$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9af4de21-89db-3d2e-86f4-4a93bc3c3a56.roa File: 9af4de21-89db-3d2e-86f4-4a93bc3c3a56.roa (raw, json) Hash identifier: Gg3i1uxTqlx6FejKpbItLgSaS/V7wzmoWrO43xsQbF4= Subject key identifier: BA:AC:FE:37:FD:34:44:F7:99:15:37:FC:F2:3E:AD:A0:06:C7:FE:AA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D0EA7E5B2218B95BA26A65B80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9af4de21-89db-3d2e-86f4-4a93bc3c3a56.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 33661 IP address blocks: 96.67.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Mar 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:e5:b2:21:8b:95:ba:26:a6:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=e49b091b-afe3-4f14-aebc-c0fe85ce50f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2c:20:2f:49:2e:be:5d:db:29:08:f7:01:5c: 97:4a:64:7c:1b:b6:1a:76:17:dc:42:a9:64:59:b1: cd:3f:d0:6f:7d:70:d9:d1:62:b8:fc:90:35:bf:8c: d4:91:e6:4d:74:ea:8b:2c:91:17:60:b9:ac:18:d3: 85:e8:a1:b6:b8:bc:36:98:b0:ac:7a:82:26:dd:60: d0:f8:7b:b1:db:b9:86:c1:0d:9b:cd:92:6c:1c:86: 67:17:21:15:bd:76:42:24:4f:e8:0b:f2:97:78:70: 68:ae:14:2a:05:f9:e8:cf:f4:f3:c0:fd:85:86:28: 83:53:ac:fe:dc:fc:55:af:59:22:ff:f1:83:5c:c2: 6d:8c:42:7d:40:40:1a:dc:28:64:06:2b:34:2d:10: d3:43:5b:a6:ba:d0:91:86:89:60:42:e9:2e:fa:61: bc:1c:85:20:0d:a3:1d:b9:7b:f2:1e:c4:1f:c2:eb: d7:f6:1f:4f:4f:52:35:95:79:99:e7:74:d4:c9:58: ac:eb:c4:fe:aa:f9:f3:74:df:be:6b:e8:da:ca:8e: 6e:bc:fe:07:2e:72:74:43:b6:fe:2a:5f:b9:09:47: 60:35:59:ae:17:bc:7f:83:71:fd:3e:fa:2b:ab:30: 0d:d7:89:8a:9f:d8:2e:47:0f:a9:15:67:13:09:82: ff:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:AC:FE:37:FD:34:44:F7:99:15:37:FC:F2:3E:AD:A0:06:C7:FE:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9af4de21-89db-3d2e-86f4-4a93bc3c3a56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.67.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:c4:9a:59:7c:c2:67:b9:ba:87:cc:4e:99:de:31:df:3a:5c: 80:0f:80:d1:82:a1:20:92:67:2d:6e:20:41:4d:82:c7:d3:e4: 63:4d:6b:45:18:87:40:a1:27:27:18:35:83:43:cc:94:7f:35: 31:a6:35:bc:8d:3e:6b:b0:8a:db:37:b6:24:dc:cc:af:bc:9a: 86:77:3e:b9:fb:60:36:e6:a9:f7:f0:cc:1c:75:bb:fe:80:1a: 6b:85:a3:58:55:b3:b3:48:2b:82:76:4c:4f:37:f6:31:c2:a1: 72:ee:31:59:1c:5a:26:39:11:28:86:64:e3:7d:09:80:23:4a: 73:80:2b:44:26:f3:2e:e8:9a:00:a3:d1:95:78:77:74:d5:69: e9:51:8b:29:db:bd:48:8c:92:08:b4:aa:28:3c:cd:d4:88:6f: 5e:d6:14:77:06:f1:b5:44:23:43:b5:da:19:b8:0e:22:c9:2b: 75:f9:67:ed:f8:4b:16:7d:c3:bd:1a:91:89:be:84:33:61:18: ab:60:08:39:64:b7:1d:57:a3:32:74:54:ed:18:dd:09:f4:2f: ff:2c:8a:97:1c:43:b1:fe:56:c0:70:d7:df:1d:f2:54:4c:ea: 7c:0e:a9:67:d9:aa:94:c4:15:87:0c:07:c4:a2:23:2a:32:a1: b3:10:cd:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Op+WyIYuVuiamW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk ZTQ5YjA5MWItYWZlMy00ZjE0LWFlYmMtYzBmZTg1Y2U1MGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCwgL0kuvl3bKQj3AVyXSmR8G7YadhfcQqlk WbHNP9BvfXDZ0WK4/JA1v4zUkeZNdOqLLJEXYLmsGNOF6KG2uLw2mLCseoIm3WDQ +Hux27mGwQ2bzZJsHIZnFyEVvXZCJE/oC/KXeHBorhQqBfnoz/TzwP2FhiiDU6z+ 3PxVr1ki//GDXMJtjEJ9QEAa3ChkBis0LRDTQ1umutCRholgQuku+mG8HIUgDaMd uXvyHsQfwuvX9h9PT1I1lXmZ53TUyVis68T+qvnzdN++a+jayo5uvP4HLnJ0Q7b+ Kl+5CUdgNVmuF7x/g3H9PvorqzAN14mKn9guRw+pFWcTCYL/iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLqs/jf9NET3mRU3/PI+raAGx/6qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWFmNGRlMjEtODlkYi0z ZDJlLTg2ZjQtNGE5M2JjM2MzYTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYENEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfEmll8wme5uofMTpneMd86XIAPgNGCoSCSZy1uIEFNgsfT5GNNa0UY h0ChJycYNYNDzJR/NTGmNbyNPmuwits3tiTczK+8moZ3Prn7YDbmqffwzBx1u/6A GmuFo1hVs7NIK4J2TE839jHCoXLuMVkcWiY5ESiGZON9CYAjSnOAK0Qm8y7omgCj 0ZV4d3TVaelRiynbvUiMkgi0qig8zdSIb17WFHcG8bVEI0O12hm4DiLJK3X5Z+34 SxZ9w70akYm+hDNhGKtgCDlktx1XozJ0VO0Y3Qn0L/8sipccQ7H+VsBw198d8lRM 6nwOqWfZqpTEFYcMB8SiIyoyobMQzQo= -----END CERTIFICATE-----Generated at Sat Mar 7 10:16:41 2026 by rpki-client