$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/efe3a558-c412-364b-a184-227a89db9e7e.roa File: efe3a558-c412-364b-a184-227a89db9e7e.roa (raw, json) Hash identifier: QknovHCvAsPK17A4x3eVP1WIs2/NZLuudoeSgOKzS5g= Subject key identifier: 3E:97:7C:91:31:5D:79:9C:74:C3:82:C3:18:6A:0C:E1:5E:A0:C9:B3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE57437A5C4D6C3198012280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/efe3a558-c412-364b-a184-227a89db9e7e.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33660 IP address blocks: 67.161.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:43:7a:5c:4d:6c:31:98:01:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=9eff38a7-4de9-4920-912c-9187b24e4510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:51:7b:18:9d:d1:ec:71:ca:f5:ad:22:66:b2: 77:13:db:d8:01:43:d2:5b:2a:1a:bd:32:b3:5f:35: fa:b5:54:ad:4c:d6:f7:6b:8c:a7:84:00:95:0f:61: 67:a1:2a:5c:c3:06:90:b6:86:e6:16:6d:e2:33:d3: 7b:b5:94:7d:f2:c0:3b:3d:4c:fb:86:03:b8:88:52: b3:0f:d1:64:ad:cc:56:d5:30:b5:5a:f0:4b:ed:94: 5c:da:b6:dc:69:66:ad:c6:d1:ad:2d:3b:e3:a9:fa: ef:0f:d2:97:00:a9:19:8a:4a:5b:a5:0b:1f:77:4c: fe:30:89:43:9b:86:da:90:b2:a6:5a:db:56:c5:94: 4c:53:1d:3c:0b:66:e0:83:05:f5:59:d2:37:b5:92: d2:87:88:5e:44:72:f4:3c:c2:d2:ec:fa:9c:e3:d1: c9:2e:4b:2b:e0:35:b9:d2:7f:0d:5b:a3:b2:69:15: 08:fc:cc:25:93:10:8f:60:98:e1:e9:72:a2:d4:39: d3:78:2c:45:20:7b:d8:42:91:2b:42:ff:cb:7f:4b: cc:da:63:d5:e5:8a:88:d9:06:a5:93:1d:d2:e4:fd: c2:d3:bf:a2:5f:0b:27:dd:4c:1a:63:d8:f5:c3:03: c8:a7:93:f5:a3:d3:86:ec:06:4b:7b:bb:0a:bb:69: 49:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:97:7C:91:31:5D:79:9C:74:C3:82:C3:18:6A:0C:E1:5E:A0:C9:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/efe3a558-c412-364b-a184-227a89db9e7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.161.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:31:e7:6e:3c:e9:41:d3:84:4f:54:9d:cf:55:8d:cc:fe:40: ab:e7:c9:44:45:04:74:be:c6:02:73:2e:11:73:c8:d1:b3:dc: 31:bc:42:5c:d9:b6:89:5d:5c:53:9f:cd:28:65:e6:0c:58:e9: c4:08:ed:b4:55:df:d4:88:11:b9:33:4c:0d:82:2c:e9:0a:e8: 0e:e3:41:81:26:a9:82:5f:fb:2d:18:ec:c5:db:32:80:e5:f9: a9:9d:78:bd:ab:9a:11:30:8a:e9:9f:a5:40:02:21:f6:8b:25: 2a:41:7f:9a:10:ca:12:74:76:79:a8:0e:d9:ba:c4:d8:5b:4c: 03:01:aa:ac:b2:95:ab:68:06:d4:7b:f0:c5:a7:82:79:94:71: 06:1f:3d:4a:fb:94:70:19:09:e9:f1:63:e6:e8:f2:67:de:de: 35:05:25:29:d4:09:d4:c6:fd:bd:b1:f3:e4:22:b6:a3:14:11: 96:af:5a:c9:c1:67:c4:83:cb:ce:b4:fb:6d:81:2a:e8:ae:85: 88:42:0d:02:dd:46:b8:d8:30:31:e0:9c:30:94:a0:9a:d5:64: b6:d5:24:5c:49:c5:93:9b:66:da:af:ff:89:0f:06:32:89:3d: 21:62:18:88:d4:cc:84:c4:1b:ac:e5:4e:be:e7:f6:90:d2:56: 23:55:83:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuV0N6XE1sMZgBIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk OWVmZjM4YTctNGRlOS00OTIwLTkxMmMtOTE4N2IyNGU0NTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFF7GJ3R7HHK9a0iZrJ3E9vYAUPSWyoavTKz XzX6tVStTNb3a4ynhACVD2FnoSpcwwaQtobmFm3iM9N7tZR98sA7PUz7hgO4iFKz D9FkrcxW1TC1WvBL7ZRc2rbcaWatxtGtLTvjqfrvD9KXAKkZikpbpQsfd0z+MIlD m4bakLKmWttWxZRMUx08C2bggwX1WdI3tZLSh4heRHL0PMLS7Pqc49HJLksr4DW5 0n8NW6OyaRUI/MwlkxCPYJjh6XKi1DnTeCxFIHvYQpErQv/Lf0vM2mPV5YqI2Qal kx3S5P3C07+iXwsn3UwaY9j1wwPIp5P1o9OG7AZLe7sKu2lJvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD6XfJExXXmcdMOCwxhqDOFeoMmzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZWZlM2E1NTgtYzQxMi0z NjRiLWExODQtMjI3YTg5ZGI5ZTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ6HcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8x52486UHThE9Unc9Vjcz+QKvnyURFBHS+xgJzLhFzyNGz3DG8QlzZ toldXFOfzShl5gxY6cQI7bRV39SIEbkzTA2CLOkK6A7jQYEmqYJf+y0Y7MXbMoDl +amdeL2rmhEwiumfpUACIfaLJSpBf5oQyhJ0dnmoDtm6xNhbTAMBqqyylatoBtR7 8MWngnmUcQYfPUr7lHAZCenxY+bo8mfe3jUFJSnUCdTG/b2x8+QitqMUEZavWsnB Z8SDy860+22BKuiuhYhCDQLdRrjYMDHgnDCUoJrVZLbVJFxJxZObZtqv/4kPBjKJ PSFiGIjUzITEG6zlTr7n9pDSViNVg/E= -----END CERTIFICATE-----Generated at Mon Mar 2 06:27:41 2026 by rpki-client