$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a4970b2-9d74-3cf9-b3b5-446065f2591e.roa File: 3a4970b2-9d74-3cf9-b3b5-446065f2591e.roa (raw, json) Hash identifier: QBTlUsMqAXn5geY84yhWMQJFaZyJU1wpBDPpSj9ryNk= Subject key identifier: AC:BA:6F:CA:AF:BD:A6:79:12:05:DA:2E:44:5C:42:3E:78:EF:3C:99 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5ABC8590BBF8B5806F7980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a4970b2-9d74-3cf9-b3b5-446065f2591e.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33287 IP address blocks: 69.139.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5a:bc:85:90:bb:f8:b5:80:6f:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=3abfcf7f-14b6-482c-91ca-6bf09b1a4350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a9:2d:cd:bc:5d:eb:60:d7:8f:57:8f:eb:57: 3d:b3:3d:9a:1c:da:4b:aa:2a:c7:82:1b:55:79:61: 99:0c:43:5c:c3:a0:49:81:53:b9:a5:e6:76:94:44: 8c:d0:6e:16:11:f0:2e:24:75:4d:7e:47:91:94:a0: 6d:53:95:e4:3a:29:8c:27:ab:72:34:62:95:71:07: 52:b2:49:64:02:85:0a:8d:a2:07:cb:01:89:91:53: cf:7e:1c:81:af:b6:d2:96:fb:71:91:87:63:ce:65: d0:83:7b:cf:37:ec:42:07:78:7b:19:87:f5:b3:bb: bc:1b:62:10:5d:9d:80:1b:ab:c4:4d:46:fe:7d:9c: f5:41:56:9a:42:39:59:35:f8:39:fa:5a:59:dd:44: 91:ac:21:2b:2a:34:74:1c:34:f6:5a:9a:b5:88:f1: ba:bd:29:72:9f:d2:12:54:5d:45:9b:68:0a:31:6d: 0a:d4:3a:66:ee:b3:70:87:44:79:f5:97:41:c6:aa: f9:10:ef:7e:d4:5e:53:3f:a8:05:25:a6:a2:59:90: 81:e7:2e:88:92:92:b6:d7:ec:8e:00:b2:aa:42:40: fa:91:ed:d3:33:cc:93:36:9d:6e:45:36:ad:d1:de: d8:5d:99:c2:af:8a:dc:75:f2:f8:52:6c:4a:d7:13: 58:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:BA:6F:CA:AF:BD:A6:79:12:05:DA:2E:44:5C:42:3E:78:EF:3C:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a4970b2-9d74-3cf9-b3b5-446065f2591e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 69.139.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:a6:fc:d6:1a:12:6e:b6:e3:d9:33:9e:8e:63:43:ed:c6:67: 7d:a8:53:42:75:fd:11:e8:78:01:ad:ac:b9:1e:e7:41:b0:04: 25:1d:4a:16:3b:25:a3:e0:d8:11:34:80:46:ea:4e:bb:d6:39: ac:96:22:f4:20:f8:fa:e3:24:7e:83:06:71:c6:49:41:26:2d: 21:48:e2:88:b9:3c:69:51:95:cb:be:c9:9a:77:3e:74:e8:bd: f2:e2:5e:c9:49:d6:39:ec:ee:e9:c7:bc:2e:31:e7:44:d5:0f: 7d:ff:57:fe:65:1e:49:11:21:02:64:66:cb:88:d8:97:3e:a3: cf:ae:fc:98:e7:ab:79:7e:55:61:85:10:7c:6b:c0:1e:50:24: a2:27:7f:b5:b1:51:42:ab:b8:0f:50:bf:c5:86:60:59:d0:62: 96:d9:88:b7:e7:76:96:c0:bd:d0:72:d0:71:e2:da:6c:b7:ac: fb:3a:d3:3a:e9:25:e0:c4:5c:0c:3b:13:00:b0:30:c1:dd:ab: 33:68:3e:7f:57:f1:97:da:cc:1d:f0:d0:c9:a0:6b:66:be:da: 05:e5:91:77:58:63:15:4e:e6:ca:a4:d5:b6:f2:4e:25:b4:90: d7:97:1e:67:3b:4c:8a:eb:6d:83:a1:6a:d2:d0:13:29:86:b7: 9a:60:4c:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWryFkLv4tYBveYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk M2FiZmNmN2YtMTRiNi00ODJjLTkxY2EtNmJmMDliMWE0MzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaktzbxd62DXj1eP61c9sz2aHNpLqirHghtV eWGZDENcw6BJgVO5peZ2lESM0G4WEfAuJHVNfkeRlKBtU5XkOimMJ6tyNGKVcQdS sklkAoUKjaIHywGJkVPPfhyBr7bSlvtxkYdjzmXQg3vPN+xCB3h7GYf1s7u8G2IQ XZ2AG6vETUb+fZz1QVaaQjlZNfg5+lpZ3USRrCErKjR0HDT2Wpq1iPG6vSlyn9IS VF1Fm2gKMW0K1Dpm7rNwh0R59ZdBxqr5EO9+1F5TP6gFJaaiWZCB5y6IkpK21+yO ALKqQkD6ke3TM8yTNp1uRTat0d7YXZnCr4rcdfL4UmxK1xNYjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKy6b8qvvaZ5EgXaLkRcQj547zyZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2E0OTcwYjItOWQ3NC0z Y2Y5LWIzYjUtNDQ2MDY1ZjI1OTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARYsKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAem/NYaEm6249kzno5jQ+3GZ32oU0J1/RHoeAGtrLke50GwBCUdShY7 JaPg2BE0gEbqTrvWOayWIvQg+PrjJH6DBnHGSUEmLSFI4oi5PGlRlcu+yZp3PnTo vfLiXslJ1jns7unHvC4x50TVD33/V/5lHkkRIQJkZsuI2Jc+o8+u/Jjnq3l+VWGF EHxrwB5QJKInf7WxUUKruA9Qv8WGYFnQYpbZiLfndpbAvdBy0HHi2my3rPs60zrp JeDEXAw7EwCwMMHdqzNoPn9X8ZfazB3w0Mmga2a+2gXlkXdYYxVO5sqk1bbyTiW0 kNeXHmc7TIrrbYOhatLQEymGt5pgTJc= -----END CERTIFICATE-----Generated at Sun Mar 1 23:08:46 2026 by rpki-client