$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8bc01ff-d1f2-31ab-8110-e597ad53b426.roa File: d8bc01ff-d1f2-31ab-8110-e597ad53b426.roa (raw, json) Hash identifier: bfjbubSh6SPVSo2RKANgfRs+T+szsXPEZuxQSgjqAlU= Subject key identifier: 9A:80:3B:04:D8:A4:7D:09:77:42:F4:D0:6E:6E:94:A5:E6:05:E8:B7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BA852EE28D306A4CDCFB00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8bc01ff-d1f2-31ab-8110-e597ad53b426.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7015 IP address blocks: 24.2.188.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:85:2e:e2:8d:30:6a:4c:dc:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=d58bf78a-16f9-421d-829d-2240b4abf8b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:be:7f:00:04:d8:c4:65:3c:9c:4e:44:34:6a: a1:c8:05:a6:37:77:59:43:60:89:fa:39:fd:9b:7b: c0:a2:b7:2a:dd:c3:f7:92:d5:f1:f6:93:e8:ee:89: 22:bb:23:85:84:9b:ac:f3:62:b1:f9:38:98:9f:f8: f6:20:3e:53:c2:6f:34:8f:30:18:5d:c5:e7:76:e8: 5d:9d:23:b4:e8:3a:d1:f3:2c:01:d4:82:ca:70:dd: c9:8b:2a:11:3d:89:f7:85:6d:0a:b3:b2:e6:ee:ec: 94:32:b0:30:27:6b:65:cf:6a:33:61:c0:26:f5:c7: 83:ee:e3:79:30:50:bd:5d:ef:2d:42:0c:17:4a:05: b6:f6:f2:cd:bb:db:8e:52:5e:d4:61:4e:06:08:84: 17:7e:d6:ee:64:90:cb:b5:7c:2d:9a:dc:f7:05:e9: 5a:30:5c:7f:4e:6e:d8:cd:17:b9:71:82:fe:20:b4: 09:7b:d0:aa:6c:1d:2e:7b:d8:d4:de:58:bc:a4:90: 83:e4:46:20:12:27:0a:55:c4:34:63:16:69:43:cb: b2:86:dc:5e:dc:4e:76:cd:1f:25:2e:e5:7e:51:86: ea:e4:52:dc:42:78:e4:36:ab:de:16:1e:82:44:90: 1d:48:3b:21:fc:8c:ee:5e:ff:d8:8e:f2:f7:3f:c0: ec:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:80:3B:04:D8:A4:7D:09:77:42:F4:D0:6E:6E:94:A5:E6:05:E8:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8bc01ff-d1f2-31ab-8110-e597ad53b426.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.2.188.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:e8:b1:a4:99:25:93:3b:d5:2d:f6:92:82:c1:36:90:ed:22: eb:0f:1a:bd:64:35:7f:96:3a:6b:31:8c:18:be:bd:67:d4:97: 5a:11:8c:dd:9a:d7:99:31:8c:92:fc:9c:4a:95:12:dd:f4:51: 0c:06:5e:b1:42:31:bf:f4:89:15:b6:eb:00:27:7f:55:db:3e: a5:9e:96:59:91:46:fd:07:15:a4:67:2a:37:6e:69:b7:b6:e2: 97:ee:30:82:40:d8:ff:74:29:97:08:88:73:2c:6a:08:59:da: 4e:19:fc:0b:64:c7:8f:a7:5a:d0:12:9b:20:0c:69:88:73:2a: fd:5a:9b:f8:b4:c2:fc:bb:a3:8c:77:fb:ea:27:86:cf:66:e6: cb:75:9c:03:c9:1e:67:a0:b2:49:70:1a:9a:c1:f3:e7:9a:f1: e0:76:51:9d:e7:61:fe:a4:e1:49:27:4f:ad:d8:b5:b5:a4:dc: 12:cd:a1:e5:b1:68:d7:7d:f6:48:41:35:b1:35:b6:c3:c1:62: 95:08:05:77:78:54:a8:27:34:10:21:4a:3e:d5:68:e1:a9:bd: 23:f7:4f:d2:a6:7d:4a:66:32:07:12:87:dc:27:ad:bf:49:23: 3a:c2:7d:13:3c:cb:79:09:27:a8:7a:63:f1:da:a4:93:28:77: dd:4a:b4:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VuoUu4o0wakzc+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk ZDU4YmY3OGEtMTZmOS00MjFkLTgyOWQtMjI0MGI0YWJmOGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmr5/AATYxGU8nE5ENGqhyAWmN3dZQ2CJ+jn9 m3vAorcq3cP3ktXx9pPo7okiuyOFhJus82Kx+TiYn/j2ID5Twm80jzAYXcXnduhd nSO06DrR8ywB1ILKcN3JiyoRPYn3hW0Ks7Lm7uyUMrAwJ2tlz2ozYcAm9ceD7uN5 MFC9Xe8tQgwXSgW29vLNu9uOUl7UYU4GCIQXftbuZJDLtXwtmtz3BelaMFx/Tm7Y zRe5cYL+ILQJe9CqbB0ue9jU3li8pJCD5EYgEicKVcQ0YxZpQ8uyhtxe3E52zR8l LuV+UYbq5FLcQnjkNqveFh6CRJAdSDsh/IzuXv/YjvL3P8DsGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJqAOwTYpH0Jd0L00G5ulKXmBei3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDhiYzAxZmYtZDFmMi0z MWFiLTgxMTAtZTU5N2FkNTNiNDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGAK8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALXosaSZJZM71S32koLBNpDtIusPGr1kNX+WOmsxjBi+vWfUl1oRjN2a 15kxjJL8nEqVEt30UQwGXrFCMb/0iRW26wAnf1XbPqWellmRRv0HFaRnKjduabe2 4pfuMIJA2P90KZcIiHMsaghZ2k4Z/Atkx4+nWtASmyAMaYhzKv1am/i0wvy7o4x3 ++onhs9m5st1nAPJHmegsklwGprB8+ea8eB2UZ3nYf6k4UknT63YtbWk3BLNoeWx aNd99khBNbE1tsPBYpUIBXd4VKgnNBAhSj7VaOGpvSP3T9KmfUpmMgcSh9wnrb9J IzrCfRM8y3kJJ6h6Y/HapJMod91KtEQ= -----END CERTIFICATE-----Generated at Fri Apr 17 07:32:47 2026 by rpki-client