$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42bd91e2-7a98-33f8-ad5e-69e596b31897.roa File: 42bd91e2-7a98-33f8-ad5e-69e596b31897.roa (raw, json) Hash identifier: 5edec70pc/qJIBNuHqmseZz3LDpW+JFc/jtHLBjvItA= Subject key identifier: B3:05:6A:53:92:5A:DA:7A:8E:FB:32:BE:EE:5A:9E:DD:17:D5:98:FD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5E01FF736D10DB44F00100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42bd91e2-7a98-33f8-ad5e-69e596b31897.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 76.133.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:01:ff:73:6d:10:db:44:f0:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=074eb90e-2fdb-47db-9668-84b695099f74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f6:d2:99:ce:64:1a:9d:1d:0a:af:7b:b4:b8: 59:82:52:4a:31:8a:98:dd:84:70:a4:02:7c:be:15: 36:63:a9:9d:0a:ba:2d:df:fb:2d:59:2f:f6:94:e8: 1c:07:14:bd:aa:79:7a:20:2f:da:c2:da:8f:a5:84: f3:d9:89:2c:da:bd:5e:2b:bc:2e:18:a2:86:e0:d7: dc:01:6d:a9:1f:75:bd:ec:a5:78:a5:17:cc:d5:e1: fe:a1:ba:18:32:9e:f5:bf:60:50:9c:80:46:20:02: 6b:c2:87:eb:09:cb:9d:c5:9e:08:13:c6:74:11:f3: 97:47:7b:92:72:39:bc:35:28:6c:66:6a:f8:66:66: 6f:eb:6b:b6:9a:46:bf:1e:13:95:47:8b:d9:7d:24: b4:2f:72:2f:d7:9e:5e:6c:c1:0a:29:7d:0d:82:ff: e7:a6:41:ef:6d:4c:9b:81:87:fa:14:af:18:46:e2: c0:e1:b6:e5:11:bd:35:de:98:5d:8a:6d:45:c5:98: 7d:e8:92:ba:fc:00:48:dc:8c:0b:8c:c3:4d:8d:3e: e2:ef:27:7f:bf:46:45:20:14:d0:71:36:f4:ed:07: af:f4:a0:62:7f:bd:ec:73:57:52:35:1f:c3:68:ad: a2:50:6a:0a:de:b8:4a:b2:57:b3:ea:c8:eb:0d:b3: 88:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:05:6A:53:92:5A:DA:7A:8E:FB:32:BE:EE:5A:9E:DD:17:D5:98:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42bd91e2-7a98-33f8-ad5e-69e596b31897.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.133.46.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d8:0f:71:f1:70:1e:a4:18:c8:19:7e:1c:d7:d4:4e:60:17:58: 84:9b:99:d1:cd:2b:c8:af:3a:22:9d:b0:2d:a3:5b:57:fe:5b: fb:47:ea:4e:36:72:6c:8a:4f:3f:01:13:29:59:39:9c:9e:a3: be:df:bb:a1:51:4a:84:3c:43:5a:a0:0d:8a:0e:0c:3d:35:95: 22:52:f5:29:6c:76:cc:18:84:67:33:04:6b:3a:2b:03:a6:e9: 1b:58:ee:d2:fd:da:95:67:6f:1c:dc:56:e0:6f:f8:80:37:07: 3b:d7:d0:c2:dd:97:24:de:96:16:b9:cf:c4:cd:38:a5:c6:b3: e3:53:44:8b:ed:2a:f4:b5:de:bc:cb:e6:5e:21:cb:16:87:ab: b5:1a:49:a1:61:6c:7e:70:c4:f6:73:19:2e:1f:29:0c:6b:dd: cc:5a:19:ff:a5:5b:34:13:f6:cf:d0:e6:e3:40:63:b4:17:4e: 5a:1c:88:da:0a:4c:16:27:3c:bf:ab:a4:58:91:5a:d3:fe:fa: 13:67:db:6e:74:d0:90:17:59:6d:c9:0c:2b:d7:f7:dc:fe:41: 8c:cc:4e:7c:48:23:a0:1f:f0:18:05:25:2d:9d:82:e6:5f:36: 43:22:39:e6:ad:71:07:b2:aa:bb:6f:fb:57:e3:eb:6c:cd:80: 2c:98:9a:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXgH/c20Q20TwAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MDc0ZWI5MGUtMmZkYi00N2RiLTk2NjgtODRiNjk1MDk5Zjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfbSmc5kGp0dCq97tLhZglJKMYqY3YRwpAJ8 vhU2Y6mdCrot3/stWS/2lOgcBxS9qnl6IC/awtqPpYTz2Yks2r1eK7wuGKKG4Nfc AW2pH3W97KV4pRfM1eH+oboYMp71v2BQnIBGIAJrwofrCcudxZ4IE8Z0EfOXR3uS cjm8NShsZmr4ZmZv62u2mka/HhOVR4vZfSS0L3Iv155ebMEKKX0Ngv/npkHvbUyb gYf6FK8YRuLA4bblEb013phdim1FxZh96JK6/ABI3IwLjMNNjT7i7yd/v0ZFIBTQ cTb07Qev9KBif73sc1dSNR/DaK2iUGoK3rhKslez6sjrDbOIrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLMFalOSWtp6jvsyvu5ant0X1Zj9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDJiZDkxZTItN2E5OC0z M2Y4LWFkNWUtNjllNTk2YjMxODk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIUuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANgPcfFwHqQYyBl+HNfUTmAXWISbmdHNK8ivOiKdsC2jW1f+W/tH6k42 cmyKTz8BEylZOZyeo77fu6FRSoQ8Q1qgDYoODD01lSJS9SlsdswYhGczBGs6KwOm 6RtY7tL92pVnbxzcVuBv+IA3BzvX0MLdlyTelha5z8TNOKXGs+NTRIvtKvS13rzL 5l4hyxaHq7UaSaFhbH5wxPZzGS4fKQxr3cxaGf+lWzQT9s/Q5uNAY7QXTlociNoK TBYnPL+rpFiRWtP++hNn22500JAXWW3JDCvX99z+QYzMTnxII6Af8BgFJS2dguZf NkMiOeatcQeyqrtv+1fj62zNgCyYmuE= -----END CERTIFICATE-----Generated at Mon Mar 2 00:40:07 2026 by rpki-client