$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/63fbd998-be74-3960-b559-279b1f75e7f1.roa File: 63fbd998-be74-3960-b559-279b1f75e7f1.roa (raw, json) Hash identifier: NjJrS2Y8dCFAgmC2hmKbm74UlcLvNIDcQkfUOxALWJk= Subject key identifier: AA:E9:F5:20:BC:3E:F2:FF:43:80:C2:77:10:5F:4A:51:1E:B8:AD:DC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CFDE95A07751190C6742C4E00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/63fbd998-be74-3960-b559-279b1f75e7f1.roa Signing time: Thu 26 Feb 2026 14:00:40 +0000 ROA not before: Thu 26 Feb 2026 14:00:40 +0000 ROA not after: Wed 27 May 2026 13:00:40 +0000 asID: 22909 IP address blocks: 76.18.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:e9:5a:07:75:11:90:c6:74:2c:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 26 14:00:40 2026 GMT Not After : May 27 13:00:40 2026 GMT Subject: CN=4841759d-f1c0-4941-b593-b56d57b59f62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0c:ec:c2:9e:7f:f2:b7:73:e6:30:dc:3f:1b: 3e:31:e3:8a:31:7b:31:55:fc:9c:85:da:6e:0c:2b: 9e:e1:85:16:30:2f:9c:50:e0:65:19:f2:66:2e:f6: a1:ec:ee:7a:c6:de:e0:0c:8c:66:bb:55:39:df:72: 56:40:9e:79:80:88:19:27:11:71:22:4d:83:99:39: 5e:da:ac:bb:ed:17:88:d3:e0:4c:2b:9c:0f:76:e9: ba:9f:74:b6:71:fc:ae:ce:d2:8a:1a:82:13:69:78: 85:da:c0:2b:71:c4:34:12:0f:73:2c:32:73:fc:ce: 02:ec:2d:22:b2:b1:f8:2f:45:13:a5:e1:f1:b5:39: e5:6b:04:cf:af:24:62:cf:80:8a:bf:79:ff:77:a2: 5b:64:07:ba:aa:50:00:79:df:a7:68:d2:a9:91:ac: 67:68:af:84:59:d1:43:cb:09:41:d1:4b:59:81:46: 0f:87:15:e3:12:3a:c6:f8:b1:83:62:fc:cd:10:1d: b5:ea:68:6b:ea:14:45:cb:f0:83:31:c9:28:1f:de: 33:91:ee:3e:f4:95:00:ea:8b:9a:68:fa:d1:95:a5: 9f:fa:04:d5:0c:3d:65:44:70:14:70:81:76:b4:58: fd:c2:d1:73:74:43:bb:42:e1:cc:9b:b6:d5:4e:26: 64:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E9:F5:20:BC:3E:F2:FF:43:80:C2:77:10:5F:4A:51:1E:B8:AD:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/63fbd998-be74-3960-b559-279b1f75e7f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.18.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:01:25:44:43:06:29:87:45:90:22:c7:95:48:0e:9d:65:06: b8:53:67:1f:d4:5e:fc:b7:57:7f:55:02:51:81:6e:f5:6f:30: 6b:48:ae:43:19:ee:bf:b0:9f:c4:a8:ab:bb:cc:56:14:1a:0a: d7:e4:74:c4:66:e9:11:46:32:85:77:64:0d:07:cb:fb:9c:e9: ee:bd:bd:13:89:95:c2:7e:5b:f6:39:9c:2c:39:8c:b7:c9:2b: 71:29:a3:45:54:58:2d:88:ee:6d:f0:c2:b2:23:51:63:f0:c6: c3:29:0a:1e:6c:74:91:0b:03:06:90:8c:f6:3a:8a:31:77:72: d7:41:14:bd:62:61:39:3b:62:cf:01:72:40:b2:5c:ce:4d:8a: b8:43:ac:7d:46:fe:eb:64:fd:3d:7e:f5:6e:fb:ca:c0:76:af: 5f:57:54:a3:ed:66:db:d7:51:18:37:03:b7:68:5f:6d:24:62: 71:a7:c1:d6:bb:35:e2:5b:00:04:85:31:1b:b5:c8:31:4e:54: 8a:1c:81:7a:4f:81:70:b0:f4:3c:19:20:fa:e6:53:06:53:82: 0b:4a:21:ae:6f:d5:da:3c:65:36:4b:ea:dc:00:4f:8a:04:59: a9:5c:b8:5c:c2:0b:3a:b8:8e:cf:e2:1f:89:d8:8b:9a:82:1e: e2:3d:79:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz96VoHdRGQxnQsTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk NDg0MTc1OWQtZjFjMC00OTQxLWI1OTMtYjU2ZDU3YjU5ZjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogzswp5/8rdz5jDcPxs+MeOKMXsxVfychdpu DCue4YUWMC+cUOBlGfJmLvah7O56xt7gDIxmu1U533JWQJ55gIgZJxFxIk2DmTle 2qy77ReI0+BMK5wPdum6n3S2cfyuztKKGoITaXiF2sArccQ0Eg9zLDJz/M4C7C0i srH4L0UTpeHxtTnlawTPryRiz4CKv3n/d6JbZAe6qlAAed+naNKpkaxnaK+EWdFD ywlB0UtZgUYPhxXjEjrG+LGDYvzNEB216mhr6hRFy/CDMckoH94zke4+9JUA6oua aPrRlaWf+gTVDD1lRHAUcIF2tFj9wtFzdEO7QuHMm7bVTiZkewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrp9SC8PvL/Q4DCdxBfSlEeuK3cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjNmYmQ5OTgtYmU3NC0z OTYwLWI1NTktMjc5YjFmNzVlN2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTBKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALQBJURDBimHRZAix5VIDp1lBrhTZx/UXvy3V39VAlGBbvVvMGtIrkMZ 7r+wn8Soq7vMVhQaCtfkdMRm6RFGMoV3ZA0Hy/uc6e69vROJlcJ+W/Y5nCw5jLfJ K3Epo0VUWC2I7m3wwrIjUWPwxsMpCh5sdJELAwaQjPY6ijF3ctdBFL1iYTk7Ys8B ckCyXM5NirhDrH1G/utk/T1+9W77ysB2r19XVKPtZtvXURg3A7doX20kYnGnwda7 NeJbAASFMRu1yDFOVIocgXpPgXCw9DwZIPrmUwZTggtKIa5v1do8ZTZL6twAT4oE WalcuFzCCzq4js/iH4nYi5qCHuI9eXY= -----END CERTIFICATE-----Generated at Sun Mar 1 18:59:28 2026 by rpki-client