$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/f96d33e9-431b-35c4-ba17-050e9283d5b6.roa File: f96d33e9-431b-35c4-ba17-050e9283d5b6.roa (raw, json) Hash identifier: tBZeHBvTIWeG9h5CtcvBXn141dbkM+GArFirbpKyck8= Subject key identifier: E0:39:2F:63:35:27:FD:75:CA:DE:04:39:6C:B4:F1:04:6C:F5:F6:74 Certificate issuer: /CN=023aff41-84dc-4808-a5d9-7e011d4c3e3a Certificate serial: 010D0C9F4328584D0384DC40667C5A0E172B8484 Authority key identifier: FC:30:F7:AF:E6:D1:07:33:BD:50:BF:0A:4F:D8:B6:56:37:20:00:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/f96d33e9-431b-35c4-ba17-050e9283d5b6.roa Signing time: Sat 28 Feb 2026 14:16:42 +0000 ROA not before: Sat 28 Feb 2026 14:16:42 +0000 ROA not after: Fri 29 May 2026 13:16:42 +0000 asID: 13506 IP address blocks: 164.95.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/023aff41-84dc-4808-a5d9-7e011d4c3e3a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/023aff41-84dc-4808-a5d9-7e011d4c3e3a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:84:dc:40:66:7c:5a:0e:17:2b:84:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=023aff41-84dc-4808-a5d9-7e011d4c3e3a Validity Not Before: Feb 28 14:16:42 2026 GMT Not After : May 29 13:16:42 2026 GMT Subject: CN=ca841a16-56a5-464e-ae61-b0490e249d23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:71:1e:f6:08:2b:48:9f:33:c9:e5:6e:14:07: c5:8e:a2:e2:cc:ca:31:68:72:72:55:4d:11:51:e4: 16:53:d4:31:f3:c7:88:20:f1:8d:4b:d1:7f:0e:c5: c7:05:c0:8b:70:b2:42:9f:e7:4c:2a:56:5d:d5:2a: 32:98:d7:30:70:2a:46:00:f8:b7:55:cd:b6:ee:2c: 01:47:28:db:2f:97:a2:f3:11:65:7f:6e:da:8e:af: 24:75:e0:0e:a3:aa:09:85:5c:6a:ef:9c:7a:9c:57: 7c:09:26:34:11:f0:08:e2:96:c0:1d:37:b1:97:5d: 23:15:66:77:9e:51:0a:0f:f2:b2:c9:54:cc:a5:03: 32:43:6e:b9:a4:e1:2e:27:bf:79:94:b9:25:46:7e: 52:93:aa:85:97:74:27:60:e9:be:77:d1:e4:64:bc: 19:84:c3:48:15:75:4a:4e:b9:0a:e6:99:22:7f:e0: 3b:fb:0f:b2:5a:70:c6:6d:97:e1:e7:d0:5a:89:60: 48:0e:ec:1e:83:4e:8d:ec:71:c0:ee:3f:75:c7:70: bc:9a:86:43:83:d3:40:0f:2a:e3:6b:10:b8:cb:76: 3a:a4:75:48:e7:ab:21:93:b7:47:28:39:e3:00:d3: 98:a3:cc:f2:90:c7:1f:f9:2e:ea:e2:e3:27:ba:f7: ad:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:39:2F:63:35:27:FD:75:CA:DE:04:39:6C:B4:F1:04:6C:F5:F6:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/f96d33e9-431b-35c4-ba17-050e9283d5b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/023aff41-84dc-4808-a5d9-7e011d4c3e3a.crl X509v3 Authority Key Identifier: keyid:FC:30:F7:AF:E6:D1:07:33:BD:50:BF:0A:4F:D8:B6:56:37:20:00:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a.cer sbgp-ipAddrBlock: critical IPv4: 164.95.