$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de845bc8-3bda-3439-be43-f04bbf722e9b.roa File: de845bc8-3bda-3439-be43-f04bbf722e9b.roa (raw, json) Hash identifier: prPXx/neBr87BZrD/ROqhhhzKghMoB6cdO6OC/jVPPo= Subject key identifier: 83:5C:C6:2A:94:85:27:99:29:F2:90:B9:21:54:23:C5:5F:FE:91:A0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BAFEF7211DF2EE8F432380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de845bc8-3bda-3439-be43-f04bbf722e9b.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 24.128.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:fe:f7:21:1d:f2:ee:8f:43:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=606527c0-da49-49c1-ad09-454c945212c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:eb:ef:ca:2a:d8:c2:6a:99:a9:ff:7d:19:6c: 3c:a2:c8:26:1c:54:57:b4:ea:51:69:fa:11:bc:45: 22:fe:26:21:31:c8:e3:90:c4:bb:b9:ae:af:07:c3: eb:61:50:f0:24:dd:29:89:8a:16:9f:bc:36:09:99: a4:ad:67:15:5c:96:08:0b:36:b8:4c:1d:45:82:1f: be:e0:a3:8b:dd:cd:5b:b3:14:2b:21:fd:a3:a9:e9: f6:71:e1:74:fc:38:23:81:f0:a9:52:03:73:ad:ed: 76:fa:d7:db:a9:00:71:18:62:a9:18:b6:f4:aa:eb: ca:19:92:d1:94:86:d7:54:fd:ed:18:6b:23:f9:11: 82:00:b5:b2:07:d2:50:c8:f7:89:12:1a:48:f1:1f: d6:63:55:2c:5b:d2:a9:81:f3:cb:af:5f:7a:f7:ee: e3:ec:9c:1a:2e:88:0d:80:72:a4:17:ba:ff:11:74: 84:50:78:af:a5:6b:fc:e2:91:83:a8:f4:67:23:92: 6a:9e:4c:ee:6b:b4:a0:be:60:ae:ee:33:1b:f5:53: f9:0a:2c:fd:86:38:80:af:9f:87:89:a9:40:dc:cd: 76:de:d2:54:9b:fe:4e:81:5c:0b:ba:08:49:78:fc: 9e:3f:e7:a7:b1:22:31:a4:e6:bf:fc:f4:e2:fe:c9: 09:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:5C:C6:2A:94:85:27:99:29:F2:90:B9:21:54:23:C5:5F:FE:91:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de845bc8-3bda-3439-be43-f04bbf722e9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.128.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:f7:0d:c2:85:26:ba:07:a5:de:ad:bd:43:82:d7:6c:34:b1: a6:7e:ed:7b:29:58:e8:a8:7b:c8:e1:08:64:f0:b6:2a:67:45: b8:a3:8b:8b:71:e1:e4:bf:cd:da:d1:32:57:71:99:c3:10:f7: f8:7d:91:fc:3c:4c:06:7d:2b:e0:f1:ac:f9:af:b8:1d:00:fc: c3:b3:37:45:be:c2:a8:ea:db:c1:93:f4:8a:cc:29:61:60:5d: cf:90:d0:3f:20:d6:49:c7:bf:ef:d3:c8:85:f8:69:e7:88:70: 1f:99:f9:bb:e6:c0:bf:f1:c1:d8:5b:61:10:b2:12:73:ed:f1: f3:53:0d:69:1c:43:23:5e:67:f0:7e:24:44:36:f6:f2:01:bd: a7:49:18:28:b2:e7:10:e5:eb:cf:33:ef:bb:ed:22:cb:47:be: d6:2a:3c:d1:50:18:00:88:09:bd:3f:df:77:d9:fe:33:dc:de: 6e:35:11:84:d6:e1:41:5e:ed:30:bf:20:b4:7d:6b:4c:ca:56: f2:dd:40:10:ec:d2:06:97:f8:d3:66:f7:d1:41:69:30:72:93: c3:8b:ce:53:ce:0e:95:74:0c:63:62:96:f4:e5:84:c8:5f:c3: 0b:82:52:f2:ec:e9:12:bb:02:b2:e6:91:07:b7:61:2b:53:69: 19:55:06:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vuv73IR3y7o9DI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk NjA2NTI3YzAtZGE0OS00OWMxLWFkMDktNDU0Yzk0NTIxMmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuvvyirYwmqZqf99GWw8osgmHFRXtOpRafoR vEUi/iYhMcjjkMS7ua6vB8PrYVDwJN0piYoWn7w2CZmkrWcVXJYICza4TB1Fgh++ 4KOL3c1bsxQrIf2jqen2ceF0/DgjgfCpUgNzre12+tfbqQBxGGKpGLb0quvKGZLR lIbXVP3tGGsj+RGCALWyB9JQyPeJEhpI8R/WY1UsW9KpgfPLr1969+7j7JwaLogN gHKkF7r/EXSEUHivpWv84pGDqPRnI5Jqnkzua7SgvmCu7jMb9VP5Ciz9hjiAr5+H ialA3M123tJUm/5OgVwLughJePyeP+ensSIxpOa//PTi/skJ9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFINcxiqUhSeZKfKQuSFUI8Vf/pGgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGU4NDViYzgtM2JkYS0z NDM5LWJlNDMtZjA0YmJmNzIyZTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGIDIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACz3DcKFJroHpd6tvUOC12w0saZ+7XspWOioe8jhCGTwtipnRbiji4tx 4eS/zdrRMldxmcMQ9/h9kfw8TAZ9K+DxrPmvuB0A/MOzN0W+wqjq28GT9IrMKWFg Xc+Q0D8g1knHv+/TyIX4aeeIcB+Z+bvmwL/xwdhbYRCyEnPt8fNTDWkcQyNeZ/B+ JEQ29vIBvadJGCiy5xDl688z77vtIstHvtYqPNFQGACICb0/33fZ/jPc3m41EYTW 4UFe7TC/ILR9a0zKVvLdQBDs0gaX+NNm99FBaTByk8OLzlPODpV0DGNilvTlhMhf wwuCUvLs6RK7ArLmkQe3YStTaRlVBtw= -----END CERTIFICATE-----Generated at Fri Apr 17 14:46:32 2026 by rpki-client