$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b84a6bc-7106-32a6-ad27-e133ac63ed59.roa File: 3b84a6bc-7106-32a6-ad27-e133ac63ed59.roa (raw, json) Hash identifier: Io9oU2a5JsZbzWHmKuDkEcLhDlo0U5jTDOE9yl7siBU= Subject key identifier: 7B:04:FC:83:0A:F8:40:F5:7A:1C:9A:35:DB:D7:52:B0:58:3A:B9:75 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE58C1F6CE15E23F0D9B9BF0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b84a6bc-7106-32a6-ad27-e133ac63ed59.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 67.170.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:c1:f6:ce:15:e2:3f:0d:9b:9b:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=b8731d77-aa29-43dc-86d9-5afccdf87678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:dd:d5:3c:19:38:80:2a:d7:d5:19:5c:66:7e: bc:37:ee:8f:66:d3:73:6f:02:ac:61:e7:a3:69:3b: a3:03:45:50:83:7b:21:2a:dd:33:3e:e2:47:5e:d6: 58:1a:3a:47:84:41:79:33:ba:4f:0a:89:68:dd:03: 28:40:7b:20:d2:9e:d4:bc:90:20:f4:55:24:fe:04: 4f:e1:32:13:2d:71:4b:1a:26:fa:19:bb:00:d6:3f: f2:e6:ae:15:a7:a1:c5:be:42:8c:40:76:ca:cf:a4: bd:15:2c:68:c3:0e:88:0c:71:4e:8f:8a:02:30:fd: 89:9a:cd:00:8f:79:45:54:8d:fc:54:3b:6c:ed:e9: 23:f7:00:c0:ef:76:0b:a9:66:dd:ac:ff:d5:5d:ed: ae:16:1c:29:2c:11:e2:aa:0a:22:91:99:9e:d9:99: 20:e4:e6:ec:f8:a5:23:98:2b:05:5f:eb:27:6c:c8: cb:2f:c6:d2:9b:bd:7a:1d:84:00:21:76:04:33:43: ea:0a:3a:df:16:cd:7e:79:fd:71:d8:68:cb:aa:41: 6a:57:9c:e4:83:b1:1f:f9:75:cc:a1:75:c0:6a:5c: a1:07:a6:03:b2:8f:ac:5b:d8:e8:5c:54:a9:22:3f: b1:7c:a0:98:91:a5:5d:0f:0f:90:b2:1c:0c:e1:09: fe:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:04:FC:83:0A:F8:40:F5:7A:1C:9A:35:DB:D7:52:B0:58:3A:B9:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b84a6bc-7106-32a6-ad27-e133ac63ed59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.170.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:c5:58:4c:6a:a4:ea:37:74:f0:97:a9:19:30:73:72:aa:04: 05:76:c2:cb:9c:fe:49:f8:54:68:8f:c9:d7:0b:09:a3:c2:81: 07:e8:ed:b5:14:71:d8:61:40:c9:7c:be:c0:0a:b0:fd:40:76: 0e:da:66:79:48:d6:09:e3:2c:3f:79:4d:60:5a:f4:d0:51:56: f0:db:23:97:a0:0f:7f:ac:58:b3:17:6d:15:ae:11:48:b8:0b: 0f:b5:82:c5:37:51:5a:6b:a7:05:47:72:64:42:8c:09:45:95: 20:da:9b:b2:43:93:c8:bb:8d:a6:18:1b:2f:30:0e:b2:03:f0: a9:fa:c2:41:bd:51:d6:da:13:08:24:cc:d1:81:59:c0:23:24: 8a:ff:08:76:25:71:21:8e:44:39:b6:fd:9f:83:4f:30:84:08: 42:03:6e:f0:7c:2c:2c:f1:eb:f8:84:9e:d0:c9:5b:8c:ae:81: 30:b3:9b:1b:74:e5:80:2e:ba:87:5c:0c:c8:69:e8:e2:d2:c7: 9a:5a:5d:7d:c7:d2:12:2d:f5:56:ca:96:f9:38:e7:93:01:2a: 3e:43:bd:c5:e7:c9:a8:1a:59:b6:95:ae:09:4d:06:54:6d:39: e6:c8:da:d6:9f:04:97:bb:58:23:0e:59:2f:13:ef:fd:f9:fd: d8:91:ad:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWMH2zhXiPw2bm/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk Yjg3MzFkNzctYWEyOS00M2RjLTg2ZDktNWFmY2NkZjg3Njc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg93VPBk4gCrX1RlcZn68N+6PZtNzbwKsYeej aTujA0VQg3shKt0zPuJHXtZYGjpHhEF5M7pPColo3QMoQHsg0p7UvJAg9FUk/gRP 4TITLXFLGib6GbsA1j/y5q4Vp6HFvkKMQHbKz6S9FSxoww6IDHFOj4oCMP2Jms0A j3lFVI38VDts7ekj9wDA73YLqWbdrP/VXe2uFhwpLBHiqgoikZme2Zkg5Obs+KUj mCsFX+snbMjLL8bSm716HYQAIXYEM0PqCjrfFs1+ef1x2GjLqkFqV5zkg7Ef+XXM oXXAalyhB6YDso+sW9joXFSpIj+xfKCYkaVdDw+QshwM4Qn+UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHsE/IMK+ED1ehyaNdvXUrBYOrl1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2I4NGE2YmMtNzEwNi0z MmE2LWFkMjctZTEzM2FjNjNlZDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ6r6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL3FWExqpOo3dPCXqRkwc3KqBAV2wsuc/kn4VGiPydcLCaPCgQfo7bUU cdhhQMl8vsAKsP1Adg7aZnlI1gnjLD95TWBa9NBRVvDbI5egD3+sWLMXbRWuEUi4 Cw+1gsU3UVprpwVHcmRCjAlFlSDam7JDk8i7jaYYGy8wDrID8Kn6wkG9UdbaEwgk zNGBWcAjJIr/CHYlcSGORDm2/Z+DTzCECEIDbvB8LCzx6/iEntDJW4yugTCzmxt0 5YAuuodcDMhp6OLSx5paXX3H0hIt9VbKlvk455MBKj5DvcXnyagaWbaVrglNBlRt OebI2tafBJe7WCMOWS8T7/35/diRrVU= -----END CERTIFICATE-----Generated at Mon Mar 2 15:27:43 2026 by rpki-client