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:68:13:02:a5:2a:24:5b:98:62:b8:90:a3:96:63:ba:db:44: a9:cd:7d:86:ca:7f:f0:2b:b4:59:0e:5d:d6:9a:16:d1:e2:7b: 8b:10:67:24:01:e5:75:32:6e:93:38:f8:4e:10:d0:f1:46:4c: db:4f:1b:e6:8b:0c:aa:e6:3f:5e:68:89:2e:bf:3a:ff:69:78: ca:f1:e2:f2:f0:0d:2a:60:d2:aa:fd:6a:24:ef:db:9a:dd:af: f7:dd:8b:08:6e:0b:8b:c5:e0:56:49:48:c2:e5:b5:0d:5c:03: 4d:3a:e9:44:b8:4c:be:98:e2:b8:8e:3d:84:a8:08:08:55:a8: a2:47:c4:ce:99:2c:bd:0c:31:2b:52:be:01:ff:f0:fa:5f:58: 3d:8f:e9:e9:ae:86:86:c2:98:dc:75:0b:64:6a:f5:e8:57:48: 3c:52:a0:9a:e7:73:75:a1:46:b2:fb:89:c7:9e:a6:67:e5:7b: 65:20:dc:db:48:55:c2:e9:0d:d0:c0:94:51:ab:18:df:70:e5: 9e:a8:c8:86:d6:3b:69:b9:85:db:0d:4d:b3:09:67:90:99:09: 02:02:db:72:24:53:0f:46:09:82:a5:2c:54:48:d4:7b:50:f1: 39:e8:eb:70:a3:23:ad:1d:83:cc:b5:2f:3e:82:f9:1a:68:f1: 34:a8:20:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DhNxAZnxaDhcrhIQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDIzYWZmNDEtODRkYy00ODA4LWE1ZDktN2UwMTFkNGMz ZTNhMB4XDTI2MDIyODE0MTY0MloXDTI2MDUyOTEzMTY0MlowLzEtMCsGA1UEAxMk Y2E4NDFhMTYtNTZhNS00NjRlLWFlNjEtYjA0OTBlMjQ5ZDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXEe9ggrSJ8zyeVuFAfFjqLizMoxaHJyVU0R UeQWU9Qx88eIIPGNS9F/DsXHBcCLcLJCn+dMKlZd1SoymNcwcCpGAPi3Vc227iwB RyjbL5ei8xFlf27ajq8kdeAOo6oJhVxq75x6nFd8CSY0EfAI4pbAHTexl10jFWZ3 nlEKD/KyyVTMpQMyQ265pOEuJ795lLklRn5Sk6qFl3QnYOm+d9HkZLwZhMNIFXVK TrkK5pkif+A7+w+yWnDGbZfh59BaiWBIDuweg06N7HHA7j91x3C8moZDg9NADyrj axC4y3Y6pHVI56shk7dHKDnjANOYo8zykMcf+S7q4uMnuvetewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOA5L2M1J/11yt4EOWy08QRs9fZ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wMjNh ZmY0MS04NGRjLTQ4MDgtYTVkOS03ZTAxMWQ0YzNlM2EvZjk2ZDMzZTktNDMxYi0z NWM0LWJhMTctMDUwZTkyODNkNWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDIzYWZmNDEtODRkYy00ODA4LWE1 ZDktN2UwMTFkNGMzZTNhLzAyM2FmZjQxLTg0ZGMtNDgwOC1hNWQ5LTdlMDExZDRj M2UzYS5jcmwwHwYDVR0jBBgwFoAU/DD3r+bRBzO9UL8KT9i2VjcgAB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8wMjNhZmY0MS04NGRjLTQ4MDgtYTVkOS03ZTAx MWQ0YzNlM2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApF/MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMFoEwKlKiRbmGK4kKOWY7rbRKnNfYbKf/ArtFkOXdaaFtHie4sQZyQB 5XUybpM4+E4Q0PFGTNtPG+aLDKrmP15oiS6/Ov9peMrx4vLwDSpg0qr9aiTv25rd r/fdiwhuC4vF4FZJSMLltQ1cA0066US4TL6Y4riOPYSoCAhVqKJHxM6ZLL0MMStS vgH/8PpfWD2P6emuhobCmNx1C2Rq9ehXSDxSoJrnc3WhRrL7iceepmfle2Ug3NtI VcLpDdDAlFGrGN9w5Z6oyIbWO2m5hdsNTbMJZ5CZCQIC23IkUw9GCYKlLFRI1HtQ 8Tno63CjI60dg8y1Lz6C+Rpo8TSoIFY= -----END CERTIFICATE-----Generated at Mon Mar 2 18:39:06 2026 by rpki-client