$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c1f3aadf-fae0-3926-8912-de9005a9053d.roa File: c1f3aadf-fae0-3926-8912-de9005a9053d.roa (raw, json) Hash identifier: WdAJV1GeHRsPwRjuMkca2ggQy+1fVlebHlwqSlX2mnc= Subject key identifier: DC:A9:F0:5E:43:CD:CB:7F:C5:2E:12:49:06:EB:88:C8:17:37:15:A9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE58B6D479D4A1BF26619D00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c1f3aadf-fae0-3926-8912-de9005a9053d.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 24.5.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:b6:d4:79:d4:a1:bf:26:61:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=9d690c2d-2bf5-48e6-841e-5c94d2a08899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0f:51:1d:b7:9e:e7:16:d6:1a:c2:0b:de:fe: e3:54:ce:79:2f:3f:ae:94:82:d4:69:d3:15:ab:ef: 0d:4b:c1:17:1f:ca:31:36:44:64:4d:17:6e:85:b5: d4:95:36:95:63:43:66:b7:31:09:c7:fb:6e:f7:e7: 73:26:49:4b:49:e7:83:61:89:29:dc:38:3f:b7:12: 8b:d0:da:63:71:a7:69:e1:df:45:4b:ea:b1:84:63: 6c:4c:16:e3:8a:2e:59:30:07:2b:99:1e:9a:b4:ea: e5:a3:d0:6f:b6:9d:79:ec:a7:49:ab:b7:b5:72:fa: a4:df:90:8f:67:53:90:57:99:46:bb:0d:13:43:af: 7b:0f:a6:71:4c:77:30:5d:55:3a:c1:0c:a8:8c:77: 5d:b7:19:53:49:67:48:a5:f8:49:3c:24:00:b0:19: 84:2c:4c:f8:e6:75:09:5c:c9:9c:b1:f3:37:61:12: a3:c6:ae:df:fa:29:a0:22:3b:2d:34:fb:5e:96:8e: 72:60:22:dc:65:4f:c5:20:61:35:60:98:5f:51:39: 77:71:7a:8b:93:4c:01:e2:4d:3d:d2:af:f4:7a:69: 7e:96:d5:02:f6:90:57:24:54:c6:0e:e1:e1:45:11: 75:d5:f0:fd:14:aa:2d:fa:04:ac:76:aa:bb:79:99: ff:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:A9:F0:5E:43:CD:CB:7F:C5:2E:12:49:06:EB:88:C8:17:37:15:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c1f3aadf-fae0-3926-8912-de9005a9053d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.5.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:6b:09:5b:07:8b:21:fe:7f:6e:c2:f8:fb:32:57:59:7f:69: 09:15:d3:90:5c:80:9a:2b:2d:01:9f:9e:72:49:6a:b3:98:02: 75:d8:ca:42:4d:42:98:1f:1f:eb:b3:79:b8:cd:78:f9:04:5a: 5c:c7:52:b3:76:2c:79:c6:28:83:e5:b6:22:c8:e7:e2:2a:1e: 57:c4:e6:80:80:9f:2a:d5:35:37:c0:7e:0b:47:3c:fc:28:aa: 3e:d0:91:fd:84:0d:5f:39:ea:57:df:e9:94:08:fd:6b:bc:0c: ad:11:8a:82:46:4d:ac:eb:70:4f:dc:02:dc:b1:cb:59:51:af: 25:a7:1f:d8:e0:62:0f:e5:ea:2f:3b:e5:73:e8:02:d7:31:97: b3:00:fa:72:e2:2e:1b:ed:4d:f0:19:04:8f:c1:3a:1a:4e:ec: fd:e4:e0:67:0e:75:33:27:94:17:c7:b8:9c:3d:7f:e6:b8:9c: d2:da:62:17:24:35:50:0c:dc:d7:27:d5:72:79:7e:af:98:88: 38:7a:24:f8:13:be:a6:cd:8b:54:7e:9f:5f:e0:a9:de:3c:59: 8d:c1:7e:d8:5a:74:bb:d8:fe:87:f1:93:4d:1f:99:54:05:08: 75:04:eb:7c:1f:28:db:8c:f8:ea:31:d4:fd:f7:ae:45:18:90: 12:7f:45:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWLbUedShvyZhnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk OWQ2OTBjMmQtMmJmNS00OGU2LTg0MWUtNWM5NGQyYTA4ODk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQ9RHbee5xbWGsIL3v7jVM55Lz+ulILUadMV q+8NS8EXH8oxNkRkTRduhbXUlTaVY0NmtzEJx/tu9+dzJklLSeeDYYkp3Dg/txKL 0Npjcadp4d9FS+qxhGNsTBbjii5ZMAcrmR6atOrlo9Bvtp157KdJq7e1cvqk35CP Z1OQV5lGuw0TQ697D6ZxTHcwXVU6wQyojHddtxlTSWdIpfhJPCQAsBmELEz45nUJ XMmcsfM3YRKjxq7f+imgIjstNPtelo5yYCLcZU/FIGE1YJhfUTl3cXqLk0wB4k09 0q/0eml+ltUC9pBXJFTGDuHhRRF11fD9FKot+gSsdqq7eZn/rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNyp8F5Dzct/xS4SSQbriMgXNxWpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzFmM2FhZGYtZmFlMC0z OTI2LTg5MTItZGU5MDA1YTkwNTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGAXMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZrCVsHiyH+f27C+PsyV1l/aQkV05BcgJorLQGfnnJJarOYAnXYykJN QpgfH+uzebjNePkEWlzHUrN2LHnGKIPltiLI5+IqHlfE5oCAnyrVNTfAfgtHPPwo qj7Qkf2EDV856lff6ZQI/Wu8DK0RioJGTazrcE/cAtyxy1lRryWnH9jgYg/l6i87 5XPoAtcxl7MA+nLiLhvtTfAZBI/BOhpO7P3k4GcOdTMnlBfHuJw9f+a4nNLaYhck NVAM3Ncn1XJ5fq+YiDh6JPgTvqbNi1R+n1/gqd48WY3BfthadLvY/ofxk00fmVQF CHUE63wfKNuM+Oox1P33rkUYkBJ/Raw= -----END CERTIFICATE-----Generated at Mon Mar 2 14:42:48 2026 by rpki-client