$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df83eaae-4dfe-3bac-8fb6-ae2e1839855b.roa File: df83eaae-4dfe-3bac-8fb6-ae2e1839855b.roa (raw, json) Hash identifier: Rzin0q8npeTCXQqntRjYK4GnRct0hqS8zzFmJbV3A/s= Subject key identifier: 1F:9D:65:85:A5:C1:42:94:D9:33:14:6C:4B:C0:C6:9C:E3:B2:C9:B1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D143D36169CD43142ADB06850 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df83eaae-4dfe-3bac-8fb6-ae2e1839855b.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 33651 IP address blocks: 67.164.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Mar 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:36:16:9c:d4:31:42:ad:b0:68:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=2199da6d-7f78-4f73-9533-8361eb55676b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:8a:e7:66:ca:54:9e:27:21:28:e9:c3:70:4e: 01:af:6c:3e:3b:55:0a:99:0d:28:d5:4e:c9:84:bb: a3:da:79:7b:f8:67:3d:ae:41:e2:a3:12:f6:ff:76: a8:67:a4:be:03:d0:3f:bc:92:bb:b9:2d:ac:09:7c: a5:2b:cc:0c:2e:b9:b5:ab:51:02:19:5b:90:a2:73: d8:c3:2a:5e:e0:25:1b:99:16:d3:a7:66:bf:33:e9: 58:c3:aa:8c:e8:5c:45:ce:11:8c:8f:4c:07:74:2e: b5:f5:11:7b:c3:5c:af:44:04:7e:5a:92:af:85:73: c3:27:ce:66:84:f7:43:3d:5a:4b:97:50:b5:e9:eb: 60:87:ae:e2:2c:1f:c6:6d:83:46:8a:65:35:a5:ce: 07:06:12:be:38:6a:76:9f:83:b4:ad:79:98:2b:ae: 65:6d:3a:cd:83:96:90:f4:32:b2:d7:34:3e:67:c0: 5d:e7:c1:56:6e:28:a6:6e:46:34:7b:75:ab:04:e2: 01:a0:4a:da:ee:5e:19:37:3f:14:5a:e0:91:c0:0d: 74:51:64:87:4a:f5:b7:ef:55:fd:41:7b:c3:ca:81: 51:63:72:97:fe:42:14:2d:07:94:81:63:8e:11:52: 43:de:1f:dc:d8:3e:15:62:1e:52:33:a6:07:07:9f: b6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:9D:65:85:A5:C1:42:94:D9:33:14:6C:4B:C0:C6:9C:E3:B2:C9:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df83eaae-4dfe-3bac-8fb6-ae2e1839855b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.164.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:ea:b7:66:52:b5:81:99:1d:12:bd:78:79:9b:e0:31:b6:5c: 8d:56:22:ba:d9:e7:c2:c5:bd:11:55:bc:f1:91:72:68:70:1d: 11:f5:93:26:5b:6b:2d:d9:92:9f:29:c3:8d:da:76:e2:49:20: 0b:2c:d4:d1:f9:0c:47:c6:3f:c6:93:cb:6d:17:02:dc:11:ef: f1:7b:be:a9:59:de:96:c7:82:59:61:07:35:40:72:2e:e1:ad: a6:fd:34:7e:f4:67:bd:9e:9e:83:ca:5d:f5:f3:32:32:0b:de: 4e:f4:81:18:45:99:d0:4d:cb:b5:4b:ed:dd:b7:b6:22:37:0d: 55:1b:38:f4:79:3c:fa:ff:6c:be:00:4b:5c:49:c1:00:ef:62: ff:10:98:ea:da:0a:62:c6:9f:4c:8a:ca:28:5f:d0:98:96:94: 0e:04:73:40:27:91:ca:10:5e:28:d3:a1:e2:52:c3:47:8b:4c: d1:98:45:4b:81:e5:ad:1b:90:55:a3:b3:13:f7:2b:cd:aa:09: 1b:6f:e7:d3:d5:0a:a6:69:62:a0:40:63:25:77:c6:4a:85:bf: 31:92:a5:90:5a:0f:55:19:a5:80:87:79:0d:91:c1:0e:de:5f: 0f:7f:0b:ec:cd:e2:33:b9:b9:86:c6:3e:0d:55:aa:20:d2:55: 50:37:d6:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPTYWnNQxQq2waFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk MjE5OWRhNmQtN2Y3OC00ZjczLTk1MzMtODM2MWViNTU2NzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIrnZspUnichKOnDcE4Br2w+O1UKmQ0o1U7J hLuj2nl7+Gc9rkHioxL2/3aoZ6S+A9A/vJK7uS2sCXylK8wMLrm1q1ECGVuQonPY wype4CUbmRbTp2a/M+lYw6qM6FxFzhGMj0wHdC619RF7w1yvRAR+WpKvhXPDJ85m hPdDPVpLl1C16etgh67iLB/GbYNGimU1pc4HBhK+OGp2n4O0rXmYK65lbTrNg5aQ 9DKy1zQ+Z8Bd58FWbiimbkY0e3WrBOIBoEra7l4ZNz8UWuCRwA10UWSHSvW371X9 QXvDyoFRY3KX/kIULQeUgWOOEVJD3h/c2D4VYh5SM6YHB5+2vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+dZYWlwUKU2TMUbEvAxpzjssmxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGY4M2VhYWUtNGRmZS0z YmFjLThmYjYtYWUyZTE4Mzk4NTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ6QgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3qt2ZStYGZHRK9eHmb4DG2XI1WIrrZ58LFvRFVvPGRcmhwHRH1kyZb ay3Zkp8pw43aduJJIAss1NH5DEfGP8aTy20XAtwR7/F7vqlZ3pbHgllhBzVAci7h rab9NH70Z72enoPKXfXzMjIL3k70gRhFmdBNy7VL7d23tiI3DVUbOPR5PPr/bL4A S1xJwQDvYv8QmOraCmLGn0yKyihf0JiWlA4Ec0AnkcoQXijToeJSw0eLTNGYRUuB 5a0bkFWjsxP3K82qCRtv59PVCqZpYqBAYyV3xkqFvzGSpZBaD1UZpYCHeQ2RwQ7e Xw9/C+zN4jO5uYbGPg1VqiDSVVA31oI= -----END CERTIFICATE-----Generated at Sat Mar 7 10:12:45 2026 by rpki-client