$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2b9e8ce-79ed-3125-ac29-5d52bf9cbc64.roa File: b2b9e8ce-79ed-3125-ac29-5d52bf9cbc64.roa (raw, json) Hash identifier: nJTO14LmV1PrQYPSNqHZTUy0ZO8TrFMXmcIPxjLdeog= Subject key identifier: 16:84:CD:67:5B:28:BC:F3:5E:C3:D9:01:69:89:71:FD:EF:6F:D9:3F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BAFD35B52D0626FD425140 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2b9e8ce-79ed-3125-ac29-5d52bf9cbc64.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 24.127.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:fd:35:b5:2d:06:26:fd:42:51:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=86cacf7c-e074-4832-8a86-6e6fa36a181b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f2:e3:a9:b3:be:09:32:fe:bd:3b:e0:c2:e6: ea:e3:e9:c8:78:dd:04:22:cc:64:79:a3:2b:d0:f1: 49:f6:f9:42:70:c2:67:58:08:70:f1:e8:46:01:33: 12:c4:7a:79:39:27:45:a7:2b:09:91:1b:53:8c:82: c3:53:58:05:e5:0c:42:8b:af:f8:b9:a3:ea:a8:d5: 56:bb:e5:67:f7:e8:60:71:79:99:e4:2a:cd:e8:d3: cf:8e:71:e3:21:63:d6:14:c6:82:84:09:4b:e2:78: 4d:71:78:f4:0b:18:10:18:bf:dc:0e:35:99:ed:39: e4:64:0c:c0:61:08:b1:d3:6d:f0:65:63:9c:4a:0d: b8:14:30:48:4c:a1:0d:28:46:e4:19:63:d4:2f:d1: 24:43:66:4e:f3:71:ae:5b:86:23:64:ed:d7:28:02: 70:d9:fb:ab:a9:4a:70:25:a0:4a:c1:09:e1:c1:db: aa:84:00:77:fa:aa:f5:60:61:30:78:9d:c5:04:4c: 0c:ac:90:c1:28:7f:2b:78:08:a1:57:b0:29:05:be: dc:cb:73:b0:b2:65:36:60:77:16:ea:20:2b:61:7d: 82:fa:de:ab:06:8d:e6:cb:b7:fe:14:e0:74:66:54: b5:88:d2:a8:7b:cc:35:fd:f5:46:a9:0f:93:e8:c7: 7b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:84:CD:67:5B:28:BC:F3:5E:C3:D9:01:69:89:71:FD:EF:6F:D9:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2b9e8ce-79ed-3125-ac29-5d52bf9cbc64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.127.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:67:1e:e1:0d:79:45:51:7e:58:13:c2:95:86:ed:d7:af:45: 8c:e1:a0:97:bf:bf:5d:17:74:74:56:53:d1:ac:b3:3d:40:e0: 0b:64:de:a2:67:90:83:22:bd:74:60:9f:40:18:ce:11:ae:fe: 5c:19:30:5e:e4:36:81:34:ce:e9:13:02:ab:3b:51:f2:ac:39: 4f:8d:50:19:09:3a:8f:18:05:0d:8e:00:50:06:df:f2:69:f5: 15:55:66:fa:76:e4:72:fc:4f:a1:f0:ff:f7:5b:97:0d:32:20: ab:ef:9b:71:88:02:8e:31:c9:ba:bf:fc:a4:38:8d:5e:01:a2: 02:57:1a:76:c5:65:17:f9:1f:0c:7d:39:34:ad:02:4e:78:47: b6:fe:3b:22:c2:79:b4:f7:21:e4:ea:7c:25:55:8d:10:0d:aa: 19:e4:06:a6:8d:b2:36:85:69:b1:e5:0c:84:91:05:f4:7b:eb: 16:47:ab:2a:9b:99:56:45:5f:95:f7:d3:3c:2b:0f:dd:64:d3: 22:d6:44:b0:93:70:cd:ac:43:c0:3b:72:27:72:e8:99:df:72: 08:34:ab:eb:63:53:f2:5b:1b:72:c7:b1:12:28:c0:21:dc:ad: 8f:76:86:62:2c:7c:26:f2:e8:92:03:69:89:b7:bb:75:1a:5a: b0:64:88:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vuv01tS0GJv1CUUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk ODZjYWNmN2MtZTA3NC00ODMyLThhODYtNmU2ZmEzNmExODFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvLjqbO+CTL+vTvgwubq4+nIeN0EIsxkeaMr 0PFJ9vlCcMJnWAhw8ehGATMSxHp5OSdFpysJkRtTjILDU1gF5QxCi6/4uaPqqNVW u+Vn9+hgcXmZ5CrN6NPPjnHjIWPWFMaChAlL4nhNcXj0CxgQGL/cDjWZ7TnkZAzA YQix023wZWOcSg24FDBITKENKEbkGWPUL9EkQ2ZO83GuW4YjZO3XKAJw2furqUpw JaBKwQnhwduqhAB3+qr1YGEweJ3FBEwMrJDBKH8reAihV7ApBb7cy3OwsmU2YHcW 6iArYX2C+t6rBo3my7f+FOB0ZlS1iNKoe8w1/fVGqQ+T6Md7tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBaEzWdbKLzzXsPZAWmJcf3vb9k/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjJiOWU4Y2UtNzllZC0z MTI1LWFjMjktNWQ1MmJmOWNiYzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGH9EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJpnHuENeUVRflgTwpWG7devRYzhoJe/v10XdHRWU9Gssz1A4Atk3qJn kIMivXRgn0AYzhGu/lwZMF7kNoE0zukTAqs7UfKsOU+NUBkJOo8YBQ2OAFAG3/Jp 9RVVZvp25HL8T6Hw//dblw0yIKvvm3GIAo4xybq//KQ4jV4BogJXGnbFZRf5Hwx9 OTStAk54R7b+OyLCebT3IeTqfCVVjRANqhnkBqaNsjaFabHlDISRBfR76xZHqyqb mVZFX5X30zwrD91k0yLWRLCTcM2sQ8A7cidy6Jnfcgg0q+tjU/JbG3LHsRIowCHc rY92hmIsfCby6JIDaYm3u3UaWrBkiLs= -----END CERTIFICATE-----Generated at Fri Apr 17 12:57:32 2026 by rpki-client