$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/399ee080-2859-33ce-ad3f-5df289ca51e0.roa File: 399ee080-2859-33ce-ad3f-5df289ca51e0.roa (raw, json) Hash identifier: OuiUBzKVHt8FG2VFDqBtQuUOYxWs8LsJb2McmOIY88A= Subject key identifier: DA:52:E9:F1:4F:48:20:4B:E6:31:6C:82:44:BF:CF:8B:3F:86:D6:4C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CFDE8EA9A9CEF55FB037AD8C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/399ee080-2859-33ce-ad3f-5df289ca51e0.roa Signing time: Thu 26 Feb 2026 14:00:40 +0000 ROA not before: Thu 26 Feb 2026 14:00:40 +0000 ROA not after: Wed 27 May 2026 13:00:40 +0000 asID: 33491 IP address blocks: 96.66.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:e8:ea:9a:9c:ef:55:fb:03:7a:d8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 26 14:00:40 2026 GMT Not After : May 27 13:00:40 2026 GMT Subject: CN=9a54cce3-362d-4811-ad46-4015b5873a98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:dc:29:ec:e3:4e:86:7a:06:d9:e9:15:06:1c: d2:03:39:58:eb:d5:ac:45:49:32:e6:07:70:0e:6d: 03:72:ff:ef:94:c5:a8:a7:5b:83:95:ed:5c:7c:75: b0:cf:66:5b:be:f3:64:cb:8a:a5:12:94:9b:1f:35: 37:ed:a9:65:af:bf:1c:28:b4:b8:95:10:53:8a:96: 9d:39:8e:d0:60:be:39:0f:7e:64:04:57:9a:5c:0f: b7:68:8c:53:e5:06:02:82:6d:d5:a8:82:45:77:64: 1a:45:cf:17:18:e6:e9:93:37:85:8e:3b:0f:a8:72: d0:0c:b9:45:e1:fe:c0:5b:37:41:d9:2a:85:aa:05: 27:d7:b0:48:f0:87:ec:46:36:d4:8c:09:87:26:40: e5:4a:55:73:84:49:e9:50:55:2f:02:01:bb:12:e8: 94:0a:1c:ce:28:c2:6f:c7:ef:cf:5f:51:9c:c4:9f: a5:43:31:04:6e:c4:ce:92:9e:54:1b:bd:68:ca:14: 6e:f2:0d:53:3e:2b:bc:3b:2f:df:f1:1b:77:f1:47: 2b:8a:02:75:10:e7:ba:24:e2:65:11:91:60:85:9c: d5:f4:8b:16:ca:a3:3e:7e:d4:de:7b:aa:eb:8d:ea: 10:46:7f:e8:60:fd:5f:32:3a:4b:24:60:65:1e:bd: 3a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:52:E9:F1:4F:48:20:4B:E6:31:6C:82:44:BF:CF:8B:3F:86:D6:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/399ee080-2859-33ce-ad3f-5df289ca51e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.66.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:88:01:07:08:47:21:a6:4d:04:ad:9f:e4:09:2a:a3:41:d6: 97:9a:bd:f3:ee:04:4b:2d:02:b6:e1:fe:c7:47:d8:a1:8a:ea: 47:25:bf:85:58:8a:73:2a:fa:0e:45:98:d0:73:97:fc:bd:16: 68:21:6f:61:0e:a2:c2:aa:38:0d:83:c1:25:d7:53:37:12:bf: 55:e6:4d:e7:3a:27:a4:42:f0:b9:b6:e0:86:9e:dc:ba:d1:32: fe:94:ac:7d:67:5e:01:19:4a:eb:6e:ee:49:f3:da:f8:01:fb: cd:ce:bf:5a:11:14:70:44:a5:96:f0:76:62:88:63:98:c3:38: 51:d4:51:05:bc:d9:e4:2a:d4:97:0c:8f:75:ff:e2:f4:4b:1b: b5:b0:78:a0:05:19:53:d6:37:59:9a:74:32:8f:7e:e4:e4:b4: f5:8c:24:62:5d:09:01:e8:64:4d:91:92:7b:4c:73:ed:7a:61: a1:81:30:ea:44:7c:d6:4c:82:85:32:3b:15:3c:37:32:c9:32: db:55:44:ea:6b:f9:c5:b0:94:8c:d9:6a:d7:79:a8:8f:b5:b5: 2c:8c:cc:ca:22:3b:d7:7d:13:11:49:dd:22:d1:59:b4:0a:40: 16:5d:89:de:ff:c8:f1:a0:40:26:f9:4a:90:4f:58:57:6c:a7: 2d:4d:11:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz96OqanO9V+wN62MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk OWE1NGNjZTMtMzYyZC00ODExLWFkNDYtNDAxNWI1ODczYTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdwp7ONOhnoG2ekVBhzSAzlY69WsRUky5gdw Dm0Dcv/vlMWop1uDle1cfHWwz2ZbvvNky4qlEpSbHzU37allr78cKLS4lRBTipad OY7QYL45D35kBFeaXA+3aIxT5QYCgm3VqIJFd2QaRc8XGObpkzeFjjsPqHLQDLlF 4f7AWzdB2SqFqgUn17BI8IfsRjbUjAmHJkDlSlVzhEnpUFUvAgG7EuiUChzOKMJv x+/PX1GcxJ+lQzEEbsTOkp5UG71oyhRu8g1TPiu8Oy/f8Rt38UcrigJ1EOe6JOJl EZFghZzV9IsWyqM+ftTee6rrjeoQRn/oYP1fMjpLJGBlHr06GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNpS6fFPSCBL5jFsgkS/z4s/htZMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzk5ZWUwODAtMjg1OS0z M2NlLWFkM2YtNWRmMjg5Y2E1MWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYEKQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGIAQcIRyGmTQStn+QJKqNB1peavfPuBEstArbh/sdH2KGK6kclv4VY inMq+g5FmNBzl/y9Fmghb2EOosKqOA2DwSXXUzcSv1XmTec6J6RC8Lm24Iae3LrR Mv6UrH1nXgEZSutu7knz2vgB+83Ov1oRFHBEpZbwdmKIY5jDOFHUUQW82eQq1JcM j3X/4vRLG7WweKAFGVPWN1madDKPfuTktPWMJGJdCQHoZE2RkntMc+16YaGBMOpE fNZMgoUyOxU8NzLJMttVROpr+cWwlIzZatd5qI+1tSyMzMoiO9d9ExFJ3SLRWbQK QBZdid7/yPGgQCb5SpBPWFdspy1NERY= -----END CERTIFICATE-----Generated at Sun Mar 1 20:45:09 2026 by rpki-client