$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c70e57c-508a-3503-9b76-14a19610fe1e.roa File: 5c70e57c-508a-3503-9b76-14a19610fe1e.roa (raw, json) Hash identifier: VcH0YO/RnUyCA33lq0HYKD/I73JlCClcS5MJbaGKPL8= Subject key identifier: F1:50:50:5F:3B:E2:97:AF:5C:4D:BF:E8:89:F0:04:08:FA:E6:0F:4D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BA50B7C232C46DA4A32780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c70e57c-508a-3503-9b76-14a19610fe1e.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33490 IP address blocks: 24.21.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:50:b7:c2:32:c4:6d:a4:a3:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=7cae42e9-a0a2-407c-a53c-800983b4c200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d8:d1:b3:6b:1e:f5:1d:9e:4a:e2:66:9e:de: 9e:d1:ea:2c:b8:2f:ef:f9:12:08:e9:15:a9:5a:20: ff:8a:3a:f7:7b:a2:54:ed:56:60:2f:35:c0:c4:4d: 84:d6:bf:aa:82:68:12:2d:0f:4d:53:37:27:8a:65: 9e:8f:12:2b:c9:c1:10:29:9f:d2:a1:93:2f:1f:d8: 4e:4b:50:2d:42:d0:f4:fb:02:4e:70:eb:09:08:b9: 4f:0e:d3:f4:74:56:be:ff:08:5e:21:3a:37:65:cc: ff:18:c8:bc:99:a7:b0:2f:fc:ce:ad:c1:98:d0:4e: f1:87:19:46:0a:64:4d:0f:8c:11:93:71:95:23:fd: b6:5d:45:5f:96:6f:cc:9a:e4:3b:c1:41:89:7d:10: ec:d0:37:d9:bf:bd:b8:53:d8:8a:56:f2:72:be:62: ef:5f:20:cc:83:b1:4f:b0:c9:3f:87:64:a5:86:2b: 98:1e:27:6c:d0:a2:5f:93:1e:96:6f:b3:15:98:6a: f0:a3:4a:32:15:39:25:2c:cf:44:e6:6a:3f:4c:af: dd:87:bc:9f:1f:37:73:35:fb:ba:6a:72:73:af:2f: ee:80:48:00:77:4e:93:8f:41:b8:f2:44:dd:16:e7: 31:83:90:76:ac:17:e1:48:2d:1a:1b:29:10:be:ed: 0a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:50:50:5F:3B:E2:97:AF:5C:4D:BF:E8:89:F0:04:08:FA:E6:0F:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c70e57c-508a-3503-9b76-14a19610fe1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.21.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:15:ee:0d:ee:7f:9f:e3:a2:b0:62:75:50:2a:77:4c:f2:d0: d7:d4:f1:d6:fa:f0:dd:c1:0b:83:5f:66:84:fe:66:cb:98:82: fc:86:a3:2e:8b:cd:8e:0f:d1:a1:b6:58:a1:12:f5:64:15:0b: 78:5d:ff:3a:ab:b9:c1:b6:2f:88:dc:eb:c2:b0:6b:2e:51:e3: 82:d1:21:37:39:4a:80:9b:4b:57:62:6e:86:1d:d8:3a:30:81: 38:a8:9e:c2:72:1b:71:85:dd:e0:46:b6:78:92:28:0c:b2:c3: ad:66:44:0e:0c:0f:d3:94:cf:3e:1a:01:98:ab:ff:82:a5:7e: 39:d8:9c:b7:ea:11:67:78:ea:71:1a:fa:00:3f:0d:6b:3e:ae: 20:d1:ec:c0:0e:90:4d:bd:00:f7:71:a9:2d:f2:1f:fc:a9:68: fe:00:b5:97:f1:56:6a:dc:af:96:d6:14:8c:ca:5d:68:6b:5f: c1:25:79:9a:6e:d2:5f:f0:35:3a:87:9d:09:da:96:06:6e:23: 50:d5:1d:9e:81:58:73:f0:fb:33:fd:e9:dd:5c:15:89:62:46: 22:ca:93:73:a5:91:d1:98:49:77:0c:c5:b7:5c:ce:d7:0e:b2: 93:bb:60:43:62:09:8d:96:ad:84:62:3a:18:1c:3e:47:a8:e9: fd:3f:f9:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VulC3wjLEbaSjJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk N2NhZTQyZTktYTBhMi00MDdjLWE1M2MtODAwOTgzYjRjMjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19jRs2se9R2eSuJmnt6e0eosuC/v+RII6RWp WiD/ijr3e6JU7VZgLzXAxE2E1r+qgmgSLQ9NUzcnimWejxIrycEQKZ/SoZMvH9hO S1AtQtD0+wJOcOsJCLlPDtP0dFa+/wheITo3Zcz/GMi8maewL/zOrcGY0E7xhxlG CmRND4wRk3GVI/22XUVflm/MmuQ7wUGJfRDs0DfZv724U9iKVvJyvmLvXyDMg7FP sMk/h2SlhiuYHids0KJfkx6Wb7MVmGrwo0oyFTklLM9E5mo/TK/dh7yfHzdzNfu6 anJzry/ugEgAd06Tj0G48kTdFucxg5B2rBfhSC0aGykQvu0KuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFQUF874pevXE2/6InwBAj65g9NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWM3MGU1N2MtNTA4YS0z NTAzLTliNzYtMTRhMTk2MTBmZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGBWwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0V7g3uf5/jorBidVAqd0zy0NfU8db68N3BC4NfZoT+ZsuYgvyGoy6L zY4P0aG2WKES9WQVC3hd/zqrucG2L4jc68Kway5R44LRITc5SoCbS1diboYd2Dow gTionsJyG3GF3eBGtniSKAyyw61mRA4MD9OUzz4aAZir/4KlfjnYnLfqEWd46nEa +gA/DWs+riDR7MAOkE29APdxqS3yH/ypaP4AtZfxVmrcr5bWFIzKXWhrX8EleZpu 0l/wNTqHnQnalgZuI1DVHZ6BWHPw+zP96d1cFYliRiLKk3OlkdGYSXcMxbdcztcO spO7YENiCY2WrYRiOhgcPkeo6f0/+Tw= -----END CERTIFICATE-----Generated at Fri Apr 17 14:45:38 2026 by rpki-client