$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd5c322b-844e-3ce9-b08e-f7150ad1df8e.roa File: bd5c322b-844e-3ce9-b08e-f7150ad1df8e.roa (raw, json) Hash identifier: MPA8dPNRKnsvUfbH/Jm9a9ctECbmMyAmB/r0UKKaGeQ= Subject key identifier: 32:A2:0B:DC:9B:90:DD:13:32:A8:E3:FD:E4:A4:E2:2D:26:5F:8B:DA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5CC9608FE3E2F52D386C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd5c322b-844e-3ce9-b08e-f7150ad1df8e.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 76.16.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5c:c9:60:8f:e3:e2:f5:2d:38:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=28e182b7-399c-4703-847d-6149612be647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:73:24:5d:e9:62:d7:4f:02:12:58:a7:3e:df: fd:94:5f:3c:27:32:b8:fe:99:ff:d0:bc:7c:a1:62: dd:2c:0a:17:ff:11:d7:37:d4:66:15:f0:fa:5f:d7: 8c:09:d6:e4:f8:c0:37:67:cb:a0:38:81:6a:10:01: 66:6b:83:56:58:4d:8f:a0:d2:3c:ef:bb:36:c5:96: 2b:f9:99:ca:93:af:10:7f:d4:55:a7:f4:fe:00:b2: 4a:da:38:ed:e8:d4:8b:3e:4e:af:71:7e:8e:da:69: 27:d5:9a:d8:d2:16:e1:52:ef:0d:97:1f:dc:04:00: 90:f6:68:8b:61:3a:49:73:ad:b9:9b:a3:09:e6:d6: 88:55:d5:2a:0c:c8:ae:20:03:26:61:b5:f9:f9:53: 86:f7:72:bd:82:13:70:75:62:58:b4:a0:da:e5:fe: e0:90:22:ea:9a:7c:2a:68:56:5c:b8:c5:9e:b8:b6: af:9c:4e:29:e2:c7:9a:f2:03:96:f8:26:2a:45:15: fb:b7:be:3a:ec:a8:55:26:08:d0:48:ff:66:5c:61: 38:67:86:f1:8e:cb:0d:15:f8:61:6b:81:6e:20:8c: b5:c0:42:86:1c:15:aa:3f:c2:84:97:fe:d6:ff:63: 15:b1:e0:7e:2e:07:8d:dc:3a:a5:a9:a0:19:14:c8: b9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A2:0B:DC:9B:90:DD:13:32:A8:E3:FD:E4:A4:E2:2D:26:5F:8B:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd5c322b-844e-3ce9-b08e-f7150ad1df8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.16.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:48:da:90:02:fa:da:58:ea:9c:9e:a6:a2:cd:e2:fe:75:d6: d1:18:61:da:99:48:41:1d:35:ba:46:bd:ed:83:dd:d6:f2:a5: d6:3b:11:71:26:7f:21:ed:3c:05:25:8b:54:c9:d2:23:fa:41: 25:e1:bc:fa:73:be:c1:dd:32:7e:8f:c7:2d:fd:ff:65:32:d1: 95:0d:4f:97:6b:03:9b:4a:09:c0:12:6a:7d:6a:a1:eb:ed:3f: f0:ad:cf:56:e2:ff:09:68:a7:72:83:a8:9d:4e:08:1f:d8:8f: 05:07:93:3e:81:72:7c:58:02:98:92:37:3c:66:50:68:9e:eb: 0e:67:bd:67:a6:28:36:6c:c7:04:16:57:85:fe:a3:78:f2:6f: cf:05:b8:dc:39:30:ba:ed:5c:af:d9:3c:6c:ff:3c:77:b9:e3: e0:11:f4:00:07:59:57:ec:21:9c:ef:24:39:51:b3:f1:47:02: cf:a6:13:1d:e4:08:fd:ba:74:4e:f0:50:aa:c3:ab:68:4a:84: 85:a9:51:64:7a:5d:ff:34:00:1b:38:8d:ce:12:72:12:74:67: 3c:b2:49:05:56:06:b0:e2:11:42:ab:65:57:dc:0d:b0:ad:6a: 36:a4:76:1b:b9:93:7c:5f:3b:34:37:a3:a1:b5:f3:70:27:b4: f4:06:95:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXMlgj+Pi9S04bIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MjhlMTgyYjctMzk5Yy00NzAzLTg0N2QtNjE0OTYxMmJlNjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3MkXeli108CElinPt/9lF88JzK4/pn/0Lx8 oWLdLAoX/xHXN9RmFfD6X9eMCdbk+MA3Z8ugOIFqEAFma4NWWE2PoNI877s2xZYr +ZnKk68Qf9RVp/T+ALJK2jjt6NSLPk6vcX6O2mkn1ZrY0hbhUu8Nlx/cBACQ9miL YTpJc625m6MJ5taIVdUqDMiuIAMmYbX5+VOG93K9ghNwdWJYtKDa5f7gkCLqmnwq aFZcuMWeuLavnE4p4sea8gOW+CYqRRX7t7467KhVJgjQSP9mXGE4Z4bxjssNFfhh a4FuIIy1wEKGHBWqP8KEl/7W/2MVseB+LgeN3DqlqaAZFMi5pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKiC9ybkN0TMqjj/eSk4i0mX4vaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmQ1YzMyMmItODQ0ZS0z Y2U5LWIwOGUtZjcxNTBhZDFkZjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTBCIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZI2pAC+tpY6pyepqLN4v511tEYYdqZSEEdNbpGve2D3dbypdY7EXEm fyHtPAUli1TJ0iP6QSXhvPpzvsHdMn6Pxy39/2Uy0ZUNT5drA5tKCcASan1qoevt P/Ctz1bi/wlop3KDqJ1OCB/YjwUHkz6BcnxYApiSNzxmUGie6w5nvWemKDZsxwQW V4X+o3jyb88FuNw5MLrtXK/ZPGz/PHe54+AR9AAHWVfsIZzvJDlRs/FHAs+mEx3k CP26dE7wUKrDq2hKhIWpUWR6Xf80ABs4jc4SchJ0ZzyySQVWBrDiEUKrZVfcDbCt ajakdhu5k3xfOzQ3o6G183AntPQGlWQ= -----END CERTIFICATE-----Generated at Sun Mar 1 18:52:45 2026 by rpki-client