$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/66de522a-54eb-3da6-8e58-af92f7ba0a15.roa File: 66de522a-54eb-3da6-8e58-af92f7ba0a15.roa (raw, json) Hash identifier: AFHQqBSp7DoBwq6oWCXiKQ179/9ki1qCviZpCRXR99o= Subject key identifier: 42:B4:17:CC:19:3A:50:06:45:00:18:0F:E1:B6:1E:65:13:E4:F9:5A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE57F2846D9FBA74827D3640 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/66de522a-54eb-3da6-8e58-af92f7ba0a15.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 24.14.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:f2:84:6d:9f:ba:74:82:7d:36:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=3c9ab554-9bae-4f3f-b69d-64a471494508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8d:cb:76:a1:28:de:67:33:04:44:77:6a:dd: 05:a3:49:9a:42:3e:b9:83:30:0f:09:8c:f9:ef:21: 70:1a:19:d5:56:f2:95:7d:a6:a9:19:07:09:41:6f: fe:4c:b8:32:a3:48:ee:89:79:46:d9:72:bf:0c:47: c6:18:7f:70:8d:5e:3f:7a:6c:90:93:97:0f:92:fa: de:43:98:50:3a:ac:ab:8a:3c:ae:e6:50:4c:62:57: a6:e8:96:4b:87:b0:34:e4:6a:eb:34:b0:2c:49:b0: 51:ba:7c:2e:16:a2:a9:47:3e:56:51:e4:e8:4c:c6: cc:3f:34:d4:4e:b3:e7:d1:c7:3a:c3:29:f4:73:02: ae:59:98:91:2f:fd:d3:eb:4f:36:7c:38:4c:08:21: 6e:0a:c6:a5:37:62:6d:0b:58:9e:98:ed:8c:d9:40: 1a:43:7f:a6:0f:fc:82:cc:a0:3b:1c:e4:59:3c:fc: 4d:26:4a:02:77:73:af:f1:36:f5:ad:19:0e:70:e4: 31:a6:a5:e9:84:fc:e9:ef:f9:f4:eb:d7:25:d9:44: a7:cb:30:85:a9:79:14:00:0f:66:c0:bc:2c:94:28: 3f:34:2e:ab:03:78:b6:0d:31:18:88:d1:bb:47:61: fc:d5:07:8d:7f:d8:ad:d1:cd:6b:e2:17:ea:13:41: a9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B4:17:CC:19:3A:50:06:45:00:18:0F:E1:B6:1E:65:13:E4:F9:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/66de522a-54eb-3da6-8e58-af92f7ba0a15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.14.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:76:f0:e7:b0:e2:6d:f2:13:eb:64:fc:58:a9:b1:8c:21:9e: 3d:37:fb:96:a4:84:67:12:b9:26:52:ce:f2:c0:be:33:be:de: 8d:07:5f:94:30:57:bb:f0:dd:f1:fa:d3:06:9e:5d:b9:8b:5f: 76:e8:75:d1:c2:03:e6:55:6b:80:a3:bb:45:b6:be:17:7f:7a: af:e5:68:4a:d7:49:d5:b3:3e:2d:f8:69:d2:59:ad:3a:23:de: 71:af:df:45:5e:d6:78:76:08:d3:87:de:b3:87:70:56:89:74: 46:6e:e7:9f:e1:09:ab:51:0d:12:a3:f3:53:1f:36:5e:b3:06: e0:8b:47:d2:c7:dd:86:b6:2c:2d:44:b5:11:04:48:1e:d7:1e: 73:a5:f0:04:7d:92:eb:f8:83:1e:fe:3a:84:e9:44:c0:51:ba: b0:f6:56:b5:de:91:ba:c4:d7:fd:e0:4f:6f:21:5b:be:e6:03: f5:e1:e2:27:78:70:b0:f6:f6:88:0c:02:ea:71:8e:b9:dc:f6: 08:a9:ee:fe:f6:c7:0f:ea:9e:64:53:8f:fd:b0:e0:bf:d4:90: 04:17:69:14:06:01:51:02:c6:d8:6f:06:90:98:19:02:72:26: cc:26:aa:30:fe:97:8b:d8:2e:54:8a:c7:4f:8b:66:e4:eb:1b: 2a:81:c0:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuV/KEbZ+6dIJ9NkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk M2M5YWI1NTQtOWJhZS00ZjNmLWI2OWQtNjRhNDcxNDk0NTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoo3LdqEo3mczBER3at0Fo0maQj65gzAPCYz5 7yFwGhnVVvKVfaapGQcJQW/+TLgyo0juiXlG2XK/DEfGGH9wjV4/emyQk5cPkvre Q5hQOqyrijyu5lBMYlem6JZLh7A05GrrNLAsSbBRunwuFqKpRz5WUeToTMbMPzTU TrPn0cc6wyn0cwKuWZiRL/3T6082fDhMCCFuCsalN2JtC1iemO2M2UAaQ3+mD/yC zKA7HORZPPxNJkoCd3Ov8Tb1rRkOcOQxpqXphPzp7/n069cl2USnyzCFqXkUAA9m wLwslCg/NC6rA3i2DTEYiNG7R2H81QeNf9it0c1r4hfqE0GpjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEK0F8wZOlAGRQAYD+G2HmUT5PlaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjZkZTUyMmEtNTRlYi0z ZGE2LThlNTgtYWY5MmY3YmEwYTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGA6UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF928Oew4m3yE+tk/FipsYwhnj03+5akhGcSuSZSzvLAvjO+3o0HX5Qw V7vw3fH60waeXbmLX3boddHCA+ZVa4Cju0W2vhd/eq/laErXSdWzPi34adJZrToj 3nGv30Ve1nh2CNOH3rOHcFaJdEZu55/hCatRDRKj81MfNl6zBuCLR9LH3Ya2LC1E tREESB7XHnOl8AR9kuv4gx7+OoTpRMBRurD2VrXekbrE1/3gT28hW77mA/Xh4id4 cLD29ogMAupxjrnc9gip7v72xw/qnmRTj/2w4L/UkAQXaRQGAVECxthvBpCYGQJy JswmqjD+l4vYLlSKx0+LZuTrGyqBwEg= -----END CERTIFICATE-----Generated at Sun Mar 1 18:56:14 2026 by rpki-client