$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfa9f022-1fe3-3595-a627-73706c00a681.roa File: cfa9f022-1fe3-3595-a627-73706c00a681.roa (raw, json) Hash identifier: GUD7Q8PwaTkCkjZiiS4pBJeyLmcGfQU4EbAltA0cIIE= Subject key identifier: A1:7E:E3:F8:A0:B0:5A:73:25:27:09:10:9C:90:69:8C:F9:CF:7B:47 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE58055364FC529624175780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfa9f022-1fe3-3595-a627-73706c00a681.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 67.176.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:05:53:64:fc:52:96:24:17:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=73ca2e77-dfa5-43b9-a63a-3ff687336b3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:36:a9:71:65:06:ce:2b:41:27:49:ff:41:ef: 83:08:16:7c:fe:8b:21:f7:bd:8f:d6:c3:c8:03:b2: 64:f2:7a:aa:95:3f:f1:fb:9e:0a:ab:4a:a7:9d:70: 3a:4b:50:7e:ec:11:5a:1c:6c:b7:77:b1:21:83:cd: 34:bd:08:6e:ec:8a:05:06:a3:ae:2e:ce:02:99:7d: 3e:19:70:1e:a7:1b:26:c3:96:7a:88:6b:a6:c4:13: c6:c8:cf:ce:75:7c:02:62:b1:e5:d6:84:9a:21:2b: eb:fd:5b:73:fa:12:ab:22:fe:6b:b7:fa:70:b4:79: 44:08:f0:2c:5f:7a:12:0a:18:d3:f6:0f:a7:fc:1d: c7:4b:4e:f8:f3:a3:9a:c9:32:c0:81:8c:08:a0:09: 05:69:b1:63:01:34:cd:54:b6:02:cf:00:e5:41:65: d2:72:06:ce:bd:8c:7c:66:e1:77:4d:89:ee:2a:08: 7f:ed:7f:65:24:cc:9b:1b:84:10:2b:83:b5:fb:00: a6:8b:d2:99:a0:3c:d2:ff:3e:1f:7c:d9:3c:be:df: c9:a8:05:a7:68:23:d2:1d:cf:97:07:8d:f8:49:30: 20:aa:3d:3f:41:87:a8:28:ad:ee:38:c2:81:c7:fc: 50:f1:34:e5:b9:22:39:8a:c8:8e:52:38:ae:20:74: d5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:7E:E3:F8:A0:B0:5A:73:25:27:09:10:9C:90:69:8C:F9:CF:7B:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfa9f022-1fe3-3595-a627-73706c00a681.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.176.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:e4:fc:2c:c7:4f:82:fa:45:6d:74:80:2b:6a:3f:ea:e2:f8: bf:1c:82:df:6c:10:65:45:9a:63:fb:64:fa:21:ee:ac:43:2e: 7a:42:c8:2e:61:4b:80:9c:f6:42:47:fe:c8:f3:cf:9c:6d:43: d0:f5:34:f0:61:d4:f6:27:59:7d:97:76:09:11:53:ab:2b:ee: 35:9b:2b:03:8b:3d:01:df:0e:70:5c:1c:49:2c:ed:e1:14:87: 59:49:d8:25:36:ad:6b:27:b0:35:e6:0a:e1:a8:ac:6c:3f:5e: 2e:d4:ea:cd:d6:e3:64:23:ab:c4:ad:28:84:ce:16:90:8a:fe: 0c:cb:47:3e:42:e2:17:16:22:f9:78:9b:54:59:29:3c:48:87: 31:ef:45:ba:85:f5:50:ce:0e:ef:f5:45:44:31:3a:cf:9f:89: e1:90:c8:ce:28:5d:3d:8d:51:25:58:a9:69:23:f6:fc:96:05: 45:6c:08:8e:85:c1:99:ff:5e:6b:9f:d7:26:f9:05:56:5c:6e: eb:5a:32:7f:75:2a:78:3c:df:4b:27:7f:91:ac:0b:1c:0d:f6: 2f:99:c9:03:41:52:2b:90:76:d4:bb:b3:77:ad:4a:89:19:9e: 3c:ea:06:ac:6d:95:ee:91:4a:9a:61:ab:93:5c:c4:97:6b:b2: 62:f0:a6:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWAVTZPxSliQXV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NzNjYTJlNzctZGZhNS00M2I5LWE2M2EtM2ZmNjg3MzM2YjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjapcWUGzitBJ0n/Qe+DCBZ8/osh972P1sPI A7Jk8nqqlT/x+54Kq0qnnXA6S1B+7BFaHGy3d7Ehg800vQhu7IoFBqOuLs4CmX0+ GXAepxsmw5Z6iGumxBPGyM/OdXwCYrHl1oSaISvr/Vtz+hKrIv5rt/pwtHlECPAs X3oSChjT9g+n/B3HS07486OayTLAgYwIoAkFabFjATTNVLYCzwDlQWXScgbOvYx8 ZuF3TYnuKgh/7X9lJMybG4QQK4O1+wCmi9KZoDzS/z4ffNk8vt/JqAWnaCPSHc+X B434STAgqj0/QYeoKK3uOMKBx/xQ8TTluSI5isiOUjiuIHTVhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKF+4/igsFpzJScJEJyQaYz5z3tHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2ZhOWYwMjItMWZlMy0z NTk1LWE2MjctNzM3MDZjMDBhNjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ7DQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLk/CzHT4L6RW10gCtqP+ri+L8cgt9sEGVFmmP7ZPoh7qxDLnpCyC5h S4Cc9kJH/sjzz5xtQ9D1NPBh1PYnWX2XdgkRU6sr7jWbKwOLPQHfDnBcHEks7eEU h1lJ2CU2rWsnsDXmCuGorGw/Xi7U6s3W42Qjq8StKITOFpCK/gzLRz5C4hcWIvl4 m1RZKTxIhzHvRbqF9VDODu/1RUQxOs+fieGQyM4oXT2NUSVYqWkj9vyWBUVsCI6F wZn/Xmuf1yb5BVZcbutaMn91Kng830snf5GsCxwN9i+ZyQNBUiuQdtS7s3etSokZ njzqBqxtle6RSpphq5NcxJdrsmLwps0= -----END CERTIFICATE-----Generated at Mon Mar 2 00:31:24 2026 by rpki-client