$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac2f38b7-5e0b-3e00-a1b2-2fa51751a7e9.roa File: ac2f38b7-5e0b-3e00-a1b2-2fa51751a7e9.roa (raw, json) Hash identifier: P9MrEZ7vFmtBx96ZjWeEdluaOuYwlWUQcPevI4pdWS0= Subject key identifier: 20:90:30:F3:4B:1C:08:6D:D5:7A:93:B5:26:43:B8:6A:6C:5A:1F:0A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BA50ABD4FB05DDA1B596B0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac2f38b7-5e0b-3e00-a1b2-2fa51751a7e9.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33490 IP address blocks: 24.21.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:50:ab:d4:fb:05:dd:a1:b5:96:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=57ba2cce-b2c4-4f75-bfe9-3d57c5a3e63c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3b:5e:09:8e:0e:0d:61:4c:38:5d:03:ea:76: 50:06:0d:7f:9f:ca:b4:da:13:0f:90:d9:d9:b8:df: 6d:7a:76:b0:25:6a:b2:b3:02:a9:b1:e5:a8:3b:a7: 80:b7:dc:0a:ea:fd:8d:dc:9b:58:ae:79:d9:9f:1a: 98:e5:2b:13:4e:3a:e1:bb:94:d6:fc:e4:45:1f:43: b7:1a:a6:7e:1b:0d:a2:7c:7f:f5:39:9a:36:f4:0c: aa:60:6c:d8:8b:43:d4:0f:e3:4b:ef:e6:7d:ae:87: 06:b9:62:d9:f2:83:0b:c1:79:f6:c2:ae:c5:10:78: 2a:74:59:9c:74:0c:89:3f:d9:0a:5a:69:d3:71:68: 36:86:6f:3a:07:9a:4e:fb:35:4e:c9:3e:6a:1d:dc: 00:a0:be:74:08:15:1d:bb:74:f5:da:6a:0c:e6:97: df:5e:a9:13:b9:05:52:e8:5e:3b:44:58:03:4f:fc: 2f:9e:a9:39:e7:eb:7a:5d:f3:4e:33:8d:82:74:e5: 77:fb:e6:32:18:ae:c6:d6:3f:48:70:a5:b9:77:01: 8c:a9:c8:f5:53:c7:04:66:c5:0e:8e:2c:3c:61:20: 95:86:e9:6c:d9:6e:af:73:82:b6:15:0f:0d:73:b3: 38:2c:99:eb:4f:40:b3:d3:f1:4e:71:51:80:da:7d: 4d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:90:30:F3:4B:1C:08:6D:D5:7A:93:B5:26:43:B8:6A:6C:5A:1F:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac2f38b7-5e0b-3e00-a1b2-2fa51751a7e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.21.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:3a:97:94:5d:e7:82:dd:75:3e:4c:60:20:f7:05:3b:d3:77: c0:99:d5:4c:e8:34:1d:74:cf:69:35:ee:17:a9:46:99:32:52: 2c:06:04:31:5d:21:61:ac:7c:b6:a2:ff:92:ce:78:7c:68:67: ed:72:a9:98:97:46:ce:90:19:f0:9e:8d:2f:9e:4d:ac:a9:d4: aa:14:5c:70:4b:ed:c3:a5:a4:a0:b6:ee:20:39:c1:e6:28:fe: c6:ab:d2:93:ed:24:91:5c:e2:88:e7:fb:0f:9c:3a:05:10:92: 8f:86:8e:1e:3b:63:0d:4d:1c:e6:4c:1b:da:01:c4:62:c9:45: a2:01:b4:44:c6:71:3f:e8:66:6f:47:39:4a:f2:f7:0e:e9:01: af:57:6e:15:6b:36:cf:27:9b:1f:ad:72:67:bf:4b:50:f3:4b: 2c:ef:b3:e9:db:16:79:35:a1:3a:81:cf:35:64:46:73:7d:00: ef:01:ae:44:6c:f7:84:36:1b:e8:f0:ae:d9:35:07:db:39:b2: b5:62:0c:66:51:14:11:b4:b1:3c:51:f9:9f:8d:58:88:26:33: b4:7e:28:aa:3e:ac:77:33:2c:76:e9:d2:f8:6d:08:13:20:9e: cd:46:8f:42:0f:bb:6a:c8:db:6a:44:72:d1:9b:ad:e9:4a:52: db:46:a9:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VulCr1PsF3aG1lrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk NTdiYTJjY2UtYjJjNC00Zjc1LWJmZTktM2Q1N2M1YTNlNjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjteCY4ODWFMOF0D6nZQBg1/n8q02hMPkNnZ uN9tenawJWqyswKpseWoO6eAt9wK6v2N3JtYrnnZnxqY5SsTTjrhu5TW/ORFH0O3 GqZ+Gw2ifH/1OZo29AyqYGzYi0PUD+NL7+Z9rocGuWLZ8oMLwXn2wq7FEHgqdFmc dAyJP9kKWmnTcWg2hm86B5pO+zVOyT5qHdwAoL50CBUdu3T12moM5pffXqkTuQVS 6F47RFgDT/wvnqk55+t6XfNOM42CdOV3++YyGK7G1j9IcKW5dwGMqcj1U8cEZsUO jiw8YSCVhuls2W6vc4K2FQ8Nc7M4LJnrT0Cz0/FOcVGA2n1NmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCQMPNLHAht1XqTtSZDuGpsWh8KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWMyZjM4YjctNWUwYi0z ZTAwLWExYjItMmZhNTE3NTFhN2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGBWuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABA6l5Rd54LddT5MYCD3BTvTd8CZ1UzoNB10z2k17hepRpkyUiwGBDFd IWGsfLai/5LOeHxoZ+1yqZiXRs6QGfCejS+eTayp1KoUXHBL7cOlpKC27iA5weYo /sar0pPtJJFc4ojn+w+cOgUQko+Gjh47Yw1NHOZMG9oBxGLJRaIBtETGcT/oZm9H OUry9w7pAa9XbhVrNs8nmx+tcme/S1DzSyzvs+nbFnk1oTqBzzVkRnN9AO8BrkRs 94Q2G+jwrtk1B9s5srViDGZRFBG0sTxR+Z+NWIgmM7R+KKo+rHczLHbp0vhtCBMg ns1Gj0IPu2rI22pEctGbrelKUttGqcQ= -----END CERTIFICATE-----Generated at Fri Apr 17 01:27:54 2026 by rpki-client