$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38b1ece0-3408-3709-bba8-525def035f6f.roa File: 38b1ece0-3408-3709-bba8-525def035f6f.roa (raw, json) Hash identifier: MB7J7pylqPJ9pm4dc4qezh5Mh8W2NhPuQW+3DyLs7ww= Subject key identifier: F4:4B:24:4E:75:C9:C7:DA:A5:D5:72:D3:70:3B:4F:BE:F0:96:81:57 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5B51749AC27CE9326FCC80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38b1ece0-3408-3709-bba8-525def035f6f.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 24.13.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5b:51:74:9a:c2:7c:e9:32:6f:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=52fb17ee-64b7-4634-ac3f-616fbb21dcd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:22:5c:c2:18:14:bd:56:f1:0d:ca:d9:8c:8d: c0:11:ba:e1:eb:85:cd:b2:1a:c7:6f:1a:f6:a1:5e: 44:f6:95:48:03:4c:40:c9:46:8b:70:05:9e:9b:b6: 9d:87:36:9b:98:d5:8f:5c:b7:0b:f6:7e:d2:ec:ea: e9:21:c2:1a:7c:58:82:ce:c7:d6:aa:ec:52:b4:e5: 13:5c:7d:8f:c3:0f:15:9e:39:68:f5:7c:0f:c5:97: 48:50:1f:b4:fd:e7:e7:0c:4b:9e:40:f9:ca:12:fb: e6:ea:74:5a:84:d7:3c:f2:d3:6c:a4:95:4d:2a:b8: 0c:2b:40:76:65:61:2b:6d:29:ce:a8:76:cb:34:a9: b0:8d:5b:b1:9d:dc:63:ab:0d:8a:49:57:ef:9e:95: fd:74:e9:0a:6b:5e:d3:55:65:87:f3:c2:e7:92:f0: 6a:75:fc:3b:b6:28:4f:96:d1:40:f9:9f:3d:70:9f: 14:df:d9:4d:bd:b6:d3:94:34:67:c1:1f:c6:02:e1: 8d:58:1d:ed:81:78:bc:34:5b:74:29:c6:8a:45:cf: 7f:c3:2b:ef:a5:42:74:b2:27:47:08:e5:0e:33:07: 75:e8:bd:d2:a9:75:c2:06:ee:6b:b5:4a:2d:db:ee: 48:b8:2e:e3:04:8f:99:7b:dc:d8:7d:20:52:0c:72: 4e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:4B:24:4E:75:C9:C7:DA:A5:D5:72:D3:70:3B:4F:BE:F0:96:81:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38b1ece0-3408-3709-bba8-525def035f6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.13.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:1f:3e:89:96:47:32:5f:80:ae:0a:df:6b:0c:8a:f4:2d:92: 52:5b:e1:29:8a:57:95:e6:f7:d7:0c:8c:84:7b:a5:b7:8d:a0: c0:08:65:fa:e4:03:25:88:ed:96:c9:28:a1:51:35:66:4e:50: c8:da:f0:bf:79:db:1b:0d:24:be:3f:41:1b:f9:d8:fd:17:28: 7a:a1:17:25:3d:54:f5:36:7f:05:47:d7:01:2c:86:11:0a:c5: b0:d0:ff:aa:84:aa:b4:5c:86:a3:4f:7a:e9:b4:b6:5f:01:22: e6:37:ad:59:ad:1a:b5:74:73:db:7a:d8:1c:c5:20:fd:29:b0: a0:40:7a:df:fd:80:2c:78:4c:ce:3a:3e:af:a6:d9:02:75:38: 39:9c:5b:44:9d:d1:17:74:e8:a3:00:21:a5:3e:bf:ab:76:8e: 05:16:f4:b9:33:ee:39:43:fd:7f:06:a6:bf:ca:7a:9b:1b:65: 43:4b:d8:e2:28:5c:95:2f:79:31:c7:21:4a:1c:23:af:1f:9a: b3:1d:ae:66:30:04:44:8a:b8:ba:b0:07:4f:20:99:78:25:be: 09:00:3a:d1:d7:0b:e0:3d:cd:5e:c4:1a:4f:43:77:b3:38:58: 45:55:8a:ef:0e:bf:95:f4:ac:e8:61:4c:a2:51:23:5e:ba:70: e9:d1:50:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuW1F0msJ86TJvzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NTJmYjE3ZWUtNjRiNy00NjM0LWFjM2YtNjE2ZmJiMjFkY2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSJcwhgUvVbxDcrZjI3AEbrh64XNshrHbxr2 oV5E9pVIA0xAyUaLcAWem7adhzabmNWPXLcL9n7S7OrpIcIafFiCzsfWquxStOUT XH2Pww8Vnjlo9XwPxZdIUB+0/efnDEueQPnKEvvm6nRahNc88tNspJVNKrgMK0B2 ZWErbSnOqHbLNKmwjVuxndxjqw2KSVfvnpX9dOkKa17TVWWH88LnkvBqdfw7tihP ltFA+Z89cJ8U39lNvbbTlDRnwR/GAuGNWB3tgXi8NFt0KcaKRc9/wyvvpUJ0sidH COUOMwd16L3SqXXCBu5rtUot2+5IuC7jBI+Ze9zYfSBSDHJObQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPRLJE51ycfapdVy03A7T77wloFXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzhiMWVjZTAtMzQwOC0z NzA5LWJiYTgtNTI1ZGVmMDM1ZjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGA1wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYfPomWRzJfgK4K32sMivQtklJb4SmKV5Xm99cMjIR7pbeNoMAIZfrk AyWI7ZbJKKFRNWZOUMja8L952xsNJL4/QRv52P0XKHqhFyU9VPU2fwVH1wEshhEK xbDQ/6qEqrRchqNPeum0tl8BIuY3rVmtGrV0c9t62BzFIP0psKBAet/9gCx4TM46 Pq+m2QJ1ODmcW0Sd0Rd06KMAIaU+v6t2jgUW9Lkz7jlD/X8Gpr/KepsbZUNL2OIo XJUveTHHIUocI68fmrMdrmYwBESKuLqwB08gmXglvgkAOtHXC+A9zV7EGk9Dd7M4 WEVViu8Ov5X0rOhhTKJRI166cOnRULE= -----END CERTIFICATE-----Generated at Mon Mar 2 14:02:59 2026 by rpki-client