$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dbf00f1b-03b0-30b8-a7fa-8c535db5f081.roa File: dbf00f1b-03b0-30b8-a7fa-8c535db5f081.roa (raw, json) Hash identifier: LDLeNHAyL0rDHIBCos/1AVFifhEOxLiwVZIb/RDt3jY= Subject key identifier: 1C:02:0F:D7:99:79:9C:28:73:98:8D:42:8B:48:F6:FF:DC:98:24:4A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5993EE52F3CE2AC13EBCC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dbf00f1b-03b0-30b8-a7fa-8c535db5f081.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33659 IP address blocks: 69.142.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:59:93:ee:52:f3:ce:2a:c1:3e:bc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=7bab0787-4760-4282-870a-38530bf9f4ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:01:88:f4:23:67:67:cf:4e:46:8b:a3:42:5e: 0f:3b:6f:85:28:1c:d4:31:36:55:1a:d1:2a:24:e7: 59:49:e7:53:3f:7e:55:08:d1:bc:38:0f:22:43:79: 18:b1:52:9f:a8:c1:18:0d:09:d3:23:01:2c:44:66: 3f:2c:d3:1c:35:62:3c:dc:d4:9a:81:59:6e:48:ee: c4:88:84:90:6a:23:a9:6e:23:0e:20:5f:9b:92:a6: db:24:6b:1e:0b:38:72:7a:04:c9:3c:84:51:a2:39: 21:b0:70:53:82:d8:ba:f0:8d:76:bf:96:76:e7:60: 65:62:54:32:f7:e7:62:4f:e4:a8:2e:79:09:1f:21: 2a:de:35:f8:7c:77:f7:14:7c:af:2d:ad:66:fb:56: c9:c8:3d:4a:d6:97:6c:3e:a2:b1:d7:78:c6:15:c6: 6f:fd:69:6d:39:8e:26:f8:3e:06:52:a9:3d:61:ec: 16:01:2a:fb:05:3a:8c:f4:c8:a8:6d:63:f5:41:c8: 39:e0:23:c3:e9:20:e1:2a:0a:a5:1d:4f:6a:6a:64: 23:2a:26:1a:15:c5:b4:ad:39:73:a4:38:76:ff:9c: eb:a4:d4:7b:ac:4d:68:9b:4a:c4:a1:52:aa:2a:c4: 10:ec:d1:b5:02:0c:8b:5e:d6:ad:38:a0:7c:c8:e6: 49:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:02:0F:D7:99:79:9C:28:73:98:8D:42:8B:48:F6:FF:DC:98:24:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dbf00f1b-03b0-30b8-a7fa-8c535db5f081.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 69.142.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:5f:cd:bb:e3:32:43:d6:25:b4:8f:ab:be:a9:82:96:3b:6b: 83:0d:c2:a8:68:af:77:3e:42:fe:46:3b:db:40:2d:b7:ca:02: 50:85:7d:08:9b:d6:77:61:40:76:ac:76:1e:b1:46:8d:96:e7: 5b:79:06:e8:97:2f:f0:5b:f0:9c:1d:2f:7b:4e:4b:9e:cc:40: fa:f5:f8:6e:7a:14:57:d7:07:ac:fd:46:6d:27:2c:1d:18:bf: 60:cd:19:7e:eb:01:02:95:23:e0:3b:54:a8:35:55:55:9b:c7: 72:cb:36:3b:38:c0:9f:89:2a:2f:98:1d:cf:25:ac:25:86:35: 2e:dd:50:32:0f:e9:2f:5e:73:42:32:7d:9d:34:e2:af:02:b9: ef:cb:f3:20:b4:66:ac:85:17:20:7b:e4:60:f9:d9:f3:63:3c: a5:24:e4:32:43:0d:a3:19:b6:6b:63:fd:96:ef:03:97:7d:c6: bd:d8:04:9e:04:5f:08:23:00:48:d3:d4:43:fa:d8:9a:7a:98: 20:5f:fa:b4:cb:b7:01:7d:83:dd:31:f7:6f:04:94:ec:8b:1d: e1:d8:ac:0c:8c:af:b9:18:c7:79:85:aa:6a:b3:41:d9:d8:2b: 11:87:85:39:4f:e1:b7:52:87:e9:00:9f:46:de:d7:fd:58:36: 80:ad:61:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWZPuUvPOKsE+vMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk N2JhYjA3ODctNDc2MC00MjgyLTg3MGEtMzg1MzBiZjlmNGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgGI9CNnZ89ORoujQl4PO2+FKBzUMTZVGtEq JOdZSedTP35VCNG8OA8iQ3kYsVKfqMEYDQnTIwEsRGY/LNMcNWI83NSagVluSO7E iISQaiOpbiMOIF+bkqbbJGseCzhyegTJPIRRojkhsHBTgti68I12v5Z252BlYlQy 9+diT+SoLnkJHyEq3jX4fHf3FHyvLa1m+1bJyD1K1pdsPqKx13jGFcZv/WltOY4m +D4GUqk9YewWASr7BTqM9MiobWP1Qcg54CPD6SDhKgqlHU9qamQjKiYaFcW0rTlz pDh2/5zrpNR7rE1om0rEoVKqKsQQ7NG1AgyLXtatOKB8yOZJpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBwCD9eZeZwoc5iNQotI9v/cmCRKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGJmMDBmMWItMDNiMC0z MGI4LWE3ZmEtOGM1MzVkYjVmMDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRY7wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9fzbvjMkPWJbSPq76pgpY7a4MNwqhor3c+Qv5GO9tALbfKAlCFfQib 1ndhQHasdh6xRo2W51t5BuiXL/Bb8JwdL3tOS57MQPr1+G56FFfXB6z9Rm0nLB0Y v2DNGX7rAQKVI+A7VKg1VVWbx3LLNjs4wJ+JKi+YHc8lrCWGNS7dUDIP6S9ec0Iy fZ004q8Cue/L8yC0ZqyFFyB75GD52fNjPKUk5DJDDaMZtmtj/ZbvA5d9xr3YBJ4E XwgjAEjT1EP62Jp6mCBf+rTLtwF9g90x928ElOyLHeHYrAyMr7kYx3mFqmqzQdnY KxGHhTlP4bdSh+kAn0be1/1YNoCtYcM= -----END CERTIFICATE-----Generated at Mon Mar 2 02:38:08 2026 by rpki-client