$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/95037d37-41f0-3224-b20d-ed8abd26d1c5.roa File: 95037d37-41f0-3224-b20d-ed8abd26d1c5.roa (raw, json) Hash identifier: 8Y9EoDO0ZMu/BlMvutMZ/QT4+OBKtQzvBJf4f5NjQHM= Subject key identifier: 05:F4:B5:25:36:C9:43:B9:57:1F:7F:26:94:6B:FB:CE:D7:6E:D1:80 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584CAA272DCF81611B5AFBAFBB80 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/95037d37-41f0-3224-b20d-ed8abd26d1c5.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 31898 IP address blocks: 144.25.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:2d:cf:81:61:1b:5a:fb:af:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=38b26340-d2ad-40e2-a1b6-bb9d8dee54ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1b:01:81:7a:ab:b3:e2:71:54:c3:8c:b5:2c: 3e:41:f5:0e:ce:e4:bf:d1:fe:0e:0f:91:76:0f:ae: 2d:6d:7b:d7:b9:dd:f2:6c:5c:ce:e4:61:ee:52:e8: bb:56:4a:00:84:13:d4:18:33:45:0d:38:6f:16:19: 29:34:9c:a1:af:41:b8:f9:53:2c:5f:2c:dd:89:d0: 74:63:46:83:aa:d8:d9:bf:64:a5:50:b9:74:ff:ce: 38:53:25:e2:27:72:52:f3:3a:d3:d4:b7:ad:2f:93: 90:e9:b0:59:a2:0a:ad:41:5a:03:0b:98:65:10:43: ab:00:f6:dc:2f:bd:98:3f:c4:ba:3c:71:65:7e:88: bc:7a:df:13:44:f1:fe:8a:a3:d9:7a:57:df:ee:72: 69:88:68:b1:03:88:86:33:05:33:4d:0e:3a:48:19: 75:55:f5:bf:0c:a2:6d:71:2f:f7:6a:e2:36:e2:a4: 3e:bb:65:21:8d:ef:b8:09:1f:3b:ed:11:77:97:fd: 16:d2:28:3c:43:ee:32:83:27:6e:11:6f:9f:55:50: 6d:06:2c:e7:42:ea:c1:3d:ce:23:3b:5f:05:25:64: 26:dc:c8:ef:e9:dd:be:84:c5:d4:6e:22:4c:c5:3f: 0f:2b:54:94:20:e4:aa:ab:36:f6:0a:39:29:22:dd: 01:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:F4:B5:25:36:C9:43:B9:57:1F:7F:26:94:6B:FB:CE:D7:6E:D1:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/95037d37-41f0-3224-b20d-ed8abd26d1c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 144.25.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:e5:d5:76:ae:bd:26:3a:67:5a:18:99:f4:67:27:70:5b:d8: a5:ee:84:a7:ee:2c:95:de:83:be:23:b2:b8:88:1e:28:1a:83: 12:f1:2a:2e:db:6d:69:90:2a:b8:01:f5:ea:27:25:e4:ff:5f: 95:6b:02:2f:ec:51:21:57:bc:40:7f:8d:26:8f:65:de:89:70: af:fb:b4:4c:27:cf:17:36:ed:ba:95:20:54:29:d2:26:a5:12: 62:56:0f:e1:7a:30:ac:6a:bb:3d:b7:6e:b4:36:38:e2:20:ac: 27:9a:40:8c:2b:2e:d8:f8:29:77:94:e2:ca:ca:16:9a:ea:e6: 49:2e:27:77:b2:96:27:73:eb:90:9b:aa:9f:0e:3d:68:0c:fc: 51:07:77:2d:31:8d:e2:e7:c3:7a:9c:46:67:41:ba:4f:08:26: 7e:cb:e2:ab:35:b5:58:44:29:24:79:b8:b4:d8:2a:00:51:45: 5d:dd:8f:50:d2:a3:d3:af:ea:0b:1e:dc:6c:67:bf:48:f6:aa: 05:b7:02:ac:a2:ad:99:c8:62:88:94:79:63:6c:71:bf:91:f1: c6:96:60:b8:e3:5d:e6:77:ad:ba:fd:ab:a6:3c:5a:54:8e:25: be:59:dc:fc:b3:ad:52:66:00:dd:9c:0e:f1:bb:e8:d5:c5:ef: 5a:bf:6d:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJy3PgWEbWvuvu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk MzhiMjYzNDAtZDJhZC00MGUyLWExYjYtYmI5ZDhkZWU1NGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihsBgXqrs+JxVMOMtSw+QfUOzuS/0f4OD5F2 D64tbXvXud3ybFzO5GHuUui7VkoAhBPUGDNFDThvFhkpNJyhr0G4+VMsXyzdidB0 Y0aDqtjZv2SlULl0/844UyXiJ3JS8zrT1LetL5OQ6bBZogqtQVoDC5hlEEOrAPbc L72YP8S6PHFlfoi8et8TRPH+iqPZelff7nJpiGixA4iGMwUzTQ46SBl1VfW/DKJt cS/3auI24qQ+u2Uhje+4CR877RF3l/0W0ig8Q+4ygyduEW+fVVBtBiznQurBPc4j O18FJWQm3Mjv6d2+hMXUbiJMxT8PK1SUIOSqqzb2CjkpIt0B+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAX0tSU2yUO5Vx9/JpRr+87XbtGAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvOTUwMzdkMzctNDFmMC0z MjI0LWIyMGQtZWQ4YWJkMjZkMWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDkBlwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjl1XauvSY6Z1oYmfRnJ3Bb2KXuhKfuLJXeg74jsriIHigagxLxKi7b bWmQKrgB9eonJeT/X5VrAi/sUSFXvEB/jSaPZd6JcK/7tEwnzxc27bqVIFQp0ial EmJWD+F6MKxquz23brQ2OOIgrCeaQIwrLtj4KXeU4srKFprq5kkuJ3eylidz65Cb qp8OPWgM/FEHdy0xjeLnw3qcRmdBuk8IJn7L4qs1tVhEKSR5uLTYKgBRRV3dj1DS o9Ov6gse3Gxnv0j2qgW3AqyirZnIYoiUeWNscb+R8caWYLjjXeZ3rbr9q6Y8WlSO Jb5Z3PyzrVJmAN2cDvG76NXF71q/bUU= -----END CERTIFICATE-----Generated at Thu Feb 26 03:31:47 2026 by rpki-client