$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/abac5b99-a0df-3c9a-b10f-4d7e02693d92.roa File: abac5b99-a0df-3c9a-b10f-4d7e02693d92.roa (raw, json) Hash identifier: 5SYsvuDifz9lIDlQ/YsARNkajx3/drvAQv1dKPhdNRI= Subject key identifier: 09:B3:64:3B:B8:16:A0:53:F4:82:38:5C:21:AD:E9:50:F1:24:C0:ED Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BA51147D9F318EAAE94780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/abac5b99-a0df-3c9a-b10f-4d7e02693d92.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33490 IP address blocks: 24.21.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:51:14:7d:9f:31:8e:aa:e9:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=1ff01f76-f785-4d28-9c4d-8972addf6fba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:3e:20:fa:39:d6:65:3b:81:c4:2a:d4:97:06: 0d:21:b3:54:58:01:df:d2:60:7e:34:a1:b8:dd:9f: 7d:94:45:bb:c0:b8:44:21:bf:9e:b9:35:a4:8d:61: 37:ff:e0:74:0f:32:7f:8c:2d:5d:10:3e:fe:8b:54: 47:d7:40:d4:40:e2:ca:a1:be:2c:dc:e3:06:5b:90: 3f:41:e7:bd:bf:f0:18:73:62:57:56:85:63:52:41: 94:e8:66:ea:a2:bd:c6:8f:da:06:11:b5:9c:1e:43: 70:2f:a6:85:51:1c:3e:2b:59:8f:79:5f:38:3b:1e: 47:25:b5:02:ee:79:86:33:f6:22:61:b8:ae:cd:81: d1:dd:bf:94:85:85:cd:83:41:82:99:b1:39:ab:ec: ec:38:fd:1d:55:c5:7d:9f:2c:45:f4:9d:f5:7e:01: d9:f7:28:87:59:6f:78:0c:4f:3a:ab:04:65:86:64: ea:8e:9f:5c:b4:f7:d3:9a:7b:93:f0:b8:0a:01:da: 17:ea:fa:5a:98:04:aa:a8:26:5f:ec:ed:7c:65:3d: 90:14:88:24:e8:e9:d4:a9:43:72:2b:c2:9a:91:b3: 8e:9a:d1:91:e7:60:49:b4:91:c6:9b:ca:f8:b6:e7: 95:4d:65:59:84:1a:1f:2c:b6:53:72:45:48:39:40: c3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B3:64:3B:B8:16:A0:53:F4:82:38:5C:21:AD:E9:50:F1:24:C0:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/abac5b99-a0df-3c9a-b10f-4d7e02693d92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.21.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:3c:4a:9f:66:21:55:12:fa:d7:ce:93:a8:35:b3:f1:0f:72: 76:7d:3d:30:f7:08:cd:97:c8:8c:b5:c3:bb:42:c1:b7:d0:44: 33:57:b5:73:cc:e5:31:7c:38:bc:55:e4:55:a4:b8:8e:be:d8: 10:90:98:c2:54:64:51:eb:44:b9:e1:45:0e:aa:05:cd:ba:49: 56:7d:c1:31:1a:7a:32:21:53:19:c0:ef:ba:de:1b:89:12:65: 3e:b3:99:7d:d6:d5:13:8e:3e:cc:e5:89:44:6c:e8:23:fd:a1: 6f:8d:a1:a5:df:81:2e:bd:1a:8d:34:b5:3a:89:34:8e:b3:c5: 21:e0:33:3c:93:23:70:d8:fc:18:82:24:cb:e5:d5:50:86:ce: 42:84:07:74:10:9b:d4:9f:c6:30:2f:f4:68:ff:9c:74:2d:0b: f2:cf:41:f0:97:91:bc:23:5b:2e:d2:86:b5:ee:e6:ce:01:a4: be:19:ca:b3:53:d7:59:f2:02:ba:73:c0:54:2c:2c:82:ec:8c: d8:29:10:ea:21:9a:52:b8:67:84:64:9d:c4:3b:3d:af:ec:87: e5:84:52:31:13:bc:58:1b:40:bc:98:45:45:d8:f2:1b:83:ef: 8f:d7:41:fd:57:50:c7:d7:37:89:d7:24:1f:c1:cd:65:1b:4f: 0f:c0:10:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VulEUfZ8xjqrpR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MWZmMDFmNzYtZjc4NS00ZDI4LTljNGQtODk3MmFkZGY2ZmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6j4g+jnWZTuBxCrUlwYNIbNUWAHf0mB+NKG4 3Z99lEW7wLhEIb+euTWkjWE3/+B0DzJ/jC1dED7+i1RH10DUQOLKob4s3OMGW5A/ Qee9v/AYc2JXVoVjUkGU6Gbqor3Gj9oGEbWcHkNwL6aFURw+K1mPeV84Ox5HJbUC 7nmGM/YiYbiuzYHR3b+UhYXNg0GCmbE5q+zsOP0dVcV9nyxF9J31fgHZ9yiHWW94 DE86qwRlhmTqjp9ctPfTmnuT8LgKAdoX6vpamASqqCZf7O18ZT2QFIgk6OnUqUNy K8KakbOOmtGR52BJtJHGm8r4tueVTWVZhBofLLZTckVIOUDDFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAmzZDu4FqBT9II4XCGt6VDxJMDtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWJhYzViOTktYTBkZi0z YzlhLWIxMGYtNGQ3ZTAyNjkzZDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGBUUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKY8Sp9mIVUS+tfOk6g1s/EPcnZ9PTD3CM2XyIy1w7tCwbfQRDNXtXPM 5TF8OLxV5FWkuI6+2BCQmMJUZFHrRLnhRQ6qBc26SVZ9wTEaejIhUxnA77reG4kS ZT6zmX3W1ROOPszliURs6CP9oW+NoaXfgS69Go00tTqJNI6zxSHgMzyTI3DY/BiC JMvl1VCGzkKEB3QQm9SfxjAv9Gj/nHQtC/LPQfCXkbwjWy7ShrXu5s4BpL4ZyrNT 11nyArpzwFQsLILsjNgpEOohmlK4Z4RkncQ7Pa/sh+WEUjETvFgbQLyYRUXY8huD 74/XQf1XUMfXN4nXJB/BzWUbTw/AEFI= -----END CERTIFICATE-----Generated at Fri Apr 17 13:00:13 2026 by rpki-client