$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/920f6aea-17dd-30e5-9a42-0129ff2f12c3.roa File: 920f6aea-17dd-30e5-9a42-0129ff2f12c3.roa (raw, json) Hash identifier: DghPiAxDG9lf/+IdOOJp7rGJzkXwD/VkOzlPeB8bNyc= Subject key identifier: 65:36:65:1F:A3:A0:A2:CF:21:67:3E:1E:C5:01:12:DA:40:C8:4E:18 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5B29BD7EA8AB28C9696800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/920f6aea-17dd-30e5-9a42-0129ff2f12c3.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33287 IP address blocks: 96.109.180.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5b:29:bd:7e:a8:ab:28:c9:69:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=3b97544c-cca9-49ed-bb1d-b9e39a7ae3a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8d:50:83:63:24:8e:0d:71:90:bc:46:a1:c4: ca:de:58:f8:0b:c5:c2:91:67:42:5d:84:30:6d:2e: 6a:3a:14:26:9f:c7:5b:86:6c:63:88:cf:ed:ef:0d: 13:cb:c4:14:b6:53:8b:24:54:80:ef:30:9d:39:76: 8c:cf:ab:00:45:c6:9a:7e:ca:37:ac:ff:70:4d:ec: a5:b2:89:df:f5:25:e5:e0:3e:f0:a8:f3:78:68:25: 55:a3:2b:50:1b:31:79:71:42:c2:db:3e:b0:69:84: 10:10:50:98:a6:f4:a7:ec:df:61:6e:11:8c:a2:64: 14:63:a9:2e:32:c6:97:f7:cb:4f:46:38:ad:bc:eb: 52:40:d2:a2:ec:4a:5b:84:04:82:62:a3:ed:2b:3f: 09:d8:be:8c:66:df:cc:a2:b0:54:a9:08:75:ca:44: 9e:55:a9:06:bb:c9:ec:1e:37:4b:51:ee:6e:0f:59: e3:9c:62:65:4b:45:7b:6f:35:fb:be:06:ae:30:8b: d2:56:76:fb:67:b7:bf:8a:ae:7b:f4:33:c3:b5:97: ff:7d:77:73:b3:75:13:fe:59:60:2e:9b:1f:e3:f4: 2d:a7:47:36:8c:91:a1:2c:13:27:4f:1a:31:23:91: 68:cd:0e:fe:6c:5f:cf:a3:80:14:b0:29:f7:0c:a0: 1a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:36:65:1F:A3:A0:A2:CF:21:67:3E:1E:C5:01:12:DA:40:C8:4E:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/920f6aea-17dd-30e5-9a42-0129ff2f12c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.109.180.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:d8:44:e4:42:95:27:a0:2f:7d:04:81:1b:85:b6:c6:8d:d7: 59:9b:ee:98:56:91:00:74:d8:56:2d:cb:34:6e:cc:50:00:1a: 81:49:b2:a3:ff:81:ab:64:b8:0b:f0:6d:e7:4d:72:96:45:c0: 6e:c9:50:31:ac:e7:6c:b5:c9:82:52:5c:bd:2b:27:bd:19:4a: 63:f9:68:b8:f1:71:0b:0b:66:e1:ee:57:ee:9b:81:ee:5a:cc: 22:c6:03:07:76:43:fc:42:5e:79:16:5e:5a:39:c5:aa:ee:90: 8b:5c:0e:dc:76:61:76:61:76:98:87:57:2e:ad:12:75:d7:95: 90:ce:b7:2b:32:00:a5:35:5a:ed:93:b8:03:67:71:25:a7:30: d7:11:d4:53:2a:cf:82:c5:33:bd:f8:69:dd:0e:6b:61:c2:12: 8b:d9:e8:fa:ec:93:a6:24:a6:c8:03:d0:28:df:7c:b6:6b:ea: c4:03:66:73:11:f7:38:ea:e6:32:3b:9c:3a:d5:87:ad:51:7e: eb:f3:23:c3:bb:ef:ba:d6:77:04:18:cb:3d:f1:af:8e:ca:47: 8d:00:e0:48:fe:94:97:79:88:49:ef:2c:b7:f6:77:29:9d:1d: da:b2:25:9b:c7:74:51:b7:18:f0:1e:2c:38:ac:aa:f9:94:f9: 32:ed:e1:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWym9fqirKMlpaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk M2I5NzU0NGMtY2NhOS00OWVkLWJiMWQtYjllMzlhN2FlM2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmI1Qg2Mkjg1xkLxGocTK3lj4C8XCkWdCXYQw bS5qOhQmn8dbhmxjiM/t7w0Ty8QUtlOLJFSA7zCdOXaMz6sARcaafso3rP9wTeyl sonf9SXl4D7wqPN4aCVVoytQGzF5cULC2z6waYQQEFCYpvSn7N9hbhGMomQUY6ku MsaX98tPRjitvOtSQNKi7EpbhASCYqPtKz8J2L6MZt/MorBUqQh1ykSeVakGu8ns HjdLUe5uD1njnGJlS0V7bzX7vgauMIvSVnb7Z7e/iq579DPDtZf/fXdzs3UT/llg Lpsf4/Qtp0c2jJGhLBMnTxoxI5FozQ7+bF/Po4AUsCn3DKAa6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGU2ZR+joKLPIWc+HsUBEtpAyE4YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTIwZjZhZWEtMTdkZC0z MGU1LTlhNDItMDEyOWZmMmYxMmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYG20MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPYRORClSegL30EgRuFtsaN11mb7phWkQB02FYtyzRuzFAAGoFJsqP/ gatkuAvwbedNcpZFwG7JUDGs52y1yYJSXL0rJ70ZSmP5aLjxcQsLZuHuV+6bge5a zCLGAwd2Q/xCXnkWXlo5xarukItcDtx2YXZhdpiHVy6tEnXXlZDOtysyAKU1Wu2T uANncSWnMNcR1FMqz4LFM734ad0Oa2HCEovZ6Prsk6YkpsgD0CjffLZr6sQDZnMR 9zjq5jI7nDrVh61RfuvzI8O777rWdwQYyz3xr47KR40A4Ej+lJd5iEnvLLf2dymd HdqyJZvHdFG3GPAeLDisqvmU+TLt4bA= -----END CERTIFICATE-----Generated at Sun Mar 1 18:42:08 2026 by rpki-client