$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64f2fce2-edf7-3a42-9843-3130c16e2174.roa File: 64f2fce2-edf7-3a42-9843-3130c16e2174.roa (raw, json) Hash identifier: o96DxbP3f0hNYt5sxg6YYMMZ7ejPUZ0ckbnQyLw0P64= Subject key identifier: 1C:85:24:AD:42:B3:D2:57:DD:BF:2A:11:F8:27:99:41:46:93:09:EC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5E03CE7483119FF0E9EF80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64f2fce2-edf7-3a42-9843-3130c16e2174.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 76.21.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:03:ce:74:83:11:9f:f0:e9:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=3912bafe-4e29-4e9a-b472-9127afcdcd78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c8:d6:f0:b6:11:e3:60:43:22:43:39:d4:d9: bc:d3:32:6f:52:6e:57:f9:23:99:09:a0:4d:82:18: a1:ad:32:95:32:37:69:4d:5e:20:72:30:71:9a:60: fd:8b:d8:f4:bf:1a:aa:f0:8f:66:02:1d:27:61:e9: c3:18:0b:10:9b:37:f7:ff:02:d3:f5:7e:59:5d:ae: bd:c2:6a:8f:7b:5f:0a:77:8f:83:71:aa:e1:cb:e7: 31:91:5f:88:44:43:01:35:6a:20:f8:8d:2c:fc:2b: 61:b7:38:15:9e:50:19:d2:1b:c5:ee:d3:19:8f:a4: 78:b6:63:69:6d:4a:02:fe:73:ab:fa:97:d6:cb:89: 80:db:e0:8a:32:07:1f:bf:21:b4:99:8d:d0:d3:87: e4:83:35:f2:eb:8b:d7:32:e6:c7:84:e5:79:9a:56: fa:8e:d1:9e:85:f9:84:c8:5e:3e:21:d4:6c:85:bb: e9:01:8a:e1:2c:2c:ef:5d:cd:c9:ec:73:c2:18:29: ea:72:77:83:90:b2:5b:c0:a4:fe:1d:cf:c9:45:55: 68:51:ef:1a:6c:f9:f3:89:9b:7e:fe:96:1a:ce:66: b0:a2:77:f5:2c:79:7e:64:41:7e:4d:95:0b:02:11: c6:0c:ef:15:05:b0:3f:22:58:e0:41:76:a4:11:ea: 6f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:85:24:AD:42:B3:D2:57:DD:BF:2A:11:F8:27:99:41:46:93:09:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64f2fce2-edf7-3a42-9843-3130c16e2174.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.21.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:0e:fc:7d:ab:88:45:70:e5:87:8f:a8:0d:cb:14:37:83:bb: a2:9d:31:3c:bb:79:82:12:db:0b:74:03:08:bd:78:4f:50:83: 9a:0e:0b:a2:ff:b7:4c:df:cc:6c:bb:73:1f:96:da:a2:29:d5: 52:e4:d2:f3:78:57:63:ac:a6:74:6e:3d:a1:b0:99:70:fe:a7: 3b:3f:b8:e6:1e:be:06:ac:85:ff:c0:44:58:20:17:1c:05:66: 7a:48:c7:b9:04:82:44:e9:c9:32:a0:b7:cf:ec:f8:0b:60:fa: d3:fc:84:ef:57:94:b9:16:55:7d:72:41:ef:66:32:af:39:53: 7f:ee:03:87:78:82:53:de:f0:c6:f8:59:bc:76:22:3e:39:2e: dc:1f:8d:da:47:14:cc:05:c6:7a:66:52:ba:67:42:c9:7e:4c: 23:b7:6c:44:76:86:58:ac:4d:0a:37:d3:63:61:3c:63:f9:f7: 04:49:a5:79:23:a9:a2:d1:64:9f:3b:a8:73:12:d0:48:68:af: 7b:3f:60:95:f9:85:af:63:95:43:64:8c:7f:c9:6a:53:f2:0e: ce:9e:03:3e:2d:af:2f:61:b0:9b:d3:9e:7c:0a:7c:5f:a5:5c: 6c:92:bc:5e:4d:c1:fd:38:d8:c5:75:b5:ff:ee:34:81:44:b4: d2:e5:fb:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXgPOdIMRn/Dp74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MzkxMmJhZmUtNGUyOS00ZTlhLWI0NzItOTEyN2FmY2RjZDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcjW8LYR42BDIkM51Nm80zJvUm5X+SOZCaBN ghihrTKVMjdpTV4gcjBxmmD9i9j0vxqq8I9mAh0nYenDGAsQmzf3/wLT9X5ZXa69 wmqPe18Kd4+Dcarhy+cxkV+IREMBNWog+I0s/CthtzgVnlAZ0hvF7tMZj6R4tmNp bUoC/nOr+pfWy4mA2+CKMgcfvyG0mY3Q04fkgzXy64vXMubHhOV5mlb6jtGehfmE yF4+IdRshbvpAYrhLCzvXc3J7HPCGCnqcneDkLJbwKT+Hc/JRVVoUe8abPnziZt+ /pYazmawonf1LHl+ZEF+TZULAhHGDO8VBbA/IljgQXakEepvAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFByFJK1Cs9JX3b8qEfgnmUFGkwnsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjRmMmZjZTItZWRmNy0z YTQyLTk4NDMtMzEzMGMxNmUyMTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTBUMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQO/H2riEVw5YePqA3LFDeDu6KdMTy7eYIS2wt0Awi9eE9Qg5oOC6L/ t0zfzGy7cx+W2qIp1VLk0vN4V2OspnRuPaGwmXD+pzs/uOYevgashf/ARFggFxwF ZnpIx7kEgkTpyTKgt8/s+Atg+tP8hO9XlLkWVX1yQe9mMq85U3/uA4d4glPe8Mb4 Wbx2Ij45LtwfjdpHFMwFxnpmUrpnQsl+TCO3bER2hlisTQo302NhPGP59wRJpXkj qaLRZJ87qHMS0Ehor3s/YJX5ha9jlUNkjH/JalPyDs6eAz4try9hsJvTnnwKfF+l XGySvF5Nwf042MV1tf/uNIFEtNLl+24= -----END CERTIFICATE-----Generated at Mon Mar 2 02:37:49 2026 by rpki-client