$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da35fd0d-1ea0-3bee-baae-32cf6a3f5888.roa File: da35fd0d-1ea0-3bee-baae-32cf6a3f5888.roa (raw, json) Hash identifier: iPVBysEw4Tirs1WHgEQ4XXlusdQJHlGYBsDnIrzYbBA= Subject key identifier: 6D:4A:BA:F9:0B:DE:AB:73:8A:CF:54:99:CE:D1:78:3A:DE:2D:68:26 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5B4A56939064D11CC4B9A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da35fd0d-1ea0-3bee-baae-32cf6a3f5888.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 24.12.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5b:4a:56:93:90:64:d1:1c:c4:b9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=e136d987-4233-4731-b1e3-9bcf12aaebb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d2:d7:e6:87:e0:b6:41:32:ac:e7:82:ae:67: b0:c4:6c:98:41:e8:e9:eb:2b:a0:53:a2:80:02:ad: 00:83:ab:1c:5b:85:47:b5:06:45:6c:66:c4:ff:2d: de:82:e0:9f:bd:a4:8b:8e:dc:e1:cb:31:c7:b0:f9: d2:14:f2:d1:a6:0e:ef:0f:35:3c:03:9d:d4:30:86: b1:ab:24:4f:a0:2d:0c:d1:4c:24:ec:77:b0:bc:fa: 3d:5a:58:ec:26:2a:d2:af:6d:a2:19:fc:bc:92:7a: 1f:19:50:a3:6a:33:cd:2a:b6:9d:65:37:9b:c4:d6: 93:7e:13:27:d5:49:66:24:e7:b5:8a:6f:70:4a:ce: ad:95:60:20:5d:dc:f7:f8:7c:84:43:d9:36:8c:06: 42:f8:06:4c:26:9f:bc:ff:f8:29:21:c9:3d:ca:1c: 69:0b:a9:c8:ed:91:13:5e:56:83:89:e8:1a:fc:7b: 3a:8c:47:36:f0:ff:36:d0:81:dc:c7:fa:bb:63:76: dc:a0:a8:af:b6:9e:0e:49:ed:2b:28:fb:8e:b2:fb: cb:b3:d7:42:57:77:8f:ff:d5:a8:ce:15:c0:30:2b: 2e:96:ca:40:8c:14:5a:6a:75:d5:ad:9d:e2:7d:b2: 03:f8:36:05:17:5c:dd:cc:77:44:25:fb:e4:1c:a1: bc:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:4A:BA:F9:0B:DE:AB:73:8A:CF:54:99:CE:D1:78:3A:DE:2D:68:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da35fd0d-1ea0-3bee-baae-32cf6a3f5888.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.12.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:ce:aa:81:eb:6e:0d:65:d5:f0:d5:4f:c6:da:77:86:1b:96: 53:16:0d:6b:d5:a8:a5:c3:36:65:96:4a:61:af:00:c0:cd:d9: 13:d3:06:1f:b5:5e:15:f8:a5:ec:83:0a:b0:68:f2:92:dd:97: ad:f4:de:93:1f:be:c9:cc:04:55:b3:c0:37:7c:c3:e2:c6:7c: 70:f2:8f:2b:38:55:77:6d:f6:d9:e7:80:10:f0:ef:80:90:15: 67:f2:99:8c:74:85:cb:dc:b7:1a:c6:3a:73:04:57:61:fb:9a: 4a:75:32:23:79:cd:d1:3d:c8:02:81:5e:b4:fd:23:da:3d:75: d7:e6:c6:d4:04:c3:75:65:2e:8e:c7:8e:9b:2d:d4:89:b8:26: 57:56:3d:c9:ce:c8:57:91:ad:f9:9a:e3:1a:99:3d:89:e2:bb: 05:54:99:8e:2b:1a:b6:4e:33:f8:a8:9e:0d:5e:b7:00:6a:63: 8c:2b:c9:7b:8d:79:2e:7f:77:42:4d:4a:3a:94:9d:6b:ec:fb: ee:2f:f1:d0:00:a8:fb:43:ef:e1:a1:f4:f9:54:2d:56:08:bb: 5e:7a:42:b9:9d:1f:0d:bb:d9:8b:13:24:68:c4:01:5d:38:cf: 54:80:c3:93:a8:92:9c:6c:af:e6:37:41:da:b8:2f:3c:b8:58: 2c:2d:79:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuW0pWk5Bk0RzEuaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZTEzNmQ5ODctNDIzMy00NzMxLWIxZTMtOWJjZjEyYWFlYmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtLX5ofgtkEyrOeCrmewxGyYQejp6yugU6KA Aq0Ag6scW4VHtQZFbGbE/y3eguCfvaSLjtzhyzHHsPnSFPLRpg7vDzU8A53UMIax qyRPoC0M0Uwk7HewvPo9WljsJirSr22iGfy8knofGVCjajPNKradZTebxNaTfhMn 1UlmJOe1im9wSs6tlWAgXdz3+HyEQ9k2jAZC+AZMJp+8//gpIck9yhxpC6nI7ZET XlaDiega/Hs6jEc28P820IHcx/q7Y3bcoKivtp4OSe0rKPuOsvvLs9dCV3eP/9Wo zhXAMCsulspAjBRaanXVrZ3ifbID+DYFF1zdzHdEJfvkHKG8LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG1KuvkL3qtzis9Umc7ReDreLWgmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGEzNWZkMGQtMWVhMC0z YmVlLWJhYWUtMzJjZjZhM2Y1ODg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGAyEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXOqoHrbg1l1fDVT8bad4YbllMWDWvVqKXDNmWWSmGvAMDN2RPTBh+1 XhX4peyDCrBo8pLdl6303pMfvsnMBFWzwDd8w+LGfHDyjys4VXdt9tnngBDw74CQ FWfymYx0hcvctxrGOnMEV2H7mkp1MiN5zdE9yAKBXrT9I9o9ddfmxtQEw3VlLo7H jpst1Im4JldWPcnOyFeRrfma4xqZPYniuwVUmY4rGrZOM/iong1etwBqY4wryXuN eS5/d0JNSjqUnWvs++4v8dAAqPtD7+Gh9PlULVYIu156QrmdHw272YsTJGjEAV04 z1SAw5Ookpxsr+Y3Qdq4Lzy4WCwteW4= -----END CERTIFICATE-----Generated at Sun Mar 1 18:29:01 2026 by rpki-client