$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8895b485-6f70-3f06-b9c5-5368137cf7d6.roa File: 8895b485-6f70-3f06-b9c5-5368137cf7d6.roa (raw, json) Hash identifier: qB63pxo/5PJsF9TYQqRAZ8vXwgFDOV8DhUPKDwgCVxU= Subject key identifier: F0:F0:EA:69:CD:9A:90:CA:DD:2D:84:E5:7A:E7:37:29:84:10:DF:7B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5D2C428398500C82D39280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8895b485-6f70-3f06-b9c5-5368137cf7d6.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 174.160.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5d:2c:42:83:98:50:0c:82:d3:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=49a2070b-c597-46e5-b651-0e0c1b76c8c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:38:34:4a:8c:15:88:06:af:cb:d7:5a:db:bb: 69:de:1a:b9:1e:0a:b0:83:55:5b:04:11:08:bc:18: c5:7f:99:91:8f:31:52:31:8a:48:49:a2:57:76:c4: c9:43:1f:aa:70:b8:1d:cd:ac:d1:68:d9:6b:13:69: 41:3a:02:3e:b5:bc:42:d3:68:a4:09:57:b3:82:0a: 95:f8:41:85:a5:59:2b:e5:37:46:04:ba:ae:98:45: 51:f9:cc:38:cc:2c:ff:dc:7a:00:20:4d:4e:ef:8c: 16:81:98:48:59:eb:ab:31:41:66:61:d2:83:4b:30: 21:8c:d4:58:4b:f7:f1:34:ce:ef:40:7f:a4:99:ab: 05:09:c2:4f:c5:15:fb:85:39:2c:15:54:90:6d:8f: 93:41:80:cf:74:43:ac:55:59:37:c5:68:b9:b5:ad: aa:d7:9d:db:71:0b:69:f7:18:a5:cc:0f:42:cb:f6: cf:eb:ff:0d:e8:0a:cd:2b:c7:9d:1f:da:41:82:69: fc:7f:ea:93:80:8a:11:59:60:87:30:2f:fc:7b:f3: 76:bf:e6:ce:94:19:1f:c7:18:80:f2:fb:6b:1e:35: 6b:05:34:52:ea:df:d5:c1:b8:70:5c:63:84:5e:a3: c0:9d:52:7a:4d:a5:8a:4e:0e:85:ab:f1:4b:d8:7b: 96:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F0:EA:69:CD:9A:90:CA:DD:2D:84:E5:7A:E7:37:29:84:10:DF:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8895b485-6f70-3f06-b9c5-5368137cf7d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.160.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:7c:ad:37:4c:06:bb:76:33:85:69:66:34:3a:c7:4a:8a:58: b5:2c:19:62:7c:29:f4:c6:4b:fa:c7:aa:5c:82:a4:ac:86:cc: 2f:3c:77:c9:39:88:d4:de:65:25:02:26:dd:59:8c:d7:1f:f7: b2:ec:16:fb:e6:a7:72:8a:4b:da:94:03:84:e3:97:26:8f:34: a2:00:5c:69:79:c6:82:72:13:ed:b0:4f:da:36:f9:7e:0d:cc: bc:a7:d7:d7:05:63:d6:38:75:43:53:64:8d:91:64:08:2b:10: a9:44:29:76:57:0f:4a:10:c2:f4:2e:8a:91:f1:77:e0:b0:8d: 22:4f:c2:0d:0a:11:82:1b:f0:ef:06:3c:56:2a:68:67:1a:1e: b6:83:f0:54:c9:93:cc:fd:1c:de:91:51:46:71:50:2b:65:46: b8:cf:84:40:c0:36:44:b9:9b:de:90:f1:15:18:9d:4b:a1:d7: a4:4e:d2:8c:58:7b:f1:b9:4d:b2:77:79:a5:31:5b:79:c5:6d: 07:db:6a:df:21:0f:b6:7f:27:06:8f:50:cc:60:73:c1:7d:fd: 0e:e3:7d:b7:0c:93:4e:96:dd:3f:84:c3:32:3f:37:ea:a1:f3: ef:d9:c9:71:ed:8c:55:dc:01:1a:48:51:23:ad:2b:a7:91:3d: 6a:26:95:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXSxCg5hQDILTkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NDlhMjA3MGItYzU5Ny00NmU1LWI2NTEtMGUwYzFiNzZjOGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDg0SowViAavy9da27tp3hq5Hgqwg1VbBBEI vBjFf5mRjzFSMYpISaJXdsTJQx+qcLgdzazRaNlrE2lBOgI+tbxC02ikCVezggqV +EGFpVkr5TdGBLqumEVR+cw4zCz/3HoAIE1O74wWgZhIWeurMUFmYdKDSzAhjNRY S/fxNM7vQH+kmasFCcJPxRX7hTksFVSQbY+TQYDPdEOsVVk3xWi5ta2q153bcQtp 9xilzA9Cy/bP6/8N6ArNK8edH9pBgmn8f+qTgIoRWWCHMC/8e/N2v+bOlBkfxxiA 8vtrHjVrBTRS6t/VwbhwXGOEXqPAnVJ6TaWKTg6Fq/FL2HuWIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPDw6mnNmpDK3S2E5XrnNymEEN97MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODg5NWI0ODUtNmY3MC0z ZjA2LWI5YzUtNTM2ODEzN2NmN2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrqA8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACN8rTdMBrt2M4VpZjQ6x0qKWLUsGWJ8KfTGS/rHqlyCpKyGzC88d8k5 iNTeZSUCJt1ZjNcf97LsFvvmp3KKS9qUA4TjlyaPNKIAXGl5xoJyE+2wT9o2+X4N zLyn19cFY9Y4dUNTZI2RZAgrEKlEKXZXD0oQwvQuipHxd+CwjSJPwg0KEYIb8O8G PFYqaGcaHraD8FTJk8z9HN6RUUZxUCtlRrjPhEDANkS5m96Q8RUYnUuh16RO0oxY e/G5TbJ3eaUxW3nFbQfbat8hD7Z/JwaPUMxgc8F9/Q7jfbcMk06W3T+EwzI/N+qh 8+/ZyXHtjFXcARpIUSOtK6eRPWomlao= -----END CERTIFICATE-----Generated at Sun Mar 1 19:08:20 2026 by rpki-client