$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/84b0af98-b325-3f2c-acb7-16e50cb36f0a.roa File: 84b0af98-b325-3f2c-acb7-16e50cb36f0a.roa (raw, json) Hash identifier: xIDJEpsKM/PYDwF1K1GcdQZ1Z3w4ZP4Qc/ekjFuSvmY= Subject key identifier: 37:D9:7B:85:33:5B:8D:33:D0:81:D2:EE:DA:85:7A:1E:AB:3E:40:D0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5743D8B174ABF9B1DDF740 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/84b0af98-b325-3f2c-acb7-16e50cb36f0a.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33660 IP address blocks: 67.163.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:43:d8:b1:74:ab:f9:b1:dd:f7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=3f530382-650f-4e37-9a1f-88f94b764dda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ad:b9:f0:d9:af:0c:e0:89:1f:5e:a2:64:00: 6d:fd:57:81:95:0a:95:d1:b4:ea:34:28:00:0b:ca: 55:8a:47:76:2c:ef:59:a8:77:91:f3:1d:69:e9:69: a7:5a:c6:13:0e:5f:84:69:69:47:ae:f4:5f:a1:14: e5:1d:90:b5:f3:04:ee:c3:5b:d6:98:e9:53:16:3f: 21:37:57:40:95:ac:e6:10:1e:11:0b:f2:e1:c3:38: 43:4c:9c:d6:88:5a:f4:cf:8f:e5:94:d5:5d:93:06: b1:31:db:22:b1:82:e1:0b:4d:7c:87:34:02:b8:01: 0f:c0:c2:be:d4:62:78:9d:da:a2:fa:60:d8:e3:b3: cf:5e:11:04:90:eb:bc:68:22:0c:a5:ad:3a:a3:f0: 43:84:0a:d1:1b:d5:01:7a:36:0a:d2:0b:ed:4c:90: fd:81:4c:dc:29:cb:1b:c7:d7:a0:79:9c:c8:32:96: 6c:07:b3:43:67:98:cc:f6:c5:9b:e3:73:1c:74:06: 76:be:97:5f:32:7e:a3:7d:f6:ee:33:07:08:bc:0b: a2:71:e1:16:fe:95:6a:2f:26:0a:59:e3:30:4c:31: 13:f7:85:0f:cd:90:36:41:ec:e3:b9:b6:2a:f6:be: ac:66:5a:a4:d5:25:29:fa:03:36:2c:b0:f4:2d:a4: d1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:D9:7B:85:33:5B:8D:33:D0:81:D2:EE:DA:85:7A:1E:AB:3E:40:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/84b0af98-b325-3f2c-acb7-16e50cb36f0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.163.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:b6:ee:9d:66:17:d6:cb:47:16:c3:3d:0a:22:70:cd:e4:09: 22:57:58:5e:2b:de:11:da:36:4c:e6:ec:ff:27:c0:31:ca:97: 03:4e:9e:40:b5:10:dd:9c:70:5d:6f:e2:2a:18:7a:cb:fb:0e: e8:cd:1a:27:29:77:da:63:b9:8e:d5:65:0a:a0:1a:f5:5f:56: b0:82:09:0a:e4:96:43:f3:30:94:47:bd:fa:d1:69:5e:8d:cf: f6:1d:25:bb:5c:da:c0:16:59:15:77:e5:8e:24:d3:bd:77:ad: b8:9b:4a:f4:64:e0:5c:ee:69:9d:fe:a3:17:e8:d5:71:7e:c8: c9:fd:a6:ab:2c:6f:22:14:98:d2:22:eb:79:68:41:ae:ce:9e: 74:c0:54:3d:5e:4d:e8:83:69:35:f3:c3:50:a6:55:5d:bd:40: 8a:f6:8b:98:85:d9:dd:79:7b:a0:01:4d:a2:ee:6b:78:9d:8b: 75:8d:56:b3:f8:6f:3f:cb:43:f2:9b:b4:0b:83:1d:87:68:d0: 23:1c:a3:73:1f:90:17:7e:03:6b:d6:00:17:d9:cb:cf:56:88: 5f:a4:01:68:c3:8c:83:3c:7f:07:44:69:38:c3:a2:9d:24:36: 1b:26:b1:01:aa:33:57:53:28:da:14:21:cd:e7:37:bd:64:e6: ae:aa:a7:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuV0PYsXSr+bHd90AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk M2Y1MzAzODItNjUwZi00ZTM3LTlhMWYtODhmOTRiNzY0ZGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzK258NmvDOCJH16iZABt/VeBlQqV0bTqNCgA C8pVikd2LO9ZqHeR8x1p6WmnWsYTDl+EaWlHrvRfoRTlHZC18wTuw1vWmOlTFj8h N1dAlazmEB4RC/LhwzhDTJzWiFr0z4/llNVdkwaxMdsisYLhC018hzQCuAEPwMK+ 1GJ4ndqi+mDY47PPXhEEkOu8aCIMpa06o/BDhArRG9UBejYK0gvtTJD9gUzcKcsb x9egeZzIMpZsB7NDZ5jM9sWb43McdAZ2vpdfMn6jffbuMwcIvAuiceEW/pVqLyYK WeMwTDET94UPzZA2QezjubYq9r6sZlqk1SUp+gM2LLD0LaTROQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDfZe4UzW40z0IHS7tqFeh6rPkDQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODRiMGFmOTgtYjMyNS0z ZjJjLWFjYjctMTZlNTBjYjM2ZjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ6NAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACy27p1mF9bLRxbDPQoicM3kCSJXWF4r3hHaNkzm7P8nwDHKlwNOnkC1 EN2ccF1v4ioYesv7DujNGicpd9pjuY7VZQqgGvVfVrCCCQrklkPzMJRHvfrRaV6N z/YdJbtc2sAWWRV35Y4k0713rbibSvRk4FzuaZ3+oxfo1XF+yMn9pqssbyIUmNIi 63loQa7OnnTAVD1eTeiDaTXzw1CmVV29QIr2i5iF2d15e6ABTaLua3idi3WNVrP4 bz/LQ/KbtAuDHYdo0CMco3MfkBd+A2vWABfZy89WiF+kAWjDjIM8fwdEaTjDop0k NhsmsQGqM1dTKNoUIc3nN71k5q6qpyo= -----END CERTIFICATE-----Generated at Mon Mar 2 02:54:37 2026 by rpki-client