$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c738061-5823-3f72-89ac-66cdc05ff900.roa File: 4c738061-5823-3f72-89ac-66cdc05ff900.roa (raw, json) Hash identifier: ySzuKAk6/9Ehe1RBsSlxpGRKNNYOP8P/nmZEU4OmKsw= Subject key identifier: B7:C6:94:CF:78:0B:4C:9C:A3:D0:E1:58:F6:94:42:70:AD:19:79:F2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE588531A10222732EA46E00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c738061-5823-3f72-89ac-66cdc05ff900.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 76.150.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:85:31:a1:02:22:73:2e:a4:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=55c1e699-5db2-4510-9aa4-9e26f8d06fa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e6:35:6c:38:e0:90:8a:8b:a4:f6:10:fe:8b: cb:be:6c:f9:94:2c:29:c4:d4:b1:bd:ad:60:23:12: 4f:69:2e:a9:59:f4:0c:7a:d9:ad:53:b1:b1:66:ad: 29:3f:9e:f4:27:a4:04:87:84:92:9f:c7:42:d4:da: ee:bf:d8:99:19:7d:39:19:bf:18:0f:7d:00:28:82: 55:ad:4c:6f:8d:91:95:4c:36:e0:d4:98:15:f5:c2: 05:67:d1:98:90:23:a3:c4:c0:fc:f1:8b:a1:26:8e: 23:ae:ce:c1:bd:70:e9:fb:52:e3:60:ba:b0:3c:f6: 63:06:09:5c:cd:1b:57:7b:5c:26:ff:7f:5b:72:45: 86:e1:29:de:b3:77:87:13:48:a4:70:c6:00:a3:44: 63:83:79:01:30:9c:22:bf:1e:19:26:02:98:fc:08: 9b:6e:52:fd:a0:67:a7:25:e3:46:88:a3:d8:7a:a2: 6a:dc:19:42:92:e4:4b:9b:f7:13:a7:25:8e:ec:24: e9:75:94:28:6c:c2:8d:4c:8d:19:90:da:bf:20:d5: 4f:6a:d2:d0:30:5d:48:b3:98:7c:bb:30:f3:15:50: 59:d0:58:39:1e:4c:47:18:d3:6d:5b:12:50:41:ed: 29:eb:60:81:2b:d8:fd:72:04:17:56:c3:dc:63:49: 68:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:C6:94:CF:78:0B:4C:9C:A3:D0:E1:58:F6:94:42:70:AD:19:79:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c738061-5823-3f72-89ac-66cdc05ff900.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.150.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:20:de:ec:4c:6f:56:77:f1:76:64:b8:a2:65:b9:3a:e1:d9: 29:f4:de:7d:77:3c:c5:08:52:fd:76:64:8e:f1:7b:03:e1:45: e2:b7:e1:82:b2:fa:40:7f:c2:d4:6c:b3:a8:11:b6:ba:f0:75: 15:b4:f3:d5:15:65:1f:c7:f1:81:6a:68:ab:63:f8:b1:d3:b8: 3c:7f:8b:d5:ea:fb:c6:9d:60:04:22:1d:8c:c5:20:c3:ea:f4: bb:82:7b:2c:a4:96:e1:61:a9:9e:df:48:7b:3c:7e:3e:ce:5b: 27:88:66:64:5f:26:46:cd:e0:aa:bf:39:18:3f:c8:6b:19:7c: 64:6e:e1:ac:46:ad:16:16:33:f0:7c:6e:e7:74:0b:61:5c:2f: 34:d5:31:ed:ae:43:66:b6:8d:bd:5b:9e:f8:2e:13:1a:53:37: 4e:df:2a:02:fa:34:00:9e:9f:c0:de:5e:79:e4:2d:7e:d5:3d: 0a:45:ca:b2:56:93:9f:18:a2:cc:a2:f6:09:4e:d2:62:c1:a1: fd:9f:c3:e2:ae:5c:c0:af:aa:b8:82:9c:d1:96:38:45:f9:a4: 21:7b:da:83:a9:86:53:73:2c:58:17:7a:12:19:0f:1b:72:56: c2:13:58:82:d1:f7:04:b7:9f:a0:7b:c0:de:5d:97:4f:f2:05: 21:56:78:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWIUxoQIicy6kbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NTVjMWU2OTktNWRiMi00NTEwLTlhYTQtOWUyNmY4ZDA2ZmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieY1bDjgkIqLpPYQ/ovLvmz5lCwpxNSxva1g IxJPaS6pWfQMetmtU7GxZq0pP570J6QEh4SSn8dC1Nruv9iZGX05Gb8YD30AKIJV rUxvjZGVTDbg1JgV9cIFZ9GYkCOjxMD88YuhJo4jrs7BvXDp+1LjYLqwPPZjBglc zRtXe1wm/39bckWG4Snes3eHE0ikcMYAo0Rjg3kBMJwivx4ZJgKY/AibblL9oGen JeNGiKPYeqJq3BlCkuRLm/cTpyWO7CTpdZQobMKNTI0ZkNq/INVPatLQMF1Is5h8 uzDzFVBZ0Fg5HkxHGNNtWxJQQe0p62CBK9j9cgQXVsPcY0loBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLfGlM94C0yco9DhWPaUQnCtGXnyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGM3MzgwNjEtNTgyMy0z ZjcyLTg5YWMtNjZjZGMwNWZmOTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTJZoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQg3uxMb1Z38XZkuKJluTrh2Sn03n13PMUIUv12ZI7xewPhReK34YKy +kB/wtRss6gRtrrwdRW089UVZR/H8YFqaKtj+LHTuDx/i9Xq+8adYAQiHYzFIMPq 9LuCeyykluFhqZ7fSHs8fj7OWyeIZmRfJkbN4Kq/ORg/yGsZfGRu4axGrRYWM/B8 bud0C2FcLzTVMe2uQ2a2jb1bnvguExpTN07fKgL6NACen8DeXnnkLX7VPQpFyrJW k58Yosyi9glO0mLBof2fw+KuXMCvqriCnNGWOEX5pCF72oOphlNzLFgXehIZDxty VsITWILR9wS3n6B7wN5dl0/yBSFWeIg= -----END CERTIFICATE-----Generated at Sun Mar 1 19:05:54 2026 by rpki-client