$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/45232cc2-d5ff-3a30-881e-770a37fd9fac.roa File: 45232cc2-d5ff-3a30-881e-770a37fd9fac.roa (raw, json) Hash identifier: FwZerU1JYKutwej7SPQ12Pt7QDvRvqebWQG8zkgl4mo= Subject key identifier: FF:72:75:A6:C5:C8:92:06:02:68:DF:75:CA:61:86:36:76:30:71:B2 Certificate issuer: /CN=d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d Certificate serial: 010D0C9F4328584C8476D2CFAEDB681C20A2BC00 Authority key identifier: 6A:77:CB:BB:80:7D:AF:E0:C1:67:43:E2:B0:D6:B8:0B:A5:45:39:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/45232cc2-d5ff-3a30-881e-770a37fd9fac.roa Signing time: Wed 14 Jan 2026 02:00:31 +0000 ROA not before: Wed 14 Jan 2026 02:00:31 +0000 ROA not after: Tue 14 Apr 2026 01:00:31 +0000 asID: 22302 IP address blocks: 96.43.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:84:76:d2:cf:ae:db:68:1c:20:a2:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d Validity Not Before: Jan 14 02:00:31 2026 GMT Not After : Apr 14 01:00:31 2026 GMT Subject: CN=3a08dcd2-9aa1-44fa-a49a-ac1593e94e80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4b:ce:cb:a2:88:fe:ef:a9:0d:d6:67:43:e8: ba:a5:69:2f:6a:1b:5b:1a:b3:34:c6:3b:6d:ef:a6: 5a:e0:79:a7:fb:65:7e:76:3e:1c:98:a2:38:ef:e2: 98:a0:95:9e:ea:49:ed:f2:e5:3b:cf:1a:66:c5:bc: 16:c5:03:c1:b9:5b:81:8e:9b:22:a4:0d:eb:2b:bb: c6:09:14:b2:04:ee:83:27:39:9b:58:e3:2a:e8:89: 95:5c:77:b3:ec:b3:c7:24:48:bf:7c:e3:1a:17:8e: ff:d8:8a:5d:4a:7b:cd:67:b8:75:4b:1d:76:88:ec: ae:c3:89:66:06:9f:da:de:df:e3:50:39:d7:a0:8f: 5c:68:fd:ff:f4:f4:5c:95:b5:e4:ef:aa:4b:45:77: 37:43:24:e6:94:58:76:fd:80:52:e0:22:48:fb:b3: 71:60:bd:bc:f2:4c:2f:b8:16:6f:f2:be:d6:56:0c: 57:27:88:74:78:b8:3c:06:0b:99:23:6b:72:94:a2: 4f:66:2f:02:b2:db:73:bd:7e:fe:04:83:1f:73:10: f2:a4:27:4f:ba:f8:04:c9:c5:02:66:cc:c9:06:ff: d1:14:b2:d4:55:a6:14:8e:35:70:4b:b6:01:47:f9: 34:5d:72:fc:39:2d:98:d3:b8:97:da:10:07:ab:c7: 87:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:72:75:A6:C5:C8:92:06:02:68:DF:75:CA:61:86:36:76:30:71:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/45232cc2-d5ff-3a30-881e-770a37fd9fac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.crl X509v3 Authority Key Identifier: keyid:6A:77:CB:BB:80:7D:AF:E0:C1:67:43:E2:B0:D6:B8:0B:A5:45:39:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer sbgp-ipAddrBlock: critical IPv4: 96.43.