$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/2509d60e-c681-37b3-adcf-bad08087cd10.roa File: 2509d60e-c681-37b3-adcf-bad08087cd10.roa (raw, json) Hash identifier: GQ98cRRFCU49YnKbc0Ydg1WDz5+MGEYSVQ0Bw0V29Kg= Subject key identifier: B1:7D:CB:89:EA:88:C0:8E:7F:F6:C1:6F:6E:ED:3F:7A:A4:15:23:55 Certificate issuer: /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15 Certificate serial: 010D0C9F4328584C8046D41E9A70577A99927880 Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/2509d60e-c681-37b3-adcf-bad08087cd10.roa Signing time: Mon 12 Jan 2026 14:00:40 +0000 ROA not before: Mon 12 Jan 2026 14:00:40 +0000 ROA not after: Sun 12 Apr 2026 13:00:40 +0000 asID: 53640 IP address blocks: 24.38.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:80:46:d4:1e:9a:70:57:7a:99:92:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15 Validity Not Before: Jan 12 14:00:40 2026 GMT Not After : Apr 12 13:00:40 2026 GMT Subject: CN=6b8a9d98-36e2-4769-a0b3-053307f6af4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:56:81:7b:11:91:c2:36:e0:8e:84:2c:e6:84: 5d:c0:67:03:56:43:b7:5d:ff:5b:1e:b5:e5:19:bf: 8e:07:b7:17:18:14:8b:8d:72:47:3a:6d:f7:40:c9: fc:7f:05:44:08:35:e0:38:06:aa:a4:18:88:e9:a1: 1a:cc:1d:fa:8f:a4:3e:45:2e:26:43:f4:62:b0:07: 15:08:c2:aa:dd:14:dc:49:02:23:fa:8c:0d:df:eb: 23:11:40:84:29:ca:ec:9c:2a:90:ef:8e:79:5e:d2: f3:9b:f9:7e:59:3d:e6:96:73:96:0c:77:ae:fe:6f: a5:b0:0f:01:86:74:2d:9b:c8:c2:bc:6f:08:75:08: 04:51:ce:52:70:68:f0:9e:92:c5:31:27:ef:40:27: 31:27:7b:72:fc:e7:97:05:19:37:62:4a:95:0a:d9: 7a:62:44:50:6f:53:e0:17:98:ea:2a:96:ae:27:6f: f3:6a:4c:41:c6:c8:38:e1:51:ab:eb:3d:57:f1:c7: 63:33:cb:d5:2f:d3:bd:28:4a:92:60:cb:8d:48:51: 8d:08:eb:6f:f0:8c:b5:13:78:4c:7b:cc:27:9c:ac: 69:00:26:7e:25:c1:1b:1e:4c:b0:29:f8:98:b1:94: c3:e4:6a:c3:97:84:7f:cb:be:80:45:12:32:19:28: 88:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:7D:CB:89:EA:88:C0:8E:7F:F6:C1:6F:6E:ED:3F:7A:A4:15:23:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/2509d60e-c681-37b3-adcf-bad08087cd10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl X509v3 Authority Key Identifier: keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer sbgp-ipAddrBlock: critical IPv4: 24.38.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:f2:ac:11:db:9e:52:6c:dd:b2:a4:0a:65:77:88:61:52:f7: dd:01:a0:06:59:9e:1d:99:73:4f:39:fb:49:2e:e7:5e:7b:34: 1d:4e:46:1e:a0:4f:7f:43:e2:d7:43:a6:90:bf:c9:3d:64:da: 66:52:b6:44:73:3c:e6:04:dc:0b:8d:25:16:ab:04:77:4c:9c: 83:24:f4:79:9f:8d:a8:43:b5:bd:9b:3e:3e:7e:a0:89:7a:e3: 4f:ec:cb:84:96:ae:b4:b5:f6:a4:ea:8c:ee:2a:a0:cd:4f:78: 56:25:fd:45:34:8f:f4:fb:85:8e:67:f3:79:2a:ba:3c:dd:98: 55:68:3a:0a:70:5e:94:42:55:1f:16:bb:45:ea:c1:78:11:80: b3:4b:c7:9d:71:12:75:71:07:79:f5:92:e3:23:67:e7:d7:a6: 81:44:50:82:6a:78:93:4e:20:9f:25:f4:c3:2e:7d:26:e8:78: f1:ee:76:c9:85:92:b9:5b:66:43:09:4a:64:4f:40:d5:e4:dc: 6e:56:7c:57:0c:f6:7f:07:f5:27:28:8b:85:83:b9:b8:b9:b0: e1:e8:90:1f:7b:fa:29:7b:03:8d:ee:f3:8e:2b:4c:fd:e2:ee: 7b:2e:16:06:6d:11:a6:77:b2:53:e8:77:84:27:2f:7c:cb:52: d7:3d:e1:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyARtQemnBXepmSeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZThmOGM0MTEtZmE1Yy00MjhjLThhYzEtZTA4ZThhMDBh ZDE1MB4XDTI2MDExMjE0MDA0MFoXDTI2MDQxMjEzMDA0MFowLzEtMCsGA1UEAxMk NmI4YTlkOTgtMzZlMi00NzY5LWEwYjMtMDUzMzA3ZjZhZjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllaBexGRwjbgjoQs5oRdwGcDVkO3Xf9bHrXl Gb+OB7cXGBSLjXJHOm33QMn8fwVECDXgOAaqpBiI6aEazB36j6Q+RS4mQ/RisAcV CMKq3RTcSQIj+owN3+sjEUCEKcrsnCqQ7455XtLzm/l+WT3mlnOWDHeu/m+lsA8B hnQtm8jCvG8IdQgEUc5ScGjwnpLFMSfvQCcxJ3ty/OeXBRk3YkqVCtl6YkRQb1Pg F5jqKpauJ2/zakxBxsg44VGr6z1X8cdjM8vVL9O9KEqSYMuNSFGNCOtv8Iy1E3hM e8wnnKxpACZ+JcEbHkywKfiYsZTD5GrDl4R/y76ARRIyGSiIzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLF9y4nqiMCOf/bBb27tP3qkFSNVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4 YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhlOGEwMGFkMTUvMjUwOWQ2MGUtYzY4MS0z N2IzLWFkY2YtYmFkMDgwODdjZDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZThmOGM0MTEtZmE1Yy00MjhjLThh YzEtZTA4ZThhMDBhZDE1L2U4ZjhjNDExLWZhNWMtNDI4Yy04YWMxLWUwOGU4YTAw YWQxNS5jcmwwHwYDVR0jBBgwFoAU2mOPS3cNceq6IgA5tQH/tSVxq18wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhl OGEwMGFkMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGCZyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILyrBHbnlJs3bKkCmV3iGFS990BoAZZnh2Zc085+0ku5157NB1ORh6g T39D4tdDppC/yT1k2mZStkRzPOYE3AuNJRarBHdMnIMk9HmfjahDtb2bPj5+oIl6 40/sy4SWrrS19qTqjO4qoM1PeFYl/UU0j/T7hY5n83kqujzdmFVoOgpwXpRCVR8W u0XqwXgRgLNLx51xEnVxB3n1kuMjZ+fXpoFEUIJqeJNOIJ8l9MMufSboePHudsmF krlbZkMJSmRPQNXk3G5WfFcM9n8H9Scoi4WDubi5sOHokB97+il7A43u844rTP3i 7nsuFgZtEaZ3slPod4QnL3zLUtc94X4= -----END CERTIFICATE-----Generated at Thu Feb 26 15:02:48 2026 by rpki-client