$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/859d8dda-b562-306f-ab8f-f043ea7b398b.roa File: 859d8dda-b562-306f-ab8f-f043ea7b398b.roa (raw, json) Hash identifier: B00dzJR9Zpzyk6XSxDSFuWCgiE+tfmnRBHKEBRsjs/0= Subject key identifier: 3A:A9:98:1D:3F:83:3E:88:5C:93:10:84:88:50:B3:8A:72:80:F5:68 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5A9D9C80BD7C35F8BD6600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/859d8dda-b562-306f-ab8f-f043ea7b398b.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33287 IP address blocks: 24.0.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5a:9d:9c:80:bd:7c:35:f8:bd:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=973bacfe-dd72-4ecc-b3e3-2227515e6194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:66:6b:ca:42:34:d7:04:25:c5:74:96:63:c9: d3:b2:96:cd:eb:30:47:af:84:49:35:ab:33:fe:18: 62:86:90:bb:21:be:1e:fb:aa:24:a4:77:73:ae:1c: 98:9c:b6:b4:1a:ba:4d:c5:d6:9c:83:44:3a:28:f3: 7b:36:b0:7e:67:32:98:46:dc:ea:c8:58:bd:5b:0e: bd:32:04:3a:3c:09:33:bb:a0:fb:63:92:b5:1d:42: 8a:fd:26:ba:b3:2d:67:cd:24:41:20:45:f0:82:e4: d6:6f:8f:57:bb:f0:fa:c5:41:53:d2:dd:4b:50:f9: 3f:cd:d5:43:0d:07:25:f2:75:5f:7a:f9:6b:83:cd: 75:a2:c8:d2:8f:14:ca:b8:0c:ac:60:3c:76:19:1c: 89:55:15:bb:86:e0:d5:64:6d:66:57:2d:03:4b:d9: cb:60:51:bc:75:f0:13:e6:ca:8f:d9:01:5a:95:cf: ff:86:65:90:5d:20:25:e5:e8:76:cc:ee:7c:9f:fa: 48:cf:b1:46:58:f9:a3:24:dc:cd:89:4f:88:b1:3d: 15:3d:01:54:64:5b:0d:3b:eb:d8:01:0b:da:3f:d7: 45:fe:af:ba:30:07:e5:3d:52:19:bb:f6:b5:b4:98: 88:0f:08:be:b5:c0:16:f3:e6:49:08:3b:a2:2b:52: b3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A9:98:1D:3F:83:3E:88:5C:93:10:84:88:50:B3:8A:72:80:F5:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/859d8dda-b562-306f-ab8f-f043ea7b398b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.0.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:b8:de:5f:9f:ef:01:4e:2a:4d:97:aa:52:f3:5f:ef:3d:1a: 9c:1f:59:33:58:f2:ab:e4:3f:54:d9:b2:7d:1c:60:74:bb:e9: 6d:6f:34:0e:83:9f:32:25:80:37:d9:c2:fd:21:e0:6f:ce:d1: d5:ca:11:78:34:d0:00:ab:99:ec:65:00:b4:ee:52:77:6b:92: 97:fd:eb:16:2d:53:df:4c:60:d9:7a:01:5d:37:64:33:36:d0: 9e:2a:27:e7:27:5e:82:37:09:4f:40:75:a8:55:20:c9:32:35: 8e:e2:26:27:4e:bc:c2:95:f5:10:31:fa:6f:8a:d1:9d:58:b7: e5:c7:04:7c:bb:51:7b:b4:77:d0:59:04:e1:50:0a:f7:d2:53: a9:bd:e0:99:90:16:7f:49:cf:e9:33:0a:dd:93:0e:2c:16:91: 53:6c:1a:79:39:d7:de:75:96:6a:bb:a0:29:8d:cf:a7:1e:48: 67:a6:d2:d4:0f:de:fa:80:fd:54:85:85:57:f2:0c:9a:ff:8c: 08:68:2c:2b:0e:59:23:4e:c6:a8:ef:91:4e:c2:3a:91:6c:e5: 52:a0:23:f3:14:db:cc:11:97:c9:d3:b7:f9:c6:05:a9:39:2c: d9:8d:83:ab:66:6b:d9:b1:a5:0a:99:62:3b:5f:c5:ec:51:7d: 3c:79:fc:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWp2cgL18Nfi9ZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk OTczYmFjZmUtZGQ3Mi00ZWNjLWIzZTMtMjIyNzUxNWU2MTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGZrykI01wQlxXSWY8nTspbN6zBHr4RJNasz /hhihpC7Ib4e+6okpHdzrhyYnLa0GrpNxdacg0Q6KPN7NrB+ZzKYRtzqyFi9Ww69 MgQ6PAkzu6D7Y5K1HUKK/Sa6sy1nzSRBIEXwguTWb49Xu/D6xUFT0t1LUPk/zdVD DQcl8nVfevlrg811osjSjxTKuAysYDx2GRyJVRW7huDVZG1mVy0DS9nLYFG8dfAT 5sqP2QFalc//hmWQXSAl5eh2zO58n/pIz7FGWPmjJNzNiU+IsT0VPQFUZFsNO+vY AQvaP9dF/q+6MAflPVIZu/a1tJiIDwi+tcAW8+ZJCDuiK1KzUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqpmB0/gz6IXJMQhIhQs4pygPVoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODU5ZDhkZGEtYjU2Mi0z MDZmLWFiOGYtZjA0M2VhN2IzOThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGABYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL643l+f7wFOKk2XqlLzX+89GpwfWTNY8qvkP1TZsn0cYHS76W1vNA6D nzIlgDfZwv0h4G/O0dXKEXg00ACrmexlALTuUndrkpf96xYtU99MYNl6AV03ZDM2 0J4qJ+cnXoI3CU9AdahVIMkyNY7iJidOvMKV9RAx+m+K0Z1Yt+XHBHy7UXu0d9BZ BOFQCvfSU6m94JmQFn9Jz+kzCt2TDiwWkVNsGnk51951lmq7oCmNz6ceSGem0tQP 3vqA/VSFhVfyDJr/jAhoLCsOWSNOxqjvkU7COpFs5VKgI/MU28wRl8nTt/nGBak5 LNmNg6tma9mxpQqZYjtfxexRfTx5/PQ= -----END CERTIFICATE-----Generated at Sun Mar 1 21:01:10 2026 by rpki-client