$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2898bb5b-6428-371c-8548-715903918e9f.roa File: 2898bb5b-6428-371c-8548-715903918e9f.roa (raw, json) Hash identifier: boz9fmQwAWVZPHwvsKKGfQl9+Z9QY9g/vdg+HSlIdbw= Subject key identifier: 97:C7:77:FA:54:5C:7A:B7:A7:BD:0F:9D:1C:F4:F8:DB:2A:09:08:4F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BA4F2DA9AD0E197D8C2F00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2898bb5b-6428-371c-8548-715903918e9f.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33490 IP address blocks: 24.20.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:4f:2d:a9:ad:0e:19:7d:8c:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=a0420a7a-a8a1-4006-8cb3-ebd4c8bc0253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8c:92:ff:60:db:7b:b5:36:ec:9c:e8:83:ef: cf:ff:83:c7:3d:86:a2:4e:50:f6:a6:b0:60:bf:68: 06:65:a1:5e:f4:c2:3f:18:fd:06:dc:e0:10:55:b4: 04:c5:46:e9:3c:f6:b7:99:22:be:c6:aa:cb:3d:41: b7:89:8a:44:9c:de:fe:04:24:35:e8:1b:07:eb:71: 8d:0b:90:ad:a3:fd:4e:47:0a:c4:a6:ad:4f:05:e0: ba:25:ab:2a:9a:c1:d9:63:ee:ea:a7:9c:bd:c4:9a: e0:bd:34:51:80:20:c2:09:14:71:99:25:ac:5d:34: db:62:ef:79:a5:e9:ba:59:ac:7c:c5:25:5d:62:55: 7e:e6:58:be:2c:ce:95:b0:2a:31:c7:db:1b:c3:d2: 60:5e:d0:b7:44:f0:c4:4f:74:7d:4a:42:0c:19:b5: 0d:04:f9:32:6f:08:29:0b:b8:98:53:92:e0:c7:95: b5:cc:c1:a9:0f:aa:09:4a:bf:de:35:ae:ec:a7:12: 3a:38:51:87:e8:b5:ed:02:f7:70:13:57:be:df:73: 85:88:69:df:e8:dc:aa:3c:51:6e:bd:f6:46:0a:3f: 96:f1:01:0f:28:51:04:59:93:ea:61:81:57:50:37: 0d:21:8f:c9:53:ad:19:22:63:c6:c7:06:99:58:f7: dd:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:C7:77:FA:54:5C:7A:B7:A7:BD:0F:9D:1C:F4:F8:DB:2A:09:08:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2898bb5b-6428-371c-8548-715903918e9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.20.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:45:9f:d8:2e:d4:bd:83:ab:77:8b:69:5e:33:6a:e4:f3:b7: fc:d6:b3:62:78:ea:ca:34:cd:fa:19:c6:55:ee:17:3f:73:81: b4:54:ed:f2:f6:65:e1:0a:0a:1b:08:df:7f:78:a0:87:3c:8c: 00:66:e6:b7:23:9d:50:f9:ca:82:0c:de:bc:ef:d8:d1:43:5e: 15:72:51:f4:4e:d3:d3:60:f3:7f:7e:b7:52:55:18:e4:37:23: a7:86:7b:4e:3e:34:5a:ee:84:09:fe:05:8e:9f:2f:2c:ea:83: 21:c7:e2:df:e6:50:1d:ab:94:1c:26:e5:bf:1f:97:fb:68:d1: 29:81:4d:fb:10:df:8c:96:c0:fe:19:2c:33:0d:bd:18:06:46: 31:40:54:2f:57:7e:2a:8c:1d:26:fe:2d:d5:a3:99:3e:2e:f6: 04:ef:3f:74:1e:4d:25:e9:a0:3b:a6:96:5d:f3:c7:20:35:33: d3:b6:de:f4:e3:f1:fc:c5:b5:88:c1:89:ae:53:06:aa:af:27: b5:06:84:4e:6c:b9:7c:ed:7e:c7:cb:c6:8f:30:15:44:a4:2c: 6a:91:12:c9:99:90:b3:99:7d:c2:0a:c5:0f:01:8d:8b:3d:bf: 85:e3:45:0f:6c:bb:fe:b4:fd:86:15:fc:84:fe:03:31:ce:25: 5d:9f:2f:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vuk8tqa0OGX2MLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk YTA0MjBhN2EtYThhMS00MDA2LThjYjMtZWJkNGM4YmMwMjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIyS/2Dbe7U27Jzog+/P/4PHPYaiTlD2prBg v2gGZaFe9MI/GP0G3OAQVbQExUbpPPa3mSK+xqrLPUG3iYpEnN7+BCQ16BsH63GN C5Cto/1ORwrEpq1PBeC6JasqmsHZY+7qp5y9xJrgvTRRgCDCCRRxmSWsXTTbYu95 pem6Wax8xSVdYlV+5li+LM6VsCoxx9sbw9JgXtC3RPDET3R9SkIMGbUNBPkybwgp C7iYU5Lgx5W1zMGpD6oJSr/eNa7spxI6OFGH6LXtAvdwE1e+33OFiGnf6NyqPFFu vfZGCj+W8QEPKFEEWZPqYYFXUDcNIY/JU60ZImPGxwaZWPfdEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJfHd/pUXHq3p70PnRz0+NsqCQhPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjg5OGJiNWItNjQyOC0z NzFjLTg1NDgtNzE1OTAzOTE4ZTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGBToMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtFn9gu1L2Dq3eLaV4zauTzt/zWs2J46so0zfoZxlXuFz9zgbRU7fL2 ZeEKChsI3394oIc8jABm5rcjnVD5yoIM3rzv2NFDXhVyUfRO09Ng839+t1JVGOQ3 I6eGe04+NFruhAn+BY6fLyzqgyHH4t/mUB2rlBwm5b8fl/to0SmBTfsQ34yWwP4Z LDMNvRgGRjFAVC9XfiqMHSb+LdWjmT4u9gTvP3QeTSXpoDumll3zxyA1M9O23vTj 8fzFtYjBia5TBqqvJ7UGhE5suXztfsfLxo8wFUSkLGqREsmZkLOZfcIKxQ8BjYs9 v4XjRQ9su/60/YYV/IT+AzHOJV2fL4Y= -----END CERTIFICATE-----Generated at Fri Apr 17 18:28:16 2026 by rpki-client