$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1df0a5ae-2151-3955-a787-2b5b2416be31.roa File: 1df0a5ae-2151-3955-a787-2b5b2416be31.roa (raw, json) Hash identifier: 5+3aoBLrnmNcYn+lL8a8FTHoAG8zv4TgdXa5lOex5zA= Subject key identifier: C7:19:E1:8E:F7:55:45:BA:51:21:38:F3:29:BD:8D:5A:88:EB:1D:7B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE57EF4F2851971FE7334BC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1df0a5ae-2151-3955-a787-2b5b2416be31.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 24.1.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:ef:4f:28:51:97:1f:e7:33:4b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=c0b68b26-5ed6-490c-ab74-7eba25c696aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c2:1a:9f:f9:0d:f4:54:b0:9c:63:af:9a:62: ef:ef:18:17:89:50:ba:57:6f:e8:48:5f:f6:0b:75: 0d:73:ff:ef:c9:04:6b:83:96:19:63:ff:9b:17:b6: 64:0a:e6:9e:12:40:43:d3:bc:1f:34:da:de:72:d1: c6:2f:0c:56:70:ce:0a:97:d8:c7:c3:ba:d0:a7:f3: 14:75:12:5b:8b:4d:f3:70:06:5f:9b:8a:a4:60:32: a0:af:7b:2e:03:ca:dc:85:ac:5a:c6:e0:2b:0f:3c: e3:8d:74:9c:e4:5f:c0:36:51:6b:26:db:85:21:d8: 9f:3a:2f:59:a4:6e:43:8d:fd:da:65:be:c0:60:b5: 6e:92:3f:15:e9:7c:c7:66:ac:0d:ac:4e:a9:05:12: aa:a6:99:57:88:53:a2:3c:9e:90:77:d3:08:e3:31: c6:7e:e2:c2:9a:81:04:75:66:bf:d1:6f:6c:47:12: d9:f7:a5:26:c9:88:5b:2e:79:2e:e7:cf:15:d7:6d: 6e:c4:9b:a2:c5:02:6c:ff:46:00:93:24:4a:d0:46: 0a:72:0d:7c:9f:0b:19:e6:54:21:2d:ef:1e:18:ae: 80:0b:48:c1:5a:c9:e4:84:ac:43:dc:b0:53:ef:30: 67:f2:ae:1b:a4:4a:48:26:e1:5d:04:d1:e3:31:e1: a3:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:19:E1:8E:F7:55:45:BA:51:21:38:F3:29:BD:8D:5A:88:EB:1D:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1df0a5ae-2151-3955-a787-2b5b2416be31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.1.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:91:18:a0:da:b7:db:00:7f:f6:cb:cd:b0:63:88:59:ce:27: ee:67:30:6e:01:65:ab:2c:73:5d:a6:83:a7:57:5c:fa:30:ed: 20:48:3b:3a:e4:89:75:96:75:e3:21:c8:8d:df:55:b3:c2:5f: 00:c5:2c:e7:b6:23:1a:37:1d:a5:82:2f:c2:9b:0c:78:6c:c4: 7e:cb:b3:7e:bd:1b:a0:03:a1:63:bd:67:23:19:e5:3a:95:97: 5a:c8:35:90:ca:2b:f7:ee:e5:91:dd:b0:a1:23:dd:08:fd:56: ce:f1:aa:71:3e:d3:b2:82:f3:46:29:f7:9a:d5:aa:ac:86:24: f7:91:61:b9:84:fc:6c:d1:54:a5:93:73:f3:d9:26:35:cd:d0: d6:71:15:0d:cf:fb:29:57:4d:4e:c1:a5:d6:63:64:a4:e9:20: 08:ce:d0:aa:b4:cb:0b:aa:f0:44:a4:a7:f6:ac:58:da:6b:64: bc:16:ad:2e:09:b5:33:22:72:b8:08:32:d3:52:02:c3:fb:ce: 3d:7a:ed:39:0d:2d:cd:94:01:70:3d:19:c5:a3:54:1e:6d:38: 4b:4c:aa:fe:e4:f1:da:7d:aa:1c:94:50:49:98:b6:da:14:16: 3c:13:fd:66:74:ae:68:80:65:5f:fe:d7:00:3f:6c:35:8c:7d: 8f:e8:fc:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuV+9PKFGXH+czS8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YzBiNjhiMjYtNWVkNi00OTBjLWFiNzQtN2ViYTI1YzY5NmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMIan/kN9FSwnGOvmmLv7xgXiVC6V2/oSF/2 C3UNc//vyQRrg5YZY/+bF7ZkCuaeEkBD07wfNNrectHGLwxWcM4Kl9jHw7rQp/MU dRJbi03zcAZfm4qkYDKgr3suA8rchaxaxuArDzzjjXSc5F/ANlFrJtuFIdifOi9Z pG5Djf3aZb7AYLVukj8V6XzHZqwNrE6pBRKqpplXiFOiPJ6Qd9MI4zHGfuLCmoEE dWa/0W9sRxLZ96UmyYhbLnku588V121uxJuixQJs/0YAkyRK0EYKcg18nwsZ5lQh Le8eGK6AC0jBWsnkhKxD3LBT7zBn8q4bpEpIJuFdBNHjMeGjvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMcZ4Y73VUW6USE48ym9jVqI6x17MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWRmMGE1YWUtMjE1MS0z OTU1LWE3ODctMmI1YjI0MTZiZTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGAHqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMqRGKDat9sAf/bLzbBjiFnOJ+5nMG4BZassc12mg6dXXPow7SBIOzrk iXWWdeMhyI3fVbPCXwDFLOe2Ixo3HaWCL8KbDHhsxH7Ls369G6ADoWO9ZyMZ5TqV l1rINZDKK/fu5ZHdsKEj3Qj9Vs7xqnE+07KC80Yp95rVqqyGJPeRYbmE/GzRVKWT c/PZJjXN0NZxFQ3P+ylXTU7BpdZjZKTpIAjO0Kq0ywuq8ESkp/asWNprZLwWrS4J tTMicrgIMtNSAsP7zj167TkNLc2UAXA9GcWjVB5tOEtMqv7k8dp9qhyUUEmYttoU FjwT/WZ0rmiAZV/+1wA/bDWMfY/o/HA= -----END CERTIFICATE-----Generated at Sun Mar 1 18:59:41 2026 by rpki-client