$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/28f935d3-57e6-314d-95ed-7c825db00b08.roa File: 28f935d3-57e6-314d-95ed-7c825db00b08.roa (raw, json) Hash identifier: LKrgD2wVuMHZFIoTucDL0e8zURmD/+IKmmpxFW0ZrPA= Subject key identifier: EF:EF:9E:87:74:93:A8:F8:FE:FD:AB:BE:00:32:01:3E:02:21:8F:CD Certificate issuer: /CN=0be9634a-0674-471a-bb54-7866e12ded7a Certificate serial: 010D0C9F4328584CCA41F7A36EAA68CF34C0B200 Authority key identifier: 99:C2:73:13:67:C3:46:38:B7:EB:0A:6F:DD:5E:E9:B8:81:48:F7:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/28f935d3-57e6-314d-95ed-7c825db00b08.roa Signing time: Sun 08 Feb 2026 02:00:32 +0000 ROA not before: Sun 08 Feb 2026 02:00:32 +0000 ROA not after: Sat 09 May 2026 01:00:32 +0000 asID: 18888 IP address blocks: 64.42.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ca:41:f7:a3:6e:aa:68:cf:34:c0:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0be9634a-0674-471a-bb54-7866e12ded7a Validity Not Before: Feb 8 02:00:32 2026 GMT Not After : May 9 01:00:32 2026 GMT Subject: CN=5a6cb746-efcb-4a96-a862-34fa221f47f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:85:f7:d9:08:96:5a:fd:a5:47:c7:79:a9:a4: 7d:d4:00:32:3f:5c:e5:04:be:20:77:d1:db:f9:71: 9f:bf:3d:6e:18:49:f3:03:b4:25:0f:9d:77:ef:7f: b3:13:59:77:d9:77:e8:25:3c:e1:6b:2c:e5:30:be: 3c:d3:8d:4c:0f:cd:3d:ec:2c:61:9e:e4:98:bd:5e: 3a:e0:0c:80:ca:b6:52:d0:7a:dc:ce:2c:f6:4a:96: 9e:ea:59:83:40:7a:5c:18:ae:d7:49:94:e6:b5:db: 65:61:49:8f:9f:ab:dd:f1:ad:f2:be:2d:c6:db:54: a9:a9:44:bc:e7:8b:c8:2a:93:85:59:13:a5:70:a7: c6:8b:35:ae:e2:ea:ad:50:19:c0:3a:5f:dc:47:1d: 7a:31:57:88:c2:75:97:8f:92:5e:75:0a:d9:a7:12: 1e:5d:4d:55:29:48:5d:14:5b:1b:d7:2d:fa:55:0f: 6a:1b:10:c6:bf:1a:45:a8:91:2d:fe:d9:8d:fe:50: 90:75:95:de:37:d3:d0:fe:e0:cc:88:cf:61:45:6a: 89:83:56:65:f1:45:d5:a2:ac:62:fd:68:cd:32:e0: a3:6d:27:9c:41:7a:1a:c0:1a:ca:eb:18:8c:ae:57: 82:44:20:d5:81:1d:eb:86:ef:56:89:3a:2d:c0:d5: 1e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:EF:9E:87:74:93:A8:F8:FE:FD:AB:BE:00:32:01:3E:02:21:8F:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/28f935d3-57e6-314d-95ed-7c825db00b08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.crl X509v3 Authority Key Identifier: keyid:99:C2:73:13:67:C3:46:38:B7:EB:0A:6F:DD:5E:E9:B8:81:48:F7:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer sbgp-ipAddrBlock: critical IPv4: 64.42.