$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca89eb81-3ce7-3f8a-a49a-e70b0b600614.roa File: ca89eb81-3ce7-3f8a-a49a-e70b0b600614.roa (raw, json) Hash identifier: Q7I/FcNvWUX31OUaZDWEeRqbtPcbB3hKEyU+UQX3dTQ= Subject key identifier: 47:93:95:EE:E5:C0:75:65:44:52:3A:7C:FC:5E:A6:F3:B1:5B:E8:75 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5E01F0D413C01646C66700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca89eb81-3ce7-3f8a-a49a-e70b0b600614.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 76.133.42.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:01:f0:d4:13:c0:16:46:c6:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=475dd421-5b5d-4e3e-8849-72ae29e90989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:83:f5:7d:2c:96:03:61:aa:54:a6:98:0d:c0: 39:10:4f:48:9c:a9:a7:75:1a:e1:e4:19:61:9f:d3: f2:5f:e0:bc:bc:c6:1d:b9:f7:9f:85:26:d9:fa:51: c5:07:f1:e8:a5:7a:d9:f1:a6:96:1c:53:ff:31:74: 44:00:a8:ad:de:8a:fd:e2:2c:d5:f3:f9:68:cf:16: c9:40:c1:bd:fb:ba:8a:e4:f6:37:58:ff:00:3a:96: a2:28:cc:89:cd:ae:de:dd:0f:34:e2:03:09:2c:31: 5d:24:76:1f:f2:ac:8c:2b:90:27:46:0d:47:37:3e: 09:e7:dd:5b:4f:50:a7:26:47:69:ba:05:50:a0:6f: 78:6f:49:e8:2d:83:17:ca:10:f7:ad:56:4b:97:e8: 16:75:1f:c5:4b:f0:de:7c:33:56:c8:83:5e:82:25: 6b:62:59:c5:ec:eb:1f:74:bd:46:65:c6:a6:36:a1: 0a:60:61:b3:b6:12:29:f7:42:84:59:73:f4:b7:03: 7f:16:20:e9:88:e5:6d:f2:e6:54:2b:93:6b:00:fd: ef:f4:38:69:c2:b3:84:7c:c8:15:65:88:08:af:15: 79:41:2b:ac:14:2c:32:5b:0b:fd:6a:8b:6c:4d:e3: 68:80:8b:30:f7:0f:3f:94:6a:bf:59:c8:70:e7:16: 2d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:93:95:EE:E5:C0:75:65:44:52:3A:7C:FC:5E:A6:F3:B1:5B:E8:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca89eb81-3ce7-3f8a-a49a-e70b0b600614.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.133.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:b2:92:22:09:2d:a1:5b:26:fa:95:7d:70:e5:85:60:49:29: ab:72:d0:e8:cd:16:eb:ad:fe:e3:ff:83:2d:95:7e:29:2f:82: 22:8f:e1:e1:95:f3:5a:6d:9a:a5:33:ec:4b:7c:81:50:9a:19: 3f:6e:ea:0b:42:7c:bf:4f:35:19:32:14:9e:81:08:e9:cf:78: 56:35:30:f2:6b:23:de:d9:bd:29:a5:f1:17:09:31:72:a9:63: 15:93:45:a9:d5:02:96:06:e9:f5:03:0e:14:39:f5:98:3f:3e: 4e:0f:cf:80:cb:32:09:21:c6:97:7f:56:34:0f:c8:fe:aa:ec: 28:1e:ab:c1:cf:22:d0:99:ea:a1:a0:ec:0d:b4:a1:8d:1e:d4: 0d:09:b1:73:7f:b9:54:1f:43:04:f5:31:d5:eb:18:21:1c:fa: c4:74:25:e2:c1:75:31:06:14:49:e9:5d:13:18:fc:1d:23:bf: 51:d0:70:e3:89:e6:04:d3:96:96:49:0c:25:66:2c:c1:26:d2: 76:39:e4:c6:99:b2:1b:ec:b3:e5:5f:47:93:e5:37:b2:af:6d: 49:e7:85:6f:c7:5f:7a:91:a5:31:28:d9:b7:8d:b7:0b:04:5e: fa:b2:61:62:c7:f2:a9:00:2e:15:f9:4b:d5:b7:7a:a1:9c:bb: ec:10:0c:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXgHw1BPAFkbGZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NDc1ZGQ0MjEtNWI1ZC00ZTNlLTg4NDktNzJhZTI5ZTkwOTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIP1fSyWA2GqVKaYDcA5EE9InKmndRrh5Blh n9PyX+C8vMYdufefhSbZ+lHFB/HopXrZ8aaWHFP/MXREAKit3or94izV8/lozxbJ QMG9+7qK5PY3WP8AOpaiKMyJza7e3Q804gMJLDFdJHYf8qyMK5AnRg1HNz4J591b T1CnJkdpugVQoG94b0noLYMXyhD3rVZLl+gWdR/FS/DefDNWyINegiVrYlnF7Osf dL1GZcamNqEKYGGzthIp90KEWXP0twN/FiDpiOVt8uZUK5NrAP3v9DhpwrOEfMgV ZYgIrxV5QSusFCwyWwv9aotsTeNogIsw9w8/lGq/Wchw5xYtXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEeTle7lwHVlRFI6fPxepvOxW+h1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2E4OWViODEtM2NlNy0z ZjhhLWE0OWEtZTcwYjBiNjAwNjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIUqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALiykiIJLaFbJvqVfXDlhWBJKaty0OjNFuut/uP/gy2VfikvgiKP4eGV 81ptmqUz7Et8gVCaGT9u6gtCfL9PNRkyFJ6BCOnPeFY1MPJrI97ZvSml8RcJMXKp YxWTRanVApYG6fUDDhQ59Zg/Pk4Pz4DLMgkhxpd/VjQPyP6q7Cgeq8HPItCZ6qGg 7A20oY0e1A0JsXN/uVQfQwT1MdXrGCEc+sR0JeLBdTEGFEnpXRMY/B0jv1HQcOOJ 5gTTlpZJDCVmLMEm0nY55MaZshvss+VfR5PlN7KvbUnnhW/HX3qRpTEo2beNtwsE XvqyYWLH8qkALhX5S9W3eqGcu+wQDBk= -----END CERTIFICATE-----Generated at Sun Mar 1 20:30:38 2026 by rpki-client