$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a2da8c9-8325-3764-b9de-1a9ff463f446.roa File: 5a2da8c9-8325-3764-b9de-1a9ff463f446.roa (raw, json) Hash identifier: kKcnJFQt9WvxmAFEAC4J/5NwAeEW4Ur3K1fbe/I+YDw= Subject key identifier: F3:B5:81:9F:84:D4:75:A3:CE:D0:7E:EF:09:F9:A7:68:B5:F7:54:B3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE59251BFA6C870509D4C9C6 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a2da8c9-8325-3764-b9de-1a9ff463f446.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33660 IP address blocks: 67.182.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:59:25:1b:fa:6c:87:05:09:d4:c9:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=ec09dc02-3857-44ee-8fe6-9207a187022f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:70:65:de:02:75:ae:f0:9b:32:a8:4b:82:3d: 3d:cd:2c:a5:6b:47:96:21:25:bd:c6:9e:f7:a9:50: f1:9f:6d:22:44:8f:68:e5:e5:63:4e:bf:78:ec:11: 43:e0:88:08:2d:17:aa:69:f1:c9:b7:63:25:53:04: 10:19:4d:23:7e:50:bb:ae:11:8c:f7:1a:aa:63:30: 14:a8:1d:9a:c8:0c:69:17:6b:88:30:a4:bb:38:a7: b3:fb:7b:cd:42:7e:6b:0e:b6:c5:40:e9:6b:63:83: b2:81:d8:bd:f9:1d:50:f2:d3:ac:43:60:0d:f3:c8: 1c:80:71:94:19:59:47:9b:ff:c9:be:80:18:c2:12: bd:40:06:ab:56:75:24:b0:97:fd:bf:36:84:54:18: 0d:e0:a8:a3:2a:52:40:4a:cb:ec:ac:3b:97:96:31: 4c:09:c2:7b:60:6e:3d:7e:cc:b4:97:28:57:8f:7c: 70:6a:d6:83:24:0c:eb:14:2d:6e:ae:94:11:a2:10: 2c:59:42:23:56:99:e8:a0:54:bb:50:3b:a6:4e:21: e5:77:5d:bb:8c:60:c5:cd:8b:7e:67:80:2f:1d:7e: 7b:f6:00:f3:d0:ed:6b:a4:ef:f5:d5:0c:16:c8:4d: 6f:9f:d5:b4:0f:5d:74:46:c0:e0:e4:c1:99:92:a4: 96:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:B5:81:9F:84:D4:75:A3:CE:D0:7E:EF:09:F9:A7:68:B5:F7:54:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a2da8c9-8325-3764-b9de-1a9ff463f446.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.182.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:29:4d:1e:10:ca:e9:d6:82:b8:82:e3:03:fa:c5:b1:86:55: 10:cc:09:83:23:e9:71:01:8b:43:bb:44:da:63:cf:b6:92:29: 1a:3e:62:3a:ac:1c:c2:17:6c:fe:92:cf:62:42:e4:0f:02:5e: b6:25:ca:52:0e:e6:48:55:77:dc:9e:1d:1d:14:7c:8c:f1:e5: d4:17:02:2b:5f:e6:16:e3:e1:22:ad:31:ef:7c:54:5a:d4:20: fd:15:bf:91:08:11:2f:17:f6:ed:0a:1d:56:6e:73:35:d9:96: e2:c6:6d:93:f0:e9:8d:08:ef:a3:82:a9:f3:7e:05:9a:70:5f: 66:e5:0a:51:48:c0:85:ed:7f:5d:dc:3a:9a:9b:05:1a:b4:0b: 0d:36:76:49:da:32:fe:91:c4:6e:49:7a:b7:1a:92:77:db:7d: f2:07:e3:e1:03:48:dc:44:de:99:0e:c6:b9:14:fb:43:ef:97: fb:a4:5d:28:c9:ca:c4:ee:d5:01:b4:fb:85:3f:70:05:69:d9: 26:38:11:44:d0:2c:f7:8e:ab:62:52:92:91:8b:9e:a3:1f:57: 67:3e:b2:0f:f0:b3:3b:50:3e:26:dc:ba:c2:db:9a:f4:44:54: dd:d4:22:ea:63:92:bf:d2:65:29:30:e7:f2:4b:83:36:d9:f2: eb:6f:ea:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWSUb+myHBQnUycYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZWMwOWRjMDItMzg1Ny00NGVlLThmZTYtOTIwN2ExODcwMjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnBl3gJ1rvCbMqhLgj09zSyla0eWISW9xp73 qVDxn20iRI9o5eVjTr947BFD4IgILReqafHJt2MlUwQQGU0jflC7rhGM9xqqYzAU qB2ayAxpF2uIMKS7OKez+3vNQn5rDrbFQOlrY4Oygdi9+R1Q8tOsQ2AN88gcgHGU GVlHm//JvoAYwhK9QAarVnUksJf9vzaEVBgN4KijKlJASsvsrDuXljFMCcJ7YG49 fsy0lyhXj3xwataDJAzrFC1urpQRohAsWUIjVpnooFS7UDumTiHld127jGDFzYt+ Z4AvHX579gDz0O1rpO/11QwWyE1vn9W0D110RsDg5MGZkqSWXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPO1gZ+E1HWjztB+7wn5p2i191SzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWEyZGE4YzktODMyNS0z NzY0LWI5ZGUtMWE5ZmY0NjNmNDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ7b0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALIpTR4QyunWgriC4wP6xbGGVRDMCYMj6XEBi0O7RNpjz7aSKRo+Yjqs HMIXbP6Sz2JC5A8CXrYlylIO5khVd9yeHR0UfIzx5dQXAitf5hbj4SKtMe98VFrU IP0Vv5EIES8X9u0KHVZuczXZluLGbZPw6Y0I76OCqfN+BZpwX2blClFIwIXtf13c OpqbBRq0Cw02dknaMv6RxG5JercaknfbffIH4+EDSNxE3pkOxrkU+0Pvl/ukXSjJ ysTu1QG0+4U/cAVp2SY4EUTQLPeOq2JSkpGLnqMfV2c+sg/wsztQPibcusLbmvRE VN3UIupjkr/SZSkw5/JLgzbZ8utv6jw= -----END CERTIFICATE-----Generated at Sun Mar 1 18:54:09 2026 by rpki-client