$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a43452a7-0144-38b5-bee8-e5c013b6653b.roa File: a43452a7-0144-38b5-bee8-e5c013b6653b.roa (raw, json) Hash identifier: Jd3vhowRH/R9SjKF6Y962fp8wR8JV6Yaj3v4aCvp8zo= Subject key identifier: F1:E5:5B:58:9E:07:0D:06:6C:A2:BD:3A:89:1D:8F:26:0E:ED:82:4E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE58B624D554E12F69F2B000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a43452a7-0144-38b5-bee8-e5c013b6653b.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 24.5.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:b6:24:d5:54:e1:2f:69:f2:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=fe07e37f-9032-4f8b-bd82-1529594871d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:85:c5:cc:2c:4f:e0:b2:a9:e8:0e:37:d5:3c: 09:e5:0c:b3:42:29:2d:67:18:90:ac:c2:13:5d:1d: af:ec:47:fa:89:8f:b5:24:a0:c5:8d:75:3e:10:84: 75:2d:56:4f:15:13:b4:4a:44:d5:4d:76:38:fb:5f: 62:8f:c2:1f:a6:8a:b7:52:46:fc:eb:36:b8:fe:c0: 0e:5a:6f:15:da:27:3b:c9:af:60:2c:d6:5d:51:72: 7e:de:4c:e6:6f:0e:c9:ba:3d:66:e9:c1:0b:95:f6: eb:27:d0:8c:fa:0c:21:a0:f0:a0:54:6b:4e:2f:2b: 4b:92:92:aa:51:32:ef:fe:1e:3b:27:3a:ec:5c:62: 5d:01:50:5e:55:3f:f1:ec:35:73:59:ad:26:bf:65: f0:b2:29:53:d8:e0:a6:70:c4:7c:66:80:ab:5b:df: 57:46:ce:1b:cd:29:de:57:3b:d9:49:1e:8f:9a:92: a0:88:23:4b:eb:8d:4f:e0:80:0f:b2:9a:52:c5:e6: bb:07:50:53:c5:14:41:d5:c1:2a:ed:15:27:03:9e: 9a:cc:9f:18:b1:e0:8a:84:c4:81:d6:0c:e9:60:89: 5a:5b:0d:c0:c5:67:ec:42:53:f2:23:6a:d6:ab:91: ef:b3:e1:39:0f:38:7d:08:a5:37:cd:41:83:ba:77: 28:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:E5:5B:58:9E:07:0D:06:6C:A2:BD:3A:89:1D:8F:26:0E:ED:82:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a43452a7-0144-38b5-bee8-e5c013b6653b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.5.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:19:c6:3e:6d:8d:34:c6:63:9f:75:b0:19:9f:cf:45:9f:6e: 8c:fc:0c:43:ce:fd:cb:d3:62:f6:73:35:2f:98:33:8f:5c:05: 3b:1c:15:bb:8d:85:5e:19:34:fd:01:90:9e:19:3a:2a:b8:97: 9e:f9:d3:74:62:2d:0f:68:66:e2:5b:69:e9:ac:e2:47:7b:d6: d2:1d:fe:20:4e:cc:20:24:57:69:2a:6c:d5:af:e8:dc:b8:1c: 9e:24:80:1a:10:06:1c:51:e3:9f:61:b4:8a:b8:a5:5b:04:a3: 73:aa:49:ca:51:ab:23:d2:22:45:8d:11:e7:2a:4f:79:46:42: 31:a9:bb:ee:7d:3e:5a:c2:cf:bf:63:c1:f3:db:96:02:2e:7b: c6:9d:18:0f:8d:47:19:e5:f5:ac:bd:fd:9f:e2:42:a9:ec:f2: 26:11:b1:b3:76:27:22:2c:15:4c:fa:72:3f:c7:07:0a:dd:28: e7:fa:6b:e0:5d:4e:b1:dd:7b:04:d8:f9:07:20:b7:18:4a:0b: 65:ba:6e:e8:cc:a7:43:42:68:5c:d0:37:57:f0:99:31:ea:4f: f2:98:ba:5b:51:4d:5b:9e:c4:cb:52:43:ef:43:81:40:08:d8: 45:01:26:c3:11:b0:20:95:4c:83:75:42:00:f1:d3:75:63:e6: f8:6e:9b:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWLYk1VThL2nysAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZmUwN2UzN2YtOTAzMi00ZjhiLWJkODItMTUyOTU5NDg3MWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYXFzCxP4LKp6A431TwJ5QyzQiktZxiQrMIT XR2v7Ef6iY+1JKDFjXU+EIR1LVZPFRO0SkTVTXY4+19ij8Ifpoq3Ukb86za4/sAO Wm8V2ic7ya9gLNZdUXJ+3kzmbw7Juj1m6cELlfbrJ9CM+gwhoPCgVGtOLytLkpKq UTLv/h47JzrsXGJdAVBeVT/x7DVzWa0mv2XwsilT2OCmcMR8ZoCrW99XRs4bzSne VzvZSR6PmpKgiCNL641P4IAPsppSxea7B1BTxRRB1cEq7RUnA56azJ8YseCKhMSB 1gzpYIlaWw3AxWfsQlPyI2rWq5Hvs+E5Dzh9CKU3zUGDuncoQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPHlW1ieBw0GbKK9OokdjyYO7YJOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTQzNDUyYTctMDE0NC0z OGI1LWJlZTgtZTVjMDEzYjY2NTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGAWZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUZxj5tjTTGY591sBmfz0Wfboz8DEPO/cvTYvZzNS+YM49cBTscFbuN hV4ZNP0BkJ4ZOiq4l57503RiLQ9oZuJbaems4kd71tId/iBOzCAkV2kqbNWv6Ny4 HJ4kgBoQBhxR459htIq4pVsEo3OqScpRqyPSIkWNEecqT3lGQjGpu+59PlrCz79j wfPblgIue8adGA+NRxnl9ay9/Z/iQqns8iYRsbN2JyIsFUz6cj/HBwrdKOf6a+Bd TrHdewTY+QcgtxhKC2W6bujMp0NCaFzQN1fwmTHqT/KYultRTVuexMtSQ+9DgUAI 2EUBJsMRsCCVTIN1QgDx03Vj5vhum64= -----END CERTIFICATE-----Generated at Mon Mar 2 00:00:15 2026 by rpki-client