$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/b295fb1c-1145-3dee-a874-2305ff0b4aa4.roa File: b295fb1c-1145-3dee-a874-2305ff0b4aa4.roa (raw, json) Hash identifier: /Tm4sVyFbV4oQ890UiCHfOjzxECeIpaC053FrmwRELo= Subject key identifier: 35:3F:58:98:F1:B2:0E:88:9F:19:20:13:BC:B5:25:9A:3B:82:B5:C3 Certificate issuer: /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15 Certificate serial: 010D0C9F4328584C93D19BB6E40283AF0AC94F08 Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/b295fb1c-1145-3dee-a874-2305ff0b4aa4.roa Signing time: Mon 19 Jan 2026 14:00:38 +0000 ROA not before: Mon 19 Jan 2026 14:00:38 +0000 ROA not after: Sun 19 Apr 2026 13:00:38 +0000 asID: 53555 IP address blocks: 24.38.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:93:d1:9b:b6:e4:02:83:af:0a:c9:4f:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15 Validity Not Before: Jan 19 14:00:38 2026 GMT Not After : Apr 19 13:00:38 2026 GMT Subject: CN=ff72ca76-213e-4d25-9133-37513caff052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8c:aa:e9:49:70:02:62:76:e6:02:56:4b:78: d0:24:bb:1f:8f:46:85:01:ec:9f:f0:79:b5:c7:f0: 00:80:c6:46:80:3e:78:84:fe:5a:8d:14:ed:ab:b0: 61:ac:40:d3:8e:1a:fa:c4:b9:a7:be:12:fa:3d:b1: a1:23:de:04:70:1e:72:57:5a:67:7e:cf:26:28:bc: cd:83:31:2e:4b:b0:25:d0:bf:c9:2e:f5:a2:27:b2: 6a:32:b2:d5:81:ad:9d:97:41:ce:85:48:b7:44:61: 2c:d3:80:55:f9:50:d7:b9:7a:ce:ac:a2:75:7c:74: 41:dd:bb:69:33:a1:96:25:41:3e:a0:32:c9:ca:82: 2a:4e:fe:44:a8:7d:fe:a3:6b:6d:cf:d1:4f:6b:12: 73:d2:36:22:7a:1e:0f:4f:2f:b0:41:30:00:ed:c7: f0:54:64:55:21:41:e2:48:8a:de:23:60:18:2c:8e: 23:8a:67:c6:03:b1:23:4f:8a:9b:d0:d7:61:78:02: be:83:14:14:3f:7b:c1:7d:bb:32:c0:ff:53:cb:d3: c1:93:9d:f8:c0:66:e1:1c:8f:48:36:d3:7d:05:e7: a0:3b:ad:48:84:2b:b1:10:e1:3c:53:60:9a:a6:c2: bd:8e:01:5a:bc:66:a5:11:3b:ff:c3:13:5b:84:88: a6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:3F:58:98:F1:B2:0E:88:9F:19:20:13:BC:B5:25:9A:3B:82:B5:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/b295fb1c-1145-3dee-a874-2305ff0b4aa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl X509v3 Authority Key Identifier: keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer sbgp-ipAddrBlock: critical IPv4: 24.38.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d4:32:90:99:cf:b8:bd:c3:08:04:b5:b4:7e:e3:04:fc:2e:2a: 32:0e:4b:b8:94:df:a0:7e:e2:c0:94:13:1e:a3:2e:6e:68:2f: e7:aa:ef:bf:d8:48:97:05:5a:c4:b9:61:63:54:cc:a1:a2:53: 51:e6:a1:eb:2e:f4:b4:b7:01:08:ea:f5:e1:36:8e:40:04:b1: 8c:03:a5:96:63:71:a3:c5:0f:47:9b:0c:9b:a5:54:f2:26:5c: 8d:dc:33:fe:2d:d9:9a:39:57:ba:ca:f9:ac:49:6f:61:29:a8: bb:20:81:18:dc:80:f1:7f:e0:59:65:e2:97:cf:56:6a:0b:01: 2a:a1:7c:50:cd:bd:bf:cb:10:af:63:24:89:d5:2f:14:c1:20: c9:3d:2d:5f:17:ea:9b:86:1e:35:f0:70:74:56:ce:ae:44:7b: 01:32:ce:fd:99:d6:8f:ae:27:4a:1a:9e:d1:30:8c:3b:34:66: 66:b8:ec:e6:96:60:f4:32:6a:2a:43:cf:62:42:c4:fc:b4:ed: 91:ea:28:5e:78:b1:14:e6:16:6f:00:ce:cd:a0:93:71:7c:f0: 2a:5a:b8:ce:7d:70:91:56:c1:e7:46:3d:61:ca:31:d1:80:43: 20:85:f0:63:5f:2a:29:18:b1:50:3b:ca:bb:4d:72:53:52:34: f7:af:c4:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyT0Zu25AKDrwrJTwgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZThmOGM0MTEtZmE1Yy00MjhjLThhYzEtZTA4ZThhMDBh ZDE1MB4XDTI2MDExOTE0MDAzOFoXDTI2MDQxOTEzMDAzOFowLzEtMCsGA1UEAxMk ZmY3MmNhNzYtMjEzZS00ZDI1LTkxMzMtMzc1MTNjYWZmMDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoyq6UlwAmJ25gJWS3jQJLsfj0aFAeyf8Hm1 x/AAgMZGgD54hP5ajRTtq7BhrEDTjhr6xLmnvhL6PbGhI94EcB5yV1pnfs8mKLzN gzEuS7Al0L/JLvWiJ7JqMrLVga2dl0HOhUi3RGEs04BV+VDXuXrOrKJ1fHRB3btp M6GWJUE+oDLJyoIqTv5EqH3+o2ttz9FPaxJz0jYieh4PTy+wQTAA7cfwVGRVIUHi SIreI2AYLI4jimfGA7EjT4qb0NdheAK+gxQUP3vBfbsywP9Ty9PBk534wGbhHI9I NtN9BeegO61IhCuxEOE8U2CapsK9jgFavGalETv/wxNbhIimPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDU/WJjxsg6InxkgE7y1JZo7grXDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4 YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhlOGEwMGFkMTUvYjI5NWZiMWMtMTE0NS0z ZGVlLWE4NzQtMjMwNWZmMGI0YWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZThmOGM0MTEtZmE1Yy00MjhjLThh YzEtZTA4ZThhMDBhZDE1L2U4ZjhjNDExLWZhNWMtNDI4Yy04YWMxLWUwOGU4YTAw YWQxNS5jcmwwHwYDVR0jBBgwFoAU2mOPS3cNceq6IgA5tQH/tSVxq18wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhl OGEwMGFkMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGCZ9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANQykJnPuL3DCAS1tH7jBPwuKjIOS7iU36B+4sCUEx6jLm5oL+eq77/Y SJcFWsS5YWNUzKGiU1Hmoesu9LS3AQjq9eE2jkAEsYwDpZZjcaPFD0ebDJulVPIm XI3cM/4t2Zo5V7rK+axJb2EpqLsggRjcgPF/4Fll4pfPVmoLASqhfFDNvb/LEK9j JInVLxTBIMk9LV8X6puGHjXwcHRWzq5EewEyzv2Z1o+uJ0oantEwjDs0Zma47OaW YPQyaipDz2JCxPy07ZHqKF54sRTmFm8Azs2gk3F88CpauM59cJFWwedGPWHKMdGA QyCF8GNfKikYsVA7yrtNclNSNPevxCo= -----END CERTIFICATE-----Generated at Thu Feb 26 15:01:41 2026 by rpki-client