$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a811a4a5-d785-3a2f-9b46-9281b4b87876.roa File: a811a4a5-d785-3a2f-9b46-9281b4b87876.roa (raw, json) Hash identifier: joccIHJEcuKglnTqhHGKxbkjS+K35l1hV6VkDboMKNc= Subject key identifier: 65:44:71:EB:BE:C4:3E:9E:C2:D9:A5:22:BB:97:CC:38:97:E0:C8:B6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE587D39AE6F918AB6830600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a811a4a5-d785-3a2f-9b46-9281b4b87876.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 76.136.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:7d:39:ae:6f:91:8a:b6:83:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=e7706629-d65c-4dc1-9973-d16dc86785d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:34:36:11:6f:69:aa:69:65:e7:87:66:3f:d6: e0:ce:50:c4:69:2e:2f:74:7a:df:b0:ea:96:13:13: 02:7f:39:bb:56:9a:3d:11:f7:dd:88:65:67:11:3c: 5f:60:d1:48:0f:17:ff:2b:bc:5a:6a:7b:e3:45:b5: 76:a7:42:0c:c0:a9:80:51:83:68:bc:fd:37:38:94: d2:18:09:af:ad:a9:41:c6:0a:df:96:de:fa:a9:99: 9b:c9:5d:44:07:17:e5:86:d7:78:09:9b:79:a8:f1: b2:c2:60:42:14:28:a7:2b:a7:72:f7:ca:84:fd:5c: a1:16:d2:d1:3b:82:3c:86:59:f3:b8:1a:ee:0f:4b: b9:96:2f:77:0a:a9:ae:c6:a9:8b:05:a1:27:e0:3b: 11:95:ca:d1:03:08:0c:15:a2:0e:d3:ed:74:07:38: 43:8b:73:bc:85:4f:be:43:3e:c9:55:76:a6:c2:3d: 5e:c1:7a:16:cc:ab:b3:b7:55:38:64:ac:d3:99:3b: ab:d9:46:90:ef:c0:ba:50:a0:cb:7b:33:40:70:eb: d6:d5:aa:4e:a1:8e:b7:0c:bc:09:6d:56:6c:28:c1: 80:3c:9f:a1:b4:2f:44:f3:f0:21:6d:90:2a:ef:3e: 98:d5:69:b7:1c:9a:4c:81:88:50:3a:d0:f0:e9:3a: d3:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:44:71:EB:BE:C4:3E:9E:C2:D9:A5:22:BB:97:CC:38:97:E0:C8:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a811a4a5-d785-3a2f-9b46-9281b4b87876.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.136.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:2b:04:eb:2a:29:98:13:85:55:4d:e8:09:3a:e4:58:b9:58: 08:da:6b:d9:c5:7b:38:75:69:32:a5:3a:24:74:cd:e2:e9:f1: ae:7b:8b:66:0e:17:5e:db:fe:33:13:9e:11:06:07:e2:20:07: cf:d2:8f:87:ea:86:84:18:8f:1c:f9:ca:0a:13:6a:46:e3:6c: da:a5:87:f4:aa:ca:ce:67:da:e5:38:3f:ef:7c:3c:fe:84:a9: 4c:dd:56:4b:c8:88:42:81:0a:28:e7:ed:a4:d6:b2:b3:57:4d: 8c:78:28:3b:d7:b8:d0:ed:f2:8a:5e:58:f4:b6:8e:79:98:69: d1:b1:f2:99:ce:97:ec:83:66:a6:de:ad:2e:e2:b9:7a:e8:e2: 08:5e:ed:0a:b0:c6:89:ef:74:7e:9e:e8:40:15:3e:16:b0:7f: bc:c5:ab:17:5c:10:f8:61:a6:0a:25:45:6a:e2:58:4b:f9:49: 6c:c0:16:ba:78:94:73:64:08:da:c6:22:2d:f9:03:52:7b:50: 99:3a:ad:f9:1c:75:8a:0b:c1:b9:7e:f4:e5:cb:d3:b8:e2:07: 21:ea:aa:a6:89:c8:77:61:30:47:7e:db:7a:09:49:bd:c0:ac: 97:9a:97:68:bc:39:65:b9:1c:2b:82:6c:f1:2b:b2:5e:7a:6f: 22:91:0a:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWH05rm+RiraDBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZTc3MDY2MjktZDY1Yy00ZGMxLTk5NzMtZDE2ZGM4Njc4NWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDQ2EW9pqmll54dmP9bgzlDEaS4vdHrfsOqW ExMCfzm7Vpo9EffdiGVnETxfYNFIDxf/K7xaanvjRbV2p0IMwKmAUYNovP03OJTS GAmvralBxgrflt76qZmbyV1EBxflhtd4CZt5qPGywmBCFCinK6dy98qE/VyhFtLR O4I8hlnzuBruD0u5li93CqmuxqmLBaEn4DsRlcrRAwgMFaIO0+10BzhDi3O8hU++ Qz7JVXamwj1ewXoWzKuzt1U4ZKzTmTur2UaQ78C6UKDLezNAcOvW1apOoY63DLwJ bVZsKMGAPJ+htC9E8/AhbZAq7z6Y1Wm3HJpMgYhQOtDw6TrTAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGVEceu+xD6ewtmlIruXzDiX4Mi2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTgxMWE0YTUtZDc4NS0z YTJmLTliNDYtOTI4MWI0Yjg3ODc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIh8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHcrBOsqKZgThVVN6Ak65Fi5WAjaa9nFezh1aTKlOiR0zeLp8a57i2YO F17b/jMTnhEGB+IgB8/Sj4fqhoQYjxz5ygoTakbjbNqlh/Sqys5n2uU4P+98PP6E qUzdVkvIiEKBCijn7aTWsrNXTYx4KDvXuNDt8opeWPS2jnmYadGx8pnOl+yDZqbe rS7iuXro4ghe7QqwxonvdH6e6EAVPhawf7zFqxdcEPhhpgolRWriWEv5SWzAFrp4 lHNkCNrGIi35A1J7UJk6rfkcdYoLwbl+9OXL07jiByHqqqaJyHdhMEd+23oJSb3A rJeal2i8OWW5HCuCbPErsl56byKRCqE= -----END CERTIFICATE-----Generated at Sun Mar 1 20:43:54 2026 by rpki-client