$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/fde6a4c4-7399-3879-b40c-270da587b12a.roa File: fde6a4c4-7399-3879-b40c-270da587b12a.roa (raw, json) Hash identifier: D7jrx73xXaw+yDsUfwrj4bZWVKgC4XrTkouXqoHrr38= Subject key identifier: 1B:FD:AF:55:0B:94:64:82:2E:42:50:5C:87:77:30:A2:A8:4D:3A:5E Certificate issuer: /CN=9d295acd-c538-4740-8f21-9eca736b29d5 Certificate serial: 010D0C9F4328584CAE5E6BAF2E9DEB3DAEED9120 Authority key identifier: 42:03:5D:B9:00:BA:0A:9F:E5:9B:F0:A7:55:C0:87:D8:26:02:C2:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/fde6a4c4-7399-3879-b40c-270da587b12a.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 16509 IP address blocks: 205.233.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/9d295acd-c538-4740-8f21-9eca736b29d5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/9d295acd-c538-4740-8f21-9eca736b29d5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:6b:af:2e:9d:eb:3d:ae:ed:91:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d295acd-c538-4740-8f21-9eca736b29d5 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=59719aeb-8207-43cb-b0b5-ad6220ffd5b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:98:9f:a8:1b:c3:37:37:09:2d:b8:ce:87:6a: dc:c5:5a:ae:45:c2:38:7e:0d:b6:ac:48:9a:31:1b: 94:28:6e:c5:dc:b9:9c:4e:8d:a5:f3:26:9d:fe:2b: c2:ff:db:d6:26:20:57:58:13:01:cc:db:bd:c7:52: 1b:a7:f4:1f:51:17:20:06:03:81:8b:47:dc:37:b1: 9b:a8:17:ca:08:d5:cc:24:ac:9d:b4:8e:d4:71:04: 38:97:b9:11:cf:c5:54:70:1b:3f:6b:29:7e:b3:74: 6f:45:bf:d5:cd:b8:16:3b:b5:fe:04:c3:19:42:79: 90:5b:97:4b:09:73:60:33:5a:5a:d5:d5:00:40:6b: 2c:02:0c:0c:05:0e:12:2b:ef:89:1b:08:1c:89:7b: 3c:11:10:83:1e:44:29:73:b8:80:4b:74:26:48:c2: cd:c6:60:b7:15:1a:e0:c2:89:0a:77:19:a7:15:8f: 0f:f9:63:45:ba:78:5a:e0:94:24:a4:35:f5:60:98: 6e:c1:8b:73:f5:41:7d:51:0e:ab:76:6f:7d:53:dc: 35:df:26:75:e3:41:40:1e:aa:df:36:7b:40:51:0d: 35:c4:b4:9c:5a:d8:46:2d:bf:73:5e:9e:b1:49:60: c4:70:61:b8:48:db:d1:a4:a7:25:5d:4e:b4:bd:eb: dc:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:FD:AF:55:0B:94:64:82:2E:42:50:5C:87:77:30:A2:A8:4D:3A:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/fde6a4c4-7399-3879-b40c-270da587b12a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/9d295acd-c538-4740-8f21-9eca736b29d5.crl X509v3 Authority Key Identifier: keyid:42:03:5D:B9:00:BA:0A:9F:E5:9B:F0:A7:55:C0:87:D8:26:02:C2:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5.cer sbgp-ipAddrBlock: critical IPv4: 205.233.