$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/940c7241-c4e6-387a-9d11-af66850f56da.roa File: 940c7241-c4e6-387a-9d11-af66850f56da.roa (raw, json) Hash identifier: P6aDkPzahmzAGDh+ZFomR9cVCixBVoOWg2zAW7DB+3M= Subject key identifier: 32:DA:6B:20:A0:0D:69:F2:CC:A1:6C:C0:5F:EB:53:4B:79:20:EC:78 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584DDE866E7A4CBB9F41FC21D4E0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/940c7241-c4e6-387a-9d11-af66850f56da.roa Signing time: Mon 18 May 2026 01:00:24 +0000 ROA not before: Mon 18 May 2026 01:00:24 +0000 ROA not after: Sun 16 Aug 2026 01:00:24 +0000 asID: 13367 IP address blocks: 24.118.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:de:86:6e:7a:4c:bb:9f:41:fc:21:d4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 18 01:00:24 2026 GMT Not After : Aug 16 01:00:24 2026 GMT Subject: CN=fdbf3465-6444-4513-8039-544865338713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b0:46:ec:26:95:ff:a7:f6:70:d0:ed:a6:3d: cb:a9:ca:f8:19:3b:1f:5c:c7:bc:44:57:73:86:47: cb:5c:19:b3:12:f2:10:0b:54:d2:77:59:17:d8:8b: 74:ca:76:3f:a5:22:3a:0c:a4:6e:55:52:4d:c8:db: 0d:40:3a:78:55:c3:c7:4a:27:f8:c3:5c:3d:97:e3: 50:3e:5c:9b:70:7b:68:6e:9c:19:f2:81:9e:c4:d3: a7:df:46:76:4c:8d:5b:b5:f4:bb:86:94:93:0b:d6: d0:ec:3f:2d:b1:f8:69:24:ae:c7:c6:88:11:97:a8: e6:37:43:da:b9:4d:ef:8b:81:98:82:8c:96:71:19: f6:da:cd:3d:8f:28:50:18:45:c5:83:b2:6a:93:dc: d8:25:04:c4:7f:8c:12:e8:57:04:1c:e0:72:5e:d7: 1c:f3:1d:06:5a:df:66:ea:17:74:db:63:e0:ac:59: 19:f7:f6:46:2e:ce:fc:4e:22:69:a3:64:c5:53:13: d8:7e:2c:30:3d:fa:1e:57:cc:5e:c4:2c:47:71:82: 98:04:bd:ac:8b:17:79:e5:78:ac:f9:ce:05:a9:27: fd:6f:4a:c1:70:f0:d3:02:36:41:67:7b:e0:5e:00: 18:df:4c:20:fa:b3:1f:52:10:23:91:74:05:a3:80: f7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:DA:6B:20:A0:0D:69:F2:CC:A1:6C:C0:5F:EB:53:4B:79:20:EC:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/940c7241-c4e6-387a-9d11-af66850f56da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.118.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:db:e7:d5:6a:1d:86:4e:ef:fb:c7:5e:3d:70:d6:4b:c0:43: 9e:9e:69:e0:22:a6:81:e6:a5:0b:bb:26:fc:5d:c1:04:fa:42: 92:7e:68:bc:c4:13:a8:ce:65:3a:a8:11:06:fd:f4:96:c9:97: a3:d9:c6:60:31:bb:cb:89:cf:23:f7:7c:fa:e0:24:46:e1:c7: 07:c0:b6:8e:e6:a0:dc:10:9c:f0:2a:d8:30:ef:2c:22:a1:be: 0f:89:b1:0b:4f:ca:97:ec:2e:71:d8:66:25:7f:2f:d3:8e:d6: e7:eb:b1:bb:16:fc:04:c7:8a:d1:98:ab:f1:6a:de:31:72:49: ff:82:07:34:5e:5b:a9:d7:d1:4a:d9:21:fa:cd:03:e3:84:9f: f3:83:fe:b3:0f:a5:7b:89:f7:bd:f1:49:58:4d:b0:3c:59:30: a9:05:81:9b:33:92:7d:d4:8f:b4:3b:46:c4:ac:cb:ce:e1:00: f3:84:f4:c5:ec:0c:c7:79:fa:48:c4:fa:03:62:69:3f:ba:20: a5:0d:de:ac:b5:c9:94:7e:9f:4d:f0:44:95:35:e3:93:95:38: f4:3d:c3:69:64:ed:34:f5:60:00:88:d0:a4:03:5a:40:a4:54: f5:05:95:c2:23:db:34:49:14:13:37:05:a6:f4:87:93:85:7d: c5:4e:13:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3ehm56TLufQfwh1OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDUxODAxMDAyNFoXDTI2MDgxNjAxMDAyNFowLzEtMCsGA1UEAxMk ZmRiZjM0NjUtNjQ0NC00NTEzLTgwMzktNTQ0ODY1MzM4NzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLBG7CaV/6f2cNDtpj3Lqcr4GTsfXMe8RFdz hkfLXBmzEvIQC1TSd1kX2It0ynY/pSI6DKRuVVJNyNsNQDp4VcPHSif4w1w9l+NQ PlybcHtobpwZ8oGexNOn30Z2TI1btfS7hpSTC9bQ7D8tsfhpJK7HxogRl6jmN0Pa uU3vi4GYgoyWcRn22s09jyhQGEXFg7Jqk9zYJQTEf4wS6FcEHOByXtcc8x0GWt9m 6hd022PgrFkZ9/ZGLs78TiJpo2TFUxPYfiwwPfoeV8xexCxHcYKYBL2sixd55Xis +c4FqSf9b0rBcPDTAjZBZ3vgXgAY30wg+rMfUhAjkXQFo4D3lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLaayCgDWnyzKFswF/rU0t5IOx4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTQwYzcyNDEtYzRlNi0z ODdhLTlkMTEtYWY2Njg1MGY1NmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGHaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL/b59VqHYZO7/vHXj1w1kvAQ56eaeAipoHmpQu7JvxdwQT6QpJ+aLzE E6jOZTqoEQb99JbJl6PZxmAxu8uJzyP3fPrgJEbhxwfAto7moNwQnPAq2DDvLCKh vg+JsQtPypfsLnHYZiV/L9OO1ufrsbsW/ATHitGYq/Fq3jFySf+CBzReW6nX0UrZ IfrNA+OEn/OD/rMPpXuJ973xSVhNsDxZMKkFgZszkn3Uj7Q7RsSsy87hAPOE9MXs DMd5+kjE+gNiaT+6IKUN3qy1yZR+n03wRJU145OVOPQ9w2lk7TT1YACI0KQDWkCk VPUFlcIj2zRJFBM3Bab0h5OFfcVOE4A= -----END CERTIFICATE-----Generated at Sat Jun 13 18:26:48 2026 by rpki-client