$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/94256b14-27a0-3be6-a9ff-020cd5a9e0db.roa File: 94256b14-27a0-3be6-a9ff-020cd5a9e0db.roa (raw, json) Hash identifier: cJLwPcrW1KzS7QSHCO/VVg7ehmFUnJR+xUgQjcabedw= Subject key identifier: CE:B5:A5:A3:9E:52:B9:2E:61:F8:66:A0:35:3E:F8:29:0D:52:A4:45 Certificate issuer: /CN=13fecd24-0da7-4140-9636-71a72de851ec Certificate serial: 010D0C9F4328584CAE5719875A8C0D3FA9BCC700 Authority key identifier: 71:FB:07:EC:96:DD:BA:1E:51:4A:24:E7:48:C8:35:54:36:D1:14:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/94256b14-27a0-3be6-a9ff-020cd5a9e0db.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 14618 IP address blocks: 137.83.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/13fecd24-0da7-4140-9636-71a72de851ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/13fecd24-0da7-4140-9636-71a72de851ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:19:87:5a:8c:0d:3f:a9:bc:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13fecd24-0da7-4140-9636-71a72de851ec Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=9ab28f0d-1e31-4fe2-ae89-c293fa5a3f4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:47:fb:1e:26:15:a3:0a:e6:fe:d1:33:93:42: 9d:66:b7:62:79:ff:69:7c:56:8b:c2:36:89:f6:27: 25:2d:3a:a8:33:ac:90:4d:20:c1:05:19:00:99:aa: 9f:f2:09:ac:52:c5:c3:52:90:ea:57:92:95:a7:39: d9:a5:19:a7:08:fd:97:03:83:34:9f:fe:20:2f:cf: c5:76:07:1f:5f:cd:d4:2d:7a:11:fa:e5:5a:51:09: b8:d0:bd:36:07:7d:11:43:97:8e:48:22:e7:2c:e5: bf:36:d8:23:f1:8c:44:69:74:70:de:91:14:11:0b: ec:87:2f:3e:8f:22:1d:2e:50:0a:b1:11:13:d4:62: b2:a8:c8:51:b4:29:e9:38:eb:0f:e1:e9:1a:ed:af: 4e:fd:8d:a7:2e:d8:6f:5b:c6:d6:e8:3f:39:32:0e: b7:ff:ee:6a:1e:5f:f4:77:38:76:3e:4c:53:05:bc: 04:65:4b:00:7b:7b:e0:fe:26:33:0e:01:d2:e6:17: 7e:4a:e8:50:af:4d:46:90:fb:d0:dc:61:97:33:ac: f1:1d:af:ae:d8:31:0f:9b:2e:3b:02:a9:02:ac:a6: 44:ac:82:3e:cb:25:f5:0d:04:49:89:2c:ab:47:ff: ad:6f:83:fe:5e:f6:19:a6:3f:fb:9d:ed:3a:8b:2d: c9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:B5:A5:A3:9E:52:B9:2E:61:F8:66:A0:35:3E:F8:29:0D:52:A4:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/94256b14-27a0-3be6-a9ff-020cd5a9e0db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/13fecd24-0da7-4140-9636-71a72de851ec.crl X509v3 Authority Key Identifier: keyid:71:FB:07:EC:96:DD:BA:1E:51:4A:24:E7:48:C8:35:54:36:D1:14:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec.cer sbgp-ipAddrBlock: critical IPv4: 137.83.