$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d96d0cf6-5252-3b7b-b5b3-da97bbeb1a51.roa File: d96d0cf6-5252-3b7b-b5b3-da97bbeb1a51.roa (raw, json) Hash identifier: D1nNrmtRkGF39gIod69s2UptSMI7GKSuWzucGLkvlEc= Subject key identifier: BA:F6:3E:6C:93:4C:7B:22:6E:A6:49:2A:33:6D:4F:89:D7:A1:89:E6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5CAEDE80B25E03E95229F8 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d96d0cf6-5252-3b7b-b5b3-da97bbeb1a51.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 76.136.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5c:ae:de:80:b2:5e:03:e9:52:29:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=fb2d21ce-dde2-4de5-8073-f902efa367a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b4:ba:37:44:17:ad:80:4b:21:6b:48:ab:9e: ce:06:69:e1:78:0b:25:6e:d8:05:05:6d:a8:db:0b: 40:75:1d:ed:11:11:bb:15:75:4e:f9:44:1c:89:40: bf:40:85:b5:d9:a7:0e:e5:7d:99:0e:8f:34:42:69: 79:68:72:a1:72:fe:e3:20:c8:6c:7a:dc:0f:56:69: 76:2b:9e:5f:dc:92:90:04:b6:88:4f:a4:b6:c6:9a: ee:53:7d:80:f2:3f:8a:22:f9:dd:52:41:da:4b:db: b9:e9:cf:b6:05:de:56:d8:26:3d:f6:56:aa:6a:d4: 86:ae:4d:7c:ce:6f:69:fe:07:a6:76:7e:bf:b9:c4: 64:28:38:34:3c:20:b4:95:23:f7:2a:76:5d:d4:12: 2f:26:1c:d1:cd:9c:9a:44:5a:8b:74:2f:86:e7:14: 4e:a2:fd:8c:28:0e:9d:1b:9e:b2:b9:48:03:01:6d: 1d:d3:9e:0c:59:a4:52:cb:0e:f5:d0:cd:e4:e9:ba: 29:3b:28:dc:5e:1b:ef:fc:6a:06:fd:bf:ba:1b:ad: 01:65:45:02:4c:3b:f2:17:2c:c5:5f:95:bb:b2:d1: 3b:0f:3a:2d:99:03:f1:3a:06:46:c1:56:dd:f3:cb: bf:2a:22:cf:b8:9e:84:21:70:71:67:41:59:d0:bf: 8b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F6:3E:6C:93:4C:7B:22:6E:A6:49:2A:33:6D:4F:89:D7:A1:89:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d96d0cf6-5252-3b7b-b5b3-da97bbeb1a51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.136.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:a7:8c:f4:18:65:c1:3f:27:4a:e5:64:ee:a7:29:99:e6:c4: 9e:5c:71:10:a0:67:3f:7b:33:e2:e7:ae:87:41:dc:07:d8:3e: 93:04:73:e0:b1:2c:44:d0:dd:ef:d2:30:a7:5b:a0:b7:f8:1f: d8:d1:f9:b5:f1:42:13:00:2a:cc:f9:9e:b0:8e:13:a8:20:4f: 86:99:19:ac:a1:ce:b2:5b:a5:db:76:98:5b:62:19:18:f1:b4: 1e:fa:d0:b9:1c:39:3d:54:97:0b:2e:e4:ad:18:2a:21:49:18: bd:d9:26:5c:72:a9:2e:fc:d1:1b:62:54:c2:44:86:cd:6e:8f: 6f:a5:3a:db:ad:0f:36:18:f9:9c:99:88:d5:88:d3:d8:be:4b: 5d:f3:35:5c:d6:72:f8:11:17:fd:50:8e:3a:d9:ac:f9:f4:d6: 71:69:1b:a1:44:7e:7f:33:42:a0:a7:9b:22:f0:31:52:55:6d: d2:c5:00:ca:34:69:2e:e5:55:7a:bc:e8:cf:72:48:1d:b3:b9: 41:d9:af:76:fb:0f:68:62:a7:c6:6b:2e:3f:17:d9:42:82:8a: ea:4d:c5:c9:03:07:46:99:9d:68:b4:97:a0:87:ae:a1:a7:b7: 2a:31:d3:3e:04:f8:d2:9a:93:7d:db:6d:37:4f:19:82:db:37: 6d:93:95:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXK7egLJeA+lSKfgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZmIyZDIxY2UtZGRlMi00ZGU1LTgwNzMtZjkwMmVmYTM2N2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLS6N0QXrYBLIWtIq57OBmnheAslbtgFBW2o 2wtAdR3tERG7FXVO+UQciUC/QIW12acO5X2ZDo80Qml5aHKhcv7jIMhsetwPVml2 K55f3JKQBLaIT6S2xpruU32A8j+KIvndUkHaS9u56c+2Bd5W2CY99laqatSGrk18 zm9p/gemdn6/ucRkKDg0PCC0lSP3KnZd1BIvJhzRzZyaRFqLdC+G5xROov2MKA6d G56yuUgDAW0d054MWaRSyw710M3k6bopOyjcXhvv/GoG/b+6G60BZUUCTDvyFyzF X5W7stE7DzotmQPxOgZGwVbd88u/KiLPuJ6EIXBxZ0FZ0L+LPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLr2PmyTTHsibqZJKjNtT4nXoYnmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDk2ZDBjZjYtNTI1Mi0z YjdiLWI1YjMtZGE5N2JiZWIxYTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIjyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABunjPQYZcE/J0rlZO6nKZnmxJ5ccRCgZz97M+LnrodB3AfYPpMEc+Cx LETQ3e/SMKdboLf4H9jR+bXxQhMAKsz5nrCOE6ggT4aZGayhzrJbpdt2mFtiGRjx tB760LkcOT1Ulwsu5K0YKiFJGL3ZJlxyqS780RtiVMJEhs1uj2+lOtutDzYY+ZyZ iNWI09i+S13zNVzWcvgRF/1QjjrZrPn01nFpG6FEfn8zQqCnmyLwMVJVbdLFAMo0 aS7lVXq86M9ySB2zuUHZr3b7D2hip8ZrLj8X2UKCiupNxckDB0aZnWi0l6CHrqGn tyox0z4E+NKak33bbTdPGYLbN22TlSE= -----END CERTIFICATE-----Generated at Sun Mar 1 18:31:05 2026 by rpki-client