$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9e9ec43b-7119-3cba-a15c-10347fd5e610.roa File: 9e9ec43b-7119-3cba-a15c-10347fd5e610.roa (raw, json) Hash identifier: 6kZtCW/PiOpzk9dtRMIQ9MDW76XFCMFFo6wSmXpPpYk= Subject key identifier: 28:8D:0A:E4:DB:39:B9:95:E3:05:06:B3:85:C5:D8:4E:03:24:A7:A9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE57DD5B3CA87981BE79BD80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9e9ec43b-7119-3cba-a15c-10347fd5e610.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33287 IP address blocks: 76.124.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:dd:5b:3c:a8:79:81:be:79:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=ff5bf32e-bcd8-4b15-9b66-04f77dcc34ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ff:b0:af:b5:53:fc:1a:5d:ba:07:16:67:7f: 28:0c:56:f9:ad:d7:42:98:6e:12:74:d4:df:34:d5: 95:cc:a7:48:01:77:e1:9e:b7:b5:f0:ee:29:11:d1: 88:4b:4e:e3:71:ac:52:9a:86:ee:70:e5:f1:78:01: 38:f1:6e:d2:3e:b6:ec:4a:18:f2:2b:19:b0:f5:8d: d7:c1:50:36:ba:a6:35:89:81:43:53:e9:69:b6:79: 74:18:f1:92:88:d3:99:2f:18:c6:99:50:06:01:b2: 25:8d:5f:9f:5c:99:8f:1d:0a:df:68:82:bd:4c:ed: ac:f4:48:38:57:7b:26:a2:b7:e6:8d:fe:80:63:90: 31:98:5f:0b:ec:8a:e9:a3:8d:13:99:9f:0c:10:02: 7f:0a:d3:f8:01:21:d6:1c:1c:2a:52:8c:ea:d5:d1: 5e:d3:91:27:59:c3:61:9a:a3:86:a9:15:fd:af:a8: 14:ab:ac:48:48:d6:e6:7b:6f:3f:6b:f8:3f:3e:28: fd:13:27:a8:74:18:da:c8:5d:6a:f2:14:b5:21:86: e2:9e:5f:9a:70:eb:5f:fe:cb:50:e6:61:56:78:00: 65:96:07:96:2f:56:90:79:ec:30:c1:3a:58:5e:46: 88:58:7c:48:68:c8:53:37:e2:df:4b:43:3a:58:02: e1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:8D:0A:E4:DB:39:B9:95:E3:05:06:B3:85:C5:D8:4E:03:24:A7:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9e9ec43b-7119-3cba-a15c-10347fd5e610.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.124.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:4e:7e:f3:dd:e1:38:29:ca:3d:f2:18:af:7e:02:43:89:ab: a3:f4:61:20:21:a4:c0:70:9e:a4:7a:35:99:af:ab:15:42:25: 6d:1f:e5:93:78:4d:3c:09:52:af:3e:14:0b:e6:14:c9:29:52: da:7d:30:e8:ad:02:fe:f5:61:aa:9d:4d:3d:b4:77:c8:9d:87: 77:fd:6a:58:92:a8:cc:ff:1e:b2:4f:f4:cd:0f:b7:01:0b:9f: 68:40:25:30:1c:f2:dd:a0:e9:5b:3a:0d:60:12:45:25:30:e0: e8:44:3b:7d:09:d2:1f:7d:55:c6:4f:b7:3a:ec:41:bf:68:ec: 23:b3:1b:ba:33:6c:f7:a9:01:ee:53:44:5d:c4:12:ea:c7:1a: 99:c4:68:45:09:fd:af:5f:a6:ef:30:8e:52:71:84:e2:ef:2c: c6:db:cb:56:a3:60:d0:4e:b9:aa:2e:4d:38:38:07:1a:c5:08: 10:1b:13:2a:52:19:0d:2c:6f:08:56:3e:d8:85:15:04:3e:15: 06:80:f6:41:b9:ba:ec:9f:59:fe:f0:a7:f4:b3:eb:c0:ec:67: 46:00:a5:ad:fd:93:bb:a8:52:f6:9c:43:5b:e8:d2:23:3a:f3: 91:60:ba:a9:35:be:85:d7:7a:ac:5e:17:03:8b:03:d9:71:87: 74:44:66:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuV91bPKh5gb55vYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZmY1YmYzMmUtYmNkOC00YjE1LTliNjYtMDRmNzdkY2MzNGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmf+wr7VT/BpdugcWZ38oDFb5rddCmG4SdNTf NNWVzKdIAXfhnre18O4pEdGIS07jcaxSmobucOXxeAE48W7SPrbsShjyKxmw9Y3X wVA2uqY1iYFDU+lptnl0GPGSiNOZLxjGmVAGAbIljV+fXJmPHQrfaIK9TO2s9Eg4 V3smorfmjf6AY5AxmF8L7Irpo40TmZ8MEAJ/CtP4ASHWHBwqUozq1dFe05EnWcNh mqOGqRX9r6gUq6xISNbme28/a/g/Pij9EyeodBjayF1q8hS1IYbinl+acOtf/stQ 5mFWeABllgeWL1aQeewwwTpYXkaIWHxIaMhTN+LfS0M6WALhqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCiNCuTbObmV4wUGs4XF2E4DJKepMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWU5ZWM0M2ItNzExOS0z Y2JhLWExNWMtMTAzNDdmZDVlNjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTHzAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1OfvPd4Tgpyj3yGK9+AkOJq6P0YSAhpMBwnqR6NZmvqxVCJW0f5ZN4 TTwJUq8+FAvmFMkpUtp9MOitAv71YaqdTT20d8idh3f9aliSqMz/HrJP9M0PtwEL n2hAJTAc8t2g6Vs6DWASRSUw4OhEO30J0h99VcZPtzrsQb9o7COzG7ozbPepAe5T RF3EEurHGpnEaEUJ/a9fpu8wjlJxhOLvLMbby1ajYNBOuaouTTg4BxrFCBAbEypS GQ0sbwhWPtiFFQQ+FQaA9kG5uuyfWf7wp/Sz68DsZ0YApa39k7uoUvacQ1vo0iM6 85Fguqk1voXXeqxeFwOLA9lxh3REZrc= -----END CERTIFICATE-----Generated at Sun Mar 1 18:55:33 2026 by rpki-client