$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/a29feace-471c-3bbd-813c-81620749951b.roa File: a29feace-471c-3bbd-813c-81620749951b.roa (raw, json) Hash identifier: Nro9mJ9Oo75EJa13Zhsu9aEzF2C406WUPVq0P80L+vA= Subject key identifier: 10:7A:78:F6:B7:64:38:20:2F:9A:E3:D0:57:7C:74:88:86:30:3D:79 Certificate issuer: /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Certificate serial: 010D0C9F4328584D143D7DB72EDA023A793CF450 Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/a29feace-471c-3bbd-813c-81620749951b.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 4213 IP address blocks: 97.64.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:7d:b7:2e:da:02:3a:79:3c:f4:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=89d6dfaf-df95-4bc0-a163-039193654c52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:61:8c:7b:05:d4:9e:54:b6:24:71:db:65:a3: 64:cd:41:9d:91:c9:d8:c8:f9:79:85:0b:bd:40:26: 55:c9:5c:f1:f4:36:96:aa:f1:94:dd:82:7b:7a:64: e5:9d:d5:54:bf:b3:68:86:da:58:26:59:ef:71:c4: fb:83:fc:de:61:10:9c:ef:df:5b:d6:47:08:dd:b4: 6d:e2:8a:9f:38:aa:bf:fa:cb:09:89:a0:fc:01:96: 18:f1:92:95:aa:5d:17:00:8b:07:6d:fc:e1:a1:3f: 2c:d4:df:bd:f2:2f:d0:27:a4:77:9b:1b:58:61:d4: 1a:bd:bb:e1:49:b8:30:aa:76:e2:f3:5f:91:b9:ef: c3:29:52:6b:38:d4:3c:f1:4e:5c:56:97:3e:07:57: ef:e3:11:69:97:2f:5b:4b:70:64:fd:2c:75:1c:dd: 8a:b2:c9:be:2f:21:5a:bb:05:1e:27:5b:9f:76:02: 92:6e:37:eb:01:77:8a:fc:9e:48:df:ef:c2:32:4a: 72:ff:9e:5f:62:4e:93:ec:cc:a6:00:3e:ec:29:91: d6:0e:40:45:cc:50:73:31:45:57:03:59:de:1e:b0: 0d:32:28:18:f6:93:27:ec:eb:25:eb:72:43:7f:7a: 2b:51:08:dc:61:44:3f:1e:a6:63:08:bc:ce:4b:de: a1:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:7A:78:F6:B7:64:38:20:2F:9A:E3:D0:57:7C:74:88:86:30:3D:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/a29feace-471c-3bbd-813c-81620749951b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl X509v3 Authority Key Identifier: keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer sbgp-ipAddrBlock: critical IPv4: 97.64.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:ae:f1:91:a7:fa:5f:0f:64:e8:dc:73:2f:c8:f5:4d:5d:ad: 7c:f9:50:7f:a1:b6:e3:b8:7b:34:7e:3b:d2:a4:9e:1f:43:08: 2c:5e:e4:83:7a:67:c6:35:e1:58:f7:11:e0:dd:69:1a:0c:be: 34:40:f3:75:1b:87:58:a6:d2:0f:f0:fa:a1:34:a3:ab:bb:59: a0:31:99:1a:80:3b:80:8d:58:23:34:a8:24:6b:77:cc:f4:4c: 42:b5:67:b0:4a:b8:c3:74:c8:70:12:c8:b9:2d:9c:69:38:c1: 07:f5:aa:97:2b:39:33:20:69:d1:49:13:20:d4:79:50:55:eb: f5:bf:f2:7d:aa:4c:b2:0a:95:b4:5e:94:94:46:18:31:4b:66: 1e:4d:37:e0:13:a1:bc:a4:ba:a2:0c:d1:5b:45:68:b8:6d:12: 09:2d:21:21:2a:41:48:8f:e7:01:72:9f:e6:02:f8:61:5c:a2: 0f:c6:fc:8f:20:6e:a3:6e:4f:8d:99:66:05:18:35:f7:e3:15: e7:ce:79:7d:44:84:92:09:f8:e0:9b:44:e2:df:9e:f6:ae:76: 50:b3:47:c1:dc:4a:73:2a:f0:2d:b5:06:53:f3:03:62:08:8d: b2:91:30:0b:e6:40:14:f5:5c:6b:67:69:9f:e2:d1:38:ef:4a: 75:fe:9b:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPX23LtoCOnk89FAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZTU2NTAtNTliNy00YWNiLWIwZGUtMGI0ZmJhYWYz ZWJmMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk ODlkNmRmYWYtZGY5NS00YmMwLWExNjMtMDM5MTkzNjU0YzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmGMewXUnlS2JHHbZaNkzUGdkcnYyPl5hQu9 QCZVyVzx9DaWqvGU3YJ7emTlndVUv7NohtpYJlnvccT7g/zeYRCc799b1kcI3bRt 4oqfOKq/+ssJiaD8AZYY8ZKVql0XAIsHbfzhoT8s1N+98i/QJ6R3mxtYYdQavbvh Sbgwqnbi81+Rue/DKVJrONQ88U5cVpc+B1fv4xFply9bS3Bk/Sx1HN2Kssm+LyFa uwUeJ1ufdgKSbjfrAXeK/J5I3+/CMkpy/55fYk6T7MymAD7sKZHWDkBFzFBzMUVX A1neHrANMigY9pMn7Osl63JDf3orUQjcYUQ/HqZjCLzOS96hIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBB6ePa3ZDggL5rj0Fd8dIiGMD15MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YzFl NTY1MC01OWI3LTRhY2ItYjBkZS0wYjRmYmFhZjNlYmYvYTI5ZmVhY2UtNDcxYy0z YmJkLTgxM2MtODE2MjA3NDk5NTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGMxZTU2NTAtNTliNy00YWNiLWIw ZGUtMGI0ZmJhYWYzZWJmLzRjMWU1NjUwLTU5YjctNGFjYi1iMGRlLTBiNGZiYWFm M2ViZi5jcmwwHwYDVR0jBBgwFoAU2CuWzcI45A4X+nr1FMJWYJ3ScdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YzFlNTY1MC01OWI3LTRhY2ItYjBkZS0wYjRm YmFhZjNlYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYUBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOu8ZGn+l8PZOjccy/I9U1drXz5UH+htuO4ezR+O9Kknh9DCCxe5IN6 Z8Y14Vj3EeDdaRoMvjRA83Ubh1im0g/w+qE0o6u7WaAxmRqAO4CNWCM0qCRrd8z0 TEK1Z7BKuMN0yHASyLktnGk4wQf1qpcrOTMgadFJEyDUeVBV6/W/8n2qTLIKlbRe lJRGGDFLZh5NN+ATobykuqIM0VtFaLhtEgktISEqQUiP5wFyn+YC+GFcog/G/I8g bqNuT42ZZgUYNffjFefOeX1EhJIJ+OCbROLfnvaudlCzR8HcSnMq8C21BlPzA2II jbKRMAvmQBT1XGtnaZ/i0TjvSnX+m54= -----END CERTIFICATE-----Generated at Thu Mar 26 18:19:29 2026 by rpki-client