$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3afc778c-fe91-3470-95c6-7fc9caadde5f.roa File: 3afc778c-fe91-3470-95c6-7fc9caadde5f.roa (raw, json) Hash identifier: /VTrv+Rn83ylVXajqbpR8y/t1/YExADsYOFExt65p1c= Subject key identifier: 1D:06:64:A4:32:6A:4D:DC:BD:AA:23:8C:32:7F:3A:A8:81:97:E7:48 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE58C4C40A6546CA78D1A880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3afc778c-fe91-3470-95c6-7fc9caadde5f.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 67.188.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:c4:c4:0a:65:46:ca:78:d1:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=bfc4e92c-b222-4ba5-ab81-d3e43299bc50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:38:29:3b:24:e8:e0:83:77:b1:f5:e7:74:ff: dc:ca:5e:58:26:9d:08:f6:fe:08:bb:37:64:31:b5: 4e:0c:c5:30:59:15:28:30:30:7c:f0:12:0d:53:da: 58:7a:3f:49:0b:31:a2:d4:54:34:d4:f2:8c:35:f0: da:0e:21:2f:ed:85:4b:80:eb:16:d7:94:f2:e9:cd: 1a:32:17:8f:9b:98:8d:47:ca:35:80:bd:9c:fc:c3: ac:ee:1f:5c:05:6c:bd:c8:35:ea:fc:df:99:3c:67: 42:e8:77:6c:f6:d6:66:6c:7d:01:5c:25:26:bc:a7: 97:09:11:bf:2a:b2:8d:41:7f:92:45:5a:e4:50:33: 63:64:14:e6:32:e8:20:df:12:84:15:cd:b9:5c:90: 85:47:44:88:91:6b:10:51:79:80:92:5d:e0:ae:cb: a3:f2:1f:3b:5e:92:4c:db:dd:7b:15:55:f7:7b:55: 62:96:e4:ae:a1:7a:f0:58:d5:37:63:92:bc:c7:a9: 09:91:d3:c3:40:31:11:23:33:71:c8:bc:22:91:3b: ec:97:a3:d3:4e:35:72:40:83:df:9a:2d:47:b3:66: 3d:a2:d0:3a:d4:10:ff:eb:86:8a:58:ad:d0:6b:93: 8e:0b:0e:8f:b6:72:d7:67:ad:c4:6a:f5:70:30:dd: 8d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:06:64:A4:32:6A:4D:DC:BD:AA:23:8C:32:7F:3A:A8:81:97:E7:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3afc778c-fe91-3470-95c6-7fc9caadde5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.188.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:33:4e:6a:91:06:af:fc:ac:d6:9f:28:32:c2:e8:8a:5e:d5: e5:ea:b8:98:44:c8:06:d1:7e:54:58:a4:91:73:61:70:8c:cf: 54:bb:24:a2:39:fd:c3:1c:1a:18:ac:ad:0c:7a:b2:8a:0b:c6: 4e:47:95:e8:9d:8f:2f:3d:34:e5:95:0e:65:0d:25:53:0a:0c: 69:4c:d1:de:c8:87:40:94:48:16:07:4e:5a:c0:b5:10:5e:55: cd:41:ad:63:7a:3f:5c:ae:91:0c:b4:a7:03:27:35:0f:82:b2: d2:d5:c1:0b:99:62:73:d1:6b:4d:e7:b5:9e:cc:e4:8f:6f:10: e5:33:3c:37:8a:ac:9e:b6:fe:3a:1b:e7:e6:12:17:e4:3f:32: bc:b4:89:b1:6c:fe:b9:2f:5e:24:19:2f:e3:34:ad:6c:5c:c0: e2:34:48:bd:de:1f:cd:99:cb:22:77:78:eb:b1:21:98:a8:17: 48:44:0e:4e:c3:0d:e7:86:6d:66:39:1d:81:8c:00:e5:cb:dc: 45:9e:9a:31:6b:74:42:02:0f:52:ed:bf:8f:f0:01:dd:50:3b: a2:b3:f5:71:39:a1:3d:e9:7a:cb:8b:fb:ae:e1:3d:8b:f5:2f: 9e:38:2f:f3:90:f3:9f:65:76:d3:9d:08:2b:cd:3d:8d:16:56: fe:b9:4e:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWMTECmVGynjRqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YmZjNGU5MmMtYjIyMi00YmE1LWFiODEtZDNlNDMyOTliYzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljgpOyTo4IN3sfXndP/cyl5YJp0I9v4Iuzdk MbVODMUwWRUoMDB88BINU9pYej9JCzGi1FQ01PKMNfDaDiEv7YVLgOsW15Ty6c0a MhePm5iNR8o1gL2c/MOs7h9cBWy9yDXq/N+ZPGdC6Hds9tZmbH0BXCUmvKeXCRG/ KrKNQX+SRVrkUDNjZBTmMugg3xKEFc25XJCFR0SIkWsQUXmAkl3grsuj8h87XpJM 2917FVX3e1ViluSuoXrwWNU3Y5K8x6kJkdPDQDERIzNxyLwikTvsl6PTTjVyQIPf mi1Hs2Y9otA61BD/64aKWK3Qa5OOCw6PtnLXZ63EavVwMN2NgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB0GZKQyak3cvaojjDJ/OqiBl+dIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2FmYzc3OGMtZmU5MS0z NDcwLTk1YzYtN2ZjOWNhYWRkZTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ7ygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQzTmqRBq/8rNafKDLC6Ipe1eXquJhEyAbRflRYpJFzYXCMz1S7JKI5 /cMcGhisrQx6sooLxk5Hleidjy89NOWVDmUNJVMKDGlM0d7Ih0CUSBYHTlrAtRBe Vc1BrWN6P1yukQy0pwMnNQ+CstLVwQuZYnPRa03ntZ7M5I9vEOUzPDeKrJ62/job 5+YSF+Q/Mry0ibFs/rkvXiQZL+M0rWxcwOI0SL3eH82ZyyJ3eOuxIZioF0hEDk7D DeeGbWY5HYGMAOXL3EWemjFrdEICD1Ltv4/wAd1QO6Kz9XE5oT3pesuL+67hPYv1 L544L/OQ859ldtOdCCvNPY0WVv65TnM= -----END CERTIFICATE-----Generated at Sun Mar 1 18:44:42 2026 by rpki-client