$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40c088d8-b81a-3fba-8ce5-818f95d3d692.roa File: 40c088d8-b81a-3fba-8ce5-818f95d3d692.roa (raw, json) Hash identifier: wdaNzjXLXrl0txOAf3Bd8O0aNgWdpP6Gn8Q1K/j9UzU= Subject key identifier: 57:42:91:B9:F4:31:27:D2:6E:4E:82:15:D5:22:D3:D8:D0:85:7E:F2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE574208A9B7D7A383D50F80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40c088d8-b81a-3fba-8ce5-818f95d3d692.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33660 IP address blocks: 24.11.42.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:42:08:a9:b7:d7:a3:83:d5:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=4d20c69d-6880-4911-8954-0220dceaa0f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d8:bd:da:c0:35:64:03:8c:b8:db:80:ae:ef: bb:84:4d:10:e1:f1:1f:37:59:89:de:95:6c:b6:08: ba:89:cb:c6:db:a9:3c:a0:6f:cf:97:6b:79:63:dd: 79:49:f6:7c:d5:97:cc:d5:78:9d:99:a3:df:66:e3: ef:bb:32:62:a7:95:2b:49:b9:de:23:89:81:c1:a4: 1a:c8:26:47:c1:57:19:84:46:43:bf:39:15:46:f5: 83:c9:41:2f:7f:e3:62:7c:16:93:5d:77:84:fd:98: 22:77:9d:a7:11:21:c4:57:5a:e3:57:2b:05:cd:57: e3:62:a7:86:61:72:14:ab:66:7c:a1:bf:a2:3d:a5: 67:22:ba:12:47:86:11:f2:db:00:fd:68:21:2c:e3: f6:cc:53:97:a1:27:40:a8:39:46:03:32:42:2b:44: 60:19:d6:95:d0:64:e7:ef:0f:c7:c0:85:df:48:36: 9f:6b:87:31:e0:2c:d6:83:9a:09:be:95:9e:0d:d6: 10:28:d9:55:89:c8:bc:9b:14:9a:30:17:3f:bb:9b: 20:51:1c:1d:74:3e:17:d4:08:2f:8c:14:78:dd:c4: 01:7a:ad:d8:d7:f9:32:e3:74:97:fd:6b:a1:d4:18: 99:a2:13:38:77:db:6f:b5:75:3c:b6:12:d0:cc:85: a8:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:42:91:B9:F4:31:27:D2:6E:4E:82:15:D5:22:D3:D8:D0:85:7E:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40c088d8-b81a-3fba-8ce5-818f95d3d692.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.11.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:95:6f:ab:8c:4d:e2:c9:84:0b:a2:fb:f5:56:b6:b2:1a:5b: ab:a3:3c:6f:a0:55:a5:18:e2:bd:0b:e9:df:1c:ec:4d:90:a8: b4:91:86:f5:04:d9:07:28:d4:a2:0e:20:0f:d0:27:3d:7b:1b: 95:6e:66:1f:e2:76:31:ed:29:46:ec:81:95:ed:aa:2a:46:4d: 9e:27:82:ca:68:33:2d:44:a6:2b:31:68:c8:5a:8c:0f:20:95: 95:da:22:5e:e6:11:90:91:37:91:0d:e5:fc:2c:c6:f6:53:86: f4:d1:e3:bf:ea:ef:8f:44:04:0d:45:b5:c5:0b:0c:f0:26:a7: f8:26:ea:6e:e5:a7:d0:6f:1c:db:8f:b7:fd:18:33:31:eb:3f: e4:70:f1:12:28:8e:92:a2:f0:8e:38:f3:5b:6c:1b:02:3f:5c: 95:a0:bb:1f:0e:7c:d4:df:17:eb:8d:29:ab:cf:34:11:fd:1c: b2:97:02:10:3b:ff:dc:19:96:f2:ce:64:06:8d:de:09:60:75: 27:df:44:77:cd:b0:47:5d:f8:1d:d5:8e:ac:7b:dd:b7:92:bc: 3b:26:f3:c6:00:10:88:37:f5:29:b2:48:b2:16:ee:03:32:62: 6e:ca:6f:bf:80:da:b6:d5:fd:7f:cf:34:a1:02:aa:16:31:e4: 32:2b:f9:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuV0IIqbfXo4PVD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NGQyMGM2OWQtNjg4MC00OTExLTg5NTQtMDIyMGRjZWFhMGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9i92sA1ZAOMuNuAru+7hE0Q4fEfN1mJ3pVs tgi6icvG26k8oG/Pl2t5Y915SfZ81ZfM1XidmaPfZuPvuzJip5UrSbneI4mBwaQa yCZHwVcZhEZDvzkVRvWDyUEvf+NifBaTXXeE/Zgid52nESHEV1rjVysFzVfjYqeG YXIUq2Z8ob+iPaVnIroSR4YR8tsA/WghLOP2zFOXoSdAqDlGAzJCK0RgGdaV0GTn 7w/HwIXfSDafa4cx4CzWg5oJvpWeDdYQKNlVici8mxSaMBc/u5sgURwddD4X1Agv jBR43cQBeq3Y1/ky43SX/Wuh1BiZohM4d9tvtXU8thLQzIWobQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdCkbn0MSfSbk6CFdUi09jQhX7yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDBjMDg4ZDgtYjgxYS0z ZmJhLThjZTUtODE4Zjk1ZDNkNjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGAsqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSVb6uMTeLJhAui+/VWtrIaW6ujPG+gVaUY4r0L6d8c7E2QqLSRhvUE 2Qco1KIOIA/QJz17G5VuZh/idjHtKUbsgZXtqipGTZ4ngspoMy1EpisxaMhajA8g lZXaIl7mEZCRN5EN5fwsxvZThvTR47/q749EBA1FtcULDPAmp/gm6m7lp9BvHNuP t/0YMzHrP+Rw8RIojpKi8I4481tsGwI/XJWgux8OfNTfF+uNKavPNBH9HLKXAhA7 /9wZlvLOZAaN3glgdSffRHfNsEdd+B3Vjqx73beSvDsm88YAEIg39SmySLIW7gMy Ym7Kb7+A2rbV/X/PNKECqhYx5DIr+aw= -----END CERTIFICATE-----Generated at Sun Mar 1 20:47:54 2026 by rpki-client