$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/927af4ac-dbcf-3bcf-825e-e1ed4a4a2b28.roa File: 927af4ac-dbcf-3bcf-825e-e1ed4a4a2b28.roa (raw, json) Hash identifier: b20BG31MN7RVQtx321hX9vHqWGRtyNZiU9spQpvTOxk= Subject key identifier: C2:D5:DF:05:68:D6:52:54:38:9D:D9:28:68:89:28:BF:44:2B:78:4D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5B276E9A23A820870F6D00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/927af4ac-dbcf-3bcf-825e-e1ed4a4a2b28.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33287 IP address blocks: 76.124.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5b:27:6e:9a:23:a8:20:87:0f:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=f21996a0-ea55-4f34-9ee3-c486b1c08a21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a9:78:17:1c:4f:b7:f5:d5:33:94:3d:a4:86: 0a:42:5f:28:b4:64:01:a8:ee:16:09:a7:32:5b:f1: 59:36:09:73:72:d4:66:a3:9b:6f:0f:37:16:f1:0b: 0e:07:6d:b2:92:5b:a1:fc:e4:7a:b7:02:4d:11:de: 03:06:1d:5c:0d:ef:08:8c:8c:25:e7:5f:11:f2:59: 2a:0e:af:85:4d:40:91:45:d9:80:c4:dc:f2:0c:ea: c2:9d:bd:a1:8a:db:b7:b3:be:a6:4c:c8:73:1c:f5: fd:ee:e6:5e:1a:56:47:3d:10:65:a6:b3:32:58:5e: e6:62:4a:c4:70:62:63:00:35:f0:95:ee:15:3c:5f: 26:b9:62:2b:a8:bc:2e:4f:2e:7d:a9:d1:ec:10:94: 33:e9:cb:8f:e1:aa:90:e2:5e:b6:8a:4a:80:aa:79: b1:49:c5:34:39:e0:a7:5f:51:f7:64:c2:a0:fa:a0: 4f:2a:c7:04:d9:7d:2b:24:b7:2f:fe:a7:36:18:18: 91:fe:88:2a:b5:8e:e7:dd:a0:c6:89:ef:1e:79:fe: e5:90:ed:5b:9e:05:0d:f7:67:68:03:47:cc:ee:74: 6b:c3:2f:38:48:5d:56:ea:b8:15:27:96:5a:99:ee: 40:33:cf:ab:6a:3c:31:cd:9d:b0:3d:f0:b8:2a:40: 04:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:D5:DF:05:68:D6:52:54:38:9D:D9:28:68:89:28:BF:44:2B:78:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/927af4ac-dbcf-3bcf-825e-e1ed4a4a2b28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.124.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:ae:91:24:bd:ec:c5:d0:c8:8d:2c:c6:ab:5e:21:6a:7c:52: 2e:53:cc:92:c5:92:a6:6d:3d:a9:f5:e9:9b:0a:ac:94:b3:d7: d5:e0:49:29:8e:59:66:46:1b:40:37:d6:4f:28:ee:47:7a:c6: b4:82:f5:37:02:82:0b:23:81:3b:12:4f:d8:c8:c3:b7:61:f3: f6:40:38:04:59:ae:7f:c8:30:0f:30:05:39:e6:df:7f:ec:e3: 7d:6c:9b:0f:e8:09:66:ad:ec:6d:cd:5c:7c:9b:18:cc:d5:60: 68:ba:77:99:5b:31:ad:be:4e:08:08:e0:fc:b5:f5:e5:26:53: e9:fb:9c:f1:b3:0d:f8:68:3a:f9:40:05:ed:0a:0c:e4:ce:2b: f3:ec:5d:e0:62:f1:40:6f:a7:c1:01:e5:ab:65:24:49:8e:d3: 5b:92:7c:00:3e:08:4e:43:07:d9:1f:53:a5:ee:c5:af:ed:3d: 75:a4:23:fb:32:34:b7:c4:6f:32:30:72:d8:17:83:f5:e6:ce: 17:05:f1:a9:bf:29:49:5e:85:67:e5:3c:cd:ac:11:cb:28:39: 8c:99:6e:e5:cb:0d:83:05:5b:5b:1e:f1:1d:a0:05:e0:27:02: 23:25:c2:16:f7:b9:44:8d:af:f6:80:9d:b7:3c:5f:49:72:ff: 49:d5:2e:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWydumiOoIIcPbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZjIxOTk2YTAtZWE1NS00ZjM0LTllZTMtYzQ4NmIxYzA4YTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKl4FxxPt/XVM5Q9pIYKQl8otGQBqO4WCacy W/FZNglzctRmo5tvDzcW8QsOB22ykluh/OR6twJNEd4DBh1cDe8IjIwl518R8lkq Dq+FTUCRRdmAxNzyDOrCnb2hitu3s76mTMhzHPX97uZeGlZHPRBlprMyWF7mYkrE cGJjADXwle4VPF8muWIrqLwuTy59qdHsEJQz6cuP4aqQ4l62ikqAqnmxScU0OeCn X1H3ZMKg+qBPKscE2X0rJLcv/qc2GBiR/ogqtY7n3aDGie8eef7lkO1bngUN92do A0fM7nRrwy84SF1W6rgVJ5Zame5AM8+rajwxzZ2wPfC4KkAE4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMLV3wVo1lJUOJ3ZKGiJKL9EK3hNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTI3YWY0YWMtZGJjZi0z YmNmLTgyNWUtZTFlZDRhNGEyYjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTHx4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGukSS97MXQyI0sxqteIWp8Ui5TzJLFkqZtPan16ZsKrJSz19XgSSmO WWZGG0A31k8o7kd6xrSC9TcCggsjgTsST9jIw7dh8/ZAOARZrn/IMA8wBTnm33/s 431smw/oCWat7G3NXHybGMzVYGi6d5lbMa2+TggI4Py19eUmU+n7nPGzDfhoOvlA Be0KDOTOK/PsXeBi8UBvp8EB5atlJEmO01uSfAA+CE5DB9kfU6Xuxa/tPXWkI/sy NLfEbzIwctgXg/XmzhcF8am/KUlehWflPM2sEcsoOYyZbuXLDYMFW1se8R2gBeAn AiMlwhb3uUSNr/aAnbc8X0ly/0nVLvo= -----END CERTIFICATE-----Generated at Sun Mar 1 20:25:06 2026 by rpki-client