$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f10d7aa-badd-30b7-87cb-f39e62ad4f90.roa File: 8f10d7aa-badd-30b7-87cb-f39e62ad4f90.roa (raw, json) Hash identifier: jGLRPdp/ZTxw0nVBBLeKiR2poRek/KoYhPCdhP1IB90= Subject key identifier: 73:6D:CA:94:52:CA:13:7C:54:EE:40:75:42:DE:66:C1:9B:26:2F:EE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D11728A04DF5F8D1F3CD2E880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f10d7aa-badd-30b7-87cb-f39e62ad4f90.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 7922 IP address blocks: 96.109.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:8a:04:df:5f:8d:1f:3c:d2:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=baf5307b-8a5b-4da8-bfde-eebb970a62a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:4b:5c:02:98:f4:37:ab:a9:95:68:0e:bd:05: f5:b6:e8:ee:22:1a:92:5c:f3:64:b6:c7:ff:89:74: 43:8e:bc:06:aa:01:9e:e8:83:bd:66:a2:df:05:3d: f8:a0:c7:f1:20:00:0b:9d:88:d9:84:aa:7d:37:35: 83:28:e5:42:fe:66:e3:b6:c7:4e:45:5d:cd:2c:f1: 7e:05:e2:b2:ea:6c:ca:83:ed:be:d3:de:22:de:aa: 84:80:8c:75:fc:89:02:b2:c0:26:58:f5:41:73:79: 74:02:65:71:7b:5c:c6:9e:0c:72:ea:b1:0f:49:62: ba:61:2b:1f:ad:27:e5:94:12:6d:79:fe:b9:ea:9a: 61:bf:91:33:20:6c:8a:10:c0:71:c3:31:3f:63:54: 8a:30:4d:d2:05:1c:2f:e7:01:58:c9:97:11:88:ec: 22:4f:b1:da:56:23:0e:6d:55:60:ba:03:df:5b:e7: b3:0f:c6:4b:73:4b:65:aa:ef:e8:6c:9d:da:5e:cd: 20:64:83:3e:a9:2d:2f:e0:44:04:c0:24:97:3d:88: e5:15:e9:88:11:40:5f:bf:5d:1f:b2:a8:1e:83:29: a2:7e:2d:10:e9:82:ed:19:d5:f6:09:6e:ac:bc:eb: 10:77:3b:12:b9:0a:2a:21:f5:15:85:d1:ee:1f:3b: 90:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:6D:CA:94:52:CA:13:7C:54:EE:40:75:42:DE:66:C1:9B:26:2F:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f10d7aa-badd-30b7-87cb-f39e62ad4f90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.109.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:ad:71:7a:5b:6f:01:27:dc:01:4a:f5:20:50:5b:70:63:c3: 68:20:9c:b6:33:69:4b:f0:fa:0a:98:c7:d2:20:da:f8:24:15: fb:ec:1d:19:1f:4c:1f:83:78:81:f8:40:cf:39:80:87:0f:c0: 3b:26:b6:f3:7d:07:aa:2a:98:ea:9e:c3:68:34:9c:61:09:6a: a8:01:8b:45:3d:96:74:27:f5:64:eb:14:0c:3f:75:a6:3b:85: c1:00:5b:78:51:50:e9:84:36:d1:4e:73:48:28:ae:79:2f:a7: 91:cb:e0:e1:d7:ff:39:8c:6f:fb:75:df:99:71:ae:be:99:5f: ea:c0:21:e4:6c:e5:98:80:b9:f3:7b:6a:84:58:1e:b0:90:f8: 9d:56:aa:17:d1:05:6f:52:d4:4c:36:9b:54:e5:63:37:70:b2: ef:36:84:b9:94:c2:f4:5d:ea:bb:a6:27:59:7f:48:d7:25:f7: 39:74:4e:ad:3c:c3:bb:3d:79:ff:2a:06:8b:3d:27:02:ae:6d: 47:37:60:0e:02:af:bf:d5:ba:0c:da:b9:7e:a2:e6:c4:e8:ae: 3c:14:72:c1:fd:18:6e:5e:71:68:9f:ab:33:fa:36:bd:aa:0a: 91:5e:dc:7c:f2:35:4b:0b:05:37:a7:a0:61:35:8b:59:35:5c: 89:f6:8a:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0RcooE31+NHzzS6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk YmFmNTMwN2ItOGE1Yi00ZGE4LWJmZGUtZWViYjk3MGE2MmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEtcApj0N6uplWgOvQX1tujuIhqSXPNktsf/ iXRDjrwGqgGe6IO9ZqLfBT34oMfxIAALnYjZhKp9NzWDKOVC/mbjtsdORV3NLPF+ BeKy6mzKg+2+094i3qqEgIx1/IkCssAmWPVBc3l0AmVxe1zGngxy6rEPSWK6YSsf rSfllBJtef656pphv5EzIGyKEMBxwzE/Y1SKME3SBRwv5wFYyZcRiOwiT7HaViMO bVVgugPfW+ezD8ZLc0tlqu/obJ3aXs0gZIM+qS0v4EQEwCSXPYjlFemIEUBfv10f sqgegymifi0Q6YLtGdX2CW6svOsQdzsSuQoqIfUVhdHuHzuQMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHNtypRSyhN8VO5AdULeZsGbJi/uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGYxMGQ3YWEtYmFkZC0z MGI3LTg3Y2ItZjM5ZTYyYWQ0ZjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYG0zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAetcXpbbwEn3AFK9SBQW3Bjw2ggnLYzaUvw+gqYx9Ig2vgkFfvsHRkf TB+DeIH4QM85gIcPwDsmtvN9B6oqmOqew2g0nGEJaqgBi0U9lnQn9WTrFAw/daY7 hcEAW3hRUOmENtFOc0gornkvp5HL4OHX/zmMb/t135lxrr6ZX+rAIeRs5ZiAufN7 aoRYHrCQ+J1WqhfRBW9S1Ew2m1TlYzdwsu82hLmUwvRd6rumJ1l/SNcl9zl0Tq08 w7s9ef8qBos9JwKubUc3YA4Cr7/VugzauX6i5sTorjwUcsH9GG5ecWifqzP6Nr2q CpFe3HzyNUsLBTenoGE1i1k1XIn2ims= -----END CERTIFICATE-----Generated at Sat Mar 7 12:17:28 2026 by rpki-client