$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33a1a152-614f-3ac9-819e-b896958602af.roa File: 33a1a152-614f-3ac9-819e-b896958602af.roa (raw, json) Hash identifier: xjaPI2bOT/DaV2/2DzhGPRdnZ1+bcSFTNaLWOPKuvUo= Subject key identifier: E9:69:22:D1:0C:0B:79:87:D7:48:17:3B:C1:94:DA:0A:35:84:D0:C9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE594B9797960DBBD4D9D620 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33a1a152-614f-3ac9-819e-b896958602af.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33660 IP address blocks: 76.149.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:59:4b:97:97:96:0d:bb:d4:d9:d6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=2c59837f-c11c-4eaa-8d38-0e8faccebce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a7:63:ac:7b:e0:fd:c7:43:04:66:dd:de:b4: 3d:ba:f8:80:72:36:4d:2f:6e:a0:96:72:35:2f:c7: ba:fb:26:e2:0a:cd:58:3a:02:ff:2e:f3:5a:ad:42: 5d:66:2d:61:cf:1a:8d:64:2b:d1:b2:2c:07:58:6e: 27:40:2a:c0:e8:72:34:1a:0b:2a:85:f3:cd:3c:82: f6:e4:f0:26:b1:c9:28:5e:9d:dd:e5:7b:28:19:ad: d3:78:5d:c9:ce:17:de:17:62:0d:02:d9:8f:ad:a9: 67:95:5c:73:0f:d6:5f:2a:27:3a:ed:d6:2f:b7:b3: 79:4e:ac:e6:51:fe:09:e4:46:67:b2:74:4e:03:54: 84:55:ba:1f:f8:03:f1:03:61:6f:c9:bc:27:ab:24: 7d:d0:ae:d5:42:b4:2d:93:75:7e:54:f8:78:ae:f9: b8:77:6c:35:f8:b2:4d:58:76:93:c1:ac:69:8a:e5: a8:a5:c4:02:74:fd:fe:04:93:17:ba:a7:a3:3c:98: eb:38:9f:7e:29:71:f0:0c:ae:96:55:7a:49:03:02: 4e:20:d9:39:01:66:d2:8c:b3:21:5e:95:51:5e:8e: 8e:d6:cd:7a:8a:bf:b7:66:cc:a0:1c:f6:91:9d:99: c2:1f:ca:cd:2b:09:29:db:f5:b6:d2:79:d5:df:5a: 09:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:69:22:D1:0C:0B:79:87:D7:48:17:3B:C1:94:DA:0A:35:84:D0:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33a1a152-614f-3ac9-819e-b896958602af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.149.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:99:ec:2f:db:09:86:e9:8b:0f:bb:ae:b7:e4:c9:2c:f3:51: dd:a5:c1:08:5e:02:53:03:70:cb:e5:57:24:1a:2a:e5:8a:1f: ef:11:cd:95:8d:bf:7c:44:64:e9:c1:37:04:81:a1:ba:14:f7: a7:b9:f1:2a:e1:83:53:6e:95:b6:04:58:a6:78:16:b3:93:fb: c0:a4:b2:e6:37:da:65:1d:49:0d:58:ec:eb:81:19:4b:72:06: 72:e8:ca:a7:41:10:09:9f:0f:b4:23:e9:74:4c:a0:e0:16:35: 45:19:8a:33:fc:e6:6d:d7:d8:da:15:b3:60:55:59:53:02:1a: 67:7e:40:80:5c:bc:26:83:b8:82:09:d7:c4:39:31:69:bf:09: f9:57:f7:66:ac:63:ab:dc:d4:b9:0e:fe:84:7f:7f:71:39:fd: 4e:23:7b:6e:b3:a3:14:fb:9e:b9:c1:ed:a7:53:57:51:db:a5: 3b:b7:25:40:6c:5e:1a:21:cb:3b:1d:fb:ee:16:f3:ad:1a:b4: 84:03:2f:06:72:23:cc:68:83:69:03:29:66:bf:d1:81:2d:fa: f4:f1:77:b8:37:9f:82:33:11:5a:94:f0:ac:f5:da:ab:57:9c: 53:1d:54:f9:c4:fd:20:82:36:15:8b:bd:e3:43:aa:f8:57:9b: f0:f3:23:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWUuXl5YNu9TZ1iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MmM1OTgzN2YtYzExYy00ZWFhLThkMzgtMGU4ZmFjY2ViY2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjadjrHvg/cdDBGbd3rQ9uviAcjZNL26glnI1 L8e6+ybiCs1YOgL/LvNarUJdZi1hzxqNZCvRsiwHWG4nQCrA6HI0GgsqhfPNPIL2 5PAmsckoXp3d5XsoGa3TeF3JzhfeF2INAtmPralnlVxzD9ZfKic67dYvt7N5Tqzm Uf4J5EZnsnROA1SEVbof+APxA2FvybwnqyR90K7VQrQtk3V+VPh4rvm4d2w1+LJN WHaTwaxpiuWopcQCdP3+BJMXuqejPJjrOJ9+KXHwDK6WVXpJAwJOINk5AWbSjLMh XpVRXo6O1s16ir+3ZsygHPaRnZnCH8rNKwkp2/W20nnV31oJnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOlpItEMC3mH10gXO8GU2go1hNDJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzNhMWExNTItNjE0Zi0z YWM5LTgxOWUtYjg5Njk1ODYwMmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTJX4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWZ7C/bCYbpiw+7rrfkySzzUd2lwQheAlMDcMvlVyQaKuWKH+8RzZWN v3xEZOnBNwSBoboU96e58Srhg1NulbYEWKZ4FrOT+8CksuY32mUdSQ1Y7OuBGUty BnLoyqdBEAmfD7Qj6XRMoOAWNUUZijP85m3X2NoVs2BVWVMCGmd+QIBcvCaDuIIJ 18Q5MWm/CflX92asY6vc1LkO/oR/f3E5/U4je26zoxT7nrnB7adTV1HbpTu3JUBs Xhohyzsd++4W860atIQDLwZyI8xog2kDKWa/0YEt+vTxd7g3n4IzEVqU8Kz12qtX nFMdVPnE/SCCNhWLveNDqvhXm/DzI0Q= -----END CERTIFICATE-----Generated at Sun Mar 1 20:47:46 2026 by rpki-client