$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70a1d00a-03c1-33fe-8b8c-0c53e6c9bde0.roa File: 70a1d00a-03c1-33fe-8b8c-0c53e6c9bde0.roa (raw, json) Hash identifier: ll5fHGuLSxMPMVZ4vpXTTLMukzGly5of1j3JRCSTgow= Subject key identifier: A0:EA:57:AB:E1:7D:5E:D1:1A:01:08:5D:69:44:6A:D0:E9:DF:09:97 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5D30B2BBE5BA0EA2F8D9A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70a1d00a-03c1-33fe-8b8c-0c53e6c9bde0.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 24.130.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5d:30:b2:bb:e5:ba:0e:a2:f8:d9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=b7f3e75a-6d31-4a23-b8e8-3eee02fc3168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b2:f8:89:74:11:0d:3c:54:cf:b7:f9:ff:53: 66:a7:2c:20:fa:8e:4c:a6:02:17:4d:0b:dd:36:b4: d0:a5:c0:d0:b2:08:68:7a:bf:64:ab:b6:e4:26:7f: 20:90:38:af:f5:b3:b6:7e:10:e5:df:3a:50:0c:d5: df:c7:b8:82:63:af:4d:c6:00:4a:51:26:cd:af:26: 0a:61:67:2d:44:50:09:6a:36:87:3f:73:af:60:75: 0b:71:31:cf:4f:ef:5d:de:5d:1f:a4:d3:e5:89:b3: f9:66:20:f6:c9:2a:87:5a:a6:e4:1e:43:02:5d:ea: c2:b7:7d:47:fa:cc:bf:78:bb:a1:2b:14:50:7a:8b: 62:d0:6b:b9:71:52:65:0e:c0:f7:ff:40:93:f4:1b: df:8c:16:b1:35:3d:31:5f:56:39:4c:14:0b:48:35: 82:3d:cb:64:f2:fc:26:a7:a0:45:34:a4:1a:fc:10: c2:a2:50:64:e8:66:74:5e:d2:33:dc:6c:98:fe:6c: 60:fb:10:8c:96:af:e4:07:d2:26:cb:13:d8:4d:69: 99:a1:41:2a:1f:d3:c6:8c:08:85:7c:1b:f7:c2:d3: ed:40:95:96:a2:c0:69:bf:dd:3e:73:4d:bb:f2:8f: 4c:83:67:c1:8f:36:46:32:d6:96:07:50:45:59:6d: 1f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:EA:57:AB:E1:7D:5E:D1:1A:01:08:5D:69:44:6A:D0:E9:DF:09:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70a1d00a-03c1-33fe-8b8c-0c53e6c9bde0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.130.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:f3:c7:59:05:c6:37:6f:10:08:0e:f3:a7:40:f1:b9:a3:32: f0:c9:30:39:d1:3e:54:67:b6:54:87:1a:17:e8:ac:b9:34:91: c7:67:7f:25:3b:d4:94:d6:9a:a0:8b:8e:4c:ad:fe:27:14:a7: f5:33:33:d7:5a:3d:dd:e5:b3:23:9f:95:8e:f7:95:3b:db:55: a8:ef:52:31:21:72:27:0f:68:61:7b:aa:fc:cc:ed:f9:a9:bd: 27:00:7c:14:1f:67:30:3d:8f:21:c1:dc:44:eb:25:d8:f7:d4: 74:c1:f0:78:d1:2e:47:6a:c0:77:ce:bc:21:00:1c:91:8a:26: aa:4d:c0:c7:39:28:a4:28:fb:e5:b5:f7:02:96:09:ae:b3:2b: 75:47:a0:9f:c1:44:f3:ba:4f:d9:9a:ed:de:fe:e0:38:50:41: 19:e8:d2:40:3a:81:73:b9:11:dd:e0:21:03:1a:58:26:6a:36: 2f:75:8b:ef:36:9a:8a:f2:7d:5d:aa:91:bf:6d:ed:8f:4d:0b: 32:6a:29:b4:57:8e:2c:b4:e4:53:2a:03:77:82:da:5f:3d:19: 4a:df:e9:97:27:55:7f:af:62:87:45:50:d5:7e:6f:18:33:8b: 55:bf:0e:3c:4a:2b:ee:2a:45:57:8f:49:5e:af:c6:05:49:13: 4a:dc:ff:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXTCyu+W6DqL42aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YjdmM2U3NWEtNmQzMS00YTIzLWI4ZTgtM2VlZTAyZmMzMTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLL4iXQRDTxUz7f5/1Nmpywg+o5MpgIXTQvd NrTQpcDQsghoer9kq7bkJn8gkDiv9bO2fhDl3zpQDNXfx7iCY69NxgBKUSbNryYK YWctRFAJajaHP3OvYHULcTHPT+9d3l0fpNPlibP5ZiD2ySqHWqbkHkMCXerCt31H +sy/eLuhKxRQeoti0Gu5cVJlDsD3/0CT9BvfjBaxNT0xX1Y5TBQLSDWCPctk8vwm p6BFNKQa/BDColBk6GZ0XtIz3GyY/mxg+xCMlq/kB9ImyxPYTWmZoUEqH9PGjAiF fBv3wtPtQJWWosBpv90+c0278o9Mg2fBjzZGMtaWB1BFWW0f/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDqV6vhfV7RGgEIXWlEatDp3wmXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzBhMWQwMGEtMDNjMS0z M2ZlLThiOGMtMGM1M2U2YzliZGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGIIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXzx1kFxjdvEAgO86dA8bmjMvDJMDnRPlRntlSHGhforLk0kcdnfyU7 1JTWmqCLjkyt/icUp/UzM9daPd3lsyOflY73lTvbVajvUjEhcicPaGF7qvzM7fmp vScAfBQfZzA9jyHB3ETrJdj31HTB8HjRLkdqwHfOvCEAHJGKJqpNwMc5KKQo++W1 9wKWCa6zK3VHoJ/BRPO6T9ma7d7+4DhQQRno0kA6gXO5Ed3gIQMaWCZqNi91i+82 moryfV2qkb9t7Y9NCzJqKbRXjiy05FMqA3eC2l89GUrf6ZcnVX+vYodFUNV+bxgz i1W/DjxKK+4qRVePSV6vxgVJE0rc/8E= -----END CERTIFICATE-----Generated at Sun Mar 1 18:26:46 2026 by rpki-client