$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8870e85a-f3ab-31f0-a214-b4e8c460512d.roa File: 8870e85a-f3ab-31f0-a214-b4e8c460512d.roa (raw, json) Hash identifier: u4v61WLV39g8jOJRmDDFO14WqoYOmp198LK3+d7I+Xo= Subject key identifier: B9:E2:CC:44:7C:E4:EB:EE:5A:C4:A2:42:7E:FC:F8:F0:F1:B8:6C:63 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5A6DB84F93156516A35520 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8870e85a-f3ab-31f0-a214-b4e8c460512d.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33659 IP address blocks: 76.116.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5a:6d:b8:4f:93:15:65:16:a3:55:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=cca71852-396a-4177-8c9e-186b34f40b04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:35:a6:33:a8:43:53:d1:7e:14:dc:51:66:b6: 2e:32:46:8c:1a:0e:ff:d5:19:8f:4d:d7:26:1c:34: 5e:eb:00:be:22:9e:63:7e:1e:8e:58:c7:32:20:dc: ce:0b:bd:dc:fa:c6:b9:ec:52:0d:d2:ea:20:7d:5d: ba:2f:fd:6e:17:4a:d3:38:0c:b8:32:61:47:ca:4c: 80:d3:8c:40:13:30:d1:bd:8a:1b:35:4a:1c:c1:93: 2d:7b:a8:a8:29:77:9b:97:37:49:33:8c:c6:40:d4: 8f:e0:69:02:ff:e7:24:0a:78:21:10:7c:38:73:79: 0d:4e:fa:aa:16:ee:77:57:0d:51:e7:6b:d3:5e:c2: cc:24:77:ba:55:3c:84:6c:37:34:01:37:d3:c2:43: 01:ad:2a:4e:c4:9d:c3:f7:fc:b3:ad:74:09:ff:21: 45:6c:ce:f4:2c:d5:48:2e:44:21:0b:5c:7e:97:2f: d3:f8:b1:25:01:36:ae:5e:0e:58:78:65:f1:62:ec: 41:63:75:be:b6:1e:71:37:ec:e2:1c:e3:59:c1:cf: 95:fe:78:46:00:99:a0:b2:16:5f:e6:12:c5:7a:09: 4a:02:f6:1f:42:34:59:5a:0d:69:62:24:3c:39:41: 22:2c:61:0d:94:b5:da:81:ac:70:2f:14:b1:50:b7: d9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E2:CC:44:7C:E4:EB:EE:5A:C4:A2:42:7E:FC:F8:F0:F1:B8:6C:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8870e85a-f3ab-31f0-a214-b4e8c460512d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.116.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:93:c6:ec:79:38:3c:7c:18:52:70:bc:22:60:78:a5:59:11: 92:03:4c:a9:b0:20:66:c0:93:be:7a:ed:44:c6:10:50:d0:06: 48:52:42:5b:1e:89:62:55:58:2f:bc:a3:a1:a4:53:7f:47:d7: ff:c9:9c:b5:f8:44:de:95:a8:72:78:ff:14:2f:a9:6e:c7:11: 44:13:ed:fe:17:45:5a:af:c1:c9:58:10:90:a0:03:68:8c:03: b7:90:23:86:a5:b4:ed:97:7c:08:dc:41:3e:c0:b1:ef:9a:92: 30:26:8e:fc:f9:64:99:a4:26:ab:28:d7:04:22:79:06:6b:e4: c8:fa:83:88:9a:b1:56:71:ed:d3:c6:16:54:18:5e:be:57:00: 33:37:1b:79:c6:85:9e:9e:f6:dc:51:53:55:9d:05:23:f6:ce: df:3c:18:22:8c:83:00:b6:b1:86:9b:38:bd:96:6f:9d:b2:1d: 44:ee:79:ef:d0:3c:a1:2f:31:04:bc:ae:66:78:25:6a:d1:7f: 7c:18:83:f4:37:bd:1e:bc:4e:0b:06:68:0a:9e:f3:e9:b2:b1: 8e:c8:ab:a8:cd:30:59:b8:8b:b3:6c:38:2d:f4:ae:f9:8d:42: 72:f3:4c:59:b8:8d:76:3f:92:0b:dc:3a:05:3b:16:c9:75:b0: c7:1f:6c:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWm24T5MVZRajVSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk Y2NhNzE4NTItMzk2YS00MTc3LThjOWUtMTg2YjM0ZjQwYjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTWmM6hDU9F+FNxRZrYuMkaMGg7/1RmPTdcm HDRe6wC+Ip5jfh6OWMcyINzOC73c+sa57FIN0uogfV26L/1uF0rTOAy4MmFHykyA 04xAEzDRvYobNUocwZMte6ioKXeblzdJM4zGQNSP4GkC/+ckCnghEHw4c3kNTvqq Fu53Vw1R52vTXsLMJHe6VTyEbDc0ATfTwkMBrSpOxJ3D9/yzrXQJ/yFFbM70LNVI LkQhC1x+ly/T+LElATauXg5YeGXxYuxBY3W+th5xN+ziHONZwc+V/nhGAJmgshZf 5hLFeglKAvYfQjRZWg1pYiQ8OUEiLGENlLXagaxwLxSxULfZPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLnizER85OvuWsSiQn78+PDxuGxjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODg3MGU4NWEtZjNhYi0z MWYwLWEyMTQtYjRlOGM0NjA1MTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTHQYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABaTxux5ODx8GFJwvCJgeKVZEZIDTKmwIGbAk7567UTGEFDQBkhSQlse iWJVWC+8o6GkU39H1//JnLX4RN6VqHJ4/xQvqW7HEUQT7f4XRVqvwclYEJCgA2iM A7eQI4altO2XfAjcQT7Ase+akjAmjvz5ZJmkJqso1wQieQZr5Mj6g4iasVZx7dPG FlQYXr5XADM3G3nGhZ6e9txRU1WdBSP2zt88GCKMgwC2sYabOL2Wb52yHUTuee/Q PKEvMQS8rmZ4JWrRf3wYg/Q3vR68TgsGaAqe8+mysY7Iq6jNMFm4i7NsOC30rvmN QnLzTFm4jXY/kgvcOgU7Fsl1sMcfbJ4= -----END CERTIFICATE-----Generated at Mon Mar 2 12:01:33 2026 by rpki-client