$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a33edcbc-149b-38ce-ad25-0f50c57981a3.roa File: a33edcbc-149b-38ce-ad25-0f50c57981a3.roa (raw, json) Hash identifier: Sf8/eRrFggcbWSVaOG9JYeL0IoKd3H1IsumN2nOWFGw= Subject key identifier: 90:73:20:B4:3A:67:47:4E:7E:E1:1B:05:5C:A4:D4:29:24:40:19:1A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5DFD81B2FDC23F5E964880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a33edcbc-149b-38ce-ad25-0f50c57981a3.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 76.133.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5d:fd:81:b2:fd:c2:3f:5e:96:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=84da9fff-1dec-4bf2-9f75-3984cc18f28d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:1a:bb:1c:d0:47:11:45:df:0d:86:df:ae:51: f8:d5:6d:25:c1:18:68:94:ab:73:24:1b:d0:a0:69: dd:b6:f3:c7:cb:55:bf:76:ff:b1:86:c6:69:76:2d: 5c:ce:5b:c2:a8:e7:8e:e0:39:3c:b8:48:68:87:05: eb:61:79:14:95:fe:33:3d:58:d8:d1:5c:11:ae:bb: 72:96:93:b0:c5:96:2c:03:2a:01:f5:4c:5a:cf:d0: 3a:72:5f:ec:39:dc:44:7f:a6:07:ee:8a:51:c2:88: 85:af:f2:93:bd:39:36:82:45:6c:67:78:e7:0a:58: 5b:22:20:69:bd:07:af:d6:4f:04:bf:3d:3b:9f:3a: 06:2b:71:83:c8:68:71:90:82:a7:6d:fc:49:1a:6b: a6:75:94:d9:5a:1c:e4:ff:71:d1:fb:63:ca:66:16: 83:47:00:dd:2e:83:85:5d:50:ff:71:53:59:5c:93: 5a:13:d5:6d:ee:d6:d0:4c:59:7c:6e:d6:72:99:df: 36:8d:3c:25:33:23:50:e3:da:d9:ea:41:78:77:9c: 49:4b:a1:b8:73:58:b2:57:14:fe:d4:72:3d:58:54: ae:67:60:4c:4c:d6:53:f4:4b:7e:99:d6:9c:cf:29: 78:62:2e:77:16:43:a9:db:2d:5b:98:c0:12:2b:8c: 02:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:73:20:B4:3A:67:47:4E:7E:E1:1B:05:5C:A4:D4:29:24:40:19:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a33edcbc-149b-38ce-ad25-0f50c57981a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.133.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:68:d7:e0:45:32:8d:55:99:9a:e2:69:8d:97:ad:5a:19:fc: e7:5d:94:94:e1:3d:58:b0:19:6b:a7:48:db:9b:32:3c:46:1c: ce:f1:f0:09:d7:4e:da:42:64:ef:5b:20:5d:51:53:5c:ac:e2: 6c:d1:57:69:f7:83:20:4c:4b:c4:3f:5a:f9:f6:92:fa:5e:9c: 14:88:25:b0:a8:44:6e:be:e0:c9:e9:7e:63:d8:bf:d7:1b:29: 6d:2e:e9:48:f1:3a:b5:1a:60:0c:ec:d5:44:4b:75:f9:c6:15: 64:0b:49:c2:e3:02:7a:7a:38:1c:bf:bd:75:0a:54:a0:3c:11: 30:ec:b3:4a:ea:f3:21:c2:eb:07:3a:91:bf:35:9f:9f:37:97: 42:15:e3:99:47:eb:0e:58:f7:9b:95:47:80:37:66:97:d0:a8: a7:8d:48:23:99:36:2f:e6:0e:c1:0b:d1:1d:be:23:12:ff:b6: d2:e3:79:5f:c5:f5:f3:29:94:11:84:5b:99:49:cc:bc:4d:00: 16:6c:9e:80:24:90:f4:3f:9e:07:79:ec:0b:2d:2c:03:17:87: f6:de:18:f5:08:75:5b:cb:e7:41:5e:4e:84:aa:60:2d:8a:ee: e8:28:fb:d0:5c:d1:c1:0c:30:ce:8f:7e:a6:38:65:07:eb:5a: c6:28:d0:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXf2Bsv3CP16WSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ODRkYTlmZmYtMWRlYy00YmYyLTlmNzUtMzk4NGNjMThmMjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRq7HNBHEUXfDYbfrlH41W0lwRholKtzJBvQ oGndtvPHy1W/dv+xhsZpdi1czlvCqOeO4Dk8uEhohwXrYXkUlf4zPVjY0VwRrrty lpOwxZYsAyoB9Uxaz9A6cl/sOdxEf6YH7opRwoiFr/KTvTk2gkVsZ3jnClhbIiBp vQev1k8Evz07nzoGK3GDyGhxkIKnbfxJGmumdZTZWhzk/3HR+2PKZhaDRwDdLoOF XVD/cVNZXJNaE9Vt7tbQTFl8btZymd82jTwlMyNQ49rZ6kF4d5xJS6G4c1iyVxT+ 1HI9WFSuZ2BMTNZT9Et+mdaczyl4Yi53FkOp2y1bmMASK4wCiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJBzILQ6Z0dOfuEbBVyk1CkkQBkaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTMzZWRjYmMtMTQ5Yi0z OGNlLWFkMjUtMGY1MGM1Nzk4MWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIWYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZo1+BFMo1VmZriaY2XrVoZ/OddlJThPViwGWunSNubMjxGHM7x8AnX TtpCZO9bIF1RU1ys4mzRV2n3gyBMS8Q/Wvn2kvpenBSIJbCoRG6+4MnpfmPYv9cb KW0u6UjxOrUaYAzs1URLdfnGFWQLScLjAnp6OBy/vXUKVKA8ETDss0rq8yHC6wc6 kb81n583l0IV45lH6w5Y95uVR4A3ZpfQqKeNSCOZNi/mDsEL0R2+IxL/ttLjeV/F 9fMplBGEW5lJzLxNABZsnoAkkPQ/ngd57AstLAMXh/beGPUIdVvL50FeToSqYC2K 7ugo+9Bc0cEMMM6PfqY4ZQfrWsYo0G4= -----END CERTIFICATE-----Generated at Sun Mar 1 19:01:53 2026 by rpki-client