$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5bf3bc22-daf3-3456-85d2-749a599af0c6.roa File: 5bf3bc22-daf3-3456-85d2-749a599af0c6.roa (raw, json) Hash identifier: IyE2uzfRMcrC5nUi1oCkDluIiywe1i9+TsGsyVzKuRo= Subject key identifier: 7C:7D:4B:E3:D5:E6:97:CA:10:C9:30:A4:A7:CF:62:DE:1E:30:7E:13 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE57ED07DC82BB77A6EA7E40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5bf3bc22-daf3-3456-85d2-749a599af0c6.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 24.12.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:ed:07:dc:82:bb:77:a6:ea:7e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=203a8752-6593-44f5-84dd-665706421966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:0f:95:50:55:ae:4d:47:e7:d0:f9:f7:d6:ca: 57:c0:11:51:c0:2c:4c:a4:fd:95:8a:29:6e:9f:7c: ff:2f:b4:86:73:06:3c:ef:3f:78:53:c2:cd:34:b4: 34:ab:54:98:ac:26:98:02:93:9a:f3:84:08:31:43: cc:b8:23:94:d7:21:2c:3b:21:28:3b:7d:57:2d:33: b6:e9:e1:2b:80:d3:0c:9c:ac:cd:73:6e:15:d2:72: de:ca:f5:ef:11:e1:b4:34:56:bc:a0:34:71:4b:f9: 07:5a:8b:b2:1a:80:1f:c7:78:74:59:57:ba:74:c3: f7:e2:9d:e6:7d:2f:06:a1:6b:bd:bf:e4:2b:af:cc: 2b:f5:d5:31:5e:8b:22:bb:88:47:c9:a5:be:30:d7: ef:53:eb:71:79:34:0d:46:e5:d9:b5:75:c9:1d:04: 4b:0e:c3:44:25:fe:f0:68:df:d4:d5:b3:4e:aa:58: 67:5f:db:10:b4:40:02:e8:0c:29:ad:fa:95:0a:0d: d6:fd:b1:c9:82:e4:a0:2f:38:24:96:d5:48:9b:9c: 9e:62:0a:e1:f4:a4:99:9b:07:43:1f:70:fa:89:f9: d4:8f:b1:b2:b1:2e:b1:73:3d:b4:23:48:23:34:53: 7d:2c:9d:05:1e:76:f1:b9:53:5e:39:a5:f8:8b:57: 38:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:7D:4B:E3:D5:E6:97:CA:10:C9:30:A4:A7:CF:62:DE:1E:30:7E:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5bf3bc22-daf3-3456-85d2-749a599af0c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.12.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:ef:6d:7d:04:bd:19:4c:99:6c:b4:b1:75:83:9b:8b:88:7a: c1:bc:b3:9c:6e:5f:7b:f5:24:1c:c6:b3:00:3c:1b:bf:c8:7f: b5:30:36:6a:2f:10:e0:52:f7:5c:35:93:e7:66:05:d6:4f:e1: 6d:dc:21:00:3c:47:1a:b6:61:7b:17:62:71:20:8c:b8:f0:8e: e3:2b:40:4a:80:de:9a:46:da:7e:d9:b3:f4:25:a6:94:00:ae: 1a:48:7c:51:8e:24:a5:59:e8:7a:ba:e8:e0:6a:48:18:41:6f: e0:77:59:21:2f:c1:95:02:83:8f:b6:e5:9a:a3:55:48:3e:b4: ac:63:c8:50:06:db:22:d9:ec:e5:89:04:c5:b1:85:9f:5c:7c: 1b:17:83:5f:5f:17:7d:5f:ad:96:c9:c4:23:f8:b6:a2:fd:2c: 06:dd:f0:f2:a2:b6:0f:53:b1:49:77:69:63:ab:80:a9:51:8a: f1:33:14:a9:8d:c4:45:e0:c3:d3:fa:2c:ca:a1:ed:d1:35:16: 80:3b:5a:44:be:f0:80:95:67:d2:a2:af:a5:0a:b7:a4:09:9e: 62:d2:ff:5f:66:de:89:8a:35:68:89:48:54:c3:7b:01:aa:67: aa:3f:17:71:83:78:5e:36:0c:08:b1:b1:75:0a:38:f3:8c:0a: 82:aa:23:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuV+0H3IK7d6bqfkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MjAzYTg3NTItNjU5My00NGY1LTg0ZGQtNjY1NzA2NDIxOTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiA+VUFWuTUfn0Pn31spXwBFRwCxMpP2Viilu n3z/L7SGcwY87z94U8LNNLQ0q1SYrCaYApOa84QIMUPMuCOU1yEsOyEoO31XLTO2 6eErgNMMnKzNc24V0nLeyvXvEeG0NFa8oDRxS/kHWouyGoAfx3h0WVe6dMP34p3m fS8GoWu9v+Qrr8wr9dUxXosiu4hHyaW+MNfvU+txeTQNRuXZtXXJHQRLDsNEJf7w aN/U1bNOqlhnX9sQtEAC6AwprfqVCg3W/bHJguSgLzgkltVIm5yeYgrh9KSZmwdD H3D6ifnUj7GysS6xcz20I0gjNFN9LJ0FHnbxuVNeOaX4i1c4cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHx9S+PV5pfKEMkwpKfPYt4eMH4TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWJmM2JjMjItZGFmMy0z NDU2LTg1ZDItNzQ5YTU5OWFmMGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGAwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLvbX0EvRlMmWy0sXWDm4uIesG8s5xuX3v1JBzGswA8G7/If7UwNmov EOBS91w1k+dmBdZP4W3cIQA8Rxq2YXsXYnEgjLjwjuMrQEqA3ppG2n7Zs/QlppQA rhpIfFGOJKVZ6Hq66OBqSBhBb+B3WSEvwZUCg4+25ZqjVUg+tKxjyFAG2yLZ7OWJ BMWxhZ9cfBsXg19fF31frZbJxCP4tqL9LAbd8PKitg9TsUl3aWOrgKlRivEzFKmN xEXgw9P6LMqh7dE1FoA7WkS+8ICVZ9Kir6UKt6QJnmLS/19m3omKNWiJSFTDewGq Z6o/F3GDeF42DAixsXUKOPOMCoKqI0c= -----END CERTIFICATE-----Generated at Mon Mar 2 01:11:53 2026 by rpki-client