$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d7f7707c-5507-330b-adf7-3d2f6f14a9ab.roa File: d7f7707c-5507-330b-adf7-3d2f6f14a9ab.roa (raw, json) Hash identifier: nykZL4y9Hye5J5oCh5WUt8wJLSXF4wr45gVBOTNYRG0= Subject key identifier: 04:19:17:88:35:AB:D9:8F:78:A7:68:AC:19:2F:B0:C0:62:17:0B:9A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5D508D0489D74EBA962500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d7f7707c-5507-330b-adf7-3d2f6f14a9ab.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 67.188.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5d:50:8d:04:89:d7:4e:ba:96:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=e3b49513-f4af-43cd-9c3c-279bb18088e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e0:b9:be:4d:c1:19:58:d4:88:dd:64:6e:96: 23:75:e9:39:7b:d1:c6:bd:ec:49:1e:ac:e3:7f:90: 6e:98:ca:dd:50:15:6c:7a:e4:6e:cc:94:a6:dc:7c: f4:76:62:e6:9b:a8:0b:8d:78:1e:79:2e:19:7b:5a: 32:dd:3a:f4:29:24:43:6a:83:78:38:1a:e6:38:eb: 38:80:9a:b2:82:36:88:41:41:87:16:c7:81:7d:ff: a3:b6:18:7c:a8:b2:56:23:5b:0f:86:be:96:d7:3f: 33:2b:58:d9:39:48:56:8d:b5:07:c3:98:e5:51:f5: 76:ed:f8:44:3f:79:f8:cb:b2:d0:55:0a:8d:c0:a5: 1b:38:6c:67:6a:43:0c:af:79:7b:b8:24:4f:35:0b: 62:52:f8:0a:85:fc:30:9b:07:a5:25:1f:23:63:46: 6a:78:c5:e0:25:31:54:03:e2:a8:24:2a:f8:e5:34: b2:58:b7:15:6c:0b:67:d2:a8:4d:6e:4f:1f:be:9f: 99:df:6d:e0:2b:5c:e4:2f:91:0f:40:30:fd:26:c1: 08:2a:37:47:f9:78:5e:06:a3:04:a8:3e:7d:9d:86: ea:b3:90:e8:9e:6b:c0:b2:27:5e:91:a7:56:31:ba: a1:80:38:78:f0:b9:ad:5a:a0:cd:70:4c:1f:61:18: 7c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:19:17:88:35:AB:D9:8F:78:A7:68:AC:19:2F:B0:C0:62:17:0B:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d7f7707c-5507-330b-adf7-3d2f6f14a9ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.188.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d9:91:3c:1b:4f:0e:8d:1b:a8:9a:e9:f5:49:6d:99:61:d6:81: 39:46:a1:e7:7a:aa:52:a5:57:80:37:29:f1:61:dc:80:a3:a7: c0:58:d3:fe:16:62:5e:d8:2f:a5:10:73:36:51:7d:79:80:69: 91:21:aa:9a:45:f2:b9:be:fd:e3:42:19:51:c6:30:00:b8:4b: 0b:96:07:b0:c9:b3:0f:fc:aa:8c:88:43:a5:d8:07:68:40:f5: 5b:c3:9f:f5:64:50:23:a9:4f:ec:ca:06:2a:39:18:e1:11:84: 56:12:af:10:ed:a7:18:a1:47:2b:30:e5:14:13:a7:33:cb:8b: d8:d6:31:21:86:a4:f7:79:cb:7e:1b:d4:f7:29:0f:6d:75:6d: 05:87:e7:4e:31:b8:cd:88:fb:08:12:e5:c6:ce:ad:10:fa:f2: 96:50:2e:45:19:b9:7f:df:ac:7a:a1:a2:43:0c:03:09:23:ef: 99:c7:5b:67:e2:93:f8:2f:b3:08:4c:48:56:b2:4f:e3:c8:e6: 99:e7:3f:f9:41:7d:10:79:b1:d5:da:18:78:ee:f7:a6:b6:5b: 2e:84:6c:f5:b5:39:5a:bd:50:49:52:dc:41:4f:29:c5:68:03: 43:c3:07:19:dc:d5:51:4f:a1:23:fd:9c:8b:fb:d4:8b:f2:9c: 44:f0:6c:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXVCNBInXTrqWJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZTNiNDk1MTMtZjRhZi00M2NkLTljM2MtMjc5YmIxODA4OGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOC5vk3BGVjUiN1kbpYjdek5e9HGvexJHqzj f5BumMrdUBVseuRuzJSm3Hz0dmLmm6gLjXgeeS4Ze1oy3Tr0KSRDaoN4OBrmOOs4 gJqygjaIQUGHFseBff+jthh8qLJWI1sPhr6W1z8zK1jZOUhWjbUHw5jlUfV27fhE P3n4y7LQVQqNwKUbOGxnakMMr3l7uCRPNQtiUvgKhfwwmwelJR8jY0ZqeMXgJTFU A+KoJCr45TSyWLcVbAtn0qhNbk8fvp+Z323gK1zkL5EPQDD9JsEIKjdH+XheBqME qD59nYbqs5DonmvAsidekadWMbqhgDh48LmtWqDNcEwfYRh8pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQZF4g1q9mPeKdorBkvsMBiFwuaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDdmNzcwN2MtNTUwNy0z MzBiLWFkZjctM2QyZjZmMTRhOWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ7x2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANmRPBtPDo0bqJrp9UltmWHWgTlGoed6qlKlV4A3KfFh3ICjp8BY0/4W Yl7YL6UQczZRfXmAaZEhqppF8rm+/eNCGVHGMAC4SwuWB7DJsw/8qoyIQ6XYB2hA 9VvDn/VkUCOpT+zKBio5GOERhFYSrxDtpxihRysw5RQTpzPLi9jWMSGGpPd5y34b 1PcpD211bQWH504xuM2I+wgS5cbOrRD68pZQLkUZuX/frHqhokMMAwkj75nHW2fi k/gvswhMSFayT+PI5pnnP/lBfRB5sdXaGHju96a2Wy6EbPW1OVq9UElS3EFPKcVo A0PDBxnc1VFPoSP9nIv71IvynETwbOk= -----END CERTIFICATE-----Generated at Sun Mar 1 20:47:55 2026 by rpki-client