$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3b06e68-f188-3b67-a40e-5dbe8d65053d.roa File: a3b06e68-f188-3b67-a40e-5dbe8d65053d.roa (raw, json) Hash identifier: whKeouJ45WYksYpwDLy0hdBRtuwCDpcQ8HVx05Dq9vs= Subject key identifier: 62:3D:51:09:C4:13:EE:60:17:13:AA:1C:A2:9B:5C:D7:02:5C:50:1E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE588B068D8828CD11878080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3b06e68-f188-3b67-a40e-5dbe8d65053d.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 76.16.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:8b:06:8d:88:28:cd:11:87:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=3b296c27-b7f1-40bc-b470-03ffe73409ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:05:a1:f9:b3:5a:de:f8:06:8e:02:cc:d5:ca: ee:1a:a9:5a:aa:4b:f5:bc:9b:13:82:56:b2:bf:29: 22:b1:72:c7:3b:58:a5:d4:4c:5b:14:22:db:1c:ac: 24:48:11:7e:73:1a:bf:78:8c:04:be:8e:e8:07:a0: fc:c6:10:05:c6:1a:59:00:f2:68:c3:42:15:24:4a: eb:0c:bf:b9:84:5e:24:b1:ce:fe:08:3d:37:55:cb: b3:60:64:47:ec:79:33:d7:09:06:20:bc:4a:3a:9b: 41:69:b2:41:00:f2:40:a6:e8:ab:83:c3:ce:9d:f2: a2:b7:38:14:3a:7f:d9:88:84:a9:7e:f7:18:9a:81: 0f:f3:0d:eb:e3:57:7c:63:1e:f7:a8:d4:cf:08:2e: 9b:7a:d6:8e:57:f0:10:07:7d:97:a3:86:07:75:7e: c7:b6:f8:80:31:50:ee:65:7a:0d:f0:d4:9a:c5:0f: e2:ca:f7:92:c3:df:6d:de:87:55:d4:35:65:e5:93: 26:cc:f4:20:b3:62:b5:c8:86:20:4f:ec:76:4f:90: 7a:44:fd:2c:aa:ef:6d:e9:43:3d:c0:01:bc:75:d6: 78:73:20:c1:91:c1:89:28:f2:bb:58:90:e5:6b:1f: 26:d4:61:61:6b:43:77:bc:5c:5d:4d:f3:e1:95:81: 3f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:3D:51:09:C4:13:EE:60:17:13:AA:1C:A2:9B:5C:D7:02:5C:50:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3b06e68-f188-3b67-a40e-5dbe8d65053d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.16.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:e5:38:07:44:3e:b7:16:c3:66:ca:8d:1b:47:26:56:95:4b: 92:68:9f:1f:ec:1a:c8:e8:6c:5a:75:28:a0:ff:ed:3b:c1:d0: f0:e7:f5:0e:03:87:de:77:fb:c2:20:24:ff:5d:56:2c:34:81: 00:8b:9e:8e:a4:50:4f:b2:3e:c0:b5:70:c5:d3:df:5e:c2:0c: dd:cc:42:1d:1c:43:8d:e0:7c:bd:b5:ba:28:f7:12:3f:c3:8f: 1f:fe:20:b6:e8:31:be:ec:ff:9e:e6:68:57:76:4c:08:5b:4f: 75:81:db:44:c9:e3:ba:15:ed:61:a0:6e:f5:95:58:c8:12:ec: 7a:01:69:ca:a3:6b:dd:2b:46:78:1c:e4:5e:55:1f:d8:ab:c3: 27:7a:3d:a9:a4:54:a8:47:98:6f:a5:39:7f:cc:71:f2:95:01: 7e:86:ee:0c:5e:28:8d:92:42:9c:e0:5f:39:4b:d2:b7:f8:5d: 03:7c:44:aa:4f:be:84:46:d1:c0:3c:fa:6d:cd:aa:39:79:80: 1d:09:6a:2d:ba:82:7f:c8:be:16:bf:fd:fe:ec:34:24:78:d5: 51:a5:f3:8e:06:ad:bd:6d:9c:a7:4b:0c:ea:20:b0:f9:df:98: 29:59:3f:1b:c1:cc:1f:0f:34:af:8a:b5:a7:3f:77:39:71:eb: b0:5a:31:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWIsGjYgozRGHgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk M2IyOTZjMjctYjdmMS00MGJjLWI0NzAtMDNmZmU3MzQwOWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwWh+bNa3vgGjgLM1cruGqlaqkv1vJsTglay vykisXLHO1il1ExbFCLbHKwkSBF+cxq/eIwEvo7oB6D8xhAFxhpZAPJow0IVJErr DL+5hF4ksc7+CD03VcuzYGRH7Hkz1wkGILxKOptBabJBAPJApuirg8POnfKitzgU On/ZiISpfvcYmoEP8w3r41d8Yx73qNTPCC6betaOV/AQB32Xo4YHdX7HtviAMVDu ZXoN8NSaxQ/iyveSw99t3odV1DVl5ZMmzPQgs2K1yIYgT+x2T5B6RP0squ9t6UM9 wAG8ddZ4cyDBkcGJKPK7WJDlax8m1GFha0N3vFxdTfPhlYE/CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGI9UQnEE+5gFxOqHKKbXNcCXFAeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTNiMDZlNjgtZjE4OC0z YjY3LWE0MGUtNWRiZThkNjUwNTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTBD+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITlOAdEPrcWw2bKjRtHJlaVS5Jonx/sGsjobFp1KKD/7TvB0PDn9Q4D h953+8IgJP9dViw0gQCLno6kUE+yPsC1cMXT317CDN3MQh0cQ43gfL21uij3Ej/D jx/+ILboMb7s/57maFd2TAhbT3WB20TJ47oV7WGgbvWVWMgS7HoBacqja90rRngc 5F5VH9irwyd6PamkVKhHmG+lOX/McfKVAX6G7gxeKI2SQpzgXzlL0rf4XQN8RKpP voRG0cA8+m3Nqjl5gB0Jai26gn/Ivha//f7sNCR41VGl844Grb1tnKdLDOogsPnf mClZPxvBzB8PNK+Ktac/dzlx67BaMc8= -----END CERTIFICATE-----Generated at Sun Mar 1 20:55:17 2026 by rpki-client