$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0fd3a6ae-d038-3a74-ae58-dd1928bfc4b0.roa File: 0fd3a6ae-d038-3a74-ae58-dd1928bfc4b0.roa (raw, json) Hash identifier: 5+bX/b0QK1SN0ZoLKkm0lOtZUpPWyEuJ6FEbDi/f4OM= Subject key identifier: 67:5E:56:37:07:E8:1E:42:B4:DA:87:CA:28:E9:DB:2A:EC:4E:2E:02 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BC32BF58C13A899BE90400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0fd3a6ae-d038-3a74-ae58-dd1928bfc4b0.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 24.127.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:32:bf:58:c1:3a:89:9b:e9:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=2a68b192-db75-4548-801e-388512bd5685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f8:a6:f7:28:e6:2f:08:51:25:2d:0e:8a:1c: 22:72:63:25:d8:4c:0d:0d:18:e2:b8:af:a1:04:cc: 06:d6:96:e2:b5:65:a4:d9:30:90:3c:05:45:29:cc: fe:ba:16:63:44:41:75:04:83:d5:9c:4d:24:a9:a9: d2:60:18:79:48:d7:af:3f:dc:38:42:30:d0:fc:d8: ab:62:b5:0d:5e:73:d4:02:8b:90:9b:11:6a:a3:be: 08:1c:4e:e7:c8:46:27:f3:56:f2:4a:a6:4f:ab:d6: 2c:02:e2:95:62:c7:a5:a9:82:f6:23:73:b6:f3:41: fc:6e:6d:38:0b:f5:9a:04:6d:3f:4b:e8:64:60:a1: f6:a1:30:c1:ee:d9:84:6c:4d:6d:50:30:ea:04:d0: dd:6f:07:68:f6:a9:24:5e:79:56:ca:a8:d8:49:c0: 0d:b4:bb:02:ea:12:15:ba:bd:17:1c:1f:d9:fd:62: 02:7a:3f:d3:1d:d5:a1:d7:b2:76:73:05:63:48:8f: 03:45:2b:3b:6a:d6:24:02:b3:7f:ea:59:90:e1:e7: d8:0d:e7:eb:98:f2:eb:e3:7c:97:a9:e1:9b:4d:ef: d0:dd:4c:41:c1:b0:72:aa:00:d2:cb:c6:77:3e:04: d5:8e:53:fa:25:e0:56:c6:76:12:43:8c:bc:68:df: 39:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:5E:56:37:07:E8:1E:42:B4:DA:87:CA:28:E9:DB:2A:EC:4E:2E:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0fd3a6ae-d038-3a74-ae58-dd1928bfc4b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.127.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d5:48:c0:98:bb:53:67:d3:78:3c:16:ff:5a:91:24:9a:be:9f: 11:3d:de:08:d3:70:96:43:92:ba:93:fa:80:c1:95:38:1f:95: 53:c5:fb:7a:4d:32:d2:a1:13:91:a7:b8:33:cb:69:49:9e:09: a3:0e:4d:bf:98:5a:02:d7:b1:f1:c6:c7:96:fd:53:e4:e9:e7: 91:11:83:32:c1:47:e7:f6:49:b1:ec:0c:dd:8b:92:55:db:da: 8f:2b:24:a6:f6:9a:37:c1:63:16:00:16:fd:34:82:d7:c3:50: fd:50:ad:50:33:9b:61:0a:80:aa:28:f1:e4:10:75:36:d6:d7: 1d:1a:b4:b7:b7:4c:74:74:66:ae:fd:6f:8b:1c:4e:02:0a:dd: 58:88:95:94:0b:3c:c0:a2:a3:ab:2d:35:aa:4e:08:2a:6b:29: 71:25:a1:60:43:65:8a:ae:4c:34:1c:e8:e2:a2:df:72:0e:4a: f7:e2:38:2c:ae:0a:25:2a:75:4e:92:eb:82:7c:b4:87:33:65: 5e:33:00:3a:41:d0:34:43:c5:07:e2:5c:d0:74:10:5c:4b:24: 5c:16:11:1a:e5:6f:d3:fc:c9:41:67:b6:e6:0d:4c:6e:11:b3: e3:83:b5:d2:ef:cd:24:23:37:4b:96:b0:b5:9c:98:4b:c8:1b: 2f:9a:0d:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvDK/WME6iZvpBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MmE2OGIxOTItZGI3NS00NTQ4LTgwMWUtMzg4NTEyYmQ1Njg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvim9yjmLwhRJS0OihwicmMl2EwNDRjiuK+h BMwG1pbitWWk2TCQPAVFKcz+uhZjREF1BIPVnE0kqanSYBh5SNevP9w4QjDQ/Nir YrUNXnPUAouQmxFqo74IHE7nyEYn81bySqZPq9YsAuKVYselqYL2I3O280H8bm04 C/WaBG0/S+hkYKH2oTDB7tmEbE1tUDDqBNDdbwdo9qkkXnlWyqjYScANtLsC6hIV ur0XHB/Z/WICej/THdWh17J2cwVjSI8DRSs7atYkArN/6lmQ4efYDefrmPLr43yX qeGbTe/Q3UxBwbByqgDSy8Z3PgTVjlP6JeBWxnYSQ4y8aN85jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGdeVjcH6B5CtNqHyijp2yrsTi4CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGZkM2E2YWUtZDAzOC0z YTc0LWFlNTgtZGQxOTI4YmZjNGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGH/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANVIwJi7U2fTeDwW/1qRJJq+nxE93gjTcJZDkrqT+oDBlTgflVPF+3pN MtKhE5GnuDPLaUmeCaMOTb+YWgLXsfHGx5b9U+Tp55ERgzLBR+f2SbHsDN2LklXb 2o8rJKb2mjfBYxYAFv00gtfDUP1QrVAzm2EKgKoo8eQQdTbW1x0atLe3THR0Zq79 b4scTgIK3ViIlZQLPMCio6stNapOCCprKXEloWBDZYquTDQc6OKi33IOSvfiOCyu CiUqdU6S64J8tIczZV4zADpB0DRDxQfiXNB0EFxLJFwWERrlb9P8yUFntuYNTG4R s+ODtdLvzSQjN0uWsLWcmEvIGy+aDcc= -----END CERTIFICATE-----Generated at Fri Apr 17 10:50:02 2026 by rpki-client