$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3445af72-31a2-3d40-bfbf-b77c4c944923.roa File: 3445af72-31a2-3d40-bfbf-b77c4c944923.roa (raw, json) Hash identifier: +igkBosjuBnjJZGRbW/rQBDRM47Q6p2VhHexOY6xZT8= Subject key identifier: 5C:1B:C9:4E:91:7C:73:F2:62:C8:97:C0:4B:CD:4D:12:98:A3:E0:81 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5B57B93400CBC41F312EE0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3445af72-31a2-3d40-bfbf-b77c4c944923.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 24.14.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5b:57:b9:34:00:cb:c4:1f:31:2e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=ef92595d-808c-4e32-82c6-f37243e038d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:09:e3:04:03:79:ee:5e:bc:fe:aa:52:3f:f1: e8:db:1d:84:73:61:03:fd:0b:05:39:2d:11:b3:04: 81:9a:70:d9:ee:3a:18:58:20:25:5a:da:96:a6:c6: 84:78:e1:fd:2e:45:4a:e2:89:6b:43:28:23:6c:0f: eb:5a:6b:41:fd:b8:2f:c6:70:10:d2:bd:79:66:1a: f0:ff:32:7e:40:02:ec:90:2a:17:1a:e7:03:5f:1e: 58:32:09:ba:54:92:5a:cb:03:61:78:06:43:4a:5a: 4d:0e:b6:fc:6a:26:74:9f:a6:0c:df:46:09:c4:54: 0d:86:15:c8:a6:a5:ae:c8:c4:6d:31:18:b2:10:ba: c6:b6:21:64:51:e8:23:9d:63:0c:6c:78:b8:56:cf: 16:45:49:57:15:c8:42:25:a3:c2:56:32:28:18:62: fb:48:56:dd:dc:b9:c0:e9:c1:8b:98:d8:76:ff:7c: 9b:c7:5a:8f:9a:16:e3:b6:7d:05:cc:a8:4f:da:e0: d9:10:75:c9:37:ba:83:90:69:7e:58:3b:59:6b:4a: c4:04:ca:fa:0c:56:fe:7e:44:1a:7a:00:ca:cd:a8: cc:72:66:6b:f8:b7:55:55:1b:8f:92:b4:d5:e4:c1: 64:e1:29:8b:4f:16:6b:d4:43:db:10:76:73:5a:6b: 1c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:1B:C9:4E:91:7C:73:F2:62:C8:97:C0:4B:CD:4D:12:98:A3:E0:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3445af72-31a2-3d40-bfbf-b77c4c944923.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.14.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:06:66:b9:7c:3d:67:48:6d:8d:34:e9:f0:7b:f5:d4:38:28: 23:fd:11:45:70:96:b5:a2:37:a4:b4:43:95:3a:22:16:0d:a8: 94:03:7f:46:a6:3a:51:b1:24:71:82:74:b3:25:5a:57:36:cb: ad:7d:60:69:c9:ed:a9:71:57:ab:e6:ef:c6:2a:3f:a5:ab:39: 7f:44:19:1d:37:22:14:6d:2b:78:15:58:f5:60:3d:22:cb:3f: 16:c8:6b:18:9c:f6:13:3b:60:c4:27:69:db:49:07:d0:b1:c8: 46:35:07:1a:91:fb:6e:91:f7:04:ec:a3:1b:ce:00:6f:3b:cd: 4a:aa:a6:a7:aa:68:84:6d:2a:6a:4e:4e:eb:31:2a:6c:b5:7a: 02:c4:0d:0a:e3:ba:b4:7d:17:a4:3f:ec:b1:3e:01:82:e7:41: a5:4c:b0:b7:b4:43:ae:d4:7e:a3:84:82:17:25:6f:79:7b:70: dc:f9:f9:7f:99:9e:22:53:20:e0:c5:c3:8a:ea:94:17:c7:8c: 62:16:12:ec:55:55:18:08:94:d1:fc:c1:d5:3a:dd:31:db:46: 0d:ab:b7:95:56:07:02:fc:bd:af:32:5a:25:e0:1a:6a:c3:ef: 58:1e:0f:08:3f:93:6d:ab:b4:83:a4:f3:04:d9:78:06:dd:27: d8:13:1e:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuW1e5NADLxB8xLuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZWY5MjU5NWQtODA4Yy00ZTMyLTgyYzYtZjM3MjQzZTAzOGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAnjBAN57l68/qpSP/Ho2x2Ec2ED/QsFOS0R swSBmnDZ7joYWCAlWtqWpsaEeOH9LkVK4olrQygjbA/rWmtB/bgvxnAQ0r15Zhrw /zJ+QALskCoXGucDXx5YMgm6VJJaywNheAZDSlpNDrb8aiZ0n6YM30YJxFQNhhXI pqWuyMRtMRiyELrGtiFkUegjnWMMbHi4Vs8WRUlXFchCJaPCVjIoGGL7SFbd3LnA 6cGLmNh2/3ybx1qPmhbjtn0FzKhP2uDZEHXJN7qDkGl+WDtZa0rEBMr6DFb+fkQa egDKzajMcmZr+LdVVRuPkrTV5MFk4SmLTxZr1EPbEHZzWmsczQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFwbyU6RfHPyYsiXwEvNTRKYo+CBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzQ0NWFmNzItMzFhMi0z ZDQwLWJmYmYtYjc3YzRjOTQ0OTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGA58MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsGZrl8PWdIbY006fB79dQ4KCP9EUVwlrWiN6S0Q5U6IhYNqJQDf0am OlGxJHGCdLMlWlc2y619YGnJ7alxV6vm78YqP6WrOX9EGR03IhRtK3gVWPVgPSLL PxbIaxic9hM7YMQnadtJB9CxyEY1BxqR+26R9wTsoxvOAG87zUqqpqeqaIRtKmpO TusxKmy1egLEDQrjurR9F6Q/7LE+AYLnQaVMsLe0Q67UfqOEghclb3l7cNz5+X+Z niJTIODFw4rqlBfHjGIWEuxVVRgIlNH8wdU63THbRg2rt5VWBwL8va8yWiXgGmrD 71geDwg/k22rtIOk8wTZeAbdJ9gTHuY= -----END CERTIFICATE-----Generated at Sun Mar 1 23:13:11 2026 by rpki-client