$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/685e6640-4593-33fa-a805-ede642da1c59.roa File: 685e6640-4593-33fa-a805-ede642da1c59.roa (raw, json) Hash identifier: VB5Z+TqOxRq6fqdHR1uF7ZnEGrIzlxoO6s2Ggs0rtfI= Subject key identifier: 9F:B4:7F:C4:70:4F:99:0B:44:BC:94:54:34:60:2E:D7:C1:12:1C:97 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CFDE9DE8F62808929DC2C9A80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/685e6640-4593-33fa-a805-ede642da1c59.roa Signing time: Thu 26 Feb 2026 14:00:40 +0000 ROA not before: Thu 26 Feb 2026 14:00:40 +0000 ROA not after: Wed 27 May 2026 13:00:40 +0000 asID: 33662 IP address blocks: 96.113.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:e9:de:8f:62:80:89:29:dc:2c:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 26 14:00:40 2026 GMT Not After : May 27 13:00:40 2026 GMT Subject: CN=baf02ffb-0ed2-42cc-adac-0af783e3baf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:73:03:0c:55:b0:ae:db:a3:6a:9b:84:e8:30: a9:48:10:54:a9:3b:db:49:47:c3:d2:b2:10:71:2e: f8:1f:3c:4d:0a:bf:72:55:38:e0:85:a2:bc:2a:38: fe:d6:42:41:58:bd:5e:1c:25:c4:7a:b0:81:25:0a: ce:85:ef:bf:74:b5:43:9d:0f:73:a5:c1:bd:3d:4c: 94:ca:2c:cd:38:36:5c:b3:7e:b8:29:f1:2f:0d:aa: d9:89:d3:60:7b:95:e5:41:c4:41:96:f5:c1:3d:47: f7:86:de:19:04:4d:5a:4f:00:dc:41:e4:87:d9:28: d5:39:06:10:25:0d:25:3b:de:8f:44:16:9b:95:a2: 29:e1:25:43:52:a4:eb:e7:1c:70:07:a3:21:c0:ae: 19:19:aa:6f:30:03:03:c0:25:cf:1d:05:7e:7d:80: 66:30:f6:32:60:93:ac:8a:ab:d5:cc:47:58:b9:39: 60:05:79:b7:2d:87:d5:fc:93:33:ea:2e:98:c3:59: 2f:31:17:58:6a:39:b0:e2:12:dc:32:3e:78:8d:48: 44:f2:9b:20:2a:38:33:b8:4d:c4:23:e5:51:1d:b2: e9:f1:5a:0c:52:30:fc:a2:6a:58:51:32:98:28:70: cd:4c:6a:4a:f7:19:0e:10:c7:c7:da:11:72:b0:ab: 3e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:B4:7F:C4:70:4F:99:0B:44:BC:94:54:34:60:2E:D7:C1:12:1C:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/685e6640-4593-33fa-a805-ede642da1c59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.113.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d3:c3:59:c3:5f:5c:2e:57:aa:71:ea:36:14:83:f8:40:ab:4e: aa:ac:ca:f7:6b:2f:96:46:26:a5:71:dc:df:ca:6d:91:21:77: f2:52:d7:18:aa:51:a7:85:ba:c8:2d:11:6d:cc:d8:9b:0b:e5: c4:6d:69:fe:0e:20:d7:de:97:12:fe:56:bb:b6:84:75:0b:87: 90:87:3d:47:88:68:79:69:69:04:ac:3e:aa:9c:fb:cd:e9:a6: c8:f5:65:74:76:6a:ee:74:de:8a:76:6a:b2:c3:5d:61:cf:c2: d3:24:4e:b9:ee:cc:c8:0b:1a:19:a6:2c:41:89:43:d6:90:c5: f6:ff:4f:2a:f8:ae:ce:09:86:98:f4:7c:32:f7:d2:7d:5f:1c: 20:cc:27:06:c1:4d:77:83:d5:ef:53:4e:79:95:f6:dc:d6:ed: 63:6e:1c:06:43:75:0f:48:97:3c:72:bc:bd:ca:6e:0f:fb:5e: d6:ba:64:be:22:f1:0a:d5:2d:39:6b:13:ff:71:ff:5c:4e:d8: be:c5:f6:69:30:33:77:b3:e2:ca:20:b4:3e:73:bc:df:4f:b2: 24:97:99:17:ab:6a:66:7b:4f:df:18:b6:5e:d9:f0:36:f0:51: f3:85:ea:9e:a2:1f:9d:c4:e7:70:04:9e:36:52:5c:37:98:2f: a8:2e:59:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz96d6PYoCJKdwsmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk YmFmMDJmZmItMGVkMi00MmNjLWFkYWMtMGFmNzgzZTNiYWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHMDDFWwrtujapuE6DCpSBBUqTvbSUfD0rIQ cS74HzxNCr9yVTjghaK8Kjj+1kJBWL1eHCXEerCBJQrOhe+/dLVDnQ9zpcG9PUyU yizNODZcs364KfEvDarZidNge5XlQcRBlvXBPUf3ht4ZBE1aTwDcQeSH2SjVOQYQ JQ0lO96PRBablaIp4SVDUqTr5xxwB6MhwK4ZGapvMAMDwCXPHQV+fYBmMPYyYJOs iqvVzEdYuTlgBXm3LYfV/JMz6i6Yw1kvMRdYajmw4hLcMj54jUhE8psgKjgzuE3E I+VRHbLp8VoMUjD8ompYUTKYKHDNTGpK9xkOEMfH2hFysKs+ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ+0f8RwT5kLRLyUVDRgLtfBEhyXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjg1ZTY2NDAtNDU5My0z M2ZhLWE4MDUtZWRlNjQyZGExYzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYHHMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANPDWcNfXC5XqnHqNhSD+ECrTqqsyvdrL5ZGJqVx3N/KbZEhd/JS1xiq UaeFusgtEW3M2JsL5cRtaf4OINfelxL+Vru2hHULh5CHPUeIaHlpaQSsPqqc+83p psj1ZXR2au503op2arLDXWHPwtMkTrnuzMgLGhmmLEGJQ9aQxfb/Tyr4rs4Jhpj0 fDL30n1fHCDMJwbBTXeD1e9TTnmV9tzW7WNuHAZDdQ9IlzxyvL3Kbg/7Xta6ZL4i 8QrVLTlrE/9x/1xO2L7F9mkwM3ez4sogtD5zvN9PsiSXmReramZ7T98Ytl7Z8Dbw UfOF6p6iH53E53AEnjZSXDeYL6guWTc= -----END CERTIFICATE-----Generated at Mon Mar 2 08:18:53 2026 by rpki-client