$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/886f7423-cf79-3276-b03b-76eb80670b30.roa File: 886f7423-cf79-3276-b03b-76eb80670b30.roa (raw, json) Hash identifier: DkWh8ZFbXCs4srj11vAiQPKvSQ53rceabfo5SsMqP8M= Subject key identifier: BA:46:90:6B:0D:48:76:A7:C8:41:36:E7:10:FF:55:B2:16:F5:E3:D5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE58AF85B0667750B295BD00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/886f7423-cf79-3276-b03b-76eb80670b30.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 174.62.66.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:af:85:b0:66:77:50:b2:95:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=513a267c-d7be-452c-8eb5-e3f84ab60904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d8:57:44:fb:b2:f6:90:d5:bd:41:df:75:cb: d9:8d:d0:46:a5:a8:6c:d9:bb:86:48:7e:8e:9f:2b: 83:e2:d4:cc:4d:ab:dd:02:07:26:cd:46:e5:bd:46: 8e:4e:18:98:e8:8b:fb:ff:d6:b7:22:cb:f9:47:a3: 9d:07:7a:6f:1a:cd:01:de:0a:72:f6:63:10:4d:2f: 34:a6:bd:5d:25:fd:b5:90:c4:e5:ef:46:0d:49:c3: e2:f3:bd:44:e2:06:f4:da:6c:7f:e6:34:9d:d1:97: 9f:2d:8a:42:10:7a:83:53:f0:32:83:96:ad:45:ff: 5a:2e:d0:64:9a:90:21:0a:15:25:67:19:f1:fe:14: 3d:4e:b1:11:b5:c5:60:17:c6:6c:5b:ff:e4:d3:ad: 67:84:7c:78:b2:83:72:5f:2b:bf:c2:5f:28:05:d7: b7:f4:b4:1c:18:a2:ae:a1:4c:84:d4:5c:d9:0c:f0: 49:e4:f8:92:2f:0e:74:75:3f:49:97:46:7c:44:d5: e3:d7:e2:cf:34:9f:24:fa:a0:89:cc:f6:2b:61:da: f3:9f:cc:22:eb:4b:c1:b0:ca:54:96:e0:cf:7d:09: 8d:62:4d:55:a5:d1:34:04:38:77:ce:e7:8c:03:79: bc:50:42:ad:37:cd:f0:7f:b1:64:ce:5e:f3:52:86: 82:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:46:90:6B:0D:48:76:A7:C8:41:36:E7:10:FF:55:B2:16:F5:E3:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/886f7423-cf79-3276-b03b-76eb80670b30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.62.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:cb:04:71:46:3f:40:5a:bd:ab:cd:f1:31:ca:c6:33:8d:6e: d2:6d:2b:45:3d:d5:4a:28:24:b6:42:c0:ba:65:55:92:f4:a5: dd:a4:f5:33:95:8a:22:f0:b1:c2:d8:83:4b:41:a6:5a:c1:35: c1:33:30:f4:a8:3b:49:7a:33:41:b4:b4:c2:62:0e:52:cb:93: 0d:32:a5:64:be:f9:68:b3:35:54:cf:64:99:49:ba:86:b0:0b: d3:b3:71:9b:76:03:96:a9:8d:cd:b6:46:e9:dc:59:91:d6:2c: 4a:b6:85:8d:81:b3:7e:6c:ae:ab:05:c8:52:fc:9b:b5:77:5e: 23:53:41:69:e2:02:d6:8a:80:78:d5:0b:7a:0c:f9:68:40:fc: 1b:bb:8e:3d:47:eb:0f:d6:44:1c:66:b2:1d:3b:29:72:f8:90: 38:65:14:28:0f:75:57:2f:4d:3a:16:16:83:a5:a8:0e:52:39: 53:e4:7f:99:1b:f7:54:7e:b2:5b:a1:35:96:cf:0e:63:d2:42: a4:12:7c:49:49:95:91:0e:ab:09:ce:91:2e:f9:e3:6d:62:21: ee:3e:2e:5e:c0:4e:3a:46:3b:fa:4f:3e:d5:d5:bc:f6:f7:60: e3:d7:c5:c3:ef:5b:fc:6e:d6:59:0f:d4:c1:27:d5:22:62:79: a2:97:a2:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWK+FsGZ3ULKVvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NTEzYTI2N2MtZDdiZS00NTJjLThlYjUtZTNmODRhYjYwOTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodhXRPuy9pDVvUHfdcvZjdBGpahs2buGSH6O nyuD4tTMTavdAgcmzUblvUaOThiY6Iv7/9a3Isv5R6OdB3pvGs0B3gpy9mMQTS80 pr1dJf21kMTl70YNScPi871E4gb02mx/5jSd0ZefLYpCEHqDU/Ayg5atRf9aLtBk mpAhChUlZxnx/hQ9TrERtcVgF8ZsW//k061nhHx4soNyXyu/wl8oBde39LQcGKKu oUyE1FzZDPBJ5PiSLw50dT9Jl0Z8RNXj1+LPNJ8k+qCJzPYrYdrzn8wi60vBsMpU luDPfQmNYk1VpdE0BDh3zueMA3m8UEKtN83wf7Fkzl7zUoaCBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLpGkGsNSHanyEE25xD/VbIW9ePVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODg2Zjc0MjMtY2Y3OS0z Mjc2LWIwM2ItNzZlYjgwNjcwYjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrj5CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3LBHFGP0BavavN8THKxjONbtJtK0U91UooJLZCwLplVZL0pd2k9TOV iiLwscLYg0tBplrBNcEzMPSoO0l6M0G0tMJiDlLLkw0ypWS++WizNVTPZJlJuoaw C9OzcZt2A5apjc22RuncWZHWLEq2hY2Bs35srqsFyFL8m7V3XiNTQWniAtaKgHjV C3oM+WhA/Bu7jj1H6w/WRBxmsh07KXL4kDhlFCgPdVcvTToWFoOlqA5SOVPkf5kb 91R+sluhNZbPDmPSQqQSfElJlZEOqwnOkS75421iIe4+Ll7ATjpGO/pPPtXVvPb3 YOPXxcPvW/xu1lkP1MEn1SJieaKXojE= -----END CERTIFICATE-----Generated at Sun Mar 1 18:59:54 2026 by rpki-client