$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a81be0cb-6d21-3b52-83d1-cd520fc55862.roa File: a81be0cb-6d21-3b52-83d1-cd520fc55862.roa (raw, json) Hash identifier: f6Wd9AYk8L+rpl7QAK+PlAgOO6GKz08LLkS1Xvmv4zQ= Subject key identifier: C2:BE:19:B3:6C:D8:44:13:1B:7C:E3:EF:6A:12:59:6C:17:AC:6C:B3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BA4FDF7639B07BD4F65860 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a81be0cb-6d21-3b52-83d1-cd520fc55862.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33490 IP address blocks: 24.20.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:4f:df:76:39:b0:7b:d4:f6:58:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=efbdb92e-93de-4220-8be2-21071ee934b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:db:85:66:ec:56:59:42:88:fe:a1:09:80:9e: aa:66:1b:18:5e:85:39:31:d0:ed:46:ba:4c:7c:cc: ae:20:39:72:ec:1e:23:95:dc:b3:b7:eb:d6:13:ef: 25:8f:4a:3d:fb:c9:12:87:41:56:e1:1e:d8:50:0f: 54:b2:f2:86:41:a5:24:cd:b5:c5:23:33:22:51:8c: 28:03:4a:92:3d:5d:2e:e4:86:05:39:51:71:a5:be: ab:45:be:cb:00:10:cc:a9:11:0e:f7:f3:e0:74:c5: 4d:e3:34:93:fb:39:71:34:31:fd:74:fc:b7:d0:82: bc:8b:fb:9d:ea:92:ca:13:6c:bd:e5:b0:82:2f:7f: f8:94:fa:29:16:53:1e:ec:f9:eb:cd:b1:81:9c:e6: fa:3a:79:ef:9e:66:f8:01:7f:97:a3:59:f7:03:13: 31:d7:bc:0f:24:9d:cd:7c:ac:d2:eb:62:e5:f0:76: fe:7f:7f:a8:62:a1:9e:dc:79:8f:7e:d1:09:fa:7a: 10:7b:f1:f2:cf:ff:45:2e:68:7e:c4:48:8c:40:26: 6e:ee:33:fb:f8:50:43:88:2d:1d:ea:07:49:20:07: e7:62:e5:0e:60:99:a0:0b:b7:6a:b3:4e:dd:37:53: 5b:5c:ef:fe:58:5a:1c:c2:ab:7c:19:8d:e3:3d:6a: b4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:BE:19:B3:6C:D8:44:13:1B:7C:E3:EF:6A:12:59:6C:17:AC:6C:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a81be0cb-6d21-3b52-83d1-cd520fc55862.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.20.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:95:4d:96:81:d3:cd:c0:2d:93:7a:8a:64:64:59:d1:dc:91: 0d:ea:56:3a:18:12:df:5a:e9:f8:16:5d:14:23:68:91:2f:19: 06:d4:23:1f:92:ed:f5:4f:08:6c:a1:2b:59:99:fe:94:04:61: a8:64:c9:0c:fc:e0:35:f3:54:23:df:d7:2f:96:23:5c:67:e7: 83:80:a9:47:d0:b0:19:60:09:65:5b:a5:29:24:bf:d0:96:a6: 88:53:a1:f8:43:0c:f1:b6:85:0d:30:ac:c3:34:2b:3e:30:53: de:4d:bc:30:28:f4:83:f6:ca:0b:92:15:d6:ad:72:fb:8b:36: 95:68:23:42:49:e1:ad:8d:3a:9f:4c:e6:f1:24:7e:4e:aa:59: ef:9c:6e:39:7f:76:06:3b:7e:dc:5b:2f:e7:57:f5:ff:00:1b: ad:6a:70:f0:14:0f:11:e6:4b:1c:e9:dd:e2:dd:8c:11:0e:36: 8f:0b:c1:b4:4b:7c:92:78:c2:f3:82:d0:38:55:44:51:71:34: 4c:0c:bf:f4:0a:cd:55:90:a0:70:7b:73:b3:cb:1e:41:3d:ea: e6:1f:9d:42:0e:6a:f5:c4:f1:be:64:8c:47:a2:fd:f7:8f:28: 3f:9f:5e:08:a9:7a:0f:c7:eb:a7:a5:c0:5e:06:b7:5d:0e:05: 5e:38:f5:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vuk/fdjmwe9T2WGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk ZWZiZGI5MmUtOTNkZS00MjIwLThiZTItMjEwNzFlZTkzNGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoduFZuxWWUKI/qEJgJ6qZhsYXoU5MdDtRrpM fMyuIDly7B4jldyzt+vWE+8lj0o9+8kSh0FW4R7YUA9UsvKGQaUkzbXFIzMiUYwo A0qSPV0u5IYFOVFxpb6rRb7LABDMqREO9/PgdMVN4zST+zlxNDH9dPy30IK8i/ud 6pLKE2y95bCCL3/4lPopFlMe7PnrzbGBnOb6Onnvnmb4AX+Xo1n3AxMx17wPJJ3N fKzS62Ll8Hb+f3+oYqGe3HmPftEJ+noQe/Hyz/9FLmh+xEiMQCZu7jP7+FBDiC0d 6gdJIAfnYuUOYJmgC7dqs07dN1NbXO/+WFocwqt8GY3jPWq0kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMK+GbNs2EQTG3zj72oSWWwXrGyzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTgxYmUwY2ItNmQyMS0z YjUyLTgzZDEtY2Q1MjBmYzU1ODYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGBRgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKVTZaB083ALZN6imRkWdHckQ3qVjoYEt9a6fgWXRQjaJEvGQbUIx+S 7fVPCGyhK1mZ/pQEYahkyQz84DXzVCPf1y+WI1xn54OAqUfQsBlgCWVbpSkkv9CW pohTofhDDPG2hQ0wrMM0Kz4wU95NvDAo9IP2yguSFdatcvuLNpVoI0JJ4a2NOp9M 5vEkfk6qWe+cbjl/dgY7ftxbL+dX9f8AG61qcPAUDxHmSxzp3eLdjBEONo8LwbRL fJJ4wvOC0DhVRFFxNEwMv/QKzVWQoHB7c7PLHkE96uYfnUIOavXE8b5kjEei/feP KD+fXgipeg/H66elwF4Gt10OBV449dA= -----END CERTIFICATE-----Generated at Fri Apr 17 11:46:15 2026 by rpki-client