$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad2cfcad-17e5-3591-9e70-81054a06a100.roa File: ad2cfcad-17e5-3591-9e70-81054a06a100.roa (raw, json) Hash identifier: Q6Gwxa0cNndzLSDJvd0nndh0HZDhamLhqcIdxE4fP9A= Subject key identifier: 2B:CE:DC:3A:88:DA:F4:1F:55:B1:05:73:F4:EE:D5:05:FA:42:5D:38 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE57DDBBB4788EFBF041DAA0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad2cfcad-17e5-3591-9e70-81054a06a100.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33287 IP address blocks: 76.124.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:dd:bb:b4:78:8e:fb:f0:41:da:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=c9ff3a2b-c044-4926-927c-b99e69e00783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:31:4f:d5:0a:d2:06:31:9a:32:54:44:db:ed: ba:0b:f4:2c:e7:52:0d:bf:ae:0f:f5:6e:79:c9:ef: c2:c4:74:0f:d7:ce:a2:7e:67:e4:54:72:c5:b4:14: b7:20:3a:fa:d7:0b:22:52:32:b8:58:7c:8d:b1:99: a4:a8:1f:9e:77:57:8a:c1:c8:d9:e2:83:46:3a:ff: 93:e8:12:36:91:9c:a0:1d:71:26:eb:2b:e9:f4:ce: 04:cb:86:1d:b3:2d:ed:fc:d2:f4:8c:52:36:ce:2c: e1:eb:83:5d:a6:37:64:98:0e:f6:53:4c:ac:15:27: 63:57:5e:28:01:c0:98:e7:b9:6e:81:56:79:b2:11: d2:88:76:6c:bd:42:e9:55:61:0c:89:f7:2f:b9:d9: 65:8a:d0:71:e5:b9:19:b3:e2:1f:a7:57:2c:b4:53: 8e:7a:f3:b4:ce:1d:dc:46:0a:a2:67:95:d4:da:ff: 9e:1a:c9:51:e0:fe:18:0d:7a:05:5d:b0:ea:a4:b8: 5c:d7:33:df:46:fe:61:2d:8f:17:22:6f:e9:81:58: 9f:3a:87:74:20:af:b8:f6:2d:75:2d:c7:3e:7e:64: 42:6e:67:ab:3c:ed:bc:63:42:31:8a:36:c7:92:11: 57:69:65:0c:01:76:b6:fe:de:41:59:7b:c7:d2:27: b0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:CE:DC:3A:88:DA:F4:1F:55:B1:05:73:F4:EE:D5:05:FA:42:5D:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad2cfcad-17e5-3591-9e70-81054a06a100.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.124.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:e2:b8:f9:da:29:21:d1:67:72:5d:16:61:45:38:64:fc:40: 88:ff:8f:67:8b:76:94:24:a3:51:85:25:20:fe:0d:9d:34:42: 94:dc:c0:b6:2d:e1:65:b0:da:58:cd:ce:9b:bf:93:ba:ff:8b: 6e:8a:64:b5:84:5a:bd:3e:22:bb:2b:89:b8:67:43:df:de:85: e7:b6:06:50:a9:f0:de:19:75:f0:b9:88:ed:dd:21:bb:1c:58: e9:bc:f9:ac:f6:94:52:97:2e:bd:22:7e:cb:94:0a:1c:12:2b: bd:6d:56:e4:94:b8:9b:06:97:02:d7:b7:c0:c4:a4:fe:b1:71: da:7b:64:05:0c:e1:ab:c3:df:2b:75:f0:88:ce:95:76:93:e4: e8:49:b7:62:49:88:3a:cc:91:b1:c6:11:b2:5e:bc:70:10:61: 62:b8:ce:23:a2:6f:58:97:ae:9d:84:9e:46:e3:5e:30:97:b7: 23:9e:e5:d9:19:36:3e:40:93:97:39:59:2c:01:72:76:39:f0: c5:e5:d6:e4:aa:97:36:46:62:dc:86:d6:50:da:2d:1b:d7:e6: 71:5d:83:63:89:83:94:55:6c:9f:1b:ad:ff:ab:09:ca:cc:ab: 3b:82:57:3f:f7:71:a6:76:b8:c4:1c:a9:ba:17:d9:f1:9c:14: a0:74:85:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuV927tHiO+/BB2qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YzlmZjNhMmItYzA0NC00OTI2LTkyN2MtYjk5ZTY5ZTAwNzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDFP1QrSBjGaMlRE2+26C/Qs51INv64P9W55 ye/CxHQP186ifmfkVHLFtBS3IDr61wsiUjK4WHyNsZmkqB+ed1eKwcjZ4oNGOv+T 6BI2kZygHXEm6yvp9M4Ey4Ydsy3t/NL0jFI2zizh64NdpjdkmA72U0ysFSdjV14o AcCY57lugVZ5shHSiHZsvULpVWEMifcvudllitBx5bkZs+Ifp1cstFOOevO0zh3c RgqiZ5XU2v+eGslR4P4YDXoFXbDqpLhc1zPfRv5hLY8XIm/pgVifOod0IK+49i11 Lcc+fmRCbmerPO28Y0IxijbHkhFXaWUMAXa2/t5BWXvH0iewUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvO3DqI2vQfVbEFc/Tu1QX6Ql04MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWQyY2ZjYWQtMTdlNS0z NTkxLTllNzAtODEwNTRhMDZhMTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTHzkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPiuPnaKSHRZ3JdFmFFOGT8QIj/j2eLdpQko1GFJSD+DZ00QpTcwLYt 4WWw2ljNzpu/k7r/i26KZLWEWr0+IrsribhnQ9/ehee2BlCp8N4ZdfC5iO3dIbsc WOm8+az2lFKXLr0ifsuUChwSK71tVuSUuJsGlwLXt8DEpP6xcdp7ZAUM4avD3yt1 8IjOlXaT5OhJt2JJiDrMkbHGEbJevHAQYWK4ziOib1iXrp2EnkbjXjCXtyOe5dkZ Nj5Ak5c5WSwBcnY58MXl1uSqlzZGYtyG1lDaLRvX5nFdg2OJg5RVbJ8brf+rCcrM qzuCVz/3caZ2uMQcqboX2fGcFKB0hbM= -----END CERTIFICATE-----Generated at Sun Mar 1 18:55:49 2026 by rpki-client