$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/7b0ac27c-3a94-3e0d-b88e-c8fada10fb83.roa File: 7b0ac27c-3a94-3e0d-b88e-c8fada10fb83.roa (raw, json) Hash identifier: 2YU4+TzqBJ6wFEWaIXMGueLOXdJI+mmvznDJlJNIzAk= Subject key identifier: 4E:43:4B:01:A8:F6:93:1A:39:50:69:D8:D4:C8:8B:D8:3F:47:B7:D9 Certificate issuer: /CN=9d295acd-c538-4740-8f21-9eca736b29d5 Certificate serial: 010D0C9F4328584CAE5EC0F0BF1C2AF01CDC1A80 Authority key identifier: 42:03:5D:B9:00:BA:0A:9F:E5:9B:F0:A7:55:C0:87:D8:26:02:C2:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/7b0ac27c-3a94-3e0d-b88e-c8fada10fb83.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 14618 IP address blocks: 205.233.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/9d295acd-c538-4740-8f21-9eca736b29d5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/9d295acd-c538-4740-8f21-9eca736b29d5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:c0:f0:bf:1c:2a:f0:1c:dc:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d295acd-c538-4740-8f21-9eca736b29d5 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=6e24830d-d1aa-4ce5-95a6-cac630c1410f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6f:49:97:c7:e2:78:9a:06:b9:d9:c6:5f:01: d2:88:8d:20:bd:d4:8a:d2:38:df:91:28:7d:96:eb: 0c:c0:2d:65:ed:1b:f8:71:50:e1:0f:18:2b:ba:bf: 97:b2:f5:79:ca:e0:cc:a6:d6:37:ab:97:87:04:6e: fd:cb:ee:1a:40:a3:80:88:1d:77:fd:5a:6b:c0:54: c3:19:23:c4:a8:f2:e9:2a:3a:37:ab:23:dd:b2:4e: 77:60:19:66:a4:e5:80:16:0f:75:c6:46:54:bc:40: 81:96:40:5c:07:26:ba:2c:e6:9a:a9:64:53:f8:52: 2f:77:2e:c3:cf:59:0e:dc:92:64:78:f5:f8:ea:7c: 80:1b:93:cd:52:de:d0:2a:01:43:11:9b:8b:17:bc: 60:55:87:c3:e4:42:33:2e:2a:2f:b7:d6:e2:2d:49: bd:33:3c:1a:19:ee:ad:f7:26:ee:fb:78:a4:54:04: b0:d9:f6:87:0c:f2:22:a1:99:8a:89:33:00:8b:2d: 30:a7:75:db:fe:52:2d:3d:91:46:21:88:cd:ef:20: 26:8d:15:49:55:64:d9:f9:f8:f6:a2:c1:3c:09:ab: c7:b5:48:34:d7:fd:1f:53:ff:22:61:4c:81:fc:2b: e4:09:03:50:71:00:c8:51:fe:8a:94:ed:13:d7:2a: 78:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:43:4B:01:A8:F6:93:1A:39:50:69:D8:D4:C8:8B:D8:3F:47:B7:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/7b0ac27c-3a94-3e0d-b88e-c8fada10fb83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/9d295acd-c538-4740-8f21-9eca736b29d5.crl X509v3 Authority Key Identifier: keyid:42:03:5D:B9:00:BA:0A:9F:E5:9B:F0:A7:55:C0:87:D8:26:02:C2:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5.cer sbgp-ipAddrBlock: critical IPv4: 205.233.