$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/920e3a38-0c27-3529-93ba-7add8ea4f0ad.roa File: 920e3a38-0c27-3529-93ba-7add8ea4f0ad.roa (raw, json) Hash identifier: T2lDYMfInlsssojiQxIqiXHboW8pp7L2FzUTn3eAhvo= Subject key identifier: 8D:0C:2E:B5:2B:A8:E2:2D:03:79:93:A7:3D:0E:EF:53:4B:0E:7F:76 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5CAF3911F34280E7B42D00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/920e3a38-0c27-3529-93ba-7add8ea4f0ad.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 76.136.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5c:af:39:11:f3:42:80:e7:b4:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=7f1d248e-568e-4252-af90-b0db07ecae6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f9:e8:52:f8:d4:d0:87:39:39:35:e7:c7:28: 3f:44:bf:42:7c:d1:85:37:28:a7:2f:8a:35:16:d5: 1b:8c:98:d3:e6:b6:27:03:5f:fd:74:32:7b:ca:84: 59:72:33:f5:c1:8d:6f:1e:b1:eb:15:69:e0:31:19: 28:cd:cf:04:0a:2d:d7:33:87:0c:91:fb:ee:98:b5: 67:0b:35:71:8f:e6:ee:99:20:6d:29:e6:dc:cc:bf: af:fe:fc:68:cc:0f:0a:e5:02:59:f9:23:2b:a5:25: 42:56:a5:74:30:ae:75:ac:d1:30:a9:4e:09:70:6c: c5:56:be:f5:c3:2d:6d:6d:ee:71:7b:37:2c:d2:68: ff:5f:70:fd:28:90:1c:04:9a:1c:34:5f:13:b9:2f: 16:ae:23:7e:36:b7:69:b0:54:80:02:49:fd:1d:81: b1:1f:a6:b5:3c:25:36:15:a0:15:9b:65:45:57:71: 4f:60:90:6c:99:2b:f7:39:1c:0f:f1:70:a6:8d:e3: 6d:78:a5:78:f7:1e:73:b8:c0:e2:b3:06:8f:98:9c: 84:d1:ba:6e:8d:3f:2f:32:ef:23:e2:5d:f8:79:41: 6c:39:81:a7:f1:61:ed:3c:e5:f5:b4:b0:28:a7:1c: f1:ce:68:f8:d8:e0:bf:2b:7d:f2:4e:71:02:f7:20: d2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:0C:2E:B5:2B:A8:E2:2D:03:79:93:A7:3D:0E:EF:53:4B:0E:7F:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/920e3a38-0c27-3529-93ba-7add8ea4f0ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.136.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:1a:08:45:1b:24:b0:76:b6:d5:a9:cb:dc:b2:93:f5:c0:98: e1:70:3a:7d:77:51:1a:52:5f:d1:5a:8b:25:07:67:6f:4d:7b: b2:6b:29:11:da:67:74:9a:77:62:53:fb:69:fc:38:5e:ac:50: 61:f6:05:c7:f0:1f:b4:a9:0f:88:ca:ea:97:3c:33:22:ff:c2: 19:5a:fa:39:f1:ca:9f:41:13:e4:51:c1:ff:67:ea:d2:08:69: d6:68:12:af:99:af:f8:5c:a2:45:fd:bd:4f:1b:7b:a0:49:68: e1:a2:5d:3f:8f:94:e3:31:ec:cb:00:c2:d7:50:5f:13:bb:cf: 76:0d:02:ec:d2:97:14:32:d4:03:a4:47:ee:a2:57:2c:54:b8: aa:62:a0:3b:17:10:14:9f:ae:4e:c9:dd:a3:39:c1:d4:18:0d: db:fa:64:53:2f:f3:fa:2c:9f:03:51:27:64:30:4e:2a:16:57: c0:da:24:48:6c:80:8b:75:89:72:e6:7b:f1:7b:34:52:8b:26: 06:3a:53:4a:22:f4:7b:05:63:34:d7:69:a8:ee:e7:85:cd:8e: b1:06:9d:d5:76:09:a7:90:1f:45:50:19:84:45:69:45:c0:b5: c3:82:e9:91:35:4c:40:4e:15:d1:01:4c:6a:27:98:9e:7b:27: 09:54:1e:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXK85EfNCgOe0LQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk N2YxZDI0OGUtNTY4ZS00MjUyLWFmOTAtYjBkYjA3ZWNhZTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vnoUvjU0Ic5OTXnxyg/RL9CfNGFNyinL4o1 FtUbjJjT5rYnA1/9dDJ7yoRZcjP1wY1vHrHrFWngMRkozc8ECi3XM4cMkfvumLVn CzVxj+bumSBtKebczL+v/vxozA8K5QJZ+SMrpSVCVqV0MK51rNEwqU4JcGzFVr71 wy1tbe5xezcs0mj/X3D9KJAcBJocNF8TuS8WriN+NrdpsFSAAkn9HYGxH6a1PCU2 FaAVm2VFV3FPYJBsmSv3ORwP8XCmjeNteKV49x5zuMDiswaPmJyE0bpujT8vMu8j 4l34eUFsOYGn8WHtPOX1tLAopxzxzmj42OC/K33yTnEC9yDSjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0MLrUrqOItA3mTpz0O71NLDn92MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTIwZTNhMzgtMGMyNy0z NTI5LTkzYmEtN2FkZDhlYTRmMGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTIj4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoaCEUbJLB2ttWpy9yyk/XAmOFwOn13URpSX9FaiyUHZ29Ne7JrKRHa Z3Sad2JT+2n8OF6sUGH2BcfwH7SpD4jK6pc8MyL/whla+jnxyp9BE+RRwf9n6tII adZoEq+Zr/hcokX9vU8be6BJaOGiXT+PlOMx7MsAwtdQXxO7z3YNAuzSlxQy1AOk R+6iVyxUuKpioDsXEBSfrk7J3aM5wdQYDdv6ZFMv8/osnwNRJ2QwTioWV8DaJEhs gIt1iXLme/F7NFKLJgY6U0oi9HsFYzTXaaju54XNjrEGndV2CaeQH0VQGYRFaUXA tcOC6ZE1TEBOFdEBTGonmJ57JwlUHjQ= -----END CERTIFICATE-----Generated at Mon Mar 2 07:17:05 2026 by rpki-client