$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2b363b5-f16f-3720-82bc-4a8f3d16a971.roa File: d2b363b5-f16f-3720-82bc-4a8f3d16a971.roa (raw, json) Hash identifier: SpJE3HtIzqO+2PuJDCy6FJN+a2pG2woNrkyNgyd1wBs= Subject key identifier: 04:DF:BC:12:B3:86:0B:CE:54:09:50:B8:CC:08:0C:91:9B:E6:F5:C4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5DF0FBB649DCE0B03CF680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2b363b5-f16f-3720-82bc-4a8f3d16a971.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 76.126.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5d:f0:fb:b6:49:dc:e0:b0:3c:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=aa1e8ae0-9eac-414b-bb11-676c6b8820e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ed:bd:28:12:11:13:ac:90:7d:56:6c:52:66: c7:65:89:05:e5:dc:60:2f:40:b1:f6:5c:6b:9a:10: dd:0b:87:a2:52:eb:73:79:0c:80:80:07:7c:10:fb: 5a:d2:33:c4:04:c1:f6:4a:0b:63:a9:4b:35:5c:b7: 12:a9:ed:38:2e:83:d5:50:da:92:82:75:4c:ef:97: c5:90:ea:bb:b6:c8:e8:38:76:fc:c7:23:4e:09:9f: 6e:49:df:3e:b7:d6:55:04:3d:61:4a:70:de:06:65: 68:0f:38:10:05:ca:87:72:2a:d1:db:0d:41:1f:77: 34:6a:d3:ef:ac:e1:2c:72:83:1a:55:78:fd:a5:68: 15:c5:ac:60:0b:16:77:33:64:87:28:16:4e:56:a0: 92:3d:51:93:cf:41:14:a7:1f:3a:c7:c8:43:f0:3c: c5:c7:88:4a:56:88:e8:08:4b:c7:2c:57:ec:a7:36: 54:db:f7:0f:28:8d:08:27:62:01:fd:61:67:8d:2c: 22:59:35:3c:d7:f8:d7:6a:73:4f:e6:ac:21:14:d0: 10:f3:48:d8:05:56:e9:c1:56:2c:81:39:0b:7e:80: d5:8d:bd:19:c4:62:b3:78:08:01:12:a5:3e:c1:5a: f1:16:bc:19:74:43:70:2d:24:ea:40:17:a6:a5:69: 1b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:DF:BC:12:B3:86:0B:CE:54:09:50:B8:CC:08:0C:91:9B:E6:F5:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2b363b5-f16f-3720-82bc-4a8f3d16a971.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.126.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:38:be:b7:b1:ba:5b:95:c3:bc:7d:c6:a0:b1:da:f3:b2:5f: 00:41:1c:40:0d:bf:66:e5:73:b8:64:6a:31:33:b6:fb:19:30: bf:68:19:1d:99:a2:82:5d:da:6a:32:3c:3d:20:6d:73:4f:04: 37:88:c9:d7:f4:33:ef:3f:31:8a:6a:f6:c7:a4:49:35:6a:97: dd:84:f1:70:ff:4d:59:1b:84:ff:be:30:71:90:f1:44:87:92: be:ef:2c:21:ce:99:52:02:c1:85:59:40:da:1b:bc:cc:5a:ad: 53:5d:0d:60:1f:03:f8:bc:e0:4a:ac:c8:41:c1:73:9f:13:d6: f4:58:3c:a2:f4:f1:1d:4a:45:df:9b:65:0a:01:e0:c5:84:09: 94:5a:04:5f:08:e8:e7:2f:8a:ff:16:e9:26:82:c5:06:b6:ad: 3e:7f:17:74:05:a3:5c:78:95:eb:9c:29:77:53:71:e0:e0:23: 11:a3:70:5a:df:5b:57:30:d8:54:f4:02:e9:77:a4:86:73:36: 90:62:2b:aa:dd:16:85:a3:69:00:c6:f4:12:a7:41:10:fa:48: 6d:43:0b:d2:67:cc:a8:be:11:12:6f:1a:df:07:a2:63:51:db: 7f:0d:35:a2:ca:cb:32:80:da:42:f1:07:96:70:f0:7a:5e:53: 24:20:77:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXfD7tknc4LA89oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YWExZThhZTAtOWVhYy00MTRiLWJiMTEtNjc2YzZiODgyMGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmu29KBIRE6yQfVZsUmbHZYkF5dxgL0Cx9lxr mhDdC4eiUutzeQyAgAd8EPta0jPEBMH2SgtjqUs1XLcSqe04LoPVUNqSgnVM75fF kOq7tsjoOHb8xyNOCZ9uSd8+t9ZVBD1hSnDeBmVoDzgQBcqHcirR2w1BH3c0atPv rOEscoMaVXj9pWgVxaxgCxZ3M2SHKBZOVqCSPVGTz0EUpx86x8hD8DzFx4hKVojo CEvHLFfspzZU2/cPKI0IJ2IB/WFnjSwiWTU81/jXanNP5qwhFNAQ80jYBVbpwVYs gTkLfoDVjb0ZxGKzeAgBEqU+wVrxFrwZdENwLSTqQBempWkbTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFATfvBKzhgvOVAlQuMwIDJGb5vXEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDJiMzYzYjUtZjE2Zi0z NzIwLTgyYmMtNGE4ZjNkMTZhOTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTH7YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKw4vrexuluVw7x9xqCx2vOyXwBBHEANv2blc7hkajEztvsZML9oGR2Z ooJd2moyPD0gbXNPBDeIydf0M+8/MYpq9sekSTVql92E8XD/TVkbhP++MHGQ8USH kr7vLCHOmVICwYVZQNobvMxarVNdDWAfA/i84EqsyEHBc58T1vRYPKL08R1KRd+b ZQoB4MWECZRaBF8I6Ocviv8W6SaCxQa2rT5/F3QFo1x4leucKXdTceDgIxGjcFrf W1cw2FT0Aul3pIZzNpBiK6rdFoWjaQDG9BKnQRD6SG1DC9JnzKi+ERJvGt8HomNR 238NNaLKyzKA2kLxB5Zw8HpeUyQgd8c= -----END CERTIFICATE-----Generated at Sun Mar 1 19:11:42 2026 by rpki-client