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:5e:5e:b1:3f:32:b5:5f:6c:8a:87:f7:7f:e7:d2:1a:07:f2: f1:f5:9e:49:6c:96:16:cf:e3:b5:30:6a:97:01:ed:3e:9d:63: 56:e2:58:6a:9d:f3:cf:82:c6:cb:a0:68:fa:f4:b4:98:a9:f4: cf:5f:04:61:03:ac:a3:62:9f:2a:e7:2b:e4:cd:fa:67:c1:6a: 3f:6f:e9:de:f6:d5:06:00:59:63:04:cf:5b:c2:6f:fc:ca:cc: a2:85:40:c4:36:bb:5d:17:43:93:85:30:3c:a8:a8:14:9c:49: 6a:7a:b1:01:6b:9d:41:df:04:d8:56:0a:56:f1:29:52:e3:fd: 44:f4:41:f3:5a:46:88:87:27:68:c9:54:3c:a1:2b:b1:53:11: ac:f6:ee:e7:96:7e:03:83:10:a7:d0:60:0e:0b:74:7e:ff:89: 83:c7:17:b9:8a:b1:01:51:ae:89:92:6f:3a:b6:60:29:9e:ad: be:20:78:c6:e9:6b:24:3b:91:ac:be:b4:06:c2:d2:ee:ff:3d: 64:a5:e8:c3:d3:1a:20:cf:ef:20:8e:5a:94:da:f1:99:ce:08: aa:2c:b7:f8:be:ef:82:4e:1e:c5:0d:5f:0f:31:77:7a:1d:bb: 4e:5d:1e:ea:e1:80:1e:6b:30:93:73:3e:19:eb:08:fe:1c:65: 71:ad:bc:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXsDwvxwq8BzcGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWQyOTVhY2QtYzUzOC00NzQwLThmMjEtOWVjYTczNmIy OWQ1MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NmUyNDgzMGQtZDFhYS00Y2U1LTk1YTYtY2FjNjMwYzE0MTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtm9Jl8fieJoGudnGXwHSiI0gvdSK0jjfkSh9 lusMwC1l7Rv4cVDhDxgrur+XsvV5yuDMptY3q5eHBG79y+4aQKOAiB13/VprwFTD GSPEqPLpKjo3qyPdsk53YBlmpOWAFg91xkZUvECBlkBcBya6LOaaqWRT+FIvdy7D z1kO3JJkePX46nyAG5PNUt7QKgFDEZuLF7xgVYfD5EIzLiovt9biLUm9MzwaGe6t 9ybu+3ikVASw2faHDPIioZmKiTMAiy0wp3Xb/lItPZFGIYjN7yAmjRVJVWTZ+fj2 osE8CavHtUg01/0fU/8iYUyB/CvkCQNQcQDIUf6KlO0T1yp4jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5DSwGo9pMaOVBp2NTIi9g/R7fZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85ZDI5 NWFjZC1jNTM4LTQ3NDAtOGYyMS05ZWNhNzM2YjI5ZDUvN2IwYWMyN2MtM2E5NC0z ZTBkLWI4OGUtYzhmYWRhMTBmYjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWQyOTVhY2QtYzUzOC00NzQwLThm MjEtOWVjYTczNmIyOWQ1LzlkMjk1YWNkLWM1MzgtNDc0MC04ZjIxLTllY2E3MzZi MjlkNS5jcmwwHwYDVR0jBBgwFoAUQgNduQC6Cp/lm/CnVcCH2CYCwtkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85ZDI5NWFjZC1jNTM4LTQ3NDAtOGYyMS05ZWNh NzM2YjI5ZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzelbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5eXrE/MrVfbIqH93/n0hoH8vH1nklslhbP47UwapcB7T6dY1biWGqd 88+CxsugaPr0tJip9M9fBGEDrKNinyrnK+TN+mfBaj9v6d721QYAWWMEz1vCb/zK zKKFQMQ2u10XQ5OFMDyoqBScSWp6sQFrnUHfBNhWClbxKVLj/UT0QfNaRoiHJ2jJ VDyhK7FTEaz27ueWfgODEKfQYA4LdH7/iYPHF7mKsQFRromSbzq2YCmerb4geMbp ayQ7kay+tAbC0u7/PWSl6MPTGiDP7yCOWpTa8ZnOCKost/i+74JOHsUNXw8xd3od u05dHurhgB5rMJNzPhnrCP4cZXGtvDw= -----END CERTIFICATE-----Generated at Mon Mar 2 02:06:29 2026 by rpki-client