$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7aa4cfdc-99e1-3d4c-a9a0-b399b55fbf48.roa File: 7aa4cfdc-99e1-3d4c-a9a0-b399b55fbf48.roa (raw, json) Hash identifier: O8R3yrvsSsGLxU5FHSDxeDjiT/yObBUiYhB6ZobjRsY= Subject key identifier: E4:FB:40:9D:C7:0C:1B:07:DD:D7:9C:47:C7:67:3C:03:21:11:93:D7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE57603ED114DCD182A6C280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7aa4cfdc-99e1-3d4c-a9a0-b399b55fbf48.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33660 IP address blocks: 174.52.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:60:3e:d1:14:dc:d1:82:a6:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=3b4d0d09-e250-4ebd-94ad-50b487081514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c3:98:10:a2:59:be:25:c0:34:97:96:60:c2: d2:36:15:67:a2:7f:59:b6:9e:b0:40:74:71:27:ac: a6:d0:fa:02:87:aa:33:42:8e:0c:61:23:5d:48:46: 1f:a3:d8:1d:06:63:10:04:10:1c:18:0a:f3:e6:c7: 7e:5e:52:72:a4:ef:de:97:70:72:6c:32:54:f1:e3: d5:aa:17:d1:97:c0:09:4e:2a:2c:55:5b:05:b1:b9: c3:07:6f:0c:94:8d:8e:53:e0:7a:a4:47:da:66:c3: e1:7e:e6:75:8a:4d:a2:51:20:22:a4:5a:54:01:85: a9:4a:26:f4:ba:1f:e2:b7:49:f7:9c:db:3b:dd:2f: c0:c4:b7:ef:b2:38:9b:7f:06:57:24:41:e2:57:b4: 5c:ac:4c:67:58:ca:65:72:0e:80:66:15:db:54:bc: 73:cb:8f:b9:ad:f7:5c:01:ea:ed:83:07:8a:45:b1: f1:ad:6c:5d:2e:94:2c:c5:2d:0c:ec:2f:2d:57:f7: 76:d1:74:bf:a3:47:1c:37:89:a6:3a:4a:4f:a0:2c: 14:37:a8:ac:17:59:98:e0:dc:90:53:2f:eb:53:e8: fa:0e:74:05:ab:d5:ad:72:f9:08:e7:63:85:7d:7d: 4a:f4:d1:27:11:e8:45:6b:a6:dd:fc:98:a1:a3:55: 72:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:FB:40:9D:C7:0C:1B:07:DD:D7:9C:47:C7:67:3C:03:21:11:93:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7aa4cfdc-99e1-3d4c-a9a0-b399b55fbf48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.52.192.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:b2:0b:8c:b2:59:8f:1e:46:93:14:46:02:06:16:ff:6d:4a: 8e:0a:7b:2f:57:3c:5e:12:fc:a4:91:a6:5c:4a:71:fe:06:7f: 46:86:f2:c8:4b:d6:ea:4a:11:59:49:b0:e3:a6:17:02:89:4d: 46:60:f5:2e:29:f1:bc:ad:54:7f:c3:ab:d0:ab:ad:58:91:8e: c6:ef:ec:f2:4d:7a:38:b6:0f:03:d3:eb:6e:3e:28:66:b0:a0: 90:0a:e7:7f:5a:54:99:d0:7d:52:28:fb:a7:fa:bf:d4:0d:e5: 6d:1f:0b:96:03:4c:1e:e4:ef:73:af:a0:c6:5f:95:32:ed:cc: 2f:2b:b8:fc:83:55:72:fd:d1:cb:d7:da:5d:52:af:81:e4:dd: c6:6d:79:ef:ee:1f:d0:1b:b2:4f:3f:bd:81:1d:ba:c7:cc:db: da:fa:bd:c5:0b:00:39:10:59:b4:ad:c5:12:13:b5:18:af:2e: 75:5e:08:75:c4:e3:57:40:45:3c:d3:df:25:f3:af:bc:e6:c3: 9d:c9:2e:ee:3e:d5:18:c8:55:4a:0b:7a:a0:b0:59:a1:42:ba: bf:76:95:8e:a8:bb:c7:da:f2:f5:95:8e:81:44:2f:d5:62:00: 52:ab:80:fe:bb:a2:ac:31:98:6a:12:0e:64:59:06:10:91:cc: 55:c0:e9:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuV2A+0RTc0YKmwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk M2I0ZDBkMDktZTI1MC00ZWJkLTk0YWQtNTBiNDg3MDgxNTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsOYEKJZviXANJeWYMLSNhVnon9Ztp6wQHRx J6ym0PoCh6ozQo4MYSNdSEYfo9gdBmMQBBAcGArz5sd+XlJypO/el3BybDJU8ePV qhfRl8AJTiosVVsFsbnDB28MlI2OU+B6pEfaZsPhfuZ1ik2iUSAipFpUAYWpSib0 uh/it0n3nNs73S/AxLfvsjibfwZXJEHiV7RcrExnWMplcg6AZhXbVLxzy4+5rfdc AertgweKRbHxrWxdLpQsxS0M7C8tV/d20XS/o0ccN4mmOkpPoCwUN6isF1mY4NyQ Uy/rU+j6DnQFq9WtcvkI52OFfX1K9NEnEehFa6bd/Jiho1VyAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOT7QJ3HDBsH3decR8dnPAMhEZPXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2FhNGNmZGMtOTllMS0z ZDRjLWE5YTAtYjM5OWI1NWZiZjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrjTAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK2yC4yyWY8eRpMURgIGFv9tSo4Key9XPF4S/KSRplxKcf4Gf0aG8shL 1upKEVlJsOOmFwKJTUZg9S4p8bytVH/Dq9CrrViRjsbv7PJNeji2DwPT624+KGaw oJAK539aVJnQfVIo+6f6v9QN5W0fC5YDTB7k73OvoMZflTLtzC8ruPyDVXL90cvX 2l1Sr4Hk3cZtee/uH9Absk8/vYEdusfM29r6vcULADkQWbStxRITtRivLnVeCHXE 41dARTzT3yXzr7zmw53JLu4+1RjIVUoLeqCwWaFCur92lY6ou8fa8vWVjoFEL9Vi AFKrgP67oqwxmGoSDmRZBhCRzFXA6SI= -----END CERTIFICATE-----Generated at Sun Mar 1 18:29:28 2026 by rpki-client