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:6e:ec:22:24:b7:00:04:8f:e6:33:30:2e:2d:de:79:6d:39: c4:2c:89:f0:0c:22:00:ee:0a:46:7b:b6:1c:3e:00:28:d2:d8: b1:8e:07:53:f0:5c:56:fd:ed:31:1a:92:83:4b:14:60:eb:24: 97:e9:fc:9b:3a:1b:ba:78:e3:4e:bd:a4:6b:31:ff:80:4a:3a: 47:19:dc:bb:8c:e7:cd:6f:40:19:a0:e7:aa:ce:df:67:39:da: 5b:b7:c1:e0:17:38:40:ad:28:20:d4:af:91:ac:69:48:98:da: 3b:bf:3d:72:61:42:99:b9:2e:09:34:8a:49:37:24:c0:9a:cc: ba:3e:a4:ce:17:8c:68:b3:07:8f:4f:22:fe:98:23:9d:ac:4c: a6:ee:c3:a4:b2:63:33:db:6b:f8:55:6c:ab:05:63:cc:b0:bf: 73:24:f9:1d:86:ba:44:1c:f9:69:62:0e:05:75:24:cb:63:4e: a6:19:49:25:d1:c3:43:ae:01:48:1f:5a:1c:d4:7c:72:9a:18: 52:58:44:f5:70:a5:f3:b2:75:73:64:19:1e:47:98:05:38:f6: 1a:38:88:42:91:af:aa:df:53:38:17:09:5f:ee:fc:42:68:d0: d7:0d:24:18:7e:75:ef:a3:5c:3c:ac:58:d3:a3:02:a1:81:42: b6:8a:be:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyEdtLPrttoHCCivAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFiMDA1ZjUtYTMxMi00Y2I1LTgxZDgtYTVjMGJlZDVj YTRkMB4XDTI2MDExNDAyMDAzMVoXDTI2MDQxNDAxMDAzMVowLzEtMCsGA1UEAxMk M2EwOGRjZDItOWFhMS00NGZhLWE0OWEtYWMxNTkzZTk0ZTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUvOy6KI/u+pDdZnQ+i6pWkvahtbGrM0xjtt 76Za4Hmn+2V+dj4cmKI47+KYoJWe6knt8uU7zxpmxbwWxQPBuVuBjpsipA3rK7vG CRSyBO6DJzmbWOMq6ImVXHez7LPHJEi/fOMaF47/2IpdSnvNZ7h1Sx12iOyuw4lm Bp/a3t/jUDnXoI9caP3/9PRclbXk76pLRXc3QyTmlFh2/YBS4CJI+7NxYL288kwv uBZv8r7WVgxXJ4h0eLg8BguZI2tylKJPZi8CsttzvX7+BIMfcxDypCdPuvgEycUC ZszJBv/RFLLUVaYUjjVwS7YBR/k0XXL8OS2Y07iX2hAHq8eHGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP9ydabFyJIGAmjfdcphhjZ2MHGyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMWIw MDVmNS1hMzEyLTRjYjUtODFkOC1hNWMwYmVkNWNhNGQvNDUyMzJjYzItZDVmZi0z YTMwLTg4MWUtNzcwYTM3ZmQ5ZmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDFiMDA1ZjUtYTMxMi00Y2I1LTgx ZDgtYTVjMGJlZDVjYTRkL2QxYjAwNWY1LWEzMTItNGNiNS04MWQ4LWE1YzBiZWQ1 Y2E0ZC5jcmwwHwYDVR0jBBgwFoAUanfLu4B9r+DBZ0PisNa4C6VFOXswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kMWIwMDVmNS1hMzEyLTRjYjUtODFkOC1hNWMw YmVkNWNhNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYCtAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNu7CIktwAEj+YzMC4t3nltOcQsifAMIgDuCkZ7thw+ACjS2LGOB1Pw XFb97TEakoNLFGDrJJfp/Js6G7p44069pGsx/4BKOkcZ3LuM581vQBmg56rO32c5 2lu3weAXOECtKCDUr5GsaUiY2ju/PXJhQpm5Lgk0ikk3JMCazLo+pM4XjGizB49P Iv6YI52sTKbuw6SyYzPba/hVbKsFY8ywv3Mk+R2GukQc+WliDgV1JMtjTqYZSSXR w0OuAUgfWhzUfHKaGFJYRPVwpfOydXNkGR5HmAU49ho4iEKRr6rfUzgXCV/u/EJo 0NcNJBh+de+jXDysWNOjAqGBQraKvnM= -----END CERTIFICATE-----Generated at Fri Feb 27 15:57:23 2026 by rpki-client