$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/83311e40-ab7f-3082-bb84-04c60f5a5389.roa File: 83311e40-ab7f-3082-bb84-04c60f5a5389.roa (raw, json) Hash identifier: T7nj5hPyPp3S1rhHt6JEwtNLymkQGD8YhMP6yuy/oOc= Subject key identifier: 49:B7:73:7E:69:7E:62:99:AF:41:5D:0C:F9:FB:F6:E3:EB:3B:9D:11 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BB886351B37DC8DF8E3980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/83311e40-ab7f-3082-bb84-04c60f5a5389.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33490 IP address blocks: 24.20.218.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:88:63:51:b3:7d:c8:df:8e:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=3f59236a-67e4-4a36-819e-c83e49bf3b20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:47:83:8a:ac:99:67:ed:a9:54:70:79:58:cb: 2f:31:eb:49:87:eb:05:ba:e3:c5:c3:d9:c2:4a:1b: 8d:82:cc:90:4d:7e:53:b3:f1:14:7c:15:48:3a:e1: 87:d8:68:55:9b:21:9f:32:46:99:17:ca:d9:ed:df: ee:84:9c:8f:cd:10:14:e0:fe:ff:a2:6b:b1:14:c9: 4a:14:3c:59:25:49:8c:29:4d:11:e7:ea:12:67:88: d8:b1:81:ea:c8:f4:10:ba:be:16:46:bb:21:d7:33: 0d:91:e1:db:91:0f:b8:2f:93:e7:30:54:1f:6b:6f: 8e:c0:5d:35:37:eb:57:90:5e:fe:b3:5c:05:3f:4c: df:ed:35:28:3b:47:b6:bd:e1:f6:6a:74:d5:06:b9: 28:ec:ff:a4:ab:68:54:f2:0c:59:46:cd:15:a1:11: 98:0d:75:c0:67:fe:f1:1d:2a:fa:c2:93:48:6f:dd: 43:af:05:a6:49:d5:fe:7f:f4:48:77:43:ed:3d:03: 09:c7:0a:0b:37:70:67:81:e8:f0:85:27:84:bc:76: 01:d8:1c:da:82:9c:b5:e1:64:52:3f:d4:33:ca:f5: cf:54:ea:33:82:f6:f5:cd:40:8b:ad:ae:55:5a:cd: e9:12:fb:d8:46:7f:e2:61:fb:67:89:46:34:94:4e: 3a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B7:73:7E:69:7E:62:99:AF:41:5D:0C:F9:FB:F6:E3:EB:3B:9D:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/83311e40-ab7f-3082-bb84-04c60f5a5389.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.20.218.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:58:c5:da:54:ef:94:79:96:4e:b8:25:51:62:d3:d8:37:66: fe:12:9b:bd:f0:f1:de:a9:ac:4d:99:1e:a3:3b:84:28:69:d4: fa:b7:08:d7:fb:49:fa:51:19:8b:73:76:6d:f3:ed:08:64:7d: 9a:7a:6b:52:c3:8e:ed:44:d6:e6:50:8c:73:63:40:61:02:72: ac:6a:15:ff:4f:fa:21:6b:bc:b2:1f:a1:f0:c0:a9:fe:bd:f9: d2:2f:4d:5a:42:33:0c:3f:71:ce:11:7b:51:d0:94:5f:84:c7: 0f:52:29:85:cb:31:10:be:f3:be:e0:46:e2:6f:75:d1:fa:f6: f1:ed:b9:07:57:df:35:bd:c1:d9:26:50:c8:b1:c3:4b:f0:9b: d4:c7:ae:4d:7a:7d:52:42:a4:57:52:0c:e6:77:4f:10:68:c1: 58:b6:34:a9:f1:28:c3:12:93:99:40:c4:f4:b4:36:78:dc:e3: cb:4c:33:96:a7:60:26:55:cb:04:93:0a:91:4d:d3:22:0e:23: b7:7f:be:7c:ac:61:d8:2f:87:db:3d:4c:69:5e:d1:c1:7e:d0: 3e:ff:59:b9:5b:ca:d6:ae:04:41:08:df:50:3e:ba:20:8b:c7: 8e:25:dd:9f:30:f0:8d:a5:5b:77:a3:86:35:28:25:07:db:a0: 83:b9:13:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vu4hjUbN9yN+OOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk M2Y1OTIzNmEtNjdlNC00YTM2LTgxOWUtYzgzZTQ5YmYzYjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikeDiqyZZ+2pVHB5WMsvMetJh+sFuuPFw9nC ShuNgsyQTX5Ts/EUfBVIOuGH2GhVmyGfMkaZF8rZ7d/uhJyPzRAU4P7/omuxFMlK FDxZJUmMKU0R5+oSZ4jYsYHqyPQQur4WRrsh1zMNkeHbkQ+4L5PnMFQfa2+OwF01 N+tXkF7+s1wFP0zf7TUoO0e2veH2anTVBrko7P+kq2hU8gxZRs0VoRGYDXXAZ/7x HSr6wpNIb91DrwWmSdX+f/RId0PtPQMJxwoLN3BngejwhSeEvHYB2Bzagpy14WRS P9QzyvXPVOozgvb1zUCLra5VWs3pEvvYRn/iYftniUY0lE467wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEm3c35pfmKZr0FdDPn79uPrO50RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODMzMTFlNDAtYWI3Zi0z MDgyLWJiODQtMDRjNjBmNWE1Mzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGBTaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALVYxdpU75R5lk64JVFi09g3Zv4Sm73w8d6prE2ZHqM7hChp1Pq3CNf7 SfpRGYtzdm3z7QhkfZp6a1LDju1E1uZQjHNjQGECcqxqFf9P+iFrvLIfofDAqf69 +dIvTVpCMww/cc4Re1HQlF+Exw9SKYXLMRC+877gRuJvddH69vHtuQdX3zW9wdkm UMixw0vwm9THrk16fVJCpFdSDOZ3TxBowVi2NKnxKMMSk5lAxPS0Nnjc48tMM5an YCZVywSTCpFN0yIOI7d/vnysYdgvh9s9TGle0cF+0D7/WblbytauBEEI31A+uiCL x44l3Z8w8I2lW3ejhjUoJQfboIO5E64= -----END CERTIFICATE-----Generated at Fri Apr 17 14:44:22 2026 by rpki-client