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:68:44:bf:9a:ef:52:21:96:58:45:94:9e:d5:3e:b1:86:bb: ef:2f:15:46:69:a2:6c:7e:68:09:79:04:21:d0:30:b6:61:c2: 10:ef:1d:cd:6c:74:c7:04:82:56:ce:e8:72:34:07:2f:ac:38: 54:a9:1a:79:c0:bc:67:f8:88:ef:7a:96:f5:68:8f:ab:7e:aa: 70:4a:22:e6:de:05:7c:b8:8a:1e:71:bf:ce:ca:11:43:d8:d5: f6:ba:bc:c9:33:4d:04:4b:5b:38:ab:b0:c4:2d:d0:72:40:57: f9:98:09:82:11:8b:79:81:06:9b:05:f7:7e:67:4b:8b:58:1d: 12:a9:cd:32:e4:6a:71:9c:12:9b:9d:de:8e:26:09:10:a6:fe: 52:72:2d:7c:50:3f:1e:8e:7e:cf:a6:26:ae:8d:63:dc:3a:cd: 0d:a9:ab:2e:a2:17:9a:11:ec:26:f6:a9:f4:bc:ca:0f:f4:a6: 6a:24:cc:84:f1:e9:bf:74:d6:65:de:f3:b3:6a:d0:fd:50:58: 04:78:99:1a:cb:42:33:5d:1d:58:2f:af:ba:d3:c0:a8:91:fd: 72:f2:f2:4a:0c:77:9f:6a:d5:be:04:2d:37:02:35:de:2e:52: b4:c1:9a:a8:b8:9e:c7:27:79:ed:08:d1:9e:79:57:9c:a2:03: c1:e0:93:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXmuvLp3rPa7tkSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWQyOTVhY2QtYzUzOC00NzQwLThmMjEtOWVjYTczNmIy OWQ1MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NTk3MTlhZWItODIwNy00M2NiLWIwYjUtYWQ2MjIwZmZkNWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZifqBvDNzcJLbjOh2rcxVquRcI4fg22rEia MRuUKG7F3LmcTo2l8yad/ivC/9vWJiBXWBMBzNu9x1Ibp/QfURcgBgOBi0fcN7Gb qBfKCNXMJKydtI7UcQQ4l7kRz8VUcBs/ayl+s3RvRb/VzbgWO7X+BMMZQnmQW5dL CXNgM1pa1dUAQGssAgwMBQ4SK++JGwgciXs8ERCDHkQpc7iAS3QmSMLNxmC3FRrg wokKdxmnFY8P+WNFunha4JQkpDX1YJhuwYtz9UF9UQ6rdm99U9w13yZ140FAHqrf NntAUQ01xLScWthGLb9zXp6xSWDEcGG4SNvRpKclXU60vevcBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBv9r1ULlGSCLkJQXId3MKKoTTpeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85ZDI5 NWFjZC1jNTM4LTQ3NDAtOGYyMS05ZWNhNzM2YjI5ZDUvZmRlNmE0YzQtNzM5OS0z ODc5LWI0MGMtMjcwZGE1ODdiMTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWQyOTVhY2QtYzUzOC00NzQwLThm MjEtOWVjYTczNmIyOWQ1LzlkMjk1YWNkLWM1MzgtNDc0MC04ZjIxLTllY2E3MzZi MjlkNS5jcmwwHwYDVR0jBBgwFoAUQgNduQC6Cp/lm/CnVcCH2CYCwtkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85ZDI5NWFjZC1jNTM4LTQ3NDAtOGYyMS05ZWNh NzM2YjI5ZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzelbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtoRL+a71IhllhFlJ7VPrGGu+8vFUZpomx+aAl5BCHQMLZhwhDvHc1s dMcEglbO6HI0By+sOFSpGnnAvGf4iO96lvVoj6t+qnBKIubeBXy4ih5xv87KEUPY 1fa6vMkzTQRLWzirsMQt0HJAV/mYCYIRi3mBBpsF935nS4tYHRKpzTLkanGcEpud 3o4mCRCm/lJyLXxQPx6Ofs+mJq6NY9w6zQ2pqy6iF5oR7Cb2qfS8yg/0pmokzITx 6b901mXe87Nq0P1QWAR4mRrLQjNdHVgvr7rTwKiR/XLy8koMd59q1b4ELTcCNd4u UrTBmqi4nscnee0I0Z55V5yiA8Hgk4M= -----END CERTIFICATE-----Generated at Sun Mar 1 22:46:47 2026 by rpki-client