$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/451c99fd-1b31-3339-b449-57f8d97becf5.roa File: 451c99fd-1b31-3339-b449-57f8d97becf5.roa (raw, json) Hash identifier: t2C29DOkCxcbybnYqPZKgdvN9IwLT/ljaNPe2551AT8= Subject key identifier: A7:C0:97:31:7E:78:0F:59:4F:EE:5F:95:EC:4E:F3:88:5B:65:9C:26 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5B55468911AC77AF594F80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/451c99fd-1b31-3339-b449-57f8d97becf5.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 24.1.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5b:55:46:89:11:ac:77:af:59:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=1cbdcec1-292e-46ac-ac86-d438c58924be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6e:77:3f:0a:f3:4f:6e:3f:92:9c:2b:98:10: 74:b5:c4:96:f1:b3:38:4e:43:3d:a9:21:f3:0f:2e: 4c:13:c1:99:3a:43:53:2a:df:c1:44:b6:39:2b:e2: 29:89:5e:cb:dd:17:10:56:cc:fb:12:a4:28:69:a0: 61:8a:bc:7d:49:c1:13:e8:b1:65:71:7d:98:04:4c: a8:79:f1:73:d3:61:29:f4:d2:17:a9:48:b6:da:76: 3a:42:07:52:54:ec:64:d8:eb:67:4f:72:dc:ed:9a: af:8e:5b:2f:4a:02:4a:65:00:41:b6:7f:c6:50:5e: 3d:17:ac:fa:59:3b:53:19:89:3e:12:71:a3:9e:e9: 89:7c:b4:72:68:79:6a:8c:be:d0:1f:16:91:0f:e1: 4e:7c:0f:9a:f8:1e:f3:c6:16:58:23:ed:59:62:20: f9:71:f7:ce:5f:1c:a4:09:7a:ca:24:f2:31:b3:7d: 30:7e:00:10:f3:27:9a:a1:52:8c:1a:da:0f:71:8a: 7d:98:c1:15:e6:a3:f2:2d:ce:f1:3c:34:4c:80:d1: 78:c6:e9:b1:35:2d:6a:da:3a:e7:07:64:b3:2f:36: 00:d5:98:1f:a7:43:80:20:3c:97:7f:2b:1e:5f:74: b9:6b:37:20:65:9b:ca:eb:a4:ae:e0:82:97:70:6f: a3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C0:97:31:7E:78:0F:59:4F:EE:5F:95:EC:4E:F3:88:5B:65:9C:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/451c99fd-1b31-3339-b449-57f8d97becf5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.1.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:e2:af:29:2e:e4:96:54:24:a5:a1:cd:45:b5:82:bf:29:e7: 0a:9b:33:f8:16:c8:d6:5b:31:ba:12:e3:03:4d:1b:bb:7e:6e: 4d:75:4e:0b:39:41:9a:84:79:3e:89:fa:79:fb:9d:1b:3b:bf: d0:8d:79:ad:9d:8d:d4:0f:17:9a:8b:42:1c:d3:38:2d:47:23: ce:56:e9:f7:ba:98:26:e7:a2:88:26:9a:0c:e9:46:a3:3e:f8: bf:36:88:06:4b:94:72:2b:86:39:2f:60:d2:a7:32:a5:5b:6d: 2c:e8:7e:1f:04:0d:3c:33:86:08:91:53:e6:be:54:10:a6:c0: 97:5d:15:37:bc:d7:52:0c:25:7f:f4:27:9a:b3:01:32:49:60: 4b:fa:2e:22:2c:19:4f:94:bf:ba:ae:c2:3a:ce:69:b9:b1:05: b9:6a:74:54:9c:df:65:46:1a:8a:34:3f:e4:8d:9b:94:0a:a1: 38:55:70:cd:60:ee:e3:30:da:f8:50:80:fe:74:c5:37:46:75: b7:c7:45:0a:c8:bf:08:90:15:0a:84:25:6a:ce:7a:40:09:93: a8:a2:b2:8d:26:f2:04:d4:c7:76:ca:3c:58:7e:97:e3:a0:6e: f7:ff:b1:e4:74:e0:a5:0d:0a:68:28:13:5c:eb:fe:de:5e:b8: 27:22:20:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuW1VGiRGsd69ZT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MWNiZGNlYzEtMjkyZS00NmFjLWFjODYtZDQzOGM1ODkyNGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2W53PwrzT24/kpwrmBB0tcSW8bM4TkM9qSHz Dy5ME8GZOkNTKt/BRLY5K+IpiV7L3RcQVsz7EqQoaaBhirx9ScET6LFlcX2YBEyo efFz02Ep9NIXqUi22nY6QgdSVOxk2OtnT3Lc7ZqvjlsvSgJKZQBBtn/GUF49F6z6 WTtTGYk+EnGjnumJfLRyaHlqjL7QHxaRD+FOfA+a+B7zxhZYI+1ZYiD5cffOXxyk CXrKJPIxs30wfgAQ8yeaoVKMGtoPcYp9mMEV5qPyLc7xPDRMgNF4xumxNS1q2jrn B2SzLzYA1Zgfp0OAIDyXfyseX3S5azcgZZvK66Su4IKXcG+jTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKfAlzF+eA9ZT+5flexO84hbZZwmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDUxYzk5ZmQtMWIzMS0z MzM5LWI0NDktNTdmOGQ5N2JlY2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGAEjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLiryku5JZUJKWhzUW1gr8p5wqbM/gWyNZbMboS4wNNG7t+bk11Tgs5 QZqEeT6J+nn7nRs7v9CNea2djdQPF5qLQhzTOC1HI85W6fe6mCbnoogmmgzpRqM+ +L82iAZLlHIrhjkvYNKnMqVbbSzofh8EDTwzhgiRU+a+VBCmwJddFTe811IMJX/0 J5qzATJJYEv6LiIsGU+Uv7quwjrOabmxBblqdFSc32VGGoo0P+SNm5QKoThVcM1g 7uMw2vhQgP50xTdGdbfHRQrIvwiQFQqEJWrOekAJk6iiso0m8gTUx3bKPFh+l+Og bvf/seR04KUNCmgoE1zr/t5euCciIC0= -----END CERTIFICATE-----Generated at Mon Mar 2 01:15:55 2026 by rpki-client