$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/849c7338-16fe-3d95-84a7-baaacf35d8db.roa File: 849c7338-16fe-3d95-84a7-baaacf35d8db.roa (raw, json) Hash identifier: lzDC4B3K8IbBwXz321mN9s63nuKhbmWWAogtQiVbf8o= Subject key identifier: 80:30:BC:33:18:7F:7E:13:B6:61:20:52:32:2E:C0:4B:58:A9:7C:1C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5921DF20B97F98AB4FDF40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/849c7338-16fe-3d95-84a7-baaacf35d8db.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33660 IP address blocks: 24.11.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:59:21:df:20:b9:7f:98:ab:4f:df:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=d6422881-c938-470b-841b-d777dfa5c5c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:01:dd:8c:84:86:fb:9d:43:72:2c:78:5e:9c: ca:d3:c4:f7:30:e7:9d:5d:98:ed:6c:94:2a:d0:52: 3c:3e:50:d3:5c:8c:e7:23:18:ac:10:43:9c:fa:45: 2d:9b:c6:4c:41:ac:cf:0f:a5:81:5f:d0:8b:c4:30: b9:44:04:49:f9:61:85:74:1b:ba:1c:33:8f:d3:f5: 54:8a:86:17:4b:34:aa:8d:50:51:6d:63:31:0b:22: ec:f4:4a:18:25:c8:ac:05:71:5e:37:41:ca:18:8c: 1d:24:fb:3c:d8:c4:8d:36:bc:de:ce:31:77:9c:c8: a6:89:cd:13:76:17:a7:00:95:47:69:85:21:d9:8c: 89:8b:6e:09:b8:0f:d1:a0:f9:ff:41:e8:0a:70:3c: cf:c2:90:f3:05:99:4f:1f:62:5c:dd:50:d9:2b:a1: 2c:6d:eb:d6:a7:ae:58:73:7d:b3:b0:d4:83:cf:76: 44:54:15:f7:07:a8:fe:85:8f:18:af:55:82:36:72: bd:47:64:a4:8d:fc:91:85:34:38:5a:10:46:07:3e: 45:cb:be:e8:6d:40:5d:b6:43:95:40:1b:56:44:14: 36:db:90:23:8f:dc:a7:c0:2e:19:d9:66:49:4a:e1: be:8e:ab:e1:fa:3e:58:78:e1:d3:bb:9e:a3:99:87: 1c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:30:BC:33:18:7F:7E:13:B6:61:20:52:32:2E:C0:4B:58:A9:7C:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/849c7338-16fe-3d95-84a7-baaacf35d8db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.11.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:74:bf:58:df:14:ff:95:e5:0d:2a:54:d6:d0:5f:4d:1a:06: 21:76:b7:b4:fe:a8:fa:b5:74:09:5b:9f:f0:ac:f2:36:5f:fc: 43:cb:59:9a:5e:50:c6:a5:38:1d:46:28:4d:4d:d6:95:cd:b2: fe:ef:a3:e7:c1:4a:19:a8:b2:11:1d:7a:fd:a4:58:1e:6f:b3: 4b:6e:66:a9:df:8a:1e:0b:a0:68:bb:25:df:03:6d:64:1c:12: 19:90:d8:df:be:a3:66:74:63:1b:b0:46:a9:e7:fa:95:24:f2: cf:8c:13:af:03:70:f4:1e:e5:51:84:54:04:5e:77:63:15:f3: 1b:f8:b0:fe:31:fa:90:81:85:54:98:7d:99:d9:f1:84:e5:8d: 1b:29:c5:ce:c9:b0:41:23:d2:fd:41:f5:24:e8:0f:03:3f:b8: b4:6c:04:2d:af:67:74:7a:be:bb:b8:44:78:76:9e:da:d9:f1: ff:33:b8:92:ad:78:9e:50:cf:b1:30:95:17:00:21:bd:e0:59: 83:78:2f:b5:d1:ed:07:d1:30:f9:3c:a4:b4:64:a1:71:76:1f: 7f:da:67:65:cb:56:96:d5:98:85:fc:42:8e:ae:25:fa:38:6d: be:bb:7d:55:6d:e1:d6:a4:1d:bd:30:59:15:fa:e1:84:9e:4f: 1e:c3:13:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWSHfILl/mKtP30AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZDY0MjI4ODEtYzkzOC00NzBiLTg0MWItZDc3N2RmYTVjNWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwHdjISG+51Dcix4XpzK08T3MOedXZjtbJQq 0FI8PlDTXIznIxisEEOc+kUtm8ZMQazPD6WBX9CLxDC5RARJ+WGFdBu6HDOP0/VU ioYXSzSqjVBRbWMxCyLs9EoYJcisBXFeN0HKGIwdJPs82MSNNrzezjF3nMimic0T dhenAJVHaYUh2YyJi24JuA/RoPn/QegKcDzPwpDzBZlPH2Jc3VDZK6EsbevWp65Y c32zsNSDz3ZEVBX3B6j+hY8Yr1WCNnK9R2SkjfyRhTQ4WhBGBz5Fy77obUBdtkOV QBtWRBQ225Ajj9ynwC4Z2WZJSuG+jqvh+j5YeOHTu56jmYcc2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIAwvDMYf34TtmEgUjIuwEtYqXwcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODQ5YzczMzgtMTZmZS0z ZDk1LTg0YTctYmFhYWNmMzVkOGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGAt8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEV0v1jfFP+V5Q0qVNbQX00aBiF2t7T+qPq1dAlbn/Cs8jZf/EPLWZpe UMalOB1GKE1N1pXNsv7vo+fBShmoshEdev2kWB5vs0tuZqnfih4LoGi7Jd8DbWQc EhmQ2N++o2Z0YxuwRqnn+pUk8s+ME68DcPQe5VGEVARed2MV8xv4sP4x+pCBhVSY fZnZ8YTljRspxc7JsEEj0v1B9SToDwM/uLRsBC2vZ3R6vru4RHh2ntrZ8f8zuJKt eJ5Qz7EwlRcAIb3gWYN4L7XR7QfRMPk8pLRkoXF2H3/aZ2XLVpbVmIX8Qo6uJfo4 bb67fVVt4dakHb0wWRX64YSeTx7DEzY= -----END CERTIFICATE-----Generated at Sun Mar 1 18:44:23 2026 by rpki-client