$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/421c10f9-ae31-3ba3-92bd-23b493a727a2.roa File: 421c10f9-ae31-3ba3-92bd-23b493a727a2.roa (raw, json) Hash identifier: RBvjeaNHjosysjZ/lk+4N6KAqORZAJEQ5JYCvMUuqQM= Subject key identifier: B6:B1:9B:41:D2:74:90:2E:A6:DD:0D:48:15:80:44:8C:A5:17:DB:6C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5921CE52A6C8D350F93E40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/421c10f9-ae31-3ba3-92bd-23b493a727a2.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33660 IP address blocks: 24.11.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:59:21:ce:52:a6:c8:d3:50:f9:3e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=b4a8ffbf-2d4e-4380-b689-f1dd8b991e66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2c:d0:df:1b:fa:18:fd:3e:b2:19:43:65:6f: 71:db:5e:01:cc:11:f5:61:13:ec:02:1c:5f:c2:4d: 86:f7:0a:66:57:6e:bd:ba:d6:00:6a:1b:ba:2d:b8: 99:1f:ad:5e:19:65:d9:f8:ef:71:58:0b:26:36:f1: e9:e1:f2:f8:3e:63:0c:9a:e7:2a:b2:eb:dc:74:28: cb:b7:25:78:23:60:eb:c4:24:4e:a4:80:7b:b0:43: 83:fc:63:f4:cf:cb:2c:85:3f:15:ea:19:cf:ac:02: cd:a7:a5:76:92:56:29:e9:f6:29:e1:5d:d8:b5:94: c0:5e:aa:a5:49:ab:41:39:21:73:62:02:37:9c:e7: 01:5f:1d:f9:ca:79:65:93:95:e5:65:64:b4:43:d3: f6:68:da:f0:b4:cd:e9:39:3e:ee:27:1a:64:94:05: 81:a5:9b:12:3d:d2:d9:c2:3c:5b:d9:61:e9:c0:3d: 7f:ae:3f:44:af:9f:51:27:20:f1:05:5f:61:2f:25: 0d:8f:39:6f:5d:64:f5:c8:b2:d1:35:06:5c:47:b6: d3:83:f8:4b:4b:12:6c:81:14:8f:08:02:5b:80:9f: 78:50:eb:c5:71:7f:4a:23:7e:81:5a:bc:10:6d:cd: f7:76:70:e6:b4:1e:c5:6c:d6:1a:99:32:5f:61:be: 7b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B1:9B:41:D2:74:90:2E:A6:DD:0D:48:15:80:44:8C:A5:17:DB:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/421c10f9-ae31-3ba3-92bd-23b493a727a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.11.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:61:c1:f9:a4:bc:42:36:84:4c:e6:43:de:c4:b7:4f:39:c0: e6:14:03:a7:ed:85:75:a7:a7:86:2e:76:41:55:0a:de:a8:71: f2:c0:b3:7a:09:c7:12:c4:b7:30:9c:56:ab:39:9d:06:92:e8: d4:2a:98:1a:92:0d:b4:d1:ae:d1:8e:79:fd:2b:83:1e:f1:b8: 27:e6:fe:5f:c9:a5:71:76:b8:dd:71:59:83:3e:31:6b:3e:83: b4:73:ce:6e:39:48:d2:15:3f:d1:44:9d:90:24:3b:e1:4c:3f: 7c:5e:8d:ca:83:08:2e:05:76:79:ee:3e:54:5f:e8:54:92:f1: 5d:4d:13:01:5b:c4:78:65:de:b6:54:46:61:0b:a9:b9:56:0d: b0:68:94:87:b4:c0:65:d0:98:b9:50:04:44:ad:55:4b:6b:cb: 5b:69:52:e5:48:ad:3a:84:b5:a4:c3:1d:80:21:4d:95:1c:44: dc:be:eb:ed:14:d0:83:c9:49:18:d8:d8:e2:93:e8:7d:d0:8d: 3b:9b:eb:9c:d8:5c:74:3d:fa:db:ad:c8:fe:ef:60:2d:93:3b: 7f:94:43:d5:42:e2:5f:d3:25:99:48:df:b6:bf:9f:c5:cc:85: a5:19:4c:0c:25:32:ef:28:9e:88:9b:ed:24:28:c1:d1:83:ad: 98:56:35:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWSHOUqbI01D5PkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YjRhOGZmYmYtMmQ0ZS00MzgwLWI2ODktZjFkZDhiOTkxZTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CzQ3xv6GP0+shlDZW9x214BzBH1YRPsAhxf wk2G9wpmV269utYAahu6LbiZH61eGWXZ+O9xWAsmNvHp4fL4PmMMmucqsuvcdCjL tyV4I2DrxCROpIB7sEOD/GP0z8sshT8V6hnPrALNp6V2klYp6fYp4V3YtZTAXqql SatBOSFzYgI3nOcBXx35ynllk5XlZWS0Q9P2aNrwtM3pOT7uJxpklAWBpZsSPdLZ wjxb2WHpwD1/rj9Er59RJyDxBV9hLyUNjzlvXWT1yLLRNQZcR7bTg/hLSxJsgRSP CAJbgJ94UOvFcX9KI36BWrwQbc33dnDmtB7FbNYamTJfYb57pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLaxm0HSdJAupt0NSBWARIylF9tsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDIxYzEwZjktYWUzMS0z YmEzLTkyYmQtMjNiNDkzYTcyN2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGAt6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADthwfmkvEI2hEzmQ97Et085wOYUA6fthXWnp4YudkFVCt6ocfLAs3oJ xxLEtzCcVqs5nQaS6NQqmBqSDbTRrtGOef0rgx7xuCfm/l/JpXF2uN1xWYM+MWs+ g7Rzzm45SNIVP9FEnZAkO+FMP3xejcqDCC4FdnnuPlRf6FSS8V1NEwFbxHhl3rZU RmELqblWDbBolIe0wGXQmLlQBEStVUtry1tpUuVIrTqEtaTDHYAhTZUcRNy+6+0U 0IPJSRjY2OKT6H3QjTub65zYXHQ9+tutyP7vYC2TO3+UQ9VC4l/TJZlI37a/n8XM haUZTAwlMu8onoib7SQowdGDrZhWNfQ= -----END CERTIFICATE-----Generated at Mon Mar 2 07:16:24 2026 by rpki-client