$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f89130ab-169d-3f83-9ea1-bd0b74579c4c.roa File: f89130ab-169d-3f83-9ea1-bd0b74579c4c.roa (raw, json) Hash identifier: KXu/xE9lWlSYGlQgZjJqB0alXpfmowzmTnKLQof9ltI= Subject key identifier: 60:B0:1D:45:46:05:4A:4F:DB:21:15:A8:66:CE:9F:5B:26:95:13:FF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE58BF60EA7935B8E9FBDD80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f89130ab-169d-3f83-9ea1-bd0b74579c4c.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 67.164.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:bf:60:ea:79:35:b8:e9:fb:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=2b847d85-fabe-4b12-9c5a-6839d667b699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:08:86:15:b4:a8:12:3f:ad:a2:d6:17:6d:aa: 94:8e:2f:eb:c3:b4:7c:c3:a6:a3:19:d5:28:90:21: e4:47:82:a9:8a:8d:34:97:2c:cd:f9:17:37:d3:02: c3:0b:3a:c2:9b:17:80:ac:ba:0b:17:46:d7:95:91: c8:c6:e2:77:54:ef:36:19:63:3c:56:4c:d6:3f:59: e2:b4:34:86:3d:37:5a:c2:f4:6a:ed:99:f6:83:87: ab:eb:0a:24:09:d1:a4:ad:ba:78:61:56:32:81:c4: ab:e3:08:12:0e:ff:98:3d:6c:93:ae:11:79:e7:ee: 27:5e:26:05:8a:81:08:63:4c:29:dc:a7:fa:ad:27: 2f:29:0e:89:21:4d:ad:e1:83:27:c3:96:c8:16:f4: 18:b8:95:67:46:81:fb:d8:f0:81:8d:fd:36:f3:6a: 26:d0:60:48:05:63:33:59:52:38:63:c5:82:7b:b6: 09:16:ce:cc:44:71:d8:f5:9e:f9:9d:ab:76:a2:f7: 1c:4b:0e:a7:8e:4d:b1:65:14:db:db:6f:33:d2:c4: a6:f9:fd:2d:e9:17:a8:75:08:2a:10:d9:28:51:ec: a9:c1:f0:26:70:af:65:64:56:05:58:9f:19:5b:1e: 46:d2:e9:9b:86:c7:32:ef:07:20:14:26:c9:22:27: 72:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B0:1D:45:46:05:4A:4F:DB:21:15:A8:66:CE:9F:5B:26:95:13:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f89130ab-169d-3f83-9ea1-bd0b74579c4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.164.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:17:50:53:e1:b8:84:b6:85:b1:35:d9:77:bf:45:e3:5e:61: 1c:83:83:2d:87:70:c0:f7:b9:a2:4d:19:c5:07:2a:ac:d5:50: d4:06:13:5d:d4:63:68:65:c3:12:45:85:4d:39:d6:d1:f2:23: a5:1a:99:d3:4c:71:9a:f3:42:d9:fa:2f:b1:d2:b4:e2:62:5b: bc:17:bf:3f:c0:ec:f6:82:70:48:62:c2:74:c0:cb:7b:36:96: b0:d1:c7:c2:b3:93:1f:42:7e:b1:fb:13:d1:65:61:0e:5e:05: f1:f8:17:aa:e6:7c:8a:f7:1b:ee:b0:d7:c9:27:74:c4:25:54: b4:75:98:c5:c1:01:bf:f8:be:d0:4b:17:25:29:18:bd:41:b5: 7c:fb:58:a9:46:7b:e0:33:3e:38:f1:c5:2a:1e:35:d2:2c:cb: 30:24:29:03:1c:f4:e9:34:02:cb:ad:ed:b7:f9:35:0e:69:11: bf:47:51:e3:e0:79:c6:5c:91:e9:9f:e8:e6:ef:37:60:a8:ee: f1:f9:d5:ad:39:bf:60:fe:7f:a9:e5:5f:ba:05:83:2e:dc:f4: b5:a9:9b:11:9a:4e:2f:69:e6:17:d0:5c:10:56:ea:ba:25:d6: d3:57:40:32:37:78:e8:83:59:18:fe:85:78:c4:63:52:4d:ba: d8:87:dd:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWL9g6nk1uOn73YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MmI4NDdkODUtZmFiZS00YjEyLTljNWEtNjgzOWQ2NjdiNjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAiGFbSoEj+totYXbaqUji/rw7R8w6ajGdUo kCHkR4Kpio00lyzN+Rc30wLDCzrCmxeArLoLF0bXlZHIxuJ3VO82GWM8VkzWP1ni tDSGPTdawvRq7Zn2g4er6wokCdGkrbp4YVYygcSr4wgSDv+YPWyTrhF55+4nXiYF ioEIY0wp3Kf6rScvKQ6JIU2t4YMnw5bIFvQYuJVnRoH72PCBjf0282om0GBIBWMz WVI4Y8WCe7YJFs7MRHHY9Z75nat2ovccSw6njk2xZRTb228z0sSm+f0t6ReodQgq ENkoUeypwfAmcK9lZFYFWJ8ZWx5G0umbhscy7wcgFCbJIidy7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCwHUVGBUpP2yEVqGbOn1smlRP/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjg5MTMwYWItMTY5ZC0z ZjgzLTllYTEtYmQwYjc0NTc5YzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ6RsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0XUFPhuIS2hbE12Xe/ReNeYRyDgy2HcMD3uaJNGcUHKqzVUNQGE13U Y2hlwxJFhU051tHyI6UamdNMcZrzQtn6L7HStOJiW7wXvz/A7PaCcEhiwnTAy3s2 lrDRx8Kzkx9CfrH7E9FlYQ5eBfH4F6rmfIr3G+6w18kndMQlVLR1mMXBAb/4vtBL FyUpGL1BtXz7WKlGe+AzPjjxxSoeNdIsyzAkKQMc9Ok0Asut7bf5NQ5pEb9HUePg ecZckemf6ObvN2Co7vH51a05v2D+f6nlX7oFgy7c9LWpmxGaTi9p5hfQXBBW6rol 1tNXQDI3eOiDWRj+hXjEY1JNutiH3f4= -----END CERTIFICATE-----Generated at Sun Mar 1 23:24:54 2026 by rpki-client