$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9cc09b8b-3d2b-385e-a9ac-443094369442.roa File: 9cc09b8b-3d2b-385e-a9ac-443094369442.roa (raw, json) Hash identifier: Tz8mjgAmbiN7Eh0TCoDNaPTQ6exXEpGqOcvOkJYv1LA= Subject key identifier: C4:B8:44:68:E6:FC:42:FD:4A:0A:DB:3D:7F:0C:1B:AA:AF:51:F6:A1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5CAD9940F19724738DF7C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9cc09b8b-3d2b-385e-a9ac-443094369442.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 76.136.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5c:ad:99:40:f1:97:24:73:8d:f7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=1211d867-02ce-49c9-b642-e23d9cdd846b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:73:3b:54:d1:4d:fa:6e:9b:7e:0e:97:24:7c: f8:60:bc:03:f4:93:1c:6d:f8:d5:5d:94:53:96:98: 03:ea:ec:ce:9b:95:ca:b5:b1:6d:e7:22:39:f7:cc: d1:b5:51:71:5c:24:a1:89:97:34:73:74:88:71:2d: 10:89:21:90:4e:cf:af:2b:f8:1e:7d:e3:1a:c4:52: 0b:8a:ab:0b:a5:a5:bc:05:67:9a:3f:7b:2d:27:75: e6:32:24:a3:11:6e:46:b5:23:fd:1f:88:13:3c:e0: 94:cb:83:7f:a7:08:32:0e:c8:42:07:ea:ab:79:a2: 10:a5:e8:31:61:4d:5c:96:45:ef:fc:b8:92:16:16: 61:b3:38:9a:fe:c8:ac:db:8b:12:1b:db:03:95:3b: 63:4a:26:5e:62:26:ab:64:86:1e:de:de:f1:aa:c2: b9:d8:0a:3b:0c:3d:68:74:42:ae:73:20:5e:93:6d: 74:9f:91:6f:fe:ab:e4:f1:f2:82:df:87:d4:1a:da: 16:fc:67:dc:90:2a:73:01:8f:58:e9:01:f0:52:11: ef:7e:8e:94:94:62:5a:6b:ab:28:13:a8:b6:6e:3e: a8:4e:31:dc:cd:fd:c0:2b:c9:79:f8:0d:82:67:c4: c6:bc:f9:de:f7:8d:a8:7e:7b:f7:ed:84:35:f4:09: 3c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B8:44:68:E6:FC:42:FD:4A:0A:DB:3D:7F:0C:1B:AA:AF:51:F6:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9cc09b8b-3d2b-385e-a9ac-443094369442.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.136.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:71:6e:bf:85:9e:10:4a:28:c3:f2:59:90:57:e3:a3:ce:a8: 0e:ec:2f:7a:28:52:b1:0f:b2:95:69:be:df:1e:3c:e9:25:d8: cc:a3:50:8c:4c:0b:46:83:54:5e:99:f2:ba:4c:d2:b1:48:6d: ea:8d:c5:c4:6d:b0:c2:56:87:bb:90:e8:fb:ca:bf:ba:58:d4: b4:56:23:ff:ba:85:00:ab:fe:7a:52:28:d4:f2:2c:59:dc:67: 0a:ed:49:51:95:bd:94:5e:56:65:3e:fa:b1:b5:32:4e:43:8f: 38:03:00:85:d5:c9:09:54:7f:ca:70:d9:a9:c3:fc:9b:37:d1: b9:6e:be:09:66:e5:f6:1f:ec:af:ed:6a:c2:e9:d8:78:ae:3d: 69:73:1a:15:32:11:71:58:91:27:74:23:b0:f7:9c:1c:f1:3e: ba:08:dd:c7:46:30:c7:7c:6e:b4:d5:5a:98:fa:4c:2a:14:bc: 3b:eb:4a:f4:ab:13:51:a5:ee:96:ec:fc:e7:e5:34:fd:24:2c: 5c:bb:7f:f7:0b:87:4c:9e:06:e7:dc:16:db:13:9b:29:8a:73: 41:18:92:a6:8b:88:9b:3c:18:bf:63:0f:a4:9f:68:47:a5:45: 19:f2:15:6c:ce:34:01:f2:b8:56:f1:01:91:53:29:0a:35:21: da:33:4c:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXK2ZQPGXJHON98AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MTIxMWQ4NjctMDJjZS00OWM5LWI2NDItZTIzZDljZGQ4NDZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+XM7VNFN+m6bfg6XJHz4YLwD9JMcbfjVXZRT lpgD6uzOm5XKtbFt5yI598zRtVFxXCShiZc0c3SIcS0QiSGQTs+vK/gefeMaxFIL iqsLpaW8BWeaP3stJ3XmMiSjEW5GtSP9H4gTPOCUy4N/pwgyDshCB+qreaIQpegx YU1clkXv/LiSFhZhszia/sis24sSG9sDlTtjSiZeYiarZIYe3t7xqsK52Ao7DD1o dEKucyBek210n5Fv/qvk8fKC34fUGtoW/GfckCpzAY9Y6QHwUhHvfo6UlGJaa6so E6i2bj6oTjHczf3AK8l5+A2CZ8TGvPne942ofnv37YQ19Ak8VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMS4RGjm/EL9SgrbPX8MG6qvUfahMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWNjMDliOGItM2QyYi0z ODVlLWE5YWMtNDQzMDk0MzY5NDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIjGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5xbr+FnhBKKMPyWZBX46POqA7sL3ooUrEPspVpvt8ePOkl2MyjUIxM C0aDVF6Z8rpM0rFIbeqNxcRtsMJWh7uQ6PvKv7pY1LRWI/+6hQCr/npSKNTyLFnc ZwrtSVGVvZReVmU++rG1Mk5DjzgDAIXVyQlUf8pw2anD/Js30bluvglm5fYf7K/t asLp2HiuPWlzGhUyEXFYkSd0I7D3nBzxProI3cdGMMd8brTVWpj6TCoUvDvrSvSr E1Gl7pbs/OflNP0kLFy7f/cLh0yeBufcFtsTmymKc0EYkqaLiJs8GL9jD6SfaEel RRnyFWzONAHyuFbxAZFTKQo1IdozTBE= -----END CERTIFICATE-----Generated at Sun Mar 1 18:53:17 2026 by rpki-client