$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd7fa25f-caf1-380a-bef7-369b98c2506b.roa File: bd7fa25f-caf1-380a-bef7-369b98c2506b.roa (raw, json) Hash identifier: m05iTpVWTkwx7/mPJpk9VuofSdixiimLra1XkIwse3g= Subject key identifier: A5:D7:30:C1:3C:F2:C1:01:60:01:59:CA:BC:86:15:D3:2D:0C:49:C5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5801D4E875D94659A6B640 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd7fa25f-caf1-380a-bef7-369b98c2506b.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 67.175.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:01:d4:e8:75:d9:46:59:a6:b6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=c4470caa-533f-4096-86e2-8024454a97f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:46:ec:bd:e4:3e:c6:f1:98:02:01:d9:77:cd: 5a:cc:f4:ba:00:d7:90:fd:c7:46:71:47:56:61:a0: bb:e9:d8:c8:17:02:9d:44:70:bd:47:95:bd:c9:02: 9e:11:44:bb:a0:cd:ba:0d:e9:61:ba:f0:3a:1a:17: 3e:36:4e:64:c0:cb:79:24:8f:04:e2:73:54:8b:77: c6:39:52:0a:08:da:33:dc:93:18:72:54:92:db:1a: 6c:69:50:7c:95:c1:7e:8b:3c:7c:c1:f7:70:b7:da: f7:53:d0:3f:c6:b4:58:67:35:dc:dd:ce:0b:d0:e8: c5:2f:b7:28:42:c2:4b:69:9c:ac:16:3a:71:08:0c: 6c:de:7e:2f:bd:ba:5d:8b:28:64:c0:b6:63:6c:d5: b1:4b:15:b0:d5:c8:0b:d8:33:e5:a0:51:2d:99:85: 6a:b6:94:70:35:aa:0b:00:29:87:00:d8:eb:78:fe: e0:6a:45:93:c2:17:23:dd:2f:95:21:08:26:c9:dc: 42:7e:9e:10:59:62:83:b0:42:d4:9e:d4:eb:ed:c3: 11:de:8b:73:d9:0d:14:46:3d:09:c5:4e:68:4c:e5: 81:91:f7:8a:b7:a3:ef:f0:0e:24:91:50:bb:a7:06: e2:de:95:27:8b:0d:94:66:80:b9:37:22:57:50:c0: be:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D7:30:C1:3C:F2:C1:01:60:01:59:CA:BC:86:15:D3:2D:0C:49:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd7fa25f-caf1-380a-bef7-369b98c2506b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.175.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:31:38:de:18:85:b7:3e:98:23:b5:b1:b3:4d:b1:ab:37:7a: f5:5d:de:cc:25:ea:98:8a:ad:bd:6c:d8:38:54:81:b0:3e:ec: 09:c5:f6:ed:f3:28:ec:73:84:b0:54:44:60:1f:46:4a:31:2e: 81:b7:18:1b:09:a1:03:6f:4c:f1:29:55:3c:ab:ca:a4:91:9d: a6:15:02:20:1c:da:ef:f4:72:8c:82:de:8d:38:c4:78:dd:20: 8d:15:68:90:a9:37:78:ea:c6:4b:a6:4f:11:c0:e1:95:35:d3: 27:08:fe:41:52:b0:37:8e:6f:d7:cc:f2:27:1f:1e:46:ff:6f: b4:ba:eb:37:99:88:fe:d9:87:27:7d:e5:d2:44:be:3e:7f:5a: 22:17:76:c4:77:78:9d:01:b5:fa:24:d2:88:c0:6d:33:ce:7a: 05:f2:cb:7c:97:d4:0b:5f:4c:5d:32:e7:75:9f:e4:01:dc:b8: 81:91:75:e7:b9:4e:37:2b:86:62:cf:66:01:0e:c0:c8:5a:eb: 8f:5d:8e:dd:e5:51:84:a6:7e:09:55:e8:f2:02:19:f2:f3:47: 35:bc:bc:c3:af:81:e8:97:27:2d:f2:ac:70:17:47:ae:0f:73: 5a:85:56:4f:0e:4f:a2:d8:0b:84:7f:6a:e3:5a:90:74:24:d6: 69:74:1f:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWAHU6HXZRlmmtkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YzQ0NzBjYWEtNTMzZi00MDk2LTg2ZTItODAyNDQ1NGE5N2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0bsveQ+xvGYAgHZd81azPS6ANeQ/cdGcUdW YaC76djIFwKdRHC9R5W9yQKeEUS7oM26DelhuvA6Ghc+Nk5kwMt5JI8E4nNUi3fG OVIKCNoz3JMYclSS2xpsaVB8lcF+izx8wfdwt9r3U9A/xrRYZzXc3c4L0OjFL7co QsJLaZysFjpxCAxs3n4vvbpdiyhkwLZjbNWxSxWw1cgL2DPloFEtmYVqtpRwNaoL ACmHANjreP7gakWTwhcj3S+VIQgmydxCfp4QWWKDsELUntTr7cMR3otz2Q0URj0J xU5oTOWBkfeKt6Pv8A4kkVC7pwbi3pUniw2UZoC5NyJXUMC+hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKXXMME88sEBYAFZyryGFdMtDEnFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmQ3ZmEyNWYtY2FmMS0z ODBhLWJlZjctMzY5Yjk4YzI1MDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ6+IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAxON4Yhbc+mCO1sbNNsas3evVd3swl6piKrb1s2DhUgbA+7AnF9u3z KOxzhLBURGAfRkoxLoG3GBsJoQNvTPEpVTyryqSRnaYVAiAc2u/0coyC3o04xHjd II0VaJCpN3jqxkumTxHA4ZU10ycI/kFSsDeOb9fM8icfHkb/b7S66zeZiP7Zhyd9 5dJEvj5/WiIXdsR3eJ0Btfok0ojAbTPOegXyy3yX1AtfTF0y53Wf5AHcuIGRdee5 TjcrhmLPZgEOwMha649djt3lUYSmfglV6PICGfLzRzW8vMOvgeiXJy3yrHAXR64P c1qFVk8OT6LYC4R/auNakHQk1ml0H3w= -----END CERTIFICATE-----Generated at Mon Mar 2 06:36:15 2026 by rpki-client