$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dee5dac3-7abc-3ad2-9e45-71b4e3750f2e.roa File: dee5dac3-7abc-3ad2-9e45-71b4e3750f2e.roa (raw, json) Hash identifier: Jch9bHtmuaZSDESzxhana+FTSW7mwoIqtFdTnYJm4EA= Subject key identifier: 2B:A9:22:74:66:DF:AB:9C:DB:20:34:91:E3:38:6C:BE:10:92:DE:0E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BA4EE6AB118C40B7F68680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dee5dac3-7abc-3ad2-9e45-71b4e3750f2e.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33490 IP address blocks: 24.20.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:4e:e6:ab:11:8c:40:b7:f6:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=de40dd8c-3be4-41af-b6cd-a2b05339b61b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:30:f8:6c:29:74:01:81:87:d1:90:af:49:e8: 80:63:19:ac:22:8d:19:b9:eb:9e:ae:7d:a1:8c:35: d1:f2:28:be:d8:10:87:c6:f3:77:10:d0:0a:12:83: 5c:3c:51:f9:45:e5:e3:0f:f6:dd:6b:8d:a8:3b:8e: 84:d4:30:40:75:6a:63:cd:35:1b:cd:37:2b:6d:3b: bd:12:23:1c:f0:23:98:77:af:72:b7:08:d6:b9:54: 7b:5d:8b:e6:6d:4b:e3:f4:fc:b6:2d:85:20:3b:c1: 06:fb:21:61:0d:b2:95:18:c0:6a:20:26:01:bf:d2: 91:44:44:91:9d:fc:6f:6c:e2:39:2e:1e:54:cf:6f: ad:4d:5a:af:85:98:c2:46:db:3e:38:8d:97:10:a8: da:6a:8f:53:34:25:fa:8f:8b:4d:db:cb:9e:c6:6c: f6:6f:91:5b:e6:18:1a:c8:90:80:3c:7b:9b:10:a8: a1:61:d5:63:0f:0e:48:9f:c7:dd:f2:2c:ba:fa:77: 47:9c:b5:7e:2f:f3:35:44:62:c1:aa:37:6f:76:4b: 27:ce:7b:a0:d2:33:87:3b:fa:e9:8b:44:5e:d7:30: e0:43:23:0a:74:bd:98:99:8e:ea:a8:5c:12:12:b9: 6f:4f:cb:02:ae:e9:37:aa:f4:76:c7:b2:1d:03:2a: 2b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:A9:22:74:66:DF:AB:9C:DB:20:34:91:E3:38:6C:BE:10:92:DE:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dee5dac3-7abc-3ad2-9e45-71b4e3750f2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.20.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:02:bc:e7:11:26:eb:1a:1f:ec:21:8f:51:30:93:6a:6c:d0: 0d:0e:15:9d:47:72:b5:ec:75:1c:af:e8:3a:bb:75:86:3d:f5: 73:b2:c5:ac:58:4e:54:3e:da:5d:37:53:19:c3:b2:df:56:6d: c6:b7:65:7a:ba:33:78:4e:0b:17:0c:34:ae:8d:55:9e:00:34: 01:c0:f6:9d:af:6f:72:a7:26:92:80:03:c9:22:df:3e:44:23: 73:14:13:e2:48:aa:f3:2f:9b:79:a3:a4:22:91:d4:15:c4:87: 95:08:96:4f:dd:44:79:65:62:9c:48:07:15:0c:48:ed:9e:da: b5:fe:4c:99:e1:5b:50:af:24:df:a6:bf:fc:0a:da:7d:da:81: 96:6a:63:dc:29:a2:f6:5b:ee:6a:f7:fc:04:2e:66:83:84:35: 6c:9d:5c:f5:17:5a:14:75:84:9c:36:ec:a1:a0:5b:e2:ae:25: 9e:78:0d:1f:e1:fa:67:3e:eb:24:0a:a9:2e:b2:af:65:33:75: d1:d1:fa:d3:40:94:7b:07:52:e7:5c:5d:95:dc:f3:39:da:c3: 2e:4d:75:0c:d9:dd:9a:17:a6:83:4c:0e:36:b9:e9:28:63:bc: e9:c3:86:3c:a0:ae:c5:12:be:df:be:e2:d4:68:3a:b8:35:12: cf:91:e6:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vuk7mqxGMQLf2hoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk ZGU0MGRkOGMtM2JlNC00MWFmLWI2Y2QtYTJiMDUzMzliNjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+TD4bCl0AYGH0ZCvSeiAYxmsIo0Zueuern2h jDXR8ii+2BCHxvN3ENAKEoNcPFH5ReXjD/bda42oO46E1DBAdWpjzTUbzTcrbTu9 EiMc8COYd69ytwjWuVR7XYvmbUvj9Py2LYUgO8EG+yFhDbKVGMBqICYBv9KRRESR nfxvbOI5Lh5Uz2+tTVqvhZjCRts+OI2XEKjaao9TNCX6j4tN28uexmz2b5Fb5hga yJCAPHubEKihYdVjDw5In8fd8iy6+ndHnLV+L/M1RGLBqjdvdksnznug0jOHO/rp i0Re1zDgQyMKdL2YmY7qqFwSErlvT8sCruk3qvR2x7IdAyor1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCupInRm36uc2yA0keM4bL4Qkt4OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGVlNWRhYzMtN2FiYy0z YWQyLTllNDUtNzFiNGUzNzUwZjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGBTQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJwCvOcRJusaH+whj1Ewk2ps0A0OFZ1HcrXsdRyv6Dq7dYY99XOyxaxY TlQ+2l03UxnDst9Wbca3ZXq6M3hOCxcMNK6NVZ4ANAHA9p2vb3KnJpKAA8ki3z5E I3MUE+JIqvMvm3mjpCKR1BXEh5UIlk/dRHllYpxIBxUMSO2e2rX+TJnhW1CvJN+m v/wK2n3agZZqY9wpovZb7mr3/AQuZoOENWydXPUXWhR1hJw27KGgW+KuJZ54DR/h +mc+6yQKqS6yr2UzddHR+tNAlHsHUudcXZXc8znawy5NdQzZ3ZoXpoNMDja56Shj vOnDhjygrsUSvt++4tRoOrg1Es+R5pM= -----END CERTIFICATE-----Generated at Fri Apr 17 09:42:17 2026 by rpki-client