$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3db1bacf-d891-3b5d-bb61-edefa4659201.roa File: 3db1bacf-d891-3b5d-bb61-edefa4659201.roa (raw, json) Hash identifier: CqiApW5s/iQwW4XS+aWieUBm4WgjqCKxC4KYnbl7KXI= Subject key identifier: 0D:49:9E:B7:D9:BF:87:A1:8D:B8:00:EC:77:7E:50:E6:87:78:32:02 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5A8E3429C643769AF1CBC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3db1bacf-d891-3b5d-bb61-edefa4659201.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33659 IP address blocks: 174.167.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5a:8e:34:29:c6:43:76:9a:f1:cb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=88484e69-5cd6-429f-a1c4-fa2aa6000b0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0d:c6:bb:e3:b1:b3:70:e7:83:b7:40:4d:16: 49:cd:72:18:1a:60:82:d2:e8:bb:84:dd:59:f9:1f: 6e:84:74:85:47:9d:b7:ff:5e:10:ef:72:44:59:78: 76:0a:d4:bf:2f:f7:d2:86:54:d5:14:a1:fc:4f:db: 37:9f:4b:10:a9:64:cd:d3:a2:a5:df:10:e5:02:40: ec:8a:2a:30:01:65:ef:0a:7b:e2:22:1b:d5:58:37: 14:55:6c:3a:2d:00:59:c6:94:6e:20:4c:52:db:1f: b8:1f:9b:db:97:a1:9f:0a:4d:6f:1c:2a:8a:3b:5e: 1a:13:50:a0:c6:a6:11:8b:23:25:14:f1:c4:ab:1e: 53:ad:b3:01:83:df:11:cf:5a:26:02:50:08:57:4d: 13:96:fb:54:25:65:e2:31:4f:f1:7e:8c:56:f3:2b: 90:9a:08:2c:d8:69:53:17:5e:65:92:77:d4:2c:4a: 1f:7d:d8:e6:20:bd:9b:f9:a3:f1:73:93:32:2b:dd: 06:94:66:38:24:11:23:ab:62:41:76:31:c2:0f:9c: 31:60:00:d2:d7:8b:75:23:09:e2:9e:33:53:dc:ef: e0:94:3a:a0:4a:41:42:4d:76:9c:90:47:60:fe:48: 14:f4:6d:84:7c:ff:e5:7c:82:29:6e:d8:3c:2a:ac: 8c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:49:9E:B7:D9:BF:87:A1:8D:B8:00:EC:77:7E:50:E6:87:78:32:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3db1bacf-d891-3b5d-bb61-edefa4659201.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.167.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:38:e1:a9:fc:0e:e1:80:cb:43:46:5c:db:ce:03:da:c9:9e: e1:ce:8c:63:f3:41:ed:61:8f:00:a8:04:1a:3e:33:00:68:65: d8:6a:84:2e:f9:5b:3d:44:62:b0:4d:21:7b:ce:51:91:7b:68: b6:f9:df:ae:01:40:fc:71:6d:7f:34:9b:e7:33:66:30:79:0d: d2:f3:eb:38:1e:f6:98:29:81:b1:d0:b7:ce:80:f0:9f:0f:76: ea:f4:92:a7:2d:0c:25:62:25:3a:91:6b:90:db:02:8e:a0:c6: 07:5b:7f:92:36:d2:95:6d:c2:a5:bf:a4:7c:4a:a8:83:19:02: 08:e6:14:fe:92:8b:2e:54:d5:ef:6b:10:46:21:aa:30:22:e5: d8:ba:4b:11:54:9b:68:3d:41:ae:9d:da:e2:94:1a:51:b7:66: a2:88:0f:4e:2a:49:29:3c:97:98:e6:e7:74:2f:14:73:59:7e: 9a:a5:7f:41:f3:9a:a9:08:14:cf:75:92:25:1b:84:41:67:ce: 82:67:5a:d8:9d:ec:f1:40:2b:e0:55:a0:ed:20:9b:06:30:dd: 92:41:35:9c:4d:ee:ba:2b:e8:dc:a6:ed:3c:07:bc:67:d3:2f: 92:d3:39:c9:0f:5e:5f:3f:40:4b:97:fc:4f:59:60:d5:8c:44: b0:1b:8d:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWo40KcZDdprxy8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ODg0ODRlNjktNWNkNi00MjlmLWExYzQtZmEyYWE2MDAwYjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQ3Gu+Oxs3Dng7dATRZJzXIYGmCC0ui7hN1Z +R9uhHSFR523/14Q73JEWXh2CtS/L/fShlTVFKH8T9s3n0sQqWTN06Kl3xDlAkDs iiowAWXvCnviIhvVWDcUVWw6LQBZxpRuIExS2x+4H5vbl6GfCk1vHCqKO14aE1Cg xqYRiyMlFPHEqx5TrbMBg98Rz1omAlAIV00TlvtUJWXiMU/xfoxW8yuQmggs2GlT F15lknfULEoffdjmIL2b+aPxc5MyK90GlGY4JBEjq2JBdjHCD5wxYADS14t1Iwni njNT3O/glDqgSkFCTXackEdg/kgU9G2EfP/lfIIpbtg8KqyMyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA1JnrfZv4ehjbgA7Hd+UOaHeDICMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2RiMWJhY2YtZDg5MS0z YjVkLWJiNjEtZWRlZmE0NjU5MjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrqd4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL844an8DuGAy0NGXNvOA9rJnuHOjGPzQe1hjwCoBBo+MwBoZdhqhC75 Wz1EYrBNIXvOUZF7aLb5364BQPxxbX80m+czZjB5DdLz6zge9pgpgbHQt86A8J8P dur0kqctDCViJTqRa5DbAo6gxgdbf5I20pVtwqW/pHxKqIMZAgjmFP6Siy5U1e9r EEYhqjAi5di6SxFUm2g9Qa6d2uKUGlG3ZqKID04qSSk8l5jm53QvFHNZfpqlf0Hz mqkIFM91kiUbhEFnzoJnWtid7PFAK+BVoO0gmwYw3ZJBNZxN7ror6Nym7TwHvGfT L5LTOckPXl8/QEuX/E9ZYNWMRLAbjUA= -----END CERTIFICATE-----Generated at Mon Mar 2 04:17:07 2026 by rpki-client