$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ffcfc35f-b32c-303c-87a6-754586bddf01.roa File: ffcfc35f-b32c-303c-87a6-754586bddf01.roa (raw, json) Hash identifier: O+dgeNXtUDz+qhOr+yFo8MNrWrSx8CKB9AYIkR9YG7I= Subject key identifier: 20:11:70:7D:60:9E:73:B7:EA:9E:DA:C2:74:2B:27:D1:A0:01:2C:7E Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584CD99D0D54DF9E7AC130D02D00 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ffcfc35f-b32c-303c-87a6-754586bddf01.roa Signing time: Fri 13 Feb 2026 14:00:41 +0000 ROA not before: Fri 13 Feb 2026 14:00:41 +0000 ROA not after: Thu 14 May 2026 13:00:41 +0000 asID: 7029 IP address blocks: 172.96.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d9:9d:0d:54:df:9e:7a:c1:30:d0:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Feb 13 14:00:41 2026 GMT Not After : May 14 13:00:41 2026 GMT Subject: CN=a511afa4-6c80-4d89-88f5-59c97411d9f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:0f:b0:e6:40:91:68:d7:7d:db:1c:ae:af:8e: f2:8c:cd:82:f6:8d:2a:55:ca:cd:f9:b6:07:1c:37: 08:99:da:a5:bb:2d:04:33:17:00:53:63:9c:ed:80: 43:d8:f0:d6:76:05:0e:72:a4:a2:38:13:18:27:eb: ed:5e:93:71:a9:03:6a:07:ed:73:19:ed:22:1e:be: 1c:12:b6:07:96:ad:30:64:4f:a2:b3:98:70:84:d5: 88:94:4d:52:40:82:e8:19:34:90:ee:b0:de:27:62: 36:2f:dd:09:aa:32:35:c1:b6:7a:f8:d6:22:c9:45: 87:e9:49:cf:23:a2:6e:0a:b2:fa:a5:78:a2:08:ff: 98:68:cf:fd:8f:c6:9a:f2:53:62:2a:b5:06:a2:f5: 00:c1:2e:53:4c:ec:4b:26:0d:75:00:15:79:fd:14: ec:43:f2:e6:a8:7a:36:69:32:8e:2e:83:0c:85:3e: a1:c2:e2:8a:be:49:98:4a:91:0c:fe:eb:fc:f9:64: 2a:70:d1:00:b6:91:2b:77:7c:56:f3:3e:44:c4:12: bd:fe:62:9f:f1:8a:b5:3d:e7:c5:bb:64:6f:43:11: 7c:5e:db:a7:40:8a:ca:d1:7c:7c:b2:83:71:60:6b: 06:2f:ff:89:ae:4e:a3:31:51:1a:54:cb:6c:11:e1: 91:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:11:70:7D:60:9E:73:B7:EA:9E:DA:C2:74:2B:27:D1:A0:01:2C:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ffcfc35f-b32c-303c-87a6-754586bddf01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 172.96.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:08:0d:05:aa:ce:8c:f3:d8:d8:f0:d8:20:2c:da:18:b4:25: 7a:a2:05:c9:9d:d6:16:44:4b:1d:53:f0:3f:31:67:5b:d6:33: 5a:9e:78:61:4a:de:25:8d:70:50:91:24:d6:6e:aa:8f:95:cd: b2:f8:58:53:44:a3:2c:d2:4e:ac:bf:d7:42:34:e4:62:9f:e2: 98:89:ac:b5:3b:de:c1:73:96:b6:50:6f:b0:c0:a2:f8:68:7e: 2d:21:b5:69:92:fc:0c:c2:f0:f0:5a:7a:8a:de:4f:85:e8:a3: fa:8f:91:54:2b:1a:70:cf:bf:15:05:60:cf:0c:d4:cc:f0:57: 43:be:fa:a9:1f:ba:b5:d1:c6:b8:40:b0:e3:16:73:00:10:13: 14:fa:fc:cf:54:36:61:54:7d:b8:10:23:74:b4:63:a3:8c:5e: 96:ba:0c:c8:50:73:af:2d:15:0b:59:3f:d4:30:30:18:de:59: c7:6a:82:73:5a:e0:17:37:95:2f:09:15:fc:0e:e8:0e:db:3c: 2f:5c:1b:1f:c3:a0:49:fe:89:17:db:a6:36:2f:81:ec:d1:7a: 17:dc:f3:3e:9c:df:80:6d:7e:06:41:43:85:d8:d1:70:41:72: c8:74:d5:db:e1:dd:d7:36:80:66:29:1e:60:aa:9c:98:12:0d: 35:34:6d:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzZnQ1U3556wTDQLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDIxMzE0MDA0MVoXDTI2MDUxNDEzMDA0MVowLzEtMCsGA1UEAxMk YTUxMWFmYTQtNmM4MC00ZDg5LTg4ZjUtNTljOTc0MTFkOWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQ+w5kCRaNd92xyur47yjM2C9o0qVcrN+bYH HDcImdqluy0EMxcAU2Oc7YBD2PDWdgUOcqSiOBMYJ+vtXpNxqQNqB+1zGe0iHr4c ErYHlq0wZE+is5hwhNWIlE1SQILoGTSQ7rDeJ2I2L90JqjI1wbZ6+NYiyUWH6UnP I6JuCrL6pXiiCP+YaM/9j8aa8lNiKrUGovUAwS5TTOxLJg11ABV5/RTsQ/LmqHo2 aTKOLoMMhT6hwuKKvkmYSpEM/uv8+WQqcNEAtpErd3xW8z5ExBK9/mKf8Yq1PefF u2RvQxF8XtunQIrK0Xx8soNxYGsGL/+Jrk6jMVEaVMtsEeGRWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCARcH1gnnO36p7awnQrJ9GgASx+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvZmZjZmMzNWYtYjMyYy0z MDNjLTg3YTYtNzU0NTg2YmRkZjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGBfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALEIDQWqzozz2Njw2CAs2hi0JXqiBcmd1hZESx1T8D8xZ1vWM1qeeGFK 3iWNcFCRJNZuqo+VzbL4WFNEoyzSTqy/10I05GKf4piJrLU73sFzlrZQb7DAovho fi0htWmS/AzC8PBaeoreT4Xoo/qPkVQrGnDPvxUFYM8M1MzwV0O++qkfurXRxrhA sOMWcwAQExT6/M9UNmFUfbgQI3S0Y6OMXpa6DMhQc68tFQtZP9QwMBjeWcdqgnNa 4Bc3lS8JFfwO6A7bPC9cGx/DoEn+iRfbpjYvgezRehfc8z6c34BtfgZBQ4XY0XBB csh01dvh3dc2gGYpHmCqnJgSDTU0bZA= -----END CERTIFICATE-----Generated at Mon Mar 2 08:35:14 2026 by rpki-client