$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1af0590-bfcb-3a91-8188-be94000da24e.roa File: d1af0590-bfcb-3a91-8188-be94000da24e.roa (raw, json) Hash identifier: hfx3ozPZgf4XMZqXlJCEednFRvcl87BhrrW4nnxhY1Y= Subject key identifier: A3:21:D9:0E:0E:48:E0:2D:4C:C3:D5:F3:08:C8:E4:55:0B:CA:10:BD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CFDE95EE1F586E76F0FF69E00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1af0590-bfcb-3a91-8188-be94000da24e.roa Signing time: Thu 26 Feb 2026 14:00:40 +0000 ROA not before: Thu 26 Feb 2026 14:00:40 +0000 ROA not after: Wed 27 May 2026 13:00:40 +0000 asID: 22909 IP address blocks: 76.122.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:e9:5e:e1:f5:86:e7:6f:0f:f6:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 26 14:00:40 2026 GMT Not After : May 27 13:00:40 2026 GMT Subject: CN=56e8ac27-e7a8-4778-8e08-e20c2fce3cde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8f:72:24:d8:d4:ab:55:0c:a2:c2:0f:75:a2: 88:f2:f7:8a:ce:f9:b7:4f:8b:e7:69:bc:87:41:d5: 49:66:25:18:2a:b4:7d:e9:ff:a2:e7:c1:e2:11:21: b5:0f:53:0e:34:42:be:65:23:9d:75:f7:5e:29:b3: 04:6f:d2:25:5a:d6:4a:7a:f8:1b:25:cd:f6:4f:1d: b1:dc:d1:26:ea:25:bc:55:89:19:97:8a:80:df:d1: cf:95:88:82:55:65:ab:a7:1e:41:48:99:df:8a:c0: cc:4b:4d:d3:91:ec:ea:c2:2e:2e:8b:29:95:7c:e4: 68:49:3b:48:08:76:f1:3a:f3:e5:11:c5:6b:70:fb: 91:d0:50:79:07:6b:6e:5c:34:bf:eb:c7:94:17:b3: 00:fc:29:03:fa:e1:e9:cc:53:a6:2d:f2:c4:e1:e6: cb:3d:07:49:90:b8:97:31:54:1e:d1:b4:ca:05:a0: f5:db:65:cf:91:a1:b0:d0:a9:ac:6a:73:47:d3:eb: 59:c3:7d:e1:db:d3:c3:e0:ed:76:a7:3b:96:1c:25: 1c:c5:a9:16:09:7b:44:ff:39:18:38:38:8e:a6:4b: 30:99:b1:58:24:a1:95:dd:8e:90:c2:66:96:05:fd: a7:93:64:98:21:98:a8:aa:9b:c7:e2:86:97:9f:66: 84:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:21:D9:0E:0E:48:E0:2D:4C:C3:D5:F3:08:C8:E4:55:0B:CA:10:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1af0590-bfcb-3a91-8188-be94000da24e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.122.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:a1:c8:d7:91:4c:67:07:df:d9:7b:2b:73:06:3c:23:b6:33: 9d:4b:46:6d:da:c8:ff:93:0c:11:e3:cd:82:d1:87:48:de:8b: cc:02:3a:cb:a0:eb:64:13:ab:57:58:7c:74:c5:00:6a:03:6a: b4:88:bf:3a:4f:38:8c:f5:d2:64:27:d1:ad:67:6d:76:5f:73: 10:15:88:3f:81:9a:aa:a8:c7:21:08:15:e1:2c:a5:86:49:86: f2:db:1a:dc:b8:3a:a6:34:32:00:b9:32:bb:81:0c:b9:15:83: 0a:af:5c:3d:f5:e7:58:2e:12:10:b6:53:bd:87:f9:61:ea:4b: e3:05:40:7c:88:e9:93:53:b9:47:1d:a4:08:56:93:1a:0a:73: 3d:97:03:9f:4c:2b:56:f6:7c:f4:b1:e5:23:91:49:5a:f4:db: 0b:cf:db:2d:38:28:0f:8a:35:53:83:e0:8b:bb:97:bb:bd:32: 97:2d:85:cb:34:13:e8:a9:9b:8a:39:16:60:42:ff:a2:a5:76: 0d:a0:45:8d:32:4b:1c:eb:36:bb:f9:f6:92:c7:e7:e0:07:0d: 3d:cf:4a:8d:4d:b0:b8:c2:09:13:b4:ca:e4:55:c0:d9:54:9b: b8:7f:04:93:a8:ab:70:42:5c:45:34:ba:66:af:6f:39:f9:7d: 11:b0:2b:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz96V7h9Ybnbw/2ngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk NTZlOGFjMjctZTdhOC00Nzc4LThlMDgtZTIwYzJmY2UzY2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzI9yJNjUq1UMosIPdaKI8veKzvm3T4vnabyH QdVJZiUYKrR96f+i58HiESG1D1MONEK+ZSOddfdeKbMEb9IlWtZKevgbJc32Tx2x 3NEm6iW8VYkZl4qA39HPlYiCVWWrpx5BSJnfisDMS03Tkezqwi4uiymVfORoSTtI CHbxOvPlEcVrcPuR0FB5B2tuXDS/68eUF7MA/CkD+uHpzFOmLfLE4ebLPQdJkLiX MVQe0bTKBaD122XPkaGw0KmsanNH0+tZw33h29PD4O12pzuWHCUcxakWCXtE/zkY ODiOpkswmbFYJKGV3Y6QwmaWBf2nk2SYIZioqpvH4oaXn2aEIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKMh2Q4OSOAtTMPV8wjI5FULyhC9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDFhZjA1OTAtYmZjYi0z YTkxLTgxODgtYmU5NDAwMGRhMjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATHruMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGahyNeRTGcH39l7K3MGPCO2M51LRm3ayP+TDBHjzYLRh0jei8wCOsug 62QTq1dYfHTFAGoDarSIvzpPOIz10mQn0a1nbXZfcxAViD+BmqqoxyEIFeEspYZJ hvLbGty4OqY0MgC5MruBDLkVgwqvXD3151guEhC2U72H+WHqS+MFQHyI6ZNTuUcd pAhWkxoKcz2XA59MK1b2fPSx5SORSVr02wvP2y04KA+KNVOD4Iu7l7u9Mpcthcs0 E+ipm4o5FmBC/6Kldg2gRY0ySxzrNrv59pLH5+AHDT3PSo1NsLjCCRO0yuRVwNlU m7h/BJOoq3BCXEU0umavbzn5fRGwK9I= -----END CERTIFICATE-----Generated at Mon Mar 2 08:04:03 2026 by rpki-client