$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a95e031a-eb87-349d-84be-694e12e48b2f.roa File: a95e031a-eb87-349d-84be-694e12e48b2f.roa (raw, json) Hash identifier: dvp3vZeJw2Jv6pGtYvB9VXOziEaS4NYk+Hik04div5Q= Subject key identifier: 48:E0:F8:CC:96:B5:AF:92:8E:73:52:27:F1:2A:B6:2F:DF:D5:7B:03 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE59064BDEC96C6863F12740 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a95e031a-eb87-349d-84be-694e12e48b2f.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 76.133.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:59:06:4b:de:c9:6c:68:63:f1:27:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=3edb89bb-b845-43c5-8104-7b19c352cae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9b:75:d0:aa:84:07:39:d8:05:b8:68:9b:8e: b6:cb:85:47:95:31:fd:15:42:e2:1a:2b:7d:8c:f7: 15:f2:15:3a:ee:e8:00:5c:90:3f:54:b2:4a:93:f2: 40:52:b8:52:7f:e0:5a:74:69:83:e9:c2:4c:85:44: 26:c5:07:e8:43:2d:d3:2b:87:9b:0c:c7:96:4e:f3: 4e:b4:e6:73:db:af:fa:b8:d0:a7:8a:5f:da:cf:94: dd:1e:25:3d:da:61:12:aa:34:ea:e8:ba:1b:3c:34: 4a:31:d8:24:55:1f:f9:8e:91:af:8c:a7:cb:e3:00: a1:b6:33:b9:ae:72:f3:09:cc:ee:05:2b:13:8e:64: 46:57:e2:7f:55:ee:9e:cd:3f:29:b8:0c:6e:2b:a9: c3:bf:31:a9:72:d2:21:5c:4d:80:a6:4e:e8:7f:79: d0:26:23:b9:ca:32:cc:9f:bd:3e:7e:65:d9:a8:ab: b5:8e:f5:62:78:6f:a7:75:9d:f0:2d:74:f6:78:bd: 34:1f:84:5d:fc:8c:8c:f0:6f:d3:e9:5e:a4:6a:9d: cd:db:f4:39:2b:c1:00:15:53:1a:3e:b7:00:a8:19: be:ad:39:43:b2:f9:03:06:2f:65:13:10:4b:30:c4: 28:6e:d1:9d:1b:3b:be:61:60:16:bc:fc:09:3f:52: 11:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E0:F8:CC:96:B5:AF:92:8E:73:52:27:F1:2A:B6:2F:DF:D5:7B:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a95e031a-eb87-349d-84be-694e12e48b2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.133.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:46:29:76:8d:b9:e2:38:75:5c:79:df:07:16:41:b8:4f:c0: e5:d0:95:87:64:54:1c:72:a6:b7:ee:9b:d0:ce:bb:3b:32:de: 27:08:e2:3a:24:20:cc:77:d7:a8:83:55:81:0e:19:27:6d:9d: e5:70:05:af:85:e4:27:3b:5a:e3:6e:e6:e5:48:9d:2d:ce:2c: 96:db:f9:13:2b:77:85:3d:3c:64:b8:d8:b0:50:62:bd:d3:30: e0:81:2c:4d:83:35:80:5d:15:16:65:fe:7d:4f:d4:f6:02:7a: 5b:fe:e2:fb:a2:57:99:5d:c1:65:e2:eb:aa:48:26:14:1a:eb: 9a:d0:c1:ac:c1:c5:b3:eb:af:9d:23:4f:f9:2f:4f:f3:a8:49: b1:4b:94:85:91:3a:9f:29:a6:e5:60:90:6b:b3:0f:6e:1d:0d: 2f:d2:3d:20:d0:cc:c7:45:ce:a0:cf:c0:88:97:80:f3:2e:18: f3:47:af:7a:40:0c:8e:23:63:fc:0b:e4:fa:64:69:d2:36:58: 9b:ab:13:f6:8d:85:d8:32:bc:23:4b:89:4b:0e:5e:0d:33:16: ed:e3:7a:3e:05:5a:42:a4:ac:06:8c:f9:e2:6d:c0:b0:d4:2e: fc:93:cd:6e:b1:7e:52:7c:21:fb:bf:bf:40:0e:8e:22:c4:71: c9:84:5b:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWQZL3slsaGPxJ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk M2VkYjg5YmItYjg0NS00M2M1LTgxMDQtN2IxOWMzNTJjYWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpt10KqEBznYBbhom462y4VHlTH9FULiGit9 jPcV8hU67ugAXJA/VLJKk/JAUrhSf+BadGmD6cJMhUQmxQfoQy3TK4ebDMeWTvNO tOZz26/6uNCnil/az5TdHiU92mESqjTq6LobPDRKMdgkVR/5jpGvjKfL4wChtjO5 rnLzCczuBSsTjmRGV+J/Ve6ezT8puAxuK6nDvzGpctIhXE2Apk7of3nQJiO5yjLM n70+fmXZqKu1jvVieG+ndZ3wLXT2eL00H4Rd/IyM8G/T6V6kap3N2/Q5K8EAFVMa PrcAqBm+rTlDsvkDBi9lExBLMMQobtGdGzu+YWAWvPwJP1IRywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEjg+MyWta+SjnNSJ/Eqti/f1XsDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTk1ZTAzMWEtZWI4Ny0z NDlkLTg0YmUtNjk0ZTEyZTQ4YjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIXGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpGKXaNueI4dVx53wcWQbhPwOXQlYdkVBxyprfum9DOuzsy3icI4jok IMx316iDVYEOGSdtneVwBa+F5Cc7WuNu5uVInS3OLJbb+RMrd4U9PGS42LBQYr3T MOCBLE2DNYBdFRZl/n1P1PYCelv+4vuiV5ldwWXi66pIJhQa65rQwazBxbPrr50j T/kvT/OoSbFLlIWROp8ppuVgkGuzD24dDS/SPSDQzMdFzqDPwIiXgPMuGPNHr3pA DI4jY/wL5PpkadI2WJurE/aNhdgyvCNLiUsOXg0zFu3jej4FWkKkrAaM+eJtwLDU LvyTzW6xflJ8Ifu/v0AOjiLEccmEW90= -----END CERTIFICATE-----Generated at Mon Mar 2 00:51:00 2026 by rpki-client