$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f8520a3a-ae44-38ee-bd14-5b5fd73b8e59.roa File: f8520a3a-ae44-38ee-bd14-5b5fd73b8e59.roa (raw, json) Hash identifier: D3zPM3JLzDb3vdvKUfUFCm2AY64VijWcY1Lr6brD7wQ= Subject key identifier: 6E:E0:01:93:15:FE:BA:43:C7:56:12:A3:7F:9B:68:DE:FB:47:D6:0B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE591F31E75764017DF0FBE0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f8520a3a-ae44-38ee-bd14-5b5fd73b8e59.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33660 IP address blocks: 24.10.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:59:1f:31:e7:57:64:01:7d:f0:fb:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=b94af88c-95c4-4dd1-8225-cd74ba7c9b52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:45:23:1f:53:be:94:96:57:95:60:6d:cc:51: bf:81:8c:27:22:c7:71:d7:f0:cb:b1:8f:55:93:82: 89:07:2d:9b:f5:89:48:d5:f7:ff:cb:92:7b:90:3c: d8:ce:06:2b:ec:4d:8f:1c:c5:cf:c1:52:4d:bc:31: ea:af:15:d0:45:06:f7:20:58:d5:4f:2a:88:77:fb: 90:33:f3:96:4f:0d:23:32:a7:1a:68:63:f8:69:8f: f1:00:82:de:4e:8e:7a:9a:db:6b:32:02:ab:82:a5: 92:50:23:fc:34:79:86:3a:33:3a:59:db:93:b7:1e: 79:61:f5:29:c1:4e:b3:31:6b:47:68:17:65:09:02: 78:bc:8e:99:ba:e5:8a:67:43:8d:2b:4c:7c:01:b9: af:eb:f5:c6:6d:35:48:30:57:ae:fa:55:ce:1d:b2: 48:e3:61:16:32:2b:6b:ed:e2:28:6a:68:0b:a0:a5: 18:d3:7f:cf:36:9f:ce:dd:ca:21:fd:3e:c9:1c:49: 1a:a9:9b:ed:aa:aa:f3:89:fd:05:07:84:be:30:b9: 94:1e:5d:9f:d9:47:80:2d:7c:8f:90:49:f0:b9:e5: 7f:55:ab:70:0c:f0:60:50:9f:f9:39:a3:cb:ec:dd: 7d:0c:1b:ca:66:f1:40:66:8f:c5:00:06:d6:25:16: 82:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:E0:01:93:15:FE:BA:43:C7:56:12:A3:7F:9B:68:DE:FB:47:D6:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f8520a3a-ae44-38ee-bd14-5b5fd73b8e59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.10.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:60:67:7b:0c:2e:9e:5b:1d:4e:e6:46:fc:e5:08:5c:f7:08: 93:81:ec:c2:07:3e:4c:44:59:43:f2:aa:38:9b:1d:c9:83:bd: e9:a2:ff:d0:15:37:d0:2c:0e:0f:7c:d4:57:dd:bd:19:8d:83: 71:ba:67:d8:59:14:aa:37:a8:bf:b1:e5:7c:c7:33:37:07:b9: 8a:4d:40:88:e7:5c:bc:31:bf:32:8b:f0:d3:3a:3a:34:74:fa: 64:9b:80:60:c8:91:04:36:3a:19:e2:e6:cb:59:19:92:6a:74: 3e:36:e1:59:11:f2:dd:3a:8c:97:b8:de:25:55:d6:34:c3:03: d0:01:2c:31:44:b1:7a:98:8e:d4:bb:3e:64:1c:c7:17:81:8f: ed:12:cc:2b:e8:ba:17:82:a9:7a:01:80:8e:19:b1:f7:b7:44: 81:0d:af:85:8c:01:cf:31:f4:ab:99:2f:90:9d:16:12:37:8d: d2:24:b4:ef:de:84:bd:fa:70:40:92:29:b0:a7:d3:12:1a:ee: 33:f9:80:c5:05:94:06:94:31:b8:68:cf:37:e5:e8:bf:74:2f: 21:ec:07:01:b4:e9:66:b6:51:b8:7a:3a:ce:a9:c5:c4:c5:2c: 9e:e1:51:d6:25:d6:3d:11:d8:94:88:74:89:df:6e:34:38:a7: ad:3d:ee:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWR8x51dkAX3w++AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk Yjk0YWY4OGMtOTVjNC00ZGQxLTgyMjUtY2Q3NGJhN2M5YjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEUjH1O+lJZXlWBtzFG/gYwnIsdx1/DLsY9V k4KJBy2b9YlI1ff/y5J7kDzYzgYr7E2PHMXPwVJNvDHqrxXQRQb3IFjVTyqId/uQ M/OWTw0jMqcaaGP4aY/xAILeTo56mttrMgKrgqWSUCP8NHmGOjM6WduTtx55YfUp wU6zMWtHaBdlCQJ4vI6ZuuWKZ0ONK0x8Abmv6/XGbTVIMFeu+lXOHbJI42EWMitr 7eIoamgLoKUY03/PNp/O3coh/T7JHEkaqZvtqqrzif0FB4S+MLmUHl2f2UeALXyP kEnwueV/VatwDPBgUJ/5OaPL7N19DBvKZvFAZo/FAAbWJRaCJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG7gAZMV/rpDx1YSo3+baN77R9YLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjg1MjBhM2EtYWU0NC0z OGVlLWJkMTQtNWI1ZmQ3M2I4ZTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGArYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVgZ3sMLp5bHU7mRvzlCFz3CJOB7MIHPkxEWUPyqjibHcmDvemi/9AV N9AsDg981FfdvRmNg3G6Z9hZFKo3qL+x5XzHMzcHuYpNQIjnXLwxvzKL8NM6OjR0 +mSbgGDIkQQ2Ohni5stZGZJqdD424VkR8t06jJe43iVV1jTDA9ABLDFEsXqYjtS7 PmQcxxeBj+0SzCvouheCqXoBgI4Zsfe3RIENr4WMAc8x9KuZL5CdFhI3jdIktO/e hL36cECSKbCn0xIa7jP5gMUFlAaUMbhozzfl6L90LyHsBwG06Wa2Ubh6Os6pxcTF LJ7hUdYl1j0R2JSIdInfbjQ4p6097k0= -----END CERTIFICATE-----Generated at Sun Mar 1 18:34:09 2026 by rpki-client