$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40d61ff4-6a9a-35e2-a017-bf7ea2bc2e2e.roa File: 40d61ff4-6a9a-35e2-a017-bf7ea2bc2e2e.roa (raw, json) Hash identifier: Mf51Gsh2/yRvpFefa+gSSqctfgrB56QouSR+ddJjcDY= Subject key identifier: A8:C9:78:58:47:AA:A9:F5:AE:00:F7:28:05:DB:58:4A:83:34:D4:54 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5D39475578CF8919AF2640 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40d61ff4-6a9a-35e2-a017-bf7ea2bc2e2e.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 24.6.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5d:39:47:55:78:cf:89:19:af:26:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=0475a149-a7b2-442d-81e1-58658a89661d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:19:51:f2:b8:19:76:17:53:45:ad:e0:e6:c1: c6:5b:43:b5:1f:ad:83:d2:20:43:b6:43:0e:ce:50: 73:3e:53:19:34:c2:58:3d:65:6d:12:fe:83:2b:c3: 3c:bf:f7:df:75:ae:13:7c:31:70:22:7e:2d:88:3a: fe:11:2c:5c:a7:78:4b:43:4e:99:ec:62:a1:ba:a7: 93:5f:aa:77:2f:5c:38:b1:8a:02:5d:06:7a:c6:48: 28:4b:91:76:ff:86:f8:94:9a:71:06:62:e7:0f:22: 9e:c8:50:31:65:71:58:43:da:72:3e:7b:f5:98:d6: 51:69:8b:dc:dd:27:60:10:21:77:72:2b:db:4e:92: e9:57:16:f6:68:ef:96:cf:93:59:3e:8d:15:e4:b7: b5:2b:d7:7d:ed:43:bc:af:b3:2e:b8:83:12:43:88: 78:5d:55:a0:94:f4:2c:ef:55:9d:36:38:6d:2b:64: af:1d:60:c8:9a:cb:ce:64:37:14:f8:e3:33:de:d4: 0b:e1:fa:1c:3a:10:b9:aa:cc:23:bd:85:70:88:1c: 2d:ad:0e:30:c9:5b:b1:b0:8f:a9:c4:18:db:d7:b3: 5b:b2:05:03:0e:15:74:73:07:05:af:e7:d7:9d:6a: 99:3f:c5:f4:a8:71:d0:b8:b8:be:37:87:3f:1f:a3: 4b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:C9:78:58:47:AA:A9:F5:AE:00:F7:28:05:DB:58:4A:83:34:D4:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40d61ff4-6a9a-35e2-a017-bf7ea2bc2e2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.6.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:fe:b4:e0:0f:ff:43:cb:b3:35:ce:99:df:fd:e7:ee:af:8f: 86:a8:a0:48:37:80:1a:af:6d:cb:43:34:81:e1:c2:4d:bb:77: 82:31:44:5e:dc:e0:bd:0f:07:3b:0d:03:4b:94:35:8a:9c:39: 0a:0f:62:ae:36:32:46:c7:1f:04:7f:97:cc:3c:e8:ca:26:71: ee:fb:11:bf:9b:ef:82:6c:ae:1e:71:c3:5c:c1:c1:9b:46:79: ae:d2:4a:40:27:08:51:30:15:a7:3f:d2:87:25:68:95:07:28: c7:52:bc:1e:bf:4b:55:f8:c6:81:9b:a2:47:15:e8:3a:a0:82: f7:99:03:22:f0:c3:af:10:7c:e0:bf:eb:fb:96:bc:da:97:2c: eb:87:74:51:69:a1:22:bc:ef:4d:87:fc:f7:fd:74:9a:dd:e8: da:31:82:08:32:3c:8b:59:56:53:ec:d2:a2:c8:90:97:b9:1d: d4:4d:6a:e4:14:26:99:17:9d:98:5a:30:73:75:65:ba:29:d7: c0:36:12:a6:f1:c9:0d:ac:93:a8:05:c3:fa:ed:dd:02:bc:96: 0b:cd:aa:43:3f:93:50:46:c9:f3:03:e2:4f:22:60:06:0b:4c: ef:d4:6e:17:47:06:49:47:ce:32:2c:f7:6a:a7:51:30:1c:f2: 72:98:25:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXTlHVXjPiRmvJkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MDQ3NWExNDktYTdiMi00NDJkLTgxZTEtNTg2NThhODk2NjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRlR8rgZdhdTRa3g5sHGW0O1H62D0iBDtkMO zlBzPlMZNMJYPWVtEv6DK8M8v/ffda4TfDFwIn4tiDr+ESxcp3hLQ06Z7GKhuqeT X6p3L1w4sYoCXQZ6xkgoS5F2/4b4lJpxBmLnDyKeyFAxZXFYQ9pyPnv1mNZRaYvc 3SdgECF3civbTpLpVxb2aO+Wz5NZPo0V5Le1K9d97UO8r7MuuIMSQ4h4XVWglPQs 71WdNjhtK2SvHWDImsvOZDcU+OMz3tQL4focOhC5qswjvYVwiBwtrQ4wyVuxsI+p xBjb17NbsgUDDhV0cwcFr+fXnWqZP8X0qHHQuLi+N4c/H6NLOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKjJeFhHqqn1rgD3KAXbWEqDNNRUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDBkNjFmZjQtNmE5YS0z NWUyLWEwMTctYmY3ZWEyYmMyZTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGAYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEH+tOAP/0PLszXOmd/95+6vj4aooEg3gBqvbctDNIHhwk27d4IxRF7c 4L0PBzsNA0uUNYqcOQoPYq42MkbHHwR/l8w86Momce77Eb+b74Jsrh5xw1zBwZtG ea7SSkAnCFEwFac/0oclaJUHKMdSvB6/S1X4xoGbokcV6DqggveZAyLww68QfOC/ 6/uWvNqXLOuHdFFpoSK8702H/Pf9dJrd6NoxgggyPItZVlPs0qLIkJe5HdRNauQU JpkXnZhaMHN1Zbop18A2EqbxyQ2sk6gFw/rt3QK8lgvNqkM/k1BGyfMD4k8iYAYL TO/UbhdHBklHzjIs92qnUTAc8nKYJTg= -----END CERTIFICATE-----Generated at Sun Mar 1 20:24:25 2026 by rpki-client