$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/a4715222-51fd-3cc6-b174-0aa94bf55e04.roa File: a4715222-51fd-3cc6-b174-0aa94bf55e04.roa (raw, json) Hash identifier: gskNoQT43EJG7ZxFRoTd9D6RVq1Hw7D8aAlkZpbjgCI= Subject key identifier: B7:23:49:65:49:ED:42:42:8A:2D:47:68:57:9B:5A:42:D8:59:78:65 Certificate issuer: /CN=71e68809-5436-4288-ad80-0df35fa0b945 Certificate serial: 010D0C9F4328584CAE5737581EBCFC1D52641C40 Authority key identifier: 10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/a4715222-51fd-3cc6-b174-0aa94bf55e04.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 8075 IP address blocks: 192.28.24.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:37:58:1e:bc:fc:1d:52:64:1c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71e68809-5436-4288-ad80-0df35fa0b945 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=e051eb22-b319-4a97-ac4a-a51678167f1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:16:50:44:e3:b1:39:ce:2d:9b:b9:4b:77:83: 37:fb:d0:b9:c6:d7:eb:47:95:10:d3:83:65:a7:9f: fa:35:0e:dd:7f:ff:0e:5e:93:c0:94:55:6f:85:7c: 70:ef:cd:f1:4f:73:e5:6f:12:77:45:f7:39:33:65: f0:72:04:de:ca:13:2b:fa:b6:f7:b3:06:ad:90:b1: fc:7c:30:a1:92:68:2d:c2:fb:b6:e6:40:cb:11:ff: 7c:35:f1:24:b5:99:7d:1b:92:9a:17:87:40:93:d4: 7e:0f:a4:1d:4e:5a:2a:87:2d:f1:67:f8:56:14:35: ab:b0:22:88:ab:82:3a:14:79:25:15:b8:7d:c3:fc: f1:14:16:5c:16:a8:9b:ad:a5:c1:7c:cc:74:de:20: a1:3d:86:fb:0b:0e:e3:e8:6f:78:2d:55:d1:05:41: 49:51:37:78:d0:8a:ea:79:9f:c4:21:8d:b9:d5:1e: ad:0d:db:55:e0:64:d1:04:d3:0a:65:50:19:f6:fd: f6:a5:42:2e:e9:13:e7:63:b3:3b:2d:5e:a1:51:6c: 5f:a2:c9:6a:53:43:22:a6:26:82:94:a2:3d:25:5f: ea:ff:16:52:0d:4e:41:89:f8:b2:0e:fa:e8:75:9c: 55:39:cb:29:b9:72:c4:c6:8e:a9:ce:21:59:1b:4d: e7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:23:49:65:49:ED:42:42:8A:2D:47:68:57:9B:5A:42:D8:59:78:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/a4715222-51fd-3cc6-b174-0aa94bf55e04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl X509v3 Authority Key Identifier: keyid:10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer sbgp-ipAddrBlock: critical IPv4: 192.28.24.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:45:25:01:6a:37:e0:ce:fd:fa:df:45:9c:e4:38:fb:30:49: 71:67:f2:a7:a0:97:6b:c5:7e:a6:01:3c:1a:77:25:83:10:ed: 23:44:83:44:86:5e:52:b6:2a:79:9a:f8:79:e9:d6:4c:4d:02: 95:62:7f:38:88:85:c4:58:01:cc:9e:d2:a0:34:b1:75:35:1d: 4d:a6:83:ae:de:88:6e:8d:82:94:56:c2:38:aa:84:06:85:4c: 8b:f8:83:23:4a:0a:df:38:09:c7:32:62:5c:09:8a:2a:64:9f: 3f:ee:54:fe:2b:ef:51:4b:5b:90:de:bc:f4:08:73:a7:12:71: 59:21:10:84:b2:e3:bb:2a:de:b5:d2:73:dd:87:8d:29:42:0b: 65:94:20:e4:5c:6e:27:5a:7a:26:44:e4:20:2f:85:f9:18:eb: bd:42:4b:47:48:2e:37:81:e7:81:a8:8d:0e:ca:bf:a7:38:aa: ef:e1:52:04:2e:fd:0d:6c:d2:24:98:3c:3b:bb:0b:51:65:38: ce:f1:eb:3a:4e:f8:94:77:35:63:d8:3c:cf:a4:67:87:40:85: dc:47:42:9e:d7:5d:b8:53:2d:45:c7:f7:ab:a4:32:ba:a5:64: 1f:82:84:db:de:c4:fc:bb:f7:ce:31:7f:a2:88:06:ad:18:66: 3a:fc:8f:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVzdYHrz8HVJkHEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFlNjg4MDktNTQzNi00Mjg4LWFkODAtMGRmMzVmYTBi OTQ1MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZTA1MWViMjItYjMxOS00YTk3LWFjNGEtYTUxNjc4MTY3ZjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBZQROOxOc4tm7lLd4M3+9C5xtfrR5UQ04Nl p5/6NQ7df/8OXpPAlFVvhXxw783xT3PlbxJ3Rfc5M2XwcgTeyhMr+rb3swatkLH8 fDChkmgtwvu25kDLEf98NfEktZl9G5KaF4dAk9R+D6QdTloqhy3xZ/hWFDWrsCKI q4I6FHklFbh9w/zxFBZcFqibraXBfMx03iChPYb7Cw7j6G94LVXRBUFJUTd40Irq eZ/EIY251R6tDdtV4GTRBNMKZVAZ9v32pUIu6RPnY7M7LV6hUWxfoslqU0MipiaC lKI9JV/q/xZSDU5BifiyDvrodZxVOcspuXLExo6pziFZG03nEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLcjSWVJ7UJCii1HaFebWkLYWXhlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2 ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYzNWZhMGI5NDUvYTQ3MTUyMjItNTFmZC0z Y2M2LWIxNzQtMGFhOTRiZjU1ZTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzFlNjg4MDktNTQzNi00Mjg4LWFk ODAtMGRmMzVmYTBiOTQ1LzcxZTY4ODA5LTU0MzYtNDI4OC1hZDgwLTBkZjM1ZmEw Yjk0NS5jcmwwHwYDVR0jBBgwFoAUEFAAX4YwKrkehfZQ9nLTMqW7VE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYz NWZhMGI5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwBwYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhFJQFqN+DO/frfRZzkOPswSXFn8qegl2vFfqYBPBp3JYMQ7SNEg0SG XlK2Knma+Hnp1kxNApVifziIhcRYAcye0qA0sXU1HU2mg67eiG6NgpRWwjiqhAaF TIv4gyNKCt84CccyYlwJiipknz/uVP4r71FLW5DevPQIc6cScVkhEISy47sq3rXS c92HjSlCC2WUIORcbidaeiZE5CAvhfkY671CS0dILjeB54GojQ7Kv6c4qu/hUgQu /Q1s0iSYPDu7C1FlOM7x6zpO+JR3NWPYPM+kZ4dAhdxHQp7XXbhTLUXH96ukMrql ZB+ChNvexPy7984xf6KIBq0YZjr8j+o= -----END CERTIFICATE-----Generated at Mon Mar 2 13:38:26 2026 by rpki-client