$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5608cb79-2be1-3f3e-8960-4cf32ae72adc.roa File: 5608cb79-2be1-3f3e-8960-4cf32ae72adc.roa (raw, json) Hash identifier: 2D2fq25DhTs5jEHZT6u0s0gZEQDWMw6NHOJQMOuGqtE= Subject key identifier: 5F:B8:B6:B5:38:A8:91:B6:65:FF:90:EE:C0:21:C3:2E:FA:C7:89:91 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE58B45E02C200E84E686C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5608cb79-2be1-3f3e-8960-4cf32ae72adc.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 24.4.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:b4:5e:02:c2:00:e8:4e:68:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=5804ed6a-8e67-4fb9-8bef-257314fee36d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a7:93:11:21:14:9e:3f:70:9a:ce:42:24:8b: 8e:d5:26:55:3d:f3:dc:02:1d:97:8a:76:8d:89:d3: ef:42:7b:20:26:7e:42:17:ad:59:f5:76:1b:bd:7d: ce:87:04:dd:3c:90:c5:60:57:a8:60:c0:ff:a8:a6: 32:fa:db:cb:66:ab:30:42:79:02:aa:c8:90:8a:d4: bf:4e:f2:d0:9b:61:dc:8f:e5:c2:04:ac:b4:fc:e2: 34:48:c8:2f:4c:6c:93:cc:de:0d:64:f8:8c:a6:41: 50:04:0d:9c:3b:48:fa:eb:ee:df:8e:40:c2:f2:51: 77:9d:c2:87:45:d0:c4:a7:2e:3e:b9:71:fa:a4:58: e8:8f:6c:3a:95:28:d8:70:9a:ac:bc:fd:00:ca:70: 77:a0:de:be:61:8e:a7:18:b9:00:8e:af:44:1b:cb: 78:4b:d7:d9:f5:e4:83:d9:dc:d4:d4:15:34:a5:28: 5c:22:52:89:5a:23:87:09:e7:cd:aa:49:bf:4b:85: 87:c0:cc:35:0a:5b:75:86:18:99:5e:e6:72:c0:f2: 78:bc:af:c8:55:1c:57:8c:c3:94:b0:d4:c6:03:5d: 4e:2c:a5:49:0e:2e:28:c2:2c:d4:06:59:6d:23:91: e7:a1:93:2e:0c:89:2a:65:92:47:ba:df:53:90:97: dd:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:B8:B6:B5:38:A8:91:B6:65:FF:90:EE:C0:21:C3:2E:FA:C7:89:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5608cb79-2be1-3f3e-8960-4cf32ae72adc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.4.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:c0:24:55:b6:e8:28:41:96:5f:82:b8:33:c9:91:41:6a:db: fe:8c:f4:11:4c:53:1a:a6:00:76:7e:1b:68:6b:4c:ce:51:5a: 77:3c:a5:9c:26:92:d6:5b:5a:1a:6d:21:91:45:06:4f:e4:43: d3:a2:18:c1:79:8a:24:97:5e:bb:de:3b:ff:69:aa:8f:45:25: 9d:d2:c6:9d:76:eb:73:96:68:14:28:f7:d4:fc:8a:79:9b:e2: 6e:d1:59:34:08:9a:be:38:b5:49:95:df:dc:e0:1b:16:9e:1d: 4f:d6:ee:f3:4b:bd:67:c1:37:14:65:f1:2f:81:2d:cd:2e:37: ae:f4:b9:4a:ae:fd:9d:bc:0d:32:f0:2e:f9:26:6f:09:da:96: c6:db:92:b0:ad:fd:dc:30:b8:78:ee:6c:41:3e:56:6e:6b:12: 9a:c8:bf:d9:a1:a6:a1:23:4d:7b:9e:3d:79:73:d2:3a:b9:47: cb:06:7d:52:1a:a4:9f:71:98:32:91:65:b5:52:e6:2b:c8:02: a0:1b:93:1b:0f:04:cd:73:0b:67:33:06:23:40:fd:2b:cb:18: 1d:db:43:54:35:29:11:da:65:1c:71:1f:66:98:d2:75:04:24: 48:1b:e4:ec:6f:f1:fe:1e:14:ef:13:92:2e:06:38:d7:ec:2b: ff:92:db:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWLReAsIA6E5obIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NTgwNGVkNmEtOGU2Ny00ZmI5LThiZWYtMjU3MzE0ZmVlMzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqeTESEUnj9wms5CJIuO1SZVPfPcAh2XinaN idPvQnsgJn5CF61Z9XYbvX3OhwTdPJDFYFeoYMD/qKYy+tvLZqswQnkCqsiQitS/ TvLQm2Hcj+XCBKy0/OI0SMgvTGyTzN4NZPiMpkFQBA2cO0j66+7fjkDC8lF3ncKH RdDEpy4+uXH6pFjoj2w6lSjYcJqsvP0AynB3oN6+YY6nGLkAjq9EG8t4S9fZ9eSD 2dzU1BU0pShcIlKJWiOHCefNqkm/S4WHwMw1Clt1hhiZXuZywPJ4vK/IVRxXjMOU sNTGA11OLKVJDi4owizUBlltI5HnoZMuDIkqZZJHut9TkJfdVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF+4trU4qJG2Zf+Q7sAhwy76x4mRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTYwOGNiNzktMmJlMS0z ZjNlLTg5NjAtNGNmMzJhZTcyYWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGAQUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjAJFW26ChBll+CuDPJkUFq2/6M9BFMUxqmAHZ+G2hrTM5RWnc8pZwm ktZbWhptIZFFBk/kQ9OiGMF5iiSXXrveO/9pqo9FJZ3Sxp1263OWaBQo99T8inmb 4m7RWTQImr44tUmV39zgGxaeHU/W7vNLvWfBNxRl8S+BLc0uN670uUqu/Z28DTLw LvkmbwnalsbbkrCt/dwwuHjubEE+Vm5rEprIv9mhpqEjTXuePXlz0jq5R8sGfVIa pJ9xmDKRZbVS5ivIAqAbkxsPBM1zC2czBiNA/SvLGB3bQ1Q1KRHaZRxxH2aY0nUE JEgb5Oxv8f4eFO8Tki4GONfsK/+S27g= -----END CERTIFICATE-----Generated at Sun Mar 1 18:43:30 2026 by rpki-client