$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a09e28ba-fe6d-341e-a943-aa48a8252436.roa File: a09e28ba-fe6d-341e-a943-aa48a8252436.roa (raw, json) Hash identifier: bI2njlMDWmmqkhU+z9Bkivpt9zlhrzc6SToNUFsiahU= Subject key identifier: AF:F4:D8:93:B6:A2:11:3B:26:31:C4:78:98:3C:2D:C7:C8:9A:D3:6F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE58C5FE6D3CD16C6DBFC800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a09e28ba-fe6d-341e-a943-aa48a8252436.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 67.188.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:c5:fe:6d:3c:d1:6c:6d:bf:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=902516f0-878f-4a73-a2b9-82016e3850d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1f:30:0e:29:22:4e:da:2d:60:80:b9:ce:5b: 02:8c:00:ff:30:ed:75:f6:6d:bd:5d:10:bd:e9:b0: db:8e:16:03:cb:90:c2:4b:bc:2f:6d:5e:08:1c:fd: fa:bc:43:46:8e:1c:ca:da:5b:3c:79:41:3d:7c:e1: e7:da:18:7c:26:53:7c:cd:a0:6b:ab:d0:bb:a4:f3: 99:6f:fb:2b:98:6c:0c:04:84:c7:ee:58:c9:51:ea: 8c:c4:d1:1e:a0:ee:5d:68:a8:89:c0:be:ab:e0:d1: 16:a8:fb:6a:c1:9f:c6:47:14:71:a6:2f:c3:3e:2a: 84:be:57:54:08:a3:75:60:29:2c:df:12:bf:67:ce: 5c:c1:9e:fd:c1:a3:ff:0f:20:5b:4e:d6:b5:2b:bc: d7:06:87:ab:a5:2b:e7:e2:f9:a1:df:e8:74:2a:8a: f4:b5:62:e9:e0:51:59:aa:47:04:97:1a:1a:88:e0: 7f:b8:f3:f9:40:4e:29:4c:9d:09:0d:a3:d4:fd:d9: e9:b5:fc:76:12:27:ce:f0:da:36:7d:75:31:a3:cd: 5d:44:6b:a7:ce:c6:2d:dd:34:6d:a2:e6:12:9e:c2: f2:ba:3a:b2:6a:ba:50:49:6c:d6:d1:09:a5:9c:c7: 60:3f:4b:a6:00:eb:88:82:48:e3:6e:a2:f0:94:6a: f3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:F4:D8:93:B6:A2:11:3B:26:31:C4:78:98:3C:2D:C7:C8:9A:D3:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a09e28ba-fe6d-341e-a943-aa48a8252436.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.188.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:3b:ab:a0:1a:31:5d:76:06:c9:1f:51:f5:f5:3d:a8:10:d6: 41:e1:02:f6:2d:50:2c:a0:65:75:94:b1:7c:fb:71:bf:45:37: 8e:17:a7:71:79:cd:4a:f0:61:ac:24:10:9e:e7:96:9f:11:ce: 07:fa:ef:92:5f:6d:12:9f:e5:44:05:07:1f:88:93:c6:ba:35: 36:97:63:d9:43:1d:cf:6d:45:69:5f:f9:d2:5b:2c:ac:b4:2e: 1d:d0:64:54:c3:84:cf:d6:1b:c2:8a:3a:66:80:64:b8:af:58: 03:13:3b:25:3f:bf:0b:6a:5f:44:52:f2:2b:5e:d4:5a:0d:df: d5:64:00:48:1e:78:93:cc:c6:20:d8:1d:e4:e1:b7:7c:bf:3e: a3:18:23:f3:4f:73:51:f4:7b:c6:80:5d:80:ee:8d:0a:b5:ca: 45:6c:fe:20:bc:7b:96:77:87:85:c8:16:ef:e7:ea:a8:a7:19: 56:71:20:e2:73:94:9f:80:3f:74:99:a6:b5:81:fd:e6:d0:d2: e1:1c:bb:61:aa:2b:e0:24:10:9f:b4:56:5e:54:22:71:49:df: 81:a2:53:4a:07:40:28:58:85:c3:26:28:4a:d1:06:37:ea:63: e0:bd:e5:e5:01:34:a0:42:42:8f:0a:08:fb:18:f9:3a:5c:dd: 72:ea:e8:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWMX+bTzRbG2/yAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk OTAyNTE2ZjAtODc4Zi00YTczLWEyYjktODIwMTZlMzg1MGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArR8wDikiTtotYIC5zlsCjAD/MO119m29XRC9 6bDbjhYDy5DCS7wvbV4IHP36vENGjhzK2ls8eUE9fOHn2hh8JlN8zaBrq9C7pPOZ b/srmGwMBITH7ljJUeqMxNEeoO5daKiJwL6r4NEWqPtqwZ/GRxRxpi/DPiqEvldU CKN1YCks3xK/Z85cwZ79waP/DyBbTta1K7zXBoerpSvn4vmh3+h0Kor0tWLp4FFZ qkcElxoaiOB/uPP5QE4pTJ0JDaPU/dnptfx2EifO8No2fXUxo81dRGunzsYt3TRt ouYSnsLyujqyarpQSWzW0QmlnMdgP0umAOuIgkjjbqLwlGrzUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/02JO2ohE7JjHEeJg8LcfImtNvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTA5ZTI4YmEtZmU2ZC0z NDFlLWE5NDMtYWE0OGE4MjUyNDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ7wIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQ7q6AaMV12BskfUfX1PagQ1kHhAvYtUCygZXWUsXz7cb9FN44Xp3F5 zUrwYawkEJ7nlp8Rzgf675JfbRKf5UQFBx+Ik8a6NTaXY9lDHc9tRWlf+dJbLKy0 Lh3QZFTDhM/WG8KKOmaAZLivWAMTOyU/vwtqX0RS8ite1FoN39VkAEgeeJPMxiDY HeTht3y/PqMYI/NPc1H0e8aAXYDujQq1ykVs/iC8e5Z3h4XIFu/n6qinGVZxIOJz lJ+AP3SZprWB/ebQ0uEcu2GqK+AkEJ+0Vl5UInFJ34GiU0oHQChYhcMmKErRBjfq Y+C95eUBNKBCQo8KCPsY+Tpc3XLq6NE= -----END CERTIFICATE-----Generated at Mon Mar 2 13:20:52 2026 by rpki-client