$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/14a95db4-f488-33a6-a50e-3c5fecedab24.roa File: 14a95db4-f488-33a6-a50e-3c5fecedab24.roa (raw, json) Hash identifier: YU/+XGDJFZy3Sr9+ZIUNBoF8YFmqTFP+H6i6q+rUckE= Subject key identifier: 38:7B:9C:34:A9:07:7F:91:91:63:78:88:C8:0E:C1:64:59:B8:04:A4 Certificate issuer: /CN=54ace249-bf6f-423c-93c6-7cc74d8a1acb Certificate serial: 010D0C9F4328584CA5F7118EB7C0231448BC9AC0 Authority key identifier: BF:BE:CF:95:64:53:39:46:28:49:B7:00:59:5C:17:D2:6F:7D:7C:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/14a95db4-f488-33a6-a50e-3c5fecedab24.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 16509 IP address blocks: 64.95.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/54ace249-bf6f-423c-93c6-7cc74d8a1acb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/54ace249-bf6f-423c-93c6-7cc74d8a1acb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:11:8e:b7:c0:23:14:48:bc:9a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54ace249-bf6f-423c-93c6-7cc74d8a1acb Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=8f7afe30-d5e0-45ac-aaa0-e3942c11050c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d4:50:91:61:b6:5a:ad:6a:cc:f8:f9:02:43: 9f:16:3f:48:94:e1:31:99:a5:6a:34:ec:57:25:0f: 39:81:44:d3:a9:9b:e7:0d:2f:a8:70:a5:14:49:b7: 42:f0:b9:6c:6a:0f:5b:6a:55:e7:dd:1f:14:4e:4f: ac:d8:2b:73:2a:7f:ad:50:b0:eb:6e:5b:94:bd:6d: 17:eb:ad:7b:e4:53:58:48:3b:84:05:6d:81:ec:1f: 30:d5:61:43:a9:2b:dc:61:68:8a:0c:3f:be:98:37: 06:2b:4f:bb:c1:93:53:46:9a:d1:77:08:f8:3f:75: ed:5d:06:43:f9:63:53:6e:ab:1b:33:57:dc:59:37: f5:9b:1a:31:74:86:ab:c6:8f:1c:3b:d3:40:e9:3f: 85:fd:39:e3:94:57:43:fe:f2:88:7d:10:74:68:a8: f7:4a:c7:9d:0c:c0:ff:a4:9a:a2:c6:53:f3:d4:6c: 86:04:ea:ba:2f:c4:f3:33:9b:bb:42:06:b3:51:df: 79:6d:52:b0:76:73:7d:ab:10:14:9d:27:23:f2:90: b0:f0:6d:f8:33:bc:c0:b6:24:b9:e7:03:60:c8:d9: ee:78:94:66:52:f8:39:31:65:29:30:01:f4:6f:be: a8:d6:5a:f2:cc:b0:dc:8c:d5:2d:bc:c0:7a:8c:c2: 90:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:7B:9C:34:A9:07:7F:91:91:63:78:88:C8:0E:C1:64:59:B8:04:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/14a95db4-f488-33a6-a50e-3c5fecedab24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/54ace249-bf6f-423c-93c6-7cc74d8a1acb.crl X509v3 Authority Key Identifier: keyid:BF:BE:CF:95:64:53:39:46:28:49:B7:00:59:5C:17:D2:6F:7D:7C:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb.cer sbgp-ipAddrBlock: critical IPv4: 64.95.