$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af5d9687-b23e-350d-87f5-81e54c54f4c7.roa File: af5d9687-b23e-350d-87f5-81e54c54f4c7.roa (raw, json) Hash identifier: D3ZI5vNHP1BL/G2NUNBalMrmL3oAlCQLMsCE+S0dkxA= Subject key identifier: CB:05:DB:48:95:32:66:9E:5A:90:CE:55:8E:77:D1:B8:64:24:AD:0F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BC32785136F23B6E8FDE80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af5d9687-b23e-350d-87f5-81e54c54f4c7.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 24.127.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:32:78:51:36:f2:3b:6e:8f:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=fa43c10b-c3a6-44ed-bce1-5e4ac379a48a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f9:e5:eb:bb:41:b3:43:01:0a:68:44:e8:5d: 80:c2:0f:9a:e6:de:bb:5c:5d:87:41:ff:af:db:c5: ae:1c:52:f5:64:90:02:db:ba:43:61:4b:a6:a2:bf: 9d:d3:f1:ad:8f:e3:2d:3e:45:7c:25:0b:39:b5:24: 9c:16:16:57:d0:69:5e:f5:f9:49:79:0a:44:4a:bb: 7b:b7:7b:1b:1e:33:3c:b7:9c:40:4c:1c:2f:b9:c4: 7e:17:8f:ec:bc:d7:fc:6b:b6:c7:8e:5b:d9:58:8a: c7:34:37:1a:2e:63:80:ec:6b:61:ca:80:00:b0:c6: 1f:c6:c6:12:98:38:e7:e0:0a:d6:e1:a3:ba:a6:75: bb:ae:2e:80:04:8e:a6:f9:e1:2f:01:36:8a:9c:15: e5:f6:07:dd:ab:06:de:28:1d:82:a5:18:2c:9e:82: 78:03:1c:96:32:d2:d8:af:70:80:dc:43:3d:5e:58: f1:d0:a3:86:10:94:74:12:34:b7:34:9d:ac:7d:d3: ff:57:3a:f9:79:08:4a:92:e9:4e:60:bd:2e:df:13: 94:c3:64:be:56:b5:bb:55:c6:8d:4b:6f:27:d0:f5: 86:1c:50:ba:a7:e8:28:ed:5c:9a:c1:25:52:30:3d: b0:fc:91:e7:ff:38:46:1a:1e:36:c9:f1:c7:51:c6: a4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:05:DB:48:95:32:66:9E:5A:90:CE:55:8E:77:D1:B8:64:24:AD:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af5d9687-b23e-350d-87f5-81e54c54f4c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.127.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:ef:36:cd:85:56:53:77:78:24:80:20:3d:12:9e:bb:d1:3a: 26:da:20:90:7c:47:90:36:a5:0d:17:bd:b6:bf:43:99:d5:a9: 83:be:4c:ce:6a:ee:26:e8:6d:ed:ad:60:88:c0:5e:b1:b7:62: c8:e7:36:02:a4:b5:98:4a:8d:d7:fa:26:1c:76:cb:f9:ea:3a: 18:49:d4:fe:5a:01:84:02:ca:19:81:78:b0:d6:c9:66:4e:31: 53:e1:ec:39:c2:73:45:80:63:9d:d1:8f:18:40:92:32:80:ec: 6d:7c:8e:43:8a:84:8d:f0:27:e4:72:7f:98:1e:73:ff:b3:02: f3:63:56:ad:78:86:c5:06:c4:04:2f:58:c5:dd:65:58:37:38: 7b:e8:5c:c2:5c:09:f4:42:d8:bb:3c:84:27:87:4d:47:b2:83: 36:d2:fc:53:07:aa:c0:47:11:41:63:27:a9:74:6f:bb:b4:c7: 0a:f3:c3:1b:9f:c0:88:c2:aa:14:cc:d6:11:a1:95:ff:81:1c: b6:9f:85:f8:b3:4e:20:76:64:89:ef:b6:f6:d2:9e:b6:cf:08: 16:ff:8f:1d:84:3e:88:ee:b7:99:56:3b:62:e7:04:71:65:5d: 1d:d1:74:26:76:e2:70:c9:a2:dc:bc:9e:66:0c:eb:1e:2b:cf: 27:51:95:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvDJ4UTbyO26P3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk ZmE0M2MxMGItYzNhNi00NGVkLWJjZTEtNWU0YWMzNzlhNDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPnl67tBs0MBCmhE6F2Awg+a5t67XF2HQf+v 28WuHFL1ZJAC27pDYUumor+d0/Gtj+MtPkV8JQs5tSScFhZX0Gle9flJeQpESrt7 t3sbHjM8t5xATBwvucR+F4/svNf8a7bHjlvZWIrHNDcaLmOA7GthyoAAsMYfxsYS mDjn4ArW4aO6pnW7ri6ABI6m+eEvATaKnBXl9gfdqwbeKB2CpRgsnoJ4AxyWMtLY r3CA3EM9Xljx0KOGEJR0EjS3NJ2sfdP/Vzr5eQhKkulOYL0u3xOUw2S+VrW7VcaN S28n0PWGHFC6p+go7VyawSVSMD2w/JHn/zhGGh42yfHHUcakdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMsF20iVMmaeWpDOVY530bhkJK0PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWY1ZDk2ODctYjIzZS0z NTBkLTg3ZjUtODFlNTRjNTRmNGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGH+8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKzvNs2FVlN3eCSAID0SnrvROibaIJB8R5A2pQ0Xvba/Q5nVqYO+TM5q 7ibobe2tYIjAXrG3YsjnNgKktZhKjdf6Jhx2y/nqOhhJ1P5aAYQCyhmBeLDWyWZO MVPh7DnCc0WAY53RjxhAkjKA7G18jkOKhI3wJ+Ryf5gec/+zAvNjVq14hsUGxAQv WMXdZVg3OHvoXMJcCfRC2Ls8hCeHTUeygzbS/FMHqsBHEUFjJ6l0b7u0xwrzwxuf wIjCqhTM1hGhlf+BHLafhfizTiB2ZInvtvbSnrbPCBb/jx2EPojut5lWO2LnBHFl XR3RdCZ24nDJoty8nmYM6x4rzydRlfA= -----END CERTIFICATE-----Generated at Fri Apr 17 11:24:24 2026 by rpki-client