$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f3ff825-dd1a-3ea3-a9af-ec5fefe969be.roa File: 8f3ff825-dd1a-3ea3-a9af-ec5fefe969be.roa (raw, json) Hash identifier: nmv3nS0HEY1hZ382/81+v41z2tlGeQuznMS4B/Wi+iM= Subject key identifier: 27:FD:D1:53:9F:86:70:BF:27:39:59:61:05:3E:B2:AE:E8:7F:B4:97 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5DFD9303FB41DB0CAE8100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f3ff825-dd1a-3ea3-a9af-ec5fefe969be.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 76.133.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5d:fd:93:03:fb:41:db:0c:ae:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=5df14c02-a1c1-41c0-bfe0-ecead6f2ea22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:86:b6:65:da:b0:91:0f:1a:8d:a9:90:3d:28: 8c:23:d0:51:d7:ab:2f:15:df:2f:df:03:9c:54:8a: 97:7b:07:a9:25:b9:3f:b4:4d:d3:67:77:ed:1c:87: 7c:51:17:e9:7b:15:af:21:ac:73:d0:2c:3f:85:7d: 57:9b:d6:54:e6:01:ae:86:54:4f:37:08:78:37:cf: 89:e6:f1:f9:c1:e2:58:81:7c:08:7d:e0:e0:01:02: 0a:e8:e9:c1:31:00:78:3f:8b:c1:2a:34:1b:6e:05: 22:32:dc:9c:25:f3:76:21:81:20:ff:6b:23:15:4c: bf:86:6c:cd:50:da:f0:46:1e:4a:2f:e7:5e:46:2b: 7a:7a:8f:1d:05:99:19:4f:06:44:82:7d:e0:ab:3e: 2a:80:44:2f:44:80:d1:0b:55:57:51:8b:47:03:9f: 57:77:9b:9c:a2:c4:75:5f:91:3d:db:62:99:9a:99: 14:1f:2e:11:1d:4d:8e:30:f1:94:fa:81:aa:d5:28: 8d:85:77:77:65:8b:00:c2:bc:7a:d3:65:1c:f1:77: e4:cf:fa:e5:76:57:7d:f9:cd:d8:3c:23:17:a2:8c: 34:c9:55:5c:91:8e:a2:f6:3b:0d:42:d3:60:5e:90: 6d:3e:a3:80:09:11:99:89:a7:55:a3:be:38:43:55: 15:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:FD:D1:53:9F:86:70:BF:27:39:59:61:05:3E:B2:AE:E8:7F:B4:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f3ff825-dd1a-3ea3-a9af-ec5fefe969be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.133.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:7e:d6:a3:08:07:8e:e9:7a:6f:e3:dd:cb:f4:75:31:f2:22: c0:52:3b:14:f1:ae:6f:09:48:20:c3:8e:84:57:6e:32:09:69: 71:ef:ae:e7:18:ce:38:c1:eb:87:e3:5f:b8:43:00:8d:79:55: 20:9b:a3:a2:ae:92:54:09:d8:55:da:ff:9e:46:db:ef:73:a7: 13:34:b9:db:e6:27:10:2d:9e:1e:b5:9b:88:49:d3:f7:c9:51: 64:9b:5e:ef:a3:1d:c8:9a:e2:3a:84:84:14:56:22:8d:e1:92: 13:3b:8f:d0:df:be:64:dc:97:39:e2:02:c1:d7:8b:e4:87:11: f1:58:a6:04:ef:f8:bc:89:d0:c4:9e:d6:1b:91:de:f1:0b:f8: 57:71:d9:9b:49:ab:0a:82:82:bf:bb:93:d1:e8:aa:28:85:db: 27:70:d1:09:02:13:ad:cf:dc:6a:62:15:ad:9f:43:04:1e:08: 56:b2:89:59:60:96:91:c6:39:6a:dc:f7:4b:7c:36:69:20:72: a7:17:89:a9:d3:51:0e:75:13:89:73:1c:2a:9f:b1:00:9c:49: 35:79:59:2b:06:16:d8:cb:fc:31:59:0b:ae:a5:65:26:93:d4: b2:99:2d:a8:d6:03:8f:52:3f:c7:5e:a7:9c:d6:c0:b9:8d:d9: 82:f2:e2:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXf2TA/tB2wyugQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NWRmMTRjMDItYTFjMS00MWMwLWJmZTAtZWNlYWQ2ZjJlYTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYa2ZdqwkQ8ajamQPSiMI9BR16svFd8v3wOc VIqXewepJbk/tE3TZ3ftHId8URfpexWvIaxz0Cw/hX1Xm9ZU5gGuhlRPNwh4N8+J 5vH5weJYgXwIfeDgAQIK6OnBMQB4P4vBKjQbbgUiMtycJfN2IYEg/2sjFUy/hmzN UNrwRh5KL+deRit6eo8dBZkZTwZEgn3gqz4qgEQvRIDRC1VXUYtHA59Xd5ucosR1 X5E922KZmpkUHy4RHU2OMPGU+oGq1SiNhXd3ZYsAwrx602Uc8Xfkz/rldld9+c3Y PCMXoow0yVVckY6i9jsNQtNgXpBtPqOACRGZiadVo744Q1UVOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCf90VOfhnC/JzlZYQU+sq7of7SXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGYzZmY4MjUtZGQxYS0z ZWEzLWE5YWYtZWM1ZmVmZTk2OWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIWaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMZ+1qMIB47pem/j3cv0dTHyIsBSOxTxrm8JSCDDjoRXbjIJaXHvrucY zjjB64fjX7hDAI15VSCbo6KuklQJ2FXa/55G2+9zpxM0udvmJxAtnh61m4hJ0/fJ UWSbXu+jHcia4jqEhBRWIo3hkhM7j9DfvmTclzniAsHXi+SHEfFYpgTv+LyJ0MSe 1huR3vEL+Fdx2ZtJqwqCgr+7k9HoqiiF2ydw0QkCE63P3GpiFa2fQwQeCFayiVlg lpHGOWrc90t8NmkgcqcXianTUQ51E4lzHCqfsQCcSTV5WSsGFtjL/DFZC66lZSaT 1LKZLajWA49SP8dep5zWwLmN2YLy4v8= -----END CERTIFICATE-----Generated at Sun Mar 1 20:38:38 2026 by rpki-client