$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8aea3f9b-0490-320d-8ec2-47fbf0503fa9.roa File: 8aea3f9b-0490-320d-8ec2-47fbf0503fa9.roa (raw, json) Hash identifier: lSn023ZKwa3CPYA7FrU8aWk8F67vPY98CLgx5q8CYhg= Subject key identifier: C8:31:02:61:1E:97:FA:E2:9D:43:BD:86:C6:18:3B:A1:C1:9B:7F:77 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5DFA08164AF7D06E5AD840 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8aea3f9b-0490-320d-8ec2-47fbf0503fa9.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 76.132.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5d:fa:08:16:4a:f7:d0:6e:5a:d8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=f30b3774-72d5-4629-b402-82e80e0573ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:69:8b:6a:fe:d3:89:b7:e1:61:a3:52:82:71: c7:d4:dd:b7:31:6e:2e:d8:72:70:88:27:72:ea:c0: 7c:d6:8f:55:54:64:e0:f7:5a:f9:22:87:8a:8f:73: 58:9a:6d:be:a7:18:04:3a:43:51:f6:fd:44:21:cd: 9d:7d:36:3a:97:d0:fe:07:92:bb:98:62:83:ba:99: bf:c3:68:cd:ac:7c:b8:18:4f:30:6f:0d:22:d4:1c: 70:57:ff:d5:80:b1:57:fa:2c:64:03:40:2e:0c:af: 2a:59:9a:a0:00:1a:bd:49:eb:33:1b:61:03:c8:1c: 2c:34:b1:8c:f0:c6:a5:e2:b5:7d:9e:6f:f9:29:e2: f1:b3:5a:db:4e:08:5f:49:4e:28:9e:e3:37:b3:10: b4:42:c6:ab:2c:f4:d7:69:de:4e:5c:27:d1:a0:58: cf:3a:58:67:21:fa:45:b3:1b:1b:2f:85:17:68:ff: 79:ed:b8:6d:65:b6:18:e2:d5:a7:9c:46:13:f1:4b: 18:e9:37:4b:e4:ad:3f:b7:ea:00:1a:69:96:89:b7: e9:48:e3:c3:d2:67:ab:e1:26:4b:b3:a9:45:2c:18: d8:a6:6c:ae:47:17:34:fb:3b:51:f7:7c:9a:65:7d: 0e:c0:9e:7b:cd:0f:f0:d8:02:15:ee:a5:c5:45:20: 5a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:31:02:61:1E:97:FA:E2:9D:43:BD:86:C6:18:3B:A1:C1:9B:7F:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8aea3f9b-0490-320d-8ec2-47fbf0503fa9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.132.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:98:f6:7c:10:50:ad:5a:16:5e:ca:a2:0c:f0:fe:03:eb:f9: cd:84:da:28:70:7c:bf:8d:bb:8d:04:6f:9a:3b:ff:b1:5d:8a: b8:6b:9b:f5:71:09:ce:96:9f:21:a1:46:47:fc:a3:d1:14:80: ae:0a:11:f0:a7:e6:0b:e6:df:b6:1c:30:ee:39:d8:47:16:de: e1:cb:8d:d5:02:a2:8c:4a:da:0c:dd:47:a2:50:f1:9e:bd:cc: 88:9e:70:8b:bd:d2:64:5c:84:0a:de:f0:0d:46:2a:93:dd:fd: e0:ee:26:05:ca:86:8b:58:68:84:6b:4e:c7:29:05:e6:cd:ba: cf:72:2b:67:11:31:e4:71:42:a8:56:26:9b:8c:0c:db:74:9a: 43:39:83:78:ce:30:5f:2f:36:fb:2f:fc:d1:8a:23:89:e2:43: a5:2a:1f:d5:21:c7:29:d4:99:5e:a5:15:76:47:42:af:d4:7f: b3:93:e3:94:98:c0:da:8c:0a:4b:08:3b:3a:f3:e0:3d:89:2e: 44:9e:16:ef:50:82:a0:e9:f3:a5:ef:7b:42:2f:7a:60:f9:42: 31:aa:2f:94:89:3c:88:27:04:c3:36:42:1b:9a:b4:4a:94:42: d7:1a:d0:4d:fa:93:6d:e7:a8:4d:02:2a:6a:d3:25:eb:4c:00: 81:5a:13:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXfoIFkr30G5a2EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZjMwYjM3NzQtNzJkNS00NjI5LWI0MDItODJlODBlMDU3M2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmmLav7TibfhYaNSgnHH1N23MW4u2HJwiCdy 6sB81o9VVGTg91r5IoeKj3NYmm2+pxgEOkNR9v1EIc2dfTY6l9D+B5K7mGKDupm/ w2jNrHy4GE8wbw0i1BxwV//VgLFX+ixkA0AuDK8qWZqgABq9SeszG2EDyBwsNLGM 8Mal4rV9nm/5KeLxs1rbTghfSU4onuM3sxC0QsarLPTXad5OXCfRoFjPOlhnIfpF sxsbL4UXaP957bhtZbYY4tWnnEYT8UsY6TdL5K0/t+oAGmmWibfpSOPD0mer4SZL s6lFLBjYpmyuRxc0+ztR93yaZX0OwJ57zQ/w2AIV7qXFRSBauwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgxAmEel/rinUO9hsYYO6HBm393MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGFlYTNmOWItMDQ5MC0z MjBkLThlYzItNDdmYmYwNTAzZmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTIRUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALyY9nwQUK1aFl7Kogzw/gPr+c2E2ihwfL+Nu40Eb5o7/7Fdirhrm/Vx Cc6WnyGhRkf8o9EUgK4KEfCn5gvm37YcMO452EcW3uHLjdUCooxK2gzdR6JQ8Z69 zIiecIu90mRchAre8A1GKpPd/eDuJgXKhotYaIRrTscpBebNus9yK2cRMeRxQqhW JpuMDNt0mkM5g3jOMF8vNvsv/NGKI4niQ6UqH9UhxynUmV6lFXZHQq/Uf7OT45SY wNqMCksIOzrz4D2JLkSeFu9QgqDp86Xve0IvemD5QjGqL5SJPIgnBMM2QhuatEqU Qtca0E36k23nqE0CKmrTJetMAIFaE4I= -----END CERTIFICATE-----Generated at Sun Mar 1 18:44:37 2026 by rpki-client