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:7b:16:1c:cb:70:cf:3d:ee:2e:01:44:1d:bb:8d:4a:62:0c: 06:56:a2:c3:8b:9e:7b:ed:28:db:f2:f6:2f:a9:03:36:6c:3f: 74:be:2c:5e:bd:ca:c9:c6:40:29:57:d1:5d:07:b1:6f:7f:13: 6f:ab:52:31:94:29:b9:47:47:fe:9f:0b:e6:fd:15:0a:47:c1: e5:59:06:bf:df:bd:9e:88:d8:22:db:55:36:0a:5a:f4:4c:1c: 7a:a6:0a:db:85:28:c5:82:de:b5:82:8c:04:7a:e0:48:9e:47: 46:3d:15:b7:99:7f:dd:68:35:c9:2d:fe:58:61:db:51:ac:86: ee:fd:28:bb:e4:e9:28:3d:d9:82:55:00:5c:04:07:4a:4a:22: 00:88:2b:30:3d:e1:0a:ca:34:34:e1:6e:e2:83:06:9e:d6:0d: 5c:cf:68:a0:4c:6c:33:b2:9d:59:e2:5e:88:d0:11:67:e9:16: ee:a9:58:82:0d:78:a2:19:8d:69:c7:ea:2a:43:05:40:a9:65: 38:36:6a:ca:72:86:98:1a:ce:2b:c2:ea:29:86:d8:83:96:0d: 40:41:a9:f9:00:ad:12:86:da:af:6d:70:bb:d6:b2:2b:3b:1e: 18:a8:1c:b1:ac:fa:75:50:a4:2f:f6:7f:00:8e:a1:ee:c6:b6: 5a:84:f7:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzKQfejbqpozzTAsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGJlOTYzNGEtMDY3NC00NzFhLWJiNTQtNzg2NmUxMmRl ZDdhMB4XDTI2MDIwODAyMDAzMloXDTI2MDUwOTAxMDAzMlowLzEtMCsGA1UEAxMk NWE2Y2I3NDYtZWZjYi00YTk2LWE4NjItMzRmYTIyMWY0N2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYX32QiWWv2lR8d5qaR91AAyP1zlBL4gd9Hb +XGfvz1uGEnzA7QlD51373+zE1l32XfoJTzhayzlML48041MD8097CxhnuSYvV46 4AyAyrZS0Hrcziz2Spae6lmDQHpcGK7XSZTmtdtlYUmPn6vd8a3yvi3G21SpqUS8 54vIKpOFWROlcKfGizWu4uqtUBnAOl/cRx16MVeIwnWXj5JedQrZpxIeXU1VKUhd FFsb1y36VQ9qGxDGvxpFqJEt/tmN/lCQdZXeN9PQ/uDMiM9hRWqJg1Zl8UXVoqxi /WjNMuCjbSecQXoawBrK6xiMrleCRCDVgR3rhu9WiTotwNUeQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO/vnod0k6j4/v2rvgAyAT4CIY/NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYmU5 NjM0YS0wNjc0LTQ3MWEtYmI1NC03ODY2ZTEyZGVkN2EvMjhmOTM1ZDMtNTdlNi0z MTRkLTk1ZWQtN2M4MjVkYjAwYjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGJlOTYzNGEtMDY3NC00NzFhLWJi NTQtNzg2NmUxMmRlZDdhLzBiZTk2MzRhLTA2NzQtNDcxYS1iYjU0LTc4NjZlMTJk ZWQ3YS5jcmwwHwYDVR0jBBgwFoAUmcJzE2fDRji36wpv3V7puIFI97EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYmU5NjM0YS0wNjc0LTQ3MWEtYmI1NC03ODY2 ZTEyZGVkN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCq/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIt7FhzLcM897i4BRB27jUpiDAZWosOLnnvtKNvy9i+pAzZsP3S+LF69 ysnGQClX0V0HsW9/E2+rUjGUKblHR/6fC+b9FQpHweVZBr/fvZ6I2CLbVTYKWvRM HHqmCtuFKMWC3rWCjAR64EieR0Y9FbeZf91oNckt/lhh21Gshu79KLvk6Sg92YJV AFwEB0pKIgCIKzA94QrKNDThbuKDBp7WDVzPaKBMbDOynVniXojQEWfpFu6pWIIN eKIZjWnH6ipDBUCpZTg2aspyhpgazivC6imG2IOWDUBBqfkArRKG2q9tcLvWsis7 HhioHLGs+nVQpC/2fwCOoe7GtlqE95I= -----END CERTIFICATE-----Generated at Mon Mar 2 11:24:19 2026 by rpki-client