$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8972f577-6831-3abf-946a-ee7fac1200fe.roa File: 8972f577-6831-3abf-946a-ee7fac1200fe.roa (raw, json) Hash identifier: priAuKta6SJAjzpsQVbflWOeQO2Qi+LYwQyIzdHljBs= Subject key identifier: A4:34:5B:E3:82:EA:62:BE:11:2F:AF:2E:AB:00:9B:51:3B:1E:4E:4C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BAFDC816E31883E610E980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8972f577-6831-3abf-946a-ee7fac1200fe.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 24.128.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:fd:c8:16:e3:18:83:e6:10:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=b44c3864-2777-48c3-a9f0-8fd7cd6dacf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:cd:07:c8:5a:51:43:13:d4:f8:24:08:fd:1d: 5d:a6:0c:b1:5a:40:f7:df:fb:79:4e:ac:58:90:a6: ad:ce:fa:5d:df:ad:09:6f:ee:53:62:53:36:50:cf: a9:6f:41:6c:12:8e:bd:88:18:25:94:f4:5e:ca:92: 1c:15:71:48:3d:f2:62:68:de:e0:4f:b0:1b:ac:87: cf:2b:56:05:4e:1a:e2:ac:a3:b3:a1:4e:06:f2:42: 10:27:c5:01:6f:ea:30:64:f0:94:32:c1:f6:c7:60: c1:9b:f3:be:d4:a4:3c:5b:82:d7:c7:dc:09:7a:1e: fd:ca:a4:d4:59:ec:a9:83:e7:5c:af:23:b7:84:fe: 70:7b:e8:27:5e:9e:98:e1:bb:fc:85:06:f6:7c:a1: 64:66:9a:1f:5c:26:3e:ef:1d:f8:f6:37:e7:36:77: cb:8a:fb:cb:1f:9d:78:e7:fb:de:60:b3:31:0d:23: 38:28:55:5d:f1:39:19:e1:2b:25:85:22:9b:47:78: 81:96:76:e4:0c:ab:f4:5d:ac:65:31:06:22:f2:f9: 5f:4c:46:e1:72:65:26:f6:25:a4:78:da:5b:83:ea: cf:16:bf:f4:ff:e0:03:90:b3:68:e1:14:05:9e:2e: 28:a0:60:68:d5:b4:a1:fc:a3:82:4a:0d:9e:56:0e: 26:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:34:5B:E3:82:EA:62:BE:11:2F:AF:2E:AB:00:9B:51:3B:1E:4E:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8972f577-6831-3abf-946a-ee7fac1200fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.128.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:3f:79:1a:05:71:ec:d9:e9:c6:a2:3f:8d:55:23:08:17:54: 19:dd:5a:62:dd:00:75:28:ec:59:63:fa:ef:fc:9f:b9:17:9d: 70:63:95:68:29:e1:88:25:be:eb:10:4c:8d:25:27:a9:ee:3d: bb:a6:d4:65:9e:7d:c3:fa:65:6a:20:cc:33:8e:b5:d4:b9:96: a3:d0:44:df:76:98:0a:15:68:c8:e4:74:f9:db:3c:eb:03:a3: 89:10:4d:00:32:49:4a:15:06:00:02:94:02:a4:0c:58:49:90: f1:76:3c:73:9e:f9:47:25:3d:f2:9d:2d:01:5c:bf:bb:92:ec: 68:92:5a:72:6b:e8:cb:3c:84:94:f9:fa:19:b4:77:06:59:85: 1a:9c:a0:29:4d:05:93:0e:fc:8c:37:da:98:4e:9c:16:5e:9d: e9:ee:49:06:a1:55:98:e6:4b:7d:7f:5a:7b:1b:f0:d2:56:5f: 76:20:13:99:13:b9:ec:56:ba:21:7f:91:d6:48:bc:4e:2d:81: 67:45:20:ab:f8:f4:7e:28:3b:e7:7b:25:a0:af:9b:87:be:ce: 06:a5:f1:97:4f:17:0a:96:e4:4f:e5:0a:82:06:5b:67:3a:fd: 86:8d:c6:47:87:da:9f:31:40:56:75:26:26:33:e8:e5:6b:2d: 45:66:4c:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vuv3IFuMYg+YQ6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk YjQ0YzM4NjQtMjc3Ny00OGMzLWE5ZjAtOGZkN2NkNmRhY2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAis0HyFpRQxPU+CQI/R1dpgyxWkD33/t5TqxY kKatzvpd360Jb+5TYlM2UM+pb0FsEo69iBgllPReypIcFXFIPfJiaN7gT7AbrIfP K1YFThrirKOzoU4G8kIQJ8UBb+owZPCUMsH2x2DBm/O+1KQ8W4LXx9wJeh79yqTU Weypg+dcryO3hP5we+gnXp6Y4bv8hQb2fKFkZpofXCY+7x349jfnNnfLivvLH514 5/veYLMxDSM4KFVd8TkZ4SslhSKbR3iBlnbkDKv0XaxlMQYi8vlfTEbhcmUm9iWk eNpbg+rPFr/0/+ADkLNo4RQFni4ooGBo1bSh/KOCSg2eVg4mEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQ0W+OC6mK+ES+vLqsAm1E7Hk5MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODk3MmY1NzctNjgzMS0z YWJmLTk0NmEtZWU3ZmFjMTIwMGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGICEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABY/eRoFcezZ6caiP41VIwgXVBndWmLdAHUo7Flj+u/8n7kXnXBjlWgp 4YglvusQTI0lJ6nuPbum1GWefcP6ZWogzDOOtdS5lqPQRN92mAoVaMjkdPnbPOsD o4kQTQAySUoVBgAClAKkDFhJkPF2PHOe+UclPfKdLQFcv7uS7GiSWnJr6Ms8hJT5 +hm0dwZZhRqcoClNBZMO/Iw32phOnBZenenuSQahVZjmS31/Wnsb8NJWX3YgE5kT uexWuiF/kdZIvE4tgWdFIKv49H4oO+d7JaCvm4e+zgal8ZdPFwqW5E/lCoIGW2c6 /YaNxkeH2p8xQFZ1JiYz6OVrLUVmTGU= -----END CERTIFICATE-----Generated at Fri Apr 17 13:42:35 2026 by rpki-client