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:68:96:50:f5:31:d6:e3:34:9d:0d:a1:b4:e3:a4:2e:2d:8f: 3c:93:48:8b:03:7d:2f:2a:2f:59:d1:e1:d3:2f:13:c7:f1:cd: 0a:b5:23:76:b8:ae:fe:4f:05:46:c9:17:25:be:cc:08:fc:a4: 2f:54:15:cc:35:1c:52:1b:94:c2:33:ef:5a:08:c3:02:69:4b: bf:2f:5d:8f:0c:32:ae:84:12:ac:21:2b:23:0b:da:90:bd:a2: 8a:8e:32:2b:ea:b5:ad:ce:f3:59:fa:39:a3:c4:cb:5f:31:be: eb:3e:e2:ee:4e:7a:93:53:0d:96:20:8a:74:e1:9c:67:d9:7d: 5b:5e:a5:25:d0:f5:23:f0:b5:2f:2e:d0:fd:11:37:fc:f6:ba: 55:df:5b:3b:84:d2:43:86:55:ed:af:56:e5:c9:ae:a4:fa:cc: a8:f3:3e:68:1a:a5:b5:a2:d2:fc:12:0f:43:ae:35:14:0a:34: 83:0a:f6:03:44:71:57:c5:34:ac:90:0e:76:0e:70:d7:63:13: 55:89:03:aa:25:92:d1:fb:c9:e8:22:b2:92:e9:ee:89:6a:20: c7:c6:3d:8c:02:98:db:2e:ea:8e:17:d6:a7:21:c3:2e:42:5a: e7:b5:56:f9:e6:b0:65:34:43:83:b9:2d:42:46:2e:0c:9f:91: fd:6f:cd:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl9xGOt8AjFEi8msAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTRhY2UyNDktYmY2Zi00MjNjLTkzYzYtN2NjNzRkOGEx YWNiMB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk OGY3YWZlMzAtZDVlMC00NWFjLWFhYTAtZTM5NDJjMTEwNTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdRQkWG2Wq1qzPj5AkOfFj9IlOExmaVqNOxX JQ85gUTTqZvnDS+ocKUUSbdC8Llsag9balXn3R8UTk+s2CtzKn+tULDrbluUvW0X 66175FNYSDuEBW2B7B8w1WFDqSvcYWiKDD++mDcGK0+7wZNTRprRdwj4P3XtXQZD +WNTbqsbM1fcWTf1mxoxdIarxo8cO9NA6T+F/TnjlFdD/vKIfRB0aKj3SsedDMD/ pJqixlPz1GyGBOq6L8TzM5u7QgazUd95bVKwdnN9qxAUnScj8pCw8G34M7zAtiS5 5wNgyNnueJRmUvg5MWUpMAH0b76o1lryzLDcjNUtvMB6jMKQaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDh7nDSpB3+RkWN4iMgOwWRZuASkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81NGFj ZTI0OS1iZjZmLTQyM2MtOTNjNi03Y2M3NGQ4YTFhY2IvMTRhOTVkYjQtZjQ4OC0z M2E2LWE1MGUtM2M1ZmVjZWRhYjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNTRhY2UyNDktYmY2Zi00MjNjLTkz YzYtN2NjNzRkOGExYWNiLzU0YWNlMjQ5LWJmNmYtNDIzYy05M2M2LTdjYzc0ZDhh MWFjYi5jcmwwHwYDVR0jBBgwFoAUv77PlWRTOUYoSbcAWVwX0m99fBswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81NGFjZTI0OS1iZjZmLTQyM2MtOTNjNi03Y2M3 NGQ4YTFhY2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQF+YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5ollD1MdbjNJ0NobTjpC4tjzyTSIsDfS8qL1nR4dMvE8fxzQq1I3a4 rv5PBUbJFyW+zAj8pC9UFcw1HFIblMIz71oIwwJpS78vXY8MMq6EEqwhKyML2pC9 ooqOMivqta3O81n6OaPEy18xvus+4u5OepNTDZYginThnGfZfVtepSXQ9SPwtS8u 0P0RN/z2ulXfWzuE0kOGVe2vVuXJrqT6zKjzPmgapbWi0vwSD0OuNRQKNIMK9gNE cVfFNKyQDnYOcNdjE1WJA6olktH7yegispLp7olqIMfGPYwCmNsu6o4X1qchwy5C Wue1VvnmsGU0Q4O5LUJGLgyfkf1vzVc= -----END CERTIFICATE-----Generated at Mon Mar 2 14:30:36 2026 by rpki-client