AaQSVsROTBURmqRiAkg/9G4N7Upmz0h/ITBpnTmp5ixbxSF62I MlaxNJfmRDTsew//xASL9PRRlOUmPbaRgJOkQQ8fnmK9mQlOMxKgfXFlLyvGN9wB /ZpTaAALmO0ZHbZznIR5fN0L14mU6SnasGmbp4vKbEi7fol6yFyenF9x+qRne7Ww F711DBdFHUwGxixri+/i3D48T+JXh2rVpm4QfWJ6rfHLcyW4YESUIaOhYDXYNcQb vdQ4JWbvcdvUjpPTPaKnjIL/ulZ15v9+pPs4zOIu/bHW2WJ3Nuin1CmtYiNoyvmp dmDDe9zJRLGsXs4ZqGDSR3x3wBLRrs0= -----END CERTIFICATE-----Generated at Sun Mar 1 20:42:23 2026 by rpki-client