$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa12930a-602e-3d3d-aa88-d4e96d2c5686.roa File: aa12930a-602e-3d3d-aa88-d4e96d2c5686.roa (raw, json) Hash identifier: kCkqQXU4HiGD4rr2YhHgxMmw5Wne91O5E33ys54zuXw= Subject key identifier: 68:C9:88:6D:23:3D:5D:27:A8:18:D5:4D:80:CE:27:4F:18:E4:64:1C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D117271C4B5BEDB4F68D89FE0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa12930a-602e-3d3d-aa88-d4e96d2c5686.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 7922 IP address blocks: 76.96.226.160/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Mar 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:71:c4:b5:be:db:4f:68:d8:9f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=2b29478c-0dcf-4dc9-a167-e698f29a3f39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d9:c2:c3:0d:6f:7a:cb:ae:19:a8:01:8d:0b: d4:bb:31:3d:c4:5e:f5:37:48:e6:07:0c:fd:b9:23: 93:aa:3b:ed:0b:12:ba:e3:09:4f:24:59:3d:05:02: cb:94:55:83:6a:7d:18:27:ec:ff:42:86:b0:17:df: 46:fa:d7:71:e8:bf:3b:50:01:54:47:16:6b:91:7a: 72:7f:7b:15:11:31:b0:fe:cb:72:ec:cd:08:8a:54: a9:80:99:87:e3:e2:ad:dc:bc:f8:3f:ff:1f:53:ab: 45:07:a1:e4:93:4b:1b:58:1a:7f:8d:b4:77:c8:f6: b0:2b:57:6f:02:05:f4:1b:7b:63:37:0c:56:ac:ae: ee:b6:5b:36:14:54:80:93:98:9f:07:8d:77:da:12: a8:9b:4d:e3:1a:cc:af:3d:7d:cd:16:fd:cb:48:85: bd:60:ca:52:58:d2:97:1b:49:30:8a:9c:57:99:48: cd:4a:f4:47:1d:2c:92:96:4f:a6:42:e9:ff:20:37: 0f:32:c5:b7:79:b6:46:f5:2c:5d:60:ef:b1:6c:60: 79:6b:3d:5a:e2:84:c4:29:ea:68:82:d0:16:51:78: f5:f3:11:a3:0e:9b:c0:69:9e:fd:d9:f9:76:0b:ec: d6:2a:cc:e1:22:d3:d4:9c:b7:f9:74:55:70:83:52: 83:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:C9:88:6D:23:3D:5D:27:A8:18:D5:4D:80:CE:27:4F:18:E4:64:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa12930a-602e-3d3d-aa88-d4e96d2c5686.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.96.226.160/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d7:b1:d2:05:bd:d7:ee:a0:31:0f:d5:12:8b:d5:5a:2f:a3:7d: 0a:84:31:33:06:cb:db:82:26:7d:da:fe:2b:78:87:0c:2f:87: 40:9b:b8:e5:bf:23:d9:51:6d:9d:de:9f:8e:ec:50:6a:e0:fb: 44:9d:e5:73:0f:81:27:6e:48:f6:8a:25:ef:74:00:15:c6:ec: a7:f5:a9:c6:44:6c:2f:8d:f2:fa:77:d1:25:4a:4c:73:c0:1a: 12:16:95:b0:cc:e7:41:a7:03:e8:b5:d8:c9:fb:39:f2:d0:f5: f9:19:2b:8d:f8:43:f5:c5:54:29:20:e7:90:06:08:dc:58:5e: 6a:70:ae:c4:ad:92:06:cc:7d:be:41:33:eb:54:b1:a9:da:d6: 22:a4:5a:a2:0f:28:00:eb:ce:9c:5b:66:da:10:3b:72:bd:ae: 94:ee:b2:71:e8:54:72:ef:9b:d5:26:5f:6d:36:65:ca:3a:4a: 86:ec:d8:d9:5a:fc:cd:54:ee:d1:1e:5c:70:5d:cc:3d:95:85: 2e:9b:c3:94:99:60:8d:49:a0:f1:52:20:a6:6d:a2:8b:92:ec: 3a:f9:9b:28:26:c7:5b:06:6d:53:9b:8b:f6:60:47:be:d9:32: c6:1e:89:d0:89:81:0f:0e:a8:dd:1d:e1:8a:1b:ec:e2:69:91: f5:15:9c:f5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0RcnHEtb7bT2jYn+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk MmIyOTQ3OGMtMGRjZi00ZGM5LWExNjctZTY5OGYyOWEzZjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutnCww1vesuuGagBjQvUuzE9xF71N0jmBwz9 uSOTqjvtCxK64wlPJFk9BQLLlFWDan0YJ+z/QoawF99G+tdx6L87UAFURxZrkXpy f3sVETGw/sty7M0IilSpgJmH4+Kt3Lz4P/8fU6tFB6Hkk0sbWBp/jbR3yPawK1dv AgX0G3tjNwxWrK7utls2FFSAk5ifB4132hKom03jGsyvPX3NFv3LSIW9YMpSWNKX G0kwipxXmUjNSvRHHSySlk+mQun/IDcPMsW3ebZG9SxdYO+xbGB5az1a4oTEKepo gtAWUXj18xGjDpvAaZ792fl2C+zWKszhItPUnLf5dFVwg1KDewIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGjJiG0jPV0nqBjVTYDOJ08Y5GQcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWExMjkzMGEtNjAyZS0z ZDNkLWFhODgtZDRlOTZkMmM1Njg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUETGDioDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQDXsdIFvdfuoDEP1RKL1Vovo30KhDEzBsvbgiZ92v4reIcML4dAm7jl vyPZUW2d3p+O7FBq4PtEneVzD4Enbkj2iiXvdAAVxuyn9anGRGwvjfL6d9ElSkxz wBoSFpWwzOdBpwPotdjJ+zny0PX5GSuN+EP1xVQpIOeQBgjcWF5qcK7ErZIGzH2+ QTPrVLGp2tYipFqiDygA686cW2baEDtyva6U7rJx6FRy75vVJl9tNmXKOkqG7NjZ WvzNVO7RHlxwXcw9lYUum8OUmWCNSaDxUiCmbaKLkuw6+ZsoJsdbBm1Tm4v2YEe+ 2TLGHonQiYEPDqjdHeGKG+ziaZH1FZz1 -----END CERTIFICATE-----Generated at Sat Mar 7 10:10:25 2026 by rpki-client