$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4cef94ba-3b4b-304f-8d4d-4bf4128c90b7.roa File: 4cef94ba-3b4b-304f-8d4d-4bf4128c90b7.roa (raw, json) Hash identifier: Bz4+t5qSWjbNuYiKPxglMC+x+Ol+OJ0OqyvcKYIN32E= Subject key identifier: A3:2F:16:8F:5C:BD:2B:D2:DF:47:5A:9A:DB:5B:E6:95:FC:3E:DD:77 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE57A61B40621BB8DB9B9540 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4cef94ba-3b4b-304f-8d4d-4bf4128c90b7.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33659 IP address blocks: 174.57.40.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:a6:1b:40:62:1b:b8:db:9b:95:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=832f74ff-7898-47a2-afda-9d90695e058e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2d:54:ce:a3:13:c8:27:0c:c5:d8:ff:b1:01: 74:e3:9f:5e:80:aa:65:ff:98:04:4a:62:94:bf:83: 89:39:35:c3:6c:bd:fb:85:0f:6d:3e:4d:17:c5:5d: 85:56:18:c4:23:03:18:4a:c7:71:64:41:2e:bf:c2: d2:9d:d6:84:a5:23:e9:bf:dd:ad:32:8b:bf:f7:c3: 6e:06:cc:d3:d9:46:b0:08:30:0c:c6:ec:cb:72:09: 16:40:25:df:f4:3e:6c:b6:4b:20:f8:65:ef:8d:2a: 36:22:87:40:00:55:db:b0:87:13:d5:d3:06:fd:f2: 37:32:c7:4f:af:a0:52:be:30:c5:7e:fd:89:22:98: 99:7a:c0:fb:bd:26:de:14:5a:aa:d9:d6:18:48:57: ea:d3:91:61:cc:f3:39:d4:ff:d6:5e:c3:8d:94:5a: b4:dd:68:d2:da:e7:a0:f5:2b:5e:32:c6:6c:16:ce: ca:5f:87:dd:8b:ec:aa:75:17:bb:7a:97:94:f7:bd: 1e:75:0a:5c:de:23:88:92:bd:a5:d9:11:31:1b:c7: 1e:34:4d:8d:3f:d9:4a:f5:6a:00:1a:2b:45:7c:50: b0:f0:1e:61:2f:cd:71:78:f2:da:19:e5:1c:0e:3f: 08:ea:20:cc:28:64:98:f8:4f:2c:92:86:7e:39:26: 2a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:2F:16:8F:5C:BD:2B:D2:DF:47:5A:9A:DB:5B:E6:95:FC:3E:DD:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4cef94ba-3b4b-304f-8d4d-4bf4128c90b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.57.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:99:e1:1d:87:51:21:dd:38:e4:32:ff:ce:83:5b:a5:8f:f9: 2d:aa:50:a6:62:60:c9:29:65:b3:01:d3:12:90:1d:4a:d5:23: 61:23:cf:16:c3:9e:04:5c:91:38:b2:ef:3d:b9:69:cf:5b:e9: c3:7b:2a:b2:72:17:c0:e9:43:a2:26:b5:b1:7f:20:b5:d5:2e: b2:84:b9:ee:a6:c2:61:8c:ef:a6:b7:59:ff:a0:8e:e3:2b:99: 7f:73:b2:53:6e:5f:1f:5a:6b:c1:db:cb:9a:d1:32:7d:ba:97: 93:3c:ad:1a:1a:09:6d:8b:19:fd:37:10:d0:6f:63:79:db:3b: b4:26:9d:f5:d5:02:84:af:f2:d8:b3:b1:a8:b3:6b:bc:b9:ba: 23:ef:7e:ed:c7:df:ab:ba:61:dd:7b:67:c6:76:f1:80:30:5b: 24:d9:69:14:46:18:2b:35:24:93:ed:b5:ca:c7:f5:82:10:8d: a9:e5:f4:21:0f:13:4d:5d:11:7e:ca:d8:e8:94:56:2d:aa:69: 1c:90:43:c7:4c:28:14:72:39:9f:77:40:0f:11:14:d2:3e:07: 2b:70:de:01:34:91:38:eb:43:2b:02:5d:f5:10:0d:fb:bf:8f: d6:a4:5b:7f:21:12:45:44:ef:f6:4e:b5:9a:41:83:d1:99:01: c4:40:54:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuV6YbQGIbuNublUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ODMyZjc0ZmYtNzg5OC00N2EyLWFmZGEtOWQ5MDY5NWUwNThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAly1UzqMTyCcMxdj/sQF0459egKpl/5gESmKU v4OJOTXDbL37hQ9tPk0XxV2FVhjEIwMYSsdxZEEuv8LSndaEpSPpv92tMou/98Nu BszT2UawCDAMxuzLcgkWQCXf9D5stksg+GXvjSo2IodAAFXbsIcT1dMG/fI3MsdP r6BSvjDFfv2JIpiZesD7vSbeFFqq2dYYSFfq05FhzPM51P/WXsONlFq03WjS2ueg 9SteMsZsFs7KX4fdi+yqdRe7epeU970edQpc3iOIkr2l2RExG8ceNE2NP9lK9WoA GitFfFCw8B5hL81xePLaGeUcDj8I6iDMKGSY+E8skoZ+OSYq3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKMvFo9cvSvS30damttb5pX8Pt13MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGNlZjk0YmEtM2I0Yi0z MDRmLThkNGQtNGJmNDEyOGM5MGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrjkoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWZ4R2HUSHdOOQy/86DW6WP+S2qUKZiYMkpZbMB0xKQHUrVI2EjzxbD ngRckTiy7z25ac9b6cN7KrJyF8DpQ6ImtbF/ILXVLrKEue6mwmGM76a3Wf+gjuMr mX9zslNuXx9aa8Hby5rRMn26l5M8rRoaCW2LGf03ENBvY3nbO7QmnfXVAoSv8tiz saiza7y5uiPvfu3H36u6Yd17Z8Z28YAwWyTZaRRGGCs1JJPttcrH9YIQjanl9CEP E01dEX7K2OiUVi2qaRyQQ8dMKBRyOZ93QA8RFNI+Bytw3gE0kTjrQysCXfUQDfu/ j9akW38hEkVE7/ZOtZpBg9GZAcRAVLQ= -----END CERTIFICATE-----Generated at Mon Mar 2 04:17:02 2026 by rpki-client