$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a39d1ddb-48ce-3f22-b315-be389b64be87.roa File: a39d1ddb-48ce-3f22-b315-be389b64be87.roa (raw, json) Hash identifier: Uv/YgtUyPri8QrqjBX62v5ihV9yuLC5halxOOxKG26Q= Subject key identifier: 17:E6:CC:6E:0A:4B:E7:F1:36:38:3E:C9:D5:9B:75:09:33:15:BC:82 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE58C06866214C102A189700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a39d1ddb-48ce-3f22-b315-be389b64be87.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 67.169.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:c0:68:66:21:4c:10:2a:18:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=84efefed-4891-4c84-9700-150bc0fc9480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3b:ce:d8:d0:9a:ba:2f:b7:cc:8f:a8:18:e2: e4:33:58:29:c2:36:0d:79:0a:d7:3e:da:1a:a9:b5: 84:35:8f:2e:b4:21:52:fb:f3:a5:2f:ef:e5:f6:cd: b8:f9:3f:c9:df:37:40:f9:53:56:d9:9b:df:cb:c2: 05:5f:c8:dc:b6:07:71:ab:eb:81:9f:1a:15:b5:d5: 2d:ac:8a:db:53:70:dd:53:ce:9b:0b:d5:09:a4:06: 2b:71:9d:e5:5a:ed:06:91:1b:54:cd:ce:08:b1:7a: 74:9b:0a:8a:6d:43:e7:6c:69:b1:14:ad:57:68:39: 15:e5:5a:6d:0b:89:ae:f8:47:d3:ef:b3:f2:0b:fd: a9:17:cd:ac:db:1f:ae:1d:d1:30:77:d0:9e:8e:81: a5:64:b9:dd:ba:13:09:d9:4f:fe:39:21:ee:50:6c: ae:c1:34:e7:7a:c1:f0:3e:5a:d4:bb:16:db:e1:a1: c2:32:b5:77:42:62:59:e6:4f:df:18:2b:34:c6:d2: 1a:46:bb:0a:19:3d:07:cb:0b:ee:83:bd:18:87:53: 84:85:a8:ba:e2:c8:37:fc:57:b9:df:82:dc:ce:b9: 62:a2:36:67:cf:42:d6:fc:ca:33:1a:bb:46:73:c3: fc:04:20:59:44:6c:cb:39:d2:12:3d:59:02:f4:87: a1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E6:CC:6E:0A:4B:E7:F1:36:38:3E:C9:D5:9B:75:09:33:15:BC:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a39d1ddb-48ce-3f22-b315-be389b64be87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.169.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:98:a2:b0:85:85:0c:cb:8b:01:a0:bc:07:f7:e6:96:c6:a4: 30:3f:5b:9c:98:bc:be:e8:1d:4e:9a:ee:ec:c9:cd:1a:65:50: 79:f2:35:89:c4:9a:02:74:01:ad:04:cc:33:db:56:38:42:20: b8:3e:43:6a:a3:9d:11:a2:64:6c:12:69:71:fd:8a:d4:70:42: fe:6c:4c:df:e4:9d:bb:e3:36:3d:47:2b:de:73:bb:f6:22:e8: 22:03:70:d4:8e:ff:11:86:1f:c7:91:15:0a:70:ea:0d:07:33: ea:ed:59:31:b0:c1:b9:57:f2:40:a7:6a:18:d8:81:7f:d7:e7: b0:07:d4:ea:fe:46:24:fb:e1:f9:c9:87:7d:e1:1b:20:71:28: 78:e0:49:07:51:fc:91:84:dc:31:13:96:0d:d2:db:3e:55:45: a6:0a:8e:ea:40:96:d1:11:e2:5a:6a:1a:b5:59:14:f9:35:da: 08:f8:77:e8:c7:02:03:cd:88:71:05:2a:c1:6f:8a:e5:12:6f: 81:8d:d5:df:fc:ef:8c:84:4e:0c:8f:9e:41:1c:d8:23:19:57: 73:52:7e:a0:06:22:b9:88:34:39:bc:ec:6f:8b:08:30:39:72: 4d:ff:03:49:74:e0:cb:90:9c:49:12:ef:1b:26:2f:c7:17:79: d5:2d:ba:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWMBoZiFMECoYlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ODRlZmVmZWQtNDg5MS00Yzg0LTk3MDAtMTUwYmMwZmM5NDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTvO2NCaui+3zI+oGOLkM1gpwjYNeQrXPtoa qbWENY8utCFS+/OlL+/l9s24+T/J3zdA+VNW2Zvfy8IFX8jctgdxq+uBnxoVtdUt rIrbU3DdU86bC9UJpAYrcZ3lWu0GkRtUzc4IsXp0mwqKbUPnbGmxFK1XaDkV5Vpt C4mu+EfT77PyC/2pF82s2x+uHdEwd9CejoGlZLnduhMJ2U/+OSHuUGyuwTTnesHw PlrUuxbb4aHCMrV3QmJZ5k/fGCs0xtIaRrsKGT0Hywvug70Yh1OEhai64sg3/Fe5 34LczrliojZnz0LW/MozGrtGc8P8BCBZRGzLOdISPVkC9Ieh8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBfmzG4KS+fxNjg+ydWbdQkzFbyCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTM5ZDFkZGItNDhjZS0z ZjIyLWIzMTUtYmUzODliNjRiZTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ6mAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK6YorCFhQzLiwGgvAf35pbGpDA/W5yYvL7oHU6a7uzJzRplUHnyNYnE mgJ0Aa0EzDPbVjhCILg+Q2qjnRGiZGwSaXH9itRwQv5sTN/knbvjNj1HK95zu/Yi 6CIDcNSO/xGGH8eRFQpw6g0HM+rtWTGwwblX8kCnahjYgX/X57AH1Or+RiT74fnJ h33hGyBxKHjgSQdR/JGE3DETlg3S2z5VRaYKjupAltER4lpqGrVZFPk12gj4d+jH AgPNiHEFKsFviuUSb4GN1d/874yETgyPnkEc2CMZV3NSfqAGIrmINDm87G+LCDA5 ck3/A0l04MuQnEkS7xsmL8cXedUtul0= -----END CERTIFICATE-----Generated at Mon Mar 2 01:18:59 2026 by rpki-client