$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a5cd8ca-f2a8-37f7-8359-edd7411420c9.roa File: 3a5cd8ca-f2a8-37f7-8359-edd7411420c9.roa (raw, json) Hash identifier: sj9mb65Z9YlcNPl24O2S/Q+xAZRLHwBbaR48kHEP/Mw= Subject key identifier: 70:34:67:AA:02:59:BD:AC:C7:39:A6:E4:DE:7C:82:E7:9E:CD:7E:97 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5907890B5FFDA54BC35700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a5cd8ca-f2a8-37f7-8359-edd7411420c9.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 76.133.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:59:07:89:0b:5f:fd:a5:4b:c3:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=58b7d947-692d-47f1-98f0-10e1cbb740a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e9:2f:8c:46:7d:0b:e3:ff:1e:46:25:12:aa: 61:91:ab:de:c9:12:80:4f:fb:d2:c7:bb:84:4d:aa: 83:fc:f3:a4:4c:1a:c7:7d:d8:56:10:59:2c:a5:49: 36:0a:d8:a9:be:0a:17:47:57:0b:04:7a:43:fb:41: ae:b0:8a:a4:1f:c9:e7:bf:21:9e:0b:3b:30:51:bb: 43:ac:06:40:3a:99:59:3e:92:fb:ca:d3:fe:a3:3a: 5c:6a:b7:cc:39:8d:b9:93:f9:1b:40:64:59:b1:c8: 5f:03:2f:d3:aa:2a:16:11:5a:b4:4d:01:92:28:61: c3:3a:fd:60:a8:a5:c7:15:91:05:39:e3:a3:2b:fd: 72:f2:a4:b8:24:ca:bf:39:cf:e4:85:b8:a0:21:a7: 82:05:e3:bd:c1:c2:36:f6:59:5b:0b:1f:8d:ba:3d: 7e:39:e6:11:f8:5d:ef:c8:94:f8:9c:16:62:73:e6: a6:21:d9:96:fe:ac:75:1a:8b:88:9e:77:bd:f2:07: 45:4c:91:fd:53:50:06:33:bb:1a:7a:26:d4:0c:4d: 51:f7:3a:94:f7:35:be:31:d3:1e:3c:20:1d:84:d0: 63:e4:93:96:ad:c2:e2:21:d6:59:d5:b2:8f:f5:ad: 6b:40:3e:0d:1f:32:ff:50:cd:bb:a6:02:cb:fb:eb: 8a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:34:67:AA:02:59:BD:AC:C7:39:A6:E4:DE:7C:82:E7:9E:CD:7E:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a5cd8ca-f2a8-37f7-8359-edd7411420c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.133.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:3a:53:e4:f8:44:ff:4f:fa:77:85:ba:78:f7:02:c8:21:be: 61:00:ee:b7:88:ab:68:5d:2b:13:89:3c:33:f7:8c:ca:c9:8e: df:c6:05:5e:4a:b8:28:8a:e3:ec:09:68:20:1a:11:73:9f:9e: 23:b8:5c:58:a4:b0:5d:d0:a6:54:10:95:50:5e:2b:69:91:e8: 34:4c:4c:98:78:fc:c6:f8:34:df:b4:17:28:a7:61:01:cc:df: ad:ef:0e:18:64:ce:4f:84:7f:bc:05:26:5a:c8:c2:7c:59:9c: a7:3e:65:31:2d:3f:3e:37:77:96:b3:99:54:54:20:91:a3:43: 39:a1:eb:65:14:f4:7e:a4:d5:47:f2:bd:3e:f3:c9:e6:0f:2a: 3b:70:bf:d3:b1:8b:77:0c:f7:3b:0b:3c:35:6f:9c:e1:16:a0: 82:c8:f2:0a:b3:f7:30:7a:38:8a:ce:ab:23:dd:9d:ec:ff:f7: dd:df:69:f9:38:96:40:37:3e:3b:50:88:c9:e2:e9:6e:77:d7: 3b:38:e6:89:4d:e2:b3:11:d6:6f:b0:5d:ce:ac:08:88:7e:8c: a8:2c:08:70:33:cc:e8:af:c2:ce:d1:d9:c4:aa:59:e9:81:82: 66:ac:b7:77:10:cc:e7:92:f8:5a:29:e6:d5:ec:bb:f9:de:94: f3:76:37:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWQeJC1/9pUvDVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NThiN2Q5NDctNjkyZC00N2YxLTk4ZjAtMTBlMWNiYjc0MGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlekvjEZ9C+P/HkYlEqphkaveyRKAT/vSx7uE TaqD/POkTBrHfdhWEFkspUk2CtipvgoXR1cLBHpD+0GusIqkH8nnvyGeCzswUbtD rAZAOplZPpL7ytP+ozpcarfMOY25k/kbQGRZschfAy/TqioWEVq0TQGSKGHDOv1g qKXHFZEFOeOjK/1y8qS4JMq/Oc/khbigIaeCBeO9wcI29llbCx+Nuj1+OeYR+F3v yJT4nBZic+amIdmW/qx1GouInne98gdFTJH9U1AGM7saeibUDE1R9zqU9zW+MdMe PCAdhNBj5JOWrcLiIdZZ1bKP9a1rQD4NHzL/UM27pgLL++uK1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHA0Z6oCWb2sxzmm5N58gueezX6XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2E1Y2Q4Y2EtZjJhOC0z N2Y3LTgzNTktZWRkNzQxMTQyMGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIVGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKI6U+T4RP9P+neFunj3AsghvmEA7reIq2hdKxOJPDP3jMrJjt/GBV5K uCiK4+wJaCAaEXOfniO4XFiksF3QplQQlVBeK2mR6DRMTJh4/Mb4NN+0FyinYQHM 363vDhhkzk+Ef7wFJlrIwnxZnKc+ZTEtPz43d5azmVRUIJGjQzmh62UU9H6k1Ufy vT7zyeYPKjtwv9Oxi3cM9zsLPDVvnOEWoILI8gqz9zB6OIrOqyPdnez/993fafk4 lkA3PjtQiMni6W531zs45olN4rMR1m+wXc6sCIh+jKgsCHAzzOivws7R2cSqWemB gmast3cQzOeS+Fop5tXsu/nelPN2N8w= -----END CERTIFICATE-----Generated at Sun Mar 1 19:07:58 2026 by rpki-client