$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33787d02-8bdd-3c89-9be2-48759ce0e569.roa File: 33787d02-8bdd-3c89-9be2-48759ce0e569.roa (raw, json) Hash identifier: cNn47viH3hE9xACPIkh9q55gQN9i/3R/6cy6LleYYCs= Subject key identifier: CA:72:A2:97:97:7E:05:99:74:4E:08:C9:4E:D0:A0:9D:97:6E:5C:3E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5D531BE67DE7621CCE8080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33787d02-8bdd-3c89-9be2-48759ce0e569.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 67.188.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5d:53:1b:e6:7d:e7:62:1c:ce:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=cc82d288-974c-4778-8a61-9c2010019729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0e:13:ed:c7:ee:30:62:09:44:ca:7d:2f:ea: 25:20:f5:e3:50:2f:ca:2b:9e:ba:28:33:90:5e:2a: cd:25:11:48:4a:01:95:3f:ff:00:2f:bc:a5:72:c5: 97:fe:48:76:cd:93:4e:f3:3c:42:ba:5f:7f:09:39: 2f:21:5b:e1:2f:a1:a1:44:2a:f0:bf:da:e9:80:a1: 2a:82:a6:d9:48:44:d4:ef:a8:1b:f7:48:fa:cf:35: 09:c2:ec:8b:50:d3:36:bc:6c:c3:84:5f:54:19:ee: 6e:98:e5:85:f8:67:70:51:dc:fe:c6:ad:2b:6c:3c: 3c:d2:13:47:56:4a:52:82:a3:ba:92:ef:d8:3b:1e: f8:d0:3f:e1:e2:bd:8a:ae:52:98:71:c9:e9:9c:2f: 89:d9:8e:b3:ac:3f:36:26:42:00:31:15:ec:25:b7: 9f:e5:03:23:08:a7:83:4c:9d:46:96:37:00:1a:b2: e5:79:f8:8d:9d:1b:6f:98:a5:17:5e:26:ad:d5:34: 40:78:20:7b:34:7a:65:d8:12:1b:1b:ee:12:6e:71: 3e:0c:74:68:cb:21:cb:7c:30:0c:70:f4:68:fd:6e: 3f:36:b4:a3:ed:34:49:43:28:c3:7e:4f:32:7a:ad: 20:67:7f:fa:17:b7:c4:0b:ce:64:a3:1a:9d:8f:b0: 44:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:72:A2:97:97:7E:05:99:74:4E:08:C9:4E:D0:A0:9D:97:6E:5C:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33787d02-8bdd-3c89-9be2-48759ce0e569.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.188.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:57:bd:bf:24:5d:70:59:19:ea:b0:cc:26:87:54:d0:b4:a5: a5:ce:89:72:02:0a:e8:a3:70:b6:52:ab:8f:c6:19:2f:2e:17: a4:50:3d:b3:12:8b:f2:72:3f:b6:db:f0:41:00:83:77:ba:06: 31:72:13:e0:70:68:b0:5d:1c:17:32:c7:9f:cd:81:f6:4d:37: b1:eb:f5:dc:b0:7e:3f:e0:fb:38:48:ec:11:a3:04:8e:58:6a: 19:41:18:de:97:ce:3c:09:32:9a:82:24:62:4c:3f:e4:90:93: 8b:d9:bf:35:65:c6:ba:7f:f9:b2:96:14:ee:1f:3d:a9:19:15: f7:16:28:ec:e1:45:ef:de:5e:90:ae:15:83:50:99:68:02:23: c0:fe:e6:35:bd:08:bf:95:60:de:15:16:f9:fb:b6:e8:48:55: e4:8e:4f:db:cb:e0:d5:28:97:c0:ce:3f:3e:4d:f0:27:e1:09: 12:b8:37:0f:5c:28:73:c6:8e:f0:1e:94:89:fc:2f:f3:00:ed: 00:1d:46:65:27:05:32:44:41:46:a9:96:d8:f3:b2:51:49:b9: 39:e9:df:c1:ed:00:2d:6c:99:b7:61:f9:51:ed:c7:21:69:ed: 12:67:1f:25:84:be:7a:03:1c:36:57:06:0e:1c:f1:e0:78:03: 64:1f:02:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXVMb5n3nYhzOgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk Y2M4MmQyODgtOTc0Yy00Nzc4LThhNjEtOWMyMDEwMDE5NzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQ4T7cfuMGIJRMp9L+olIPXjUC/KK566KDOQ XirNJRFISgGVP/8AL7ylcsWX/kh2zZNO8zxCul9/CTkvIVvhL6GhRCrwv9rpgKEq gqbZSETU76gb90j6zzUJwuyLUNM2vGzDhF9UGe5umOWF+GdwUdz+xq0rbDw80hNH VkpSgqO6ku/YOx740D/h4r2KrlKYccnpnC+J2Y6zrD82JkIAMRXsJbef5QMjCKeD TJ1GljcAGrLlefiNnRtvmKUXXiat1TRAeCB7NHpl2BIbG+4SbnE+DHRoyyHLfDAM cPRo/W4/NrSj7TRJQyjDfk8yeq0gZ3/6F7fEC85koxqdj7BEFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMpyopeXfgWZdE4IyU7QoJ2Xblw+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzM3ODdkMDItOGJkZC0z Yzg5LTliZTItNDg3NTljZTBlNTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ7zUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRXvb8kXXBZGeqwzCaHVNC0paXOiXICCuijcLZSq4/GGS8uF6RQPbMS i/JyP7bb8EEAg3e6BjFyE+BwaLBdHBcyx5/NgfZNN7Hr9dywfj/g+zhI7BGjBI5Y ahlBGN6XzjwJMpqCJGJMP+SQk4vZvzVlxrp/+bKWFO4fPakZFfcWKOzhRe/eXpCu FYNQmWgCI8D+5jW9CL+VYN4VFvn7tuhIVeSOT9vL4NUol8DOPz5N8CfhCRK4Nw9c KHPGjvAelIn8L/MA7QAdRmUnBTJEQUapltjzslFJuTnp38HtAC1smbdh+VHtxyFp 7RJnHyWEvnoDHDZXBg4c8eB4A2QfAj4= -----END CERTIFICATE-----Generated at Sun Mar 1 18:50:18 2026 by rpki-client