$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c706093-6042-386d-93ab-c30c12f5f3ef.roa File: 8c706093-6042-386d-93ab-c30c12f5f3ef.roa (raw, json) Hash identifier: GsBN1zMPW/wIPRH83Ki+asAlVxiwnR07913GpLK9WQQ= Subject key identifier: B7:B3:DC:F5:5D:A9:6A:59:84:D1:ED:6A:93:01:7E:4C:7E:C0:C9:E9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5D348AABFFEE9826256B80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c706093-6042-386d-93ab-c30c12f5f3ef.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 24.4.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5d:34:8a:ab:ff:ee:98:26:25:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=aa3c1b85-a3dc-41b3-a74d-9b329ff1d1ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:9c:0a:b0:da:45:0d:bd:53:98:e2:84:01:9a: ea:f6:c4:46:16:e5:90:fc:1f:71:21:4b:ec:4e:25: 20:7f:65:ca:59:d3:37:8a:0c:3a:82:e3:2d:49:3e: 94:19:97:fe:a4:66:6f:37:0a:84:7b:1d:ef:fe:b9: c8:1a:8d:ec:00:6e:5e:53:a7:a0:28:de:22:3b:e0: fc:1c:ef:f4:6e:2b:3b:a5:20:b8:ae:93:26:6d:aa: 55:12:1c:b1:bd:73:ed:0b:4d:7e:9a:e5:1a:60:ed: 54:16:9f:0a:8d:f8:c5:f2:8e:3b:06:16:b6:fc:53: 68:a4:84:98:a0:9f:f0:22:46:16:72:7f:d3:92:cf: bb:b9:5f:ca:09:72:00:84:01:4e:b3:d9:6d:71:06: 04:ac:f7:98:d7:2a:92:83:1a:47:d3:ed:3f:81:90: fb:91:f7:0c:43:59:cf:d2:5a:06:fa:26:0f:4c:f0: 56:33:fa:d6:57:10:80:f2:90:7d:91:74:1c:8e:77: 20:f7:e0:ae:0b:7f:c4:c2:03:57:e0:8e:b4:69:9a: 1f:a4:d5:48:7d:0e:10:af:42:d4:10:dd:cb:72:d3: b6:bc:bc:66:9d:7b:d5:d0:18:f3:4f:04:2e:95:3d: 8d:3e:80:49:e0:7d:e5:c3:e7:34:22:0a:1a:70:5e: e2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:B3:DC:F5:5D:A9:6A:59:84:D1:ED:6A:93:01:7E:4C:7E:C0:C9:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c706093-6042-386d-93ab-c30c12f5f3ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.4.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:40:e7:c8:8c:6b:34:ec:38:55:40:7f:cb:1d:71:92:71:89: ef:fc:b3:c8:c1:a2:16:f6:84:cd:30:00:48:64:f2:c8:90:43: e9:ca:06:78:f7:c4:70:bb:37:30:37:1a:d3:e6:6e:6f:55:f8: 9c:21:8e:db:ff:16:60:af:a0:a4:9b:bc:65:69:a5:c2:b7:54: 6b:18:f9:bb:3e:0e:9d:01:cf:64:66:e4:d5:41:f2:86:5c:b6: d2:2b:fc:c8:63:9e:c5:b1:bb:9c:b7:f0:cf:0d:12:d9:a6:31: 56:9c:fe:b2:17:b0:e5:fa:9c:17:7f:15:df:94:82:f1:cc:9e: 6c:95:82:35:6e:f1:dc:43:dc:8f:6d:e0:77:70:96:eb:9b:68: e1:3e:e7:bc:d4:e8:d9:c0:81:38:02:21:d5:80:94:09:c5:0a: ec:a0:a1:54:fb:ba:b8:09:0b:65:59:51:b6:c0:33:7a:53:f6: c5:b9:c6:63:93:88:a6:44:06:a8:2a:51:20:ab:1b:4e:aa:e6: 36:34:8a:6e:22:3e:8e:df:cc:e0:ad:b7:5f:c0:c7:33:23:90: ac:bb:7b:50:d7:86:8f:e0:23:98:dd:1e:8d:bb:0b:8f:23:e7: 66:ba:1a:0a:cb:60:d4:c3:f0:26:6a:22:46:d7:f9:bb:ca:32: 52:c6:a0:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXTSKq//umCYla4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YWEzYzFiODUtYTNkYy00MWIzLWE3NGQtOWIzMjlmZjFkMWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5wKsNpFDb1TmOKEAZrq9sRGFuWQ/B9xIUvs TiUgf2XKWdM3igw6guMtST6UGZf+pGZvNwqEex3v/rnIGo3sAG5eU6egKN4iO+D8 HO/0bis7pSC4rpMmbapVEhyxvXPtC01+muUaYO1UFp8KjfjF8o47Bha2/FNopISY oJ/wIkYWcn/Tks+7uV/KCXIAhAFOs9ltcQYErPeY1yqSgxpH0+0/gZD7kfcMQ1nP 0loG+iYPTPBWM/rWVxCA8pB9kXQcjncg9+CuC3/EwgNX4I60aZofpNVIfQ4Qr0LU EN3LctO2vLxmnXvV0BjzTwQulT2NPoBJ4H3lw+c0IgoacF7i1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLez3PVdqWpZhNHtapMBfkx+wMnpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGM3MDYwOTMtNjA0Mi0z ODZkLTkzYWItYzMwYzEyZjVmM2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGATMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxA58iMazTsOFVAf8sdcZJxie/8s8jBohb2hM0wAEhk8siQQ+nKBnj3 xHC7NzA3GtPmbm9V+Jwhjtv/FmCvoKSbvGVppcK3VGsY+bs+Dp0Bz2Rm5NVB8oZc ttIr/MhjnsWxu5y38M8NEtmmMVac/rIXsOX6nBd/Fd+UgvHMnmyVgjVu8dxD3I9t 4HdwluubaOE+57zU6NnAgTgCIdWAlAnFCuygoVT7urgJC2VZUbbAM3pT9sW5xmOT iKZEBqgqUSCrG06q5jY0im4iPo7fzOCtt1/AxzMjkKy7e1DXho/gI5jdHo27C48j 52a6GgrLYNTD8CZqIkbX+bvKMlLGoPA= -----END CERTIFICATE-----Generated at Sun Mar 1 19:09:20 2026 by rpki-client