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:4c:23:72:e6:ca:d6:88:95:41:c1:f6:35:4f:24:ad:c0:ea: 00:9b:1a:47:54:cb:95:b2:ce:8e:72:5f:84:ca:e2:26:51:87: bc:c9:8c:28:65:91:0b:7c:4c:80:21:58:a2:a7:a3:cb:64:98: d6:f2:cd:99:dd:d5:37:5c:a6:67:9a:1a:50:95:3b:b6:8e:bc: 8c:c0:08:6c:2a:a7:b2:a8:b0:8d:85:1c:d9:2f:d8:a7:f8:b2: 53:24:be:94:26:a9:87:ad:6a:75:3e:87:1c:0b:f7:f6:a8:85: c7:ea:52:5d:bc:94:df:23:1d:a8:a0:d5:09:c2:54:5d:e9:25: 0c:89:fc:41:cc:d0:f1:84:ca:bb:58:ea:99:ee:df:15:20:33: 0c:84:b7:dc:e2:55:78:3d:6e:77:80:1a:84:ea:5b:eb:4c:e2: a0:1f:ef:63:3c:69:04:e1:7e:67:33:33:f8:e0:2c:4e:a4:b6: 14:0e:bd:9c:5b:cc:ee:f6:6b:e9:75:77:6e:68:cc:77:4d:e3: 6e:d6:1c:de:da:a5:79:0f:a2:f6:f7:cf:9b:0c:97:2e:44:95: b8:c7:81:2f:ad:3a:f4:9b:b7:b1:11:17:f6:9c:f7:2b:74:b8: 67:d7:74:97:2d:7e:8d:cd:8d:5f:05:9a:26:0a:38:37:72:79: fa:20:c6:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVxmHWowNP6m8xwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTNmZWNkMjQtMGRhNy00MTQwLTk2MzYtNzFhNzJkZTg1 MWVjMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk OWFiMjhmMGQtMWUzMS00ZmUyLWFlODktYzI5M2ZhNWEzZjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUf7HiYVowrm/tEzk0KdZrdief9pfFaLwjaJ 9iclLTqoM6yQTSDBBRkAmaqf8gmsUsXDUpDqV5KVpznZpRmnCP2XA4M0n/4gL8/F dgcfX83ULXoR+uVaUQm40L02B30RQ5eOSCLnLOW/Ntgj8YxEaXRw3pEUEQvshy8+ jyIdLlAKsRET1GKyqMhRtCnpOOsP4eka7a9O/Y2nLthvW8bW6D85Mg63/+5qHl/0 dzh2PkxTBbwEZUsAe3vg/iYzDgHS5hd+SuhQr01GkPvQ3GGXM6zxHa+u2DEPmy47 AqkCrKZErII+yyX1DQRJiSyrR/+tb4P+XvYZpj/7ne06iy3JUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM61paOeUrkuYfhmoDU++CkNUqRFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xM2Zl Y2QyNC0wZGE3LTQxNDAtOTYzNi03MWE3MmRlODUxZWMvOTQyNTZiMTQtMjdhMC0z YmU2LWE5ZmYtMDIwY2Q1YTllMGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTNmZWNkMjQtMGRhNy00MTQwLTk2 MzYtNzFhNzJkZTg1MWVjLzEzZmVjZDI0LTBkYTctNDE0MC05NjM2LTcxYTcyZGU4 NTFlYy5jcmwwHwYDVR0jBBgwFoAUcfsH7Jbduh5RSiTnSMg1VDbRFH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xM2ZlY2QyNC0wZGE3LTQxNDAtOTYzNi03MWE3 MmRlODUxZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiVMjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1MI3LmytaIlUHB9jVPJK3A6gCbGkdUy5Wyzo5yX4TK4iZRh7zJjChl kQt8TIAhWKKno8tkmNbyzZnd1TdcpmeaGlCVO7aOvIzACGwqp7KosI2FHNkv2Kf4 slMkvpQmqYetanU+hxwL9/aohcfqUl28lN8jHaig1QnCVF3pJQyJ/EHM0PGEyrtY 6pnu3xUgMwyEt9ziVXg9bneAGoTqW+tM4qAf72M8aQThfmczM/jgLE6kthQOvZxb zO72a+l1d25ozHdN427WHN7apXkPovb3z5sMly5ElbjHgS+tOvSbt7ERF/ac9yt0 uGfXdJctfo3NjV8FmiYKODdyefogxls= -----END CERTIFICATE-----Generated at Mon Mar 2 08:04:59 2026 by rpki-client