$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4812b60f-7d17-3441-a2b9-650ce841ea42.roa File: 4812b60f-7d17-3441-a2b9-650ce841ea42.roa (raw, json) Hash identifier: rS7Av71P8r9iIjtv8RJhJrHTCeUReaOZZ07xxifyOTE= Subject key identifier: A0:C6:16:90:EB:32:B5:5C:64:1B:B8:85:74:07:CC:9B:91:37:FD:C3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE57A770CB64B0381A54DD00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4812b60f-7d17-3441-a2b9-650ce841ea42.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33659 IP address blocks: 174.57.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:a7:70:cb:64:b0:38:1a:54:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=6e133f68-d3b9-47f2-a761-2f785382b371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:86:89:df:d9:1d:1a:65:5b:42:f3:9c:d4:35: 3f:a6:52:0d:22:26:6f:38:d6:d9:6c:28:fb:2c:95: 33:e8:c5:ab:03:5b:92:94:bb:39:f0:fa:33:f6:76: 16:3d:07:04:f7:7a:9a:a1:77:c2:3e:c7:96:0f:37: d9:42:08:1e:fd:ef:ca:54:ba:87:cf:9d:af:5d:af: e2:a6:4e:68:90:db:2f:29:30:0a:23:86:d4:2f:7a: c6:17:82:b1:b6:dd:a5:2c:04:24:d0:fc:84:62:51: 1b:df:99:f2:ad:eb:7b:85:cb:63:6d:92:4e:f8:eb: 52:44:26:58:56:1f:27:64:ce:75:ef:19:20:ff:ed: 2f:49:88:d2:c3:2c:d9:a3:82:59:26:3f:86:4f:48: d7:81:08:3d:60:b7:86:59:f0:ec:be:d1:0c:06:a7: ad:33:69:6b:4d:67:a0:99:10:99:6c:1a:9a:cb:5a: 32:04:b6:19:04:e6:9f:f6:f4:8e:f1:cd:44:a7:6b: 4c:10:06:5f:b4:9b:3f:a7:39:2e:03:dd:8f:56:6f: 3a:01:0b:c2:68:40:04:5e:a4:e8:b5:b6:2e:75:dc: 1c:3c:7d:06:03:a5:92:8e:b8:12:68:d5:83:61:b5: af:dd:63:58:73:d7:97:e7:15:3b:d8:85:f2:46:a5: c0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C6:16:90:EB:32:B5:5C:64:1B:B8:85:74:07:CC:9B:91:37:FD:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4812b60f-7d17-3441-a2b9-650ce841ea42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.57.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:90:77:8e:45:a6:1b:61:5a:b3:b5:7e:00:69:4c:9a:ae:4b: cd:8f:a5:fa:b0:d5:77:fd:76:36:f5:8b:ab:82:9a:2b:81:ca: b5:9b:a0:7b:fe:87:67:e0:67:48:06:14:f5:84:cc:89:6f:7d: 5a:ca:e8:51:58:5f:46:da:cb:ce:42:96:c6:8b:72:6d:30:c1: 15:27:08:5e:e8:d0:91:16:fb:e9:69:46:2e:7a:1b:04:c5:ab: 19:6b:47:ae:c3:f2:64:64:2a:ca:66:64:e4:8c:93:6e:12:db: c2:3e:22:9c:ce:ad:66:ee:4e:07:a1:56:65:83:07:e7:b9:90: c0:8b:27:44:d9:80:5c:df:64:3f:62:f7:b4:34:61:71:94:e8: de:00:ce:c5:26:25:07:b6:7a:91:32:07:61:4b:16:9d:14:1c: 80:e8:7b:ec:30:33:fc:02:9d:0a:1b:77:8e:7f:ef:7d:d3:9a: 3f:ba:c2:96:cb:ff:42:54:f7:4d:72:d0:ed:70:7a:f7:d7:a7: ec:56:c3:0d:b1:5a:28:ab:7b:5a:e7:a0:42:d6:bd:4e:19:ba: 1e:55:46:6d:21:8d:a0:6a:02:ac:ad:12:d1:f5:86:1c:32:ae: 90:5f:86:b3:3f:7e:39:82:41:97:a5:68:8a:38:91:9a:84:65: 16:87:1a:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuV6dwy2SwOBpU3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NmUxMzNmNjgtZDNiOS00N2YyLWE3NjEtMmY3ODUzODJiMzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4aJ39kdGmVbQvOc1DU/plINIiZvONbZbCj7 LJUz6MWrA1uSlLs58Poz9nYWPQcE93qaoXfCPseWDzfZQgge/e/KVLqHz52vXa/i pk5okNsvKTAKI4bUL3rGF4Kxtt2lLAQk0PyEYlEb35nyret7hctjbZJO+OtSRCZY Vh8nZM517xkg/+0vSYjSwyzZo4JZJj+GT0jXgQg9YLeGWfDsvtEMBqetM2lrTWeg mRCZbBqay1oyBLYZBOaf9vSO8c1Ep2tMEAZftJs/pzkuA92PVm86AQvCaEAEXqTo tbYuddwcPH0GA6WSjrgSaNWDYbWv3WNYc9eX5xU72IXyRqXAewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDGFpDrMrVcZBu4hXQHzJuRN/3DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDgxMmI2MGYtN2QxNy0z NDQxLWEyYjktNjUwY2U4NDFlYTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrjl4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOQd45FphthWrO1fgBpTJquS82Ppfqw1Xf9djb1i6uCmiuByrWboHv+ h2fgZ0gGFPWEzIlvfVrK6FFYX0bay85ClsaLcm0wwRUnCF7o0JEW++lpRi56GwTF qxlrR67D8mRkKspmZOSMk24S28I+IpzOrWbuTgehVmWDB+e5kMCLJ0TZgFzfZD9i 97Q0YXGU6N4AzsUmJQe2epEyB2FLFp0UHIDoe+wwM/wCnQobd45/733Tmj+6wpbL /0JU901y0O1wevfXp+xWww2xWiire1rnoELWvU4Zuh5VRm0hjaBqAqytEtH1hhwy rpBfhrM/fjmCQZelaIo4kZqEZRaHGhk= -----END CERTIFICATE-----Generated at Mon Mar 2 02:33:53 2026 by rpki-client