$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b686ae3e-1d8c-3b65-949d-f38dd3f608a5.roa File: b686ae3e-1d8c-3b65-949d-f38dd3f608a5.roa (raw, json) Hash identifier: up+hJGbmueIWUnnMDR7P5H5u31qhAELVnBbUQcyrMjg= Subject key identifier: A5:47:72:4F:EF:0F:41:B3:31:3B:39:CB:98:5D:1B:95:E0:2A:94:D3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D11727EA1784AC51BC8582100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b686ae3e-1d8c-3b65-949d-f38dd3f608a5.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 7922 IP address blocks: 96.99.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:7e:a1:78:4a:c5:1b:c8:58:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=319ddeb0-3b03-469d-ae55-ffb364207de7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ec:ae:4f:1b:9c:19:14:13:96:97:e3:ea:57: b4:1d:8e:5e:75:e8:5a:7c:4c:a2:12:3c:1f:38:f3: b5:0c:9d:02:66:65:3e:18:07:44:4e:59:4c:b4:e1: cb:b2:83:8c:e8:d2:91:70:c8:f4:71:0c:87:b0:f3: 90:ad:5c:82:17:0e:4d:5f:d7:6c:47:64:eb:5a:19: 61:26:c6:28:43:42:df:29:c8:a9:d7:24:81:a3:59: 4c:00:83:d5:1c:ef:23:c0:cb:39:4f:72:db:4e:bd: 70:cd:18:2c:5b:ab:84:ad:68:23:24:01:c4:73:fa: 00:f8:90:19:f9:76:5f:51:a1:4b:4f:8c:5c:8c:cd: 7b:f2:c0:f9:f9:c9:2e:a3:78:8a:de:b1:f0:75:50: 4b:f0:86:f7:20:54:1d:73:88:41:fe:9a:8e:b6:33: 36:e2:5c:b2:b7:22:20:f6:9b:66:c1:67:22:dc:7b: 85:9e:2f:40:50:eb:5e:48:f3:c3:bb:45:f4:6f:a9: 3b:d4:9e:f6:1e:0a:a0:c7:fc:8a:cc:8b:f9:77:cd: 9f:45:5d:77:37:4f:1a:d7:75:dc:48:0e:d3:bd:e0: f2:6c:ca:4a:29:f9:6b:dd:28:e6:17:42:96:47:b8: 4a:09:0b:d0:a7:27:c3:1c:7f:4a:d3:63:4a:d4:6b: b6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:47:72:4F:EF:0F:41:B3:31:3B:39:CB:98:5D:1B:95:E0:2A:94:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b686ae3e-1d8c-3b65-949d-f38dd3f608a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.99.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:4b:51:1a:a1:a6:d8:f0:1c:38:ba:87:70:2c:b9:77:db:9e: 25:25:c7:66:86:93:d6:5a:da:97:e4:cc:89:cf:8f:f4:01:39: 89:6a:9a:4c:66:0b:fe:08:43:c3:68:fb:04:db:68:83:b5:ef: 55:a6:b9:36:1f:7c:4f:c9:a7:ec:06:4c:de:26:dc:b7:a7:6e: 4a:89:bc:e7:7d:c0:c9:34:df:32:fe:18:60:b1:62:57:a1:43: 2d:64:bc:7f:e4:8b:c7:0d:2f:29:37:f4:fc:9e:c7:5a:85:c8: 4c:d5:95:15:b6:bb:a0:71:f9:b8:27:f5:65:24:2f:51:26:a5: 5a:80:8d:36:8c:4e:69:99:ac:0a:78:61:17:ed:b1:12:b4:41: a0:46:e5:f9:36:47:c9:1a:49:16:23:04:9d:f0:79:cc:03:08: f5:1e:6b:45:6d:3a:c1:0d:e2:78:aa:6d:0c:d5:f6:08:e0:4d: 24:db:44:42:7d:a1:be:7b:21:9d:fc:7a:7b:29:86:d6:47:73: 31:3d:aa:fd:10:45:3a:37:e4:c8:5f:7f:54:f0:dc:6e:e4:cc: 47:28:ac:ac:30:10:41:87:a4:d9:f5:f4:1a:74:63:6d:dc:24: 15:73:2b:2d:ec:ad:7d:30:cc:8b:37:40:e5:fa:d9:d3:63:fc: 16:69:a5:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Rcn6heErFG8hYIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk MzE5ZGRlYjAtM2IwMy00NjlkLWFlNTUtZmZiMzY0MjA3ZGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OyuTxucGRQTlpfj6le0HY5edehafEyiEjwf OPO1DJ0CZmU+GAdETllMtOHLsoOM6NKRcMj0cQyHsPOQrVyCFw5NX9dsR2TrWhlh JsYoQ0LfKcip1ySBo1lMAIPVHO8jwMs5T3LbTr1wzRgsW6uErWgjJAHEc/oA+JAZ +XZfUaFLT4xcjM178sD5+ckuo3iK3rHwdVBL8Ib3IFQdc4hB/pqOtjM24lyytyIg 9ptmwWci3HuFni9AUOteSPPDu0X0b6k71J72Hgqgx/yKzIv5d82fRV13N08a13Xc SA7TveDybMpKKflr3SjmF0KWR7hKCQvQpyfDHH9K02NK1Gu2fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKVHck/vD0GzMTs5y5hdG5XgKpTTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjY4NmFlM2UtMWQ4Yy0z YjY1LTk0OWQtZjM4ZGQzZjYwOGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYGOsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMlLURqhptjwHDi6h3AsuXfbniUlx2aGk9Za2pfkzInPj/QBOYlqmkxm C/4IQ8No+wTbaIO171WmuTYffE/Jp+wGTN4m3LenbkqJvOd9wMk03zL+GGCxYleh Qy1kvH/ki8cNLyk39Pyex1qFyEzVlRW2u6Bx+bgn9WUkL1EmpVqAjTaMTmmZrAp4 YRftsRK0QaBG5fk2R8kaSRYjBJ3wecwDCPUea0VtOsEN4niqbQzV9gjgTSTbREJ9 ob57IZ38ensphtZHczE9qv0QRTo35Mhff1Tw3G7kzEcorKwwEEGHpNn19Bp0Y23c JBVzKy3srX0wzIs3QOX62dNj/BZppfE= -----END CERTIFICATE-----Generated at Sat Mar 7 13:41:08 2026 by rpki-client