$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f8772172-58a9-3910-9d29-74ae18de6e94.roa File: f8772172-58a9-3910-9d29-74ae18de6e94.roa (raw, json) Hash identifier: dYMwyStoTXHzglIDKMTrpPUICcmfbfMmeRU9AhpPwLY= Subject key identifier: 70:ED:52:B5:15:CD:F7:D6:9C:A7:0C:BA:DB:12:32:C8:31:26:9A:C1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BA82F1DE369DECFBC7D480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f8772172-58a9-3910-9d29-74ae18de6e94.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7015 IP address blocks: 24.2.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:82:f1:de:36:9d:ec:fb:c7:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=89b5b6b7-e6cf-4af9-9e6d-3adb034a6488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:32:a4:78:e2:dc:33:89:9e:53:67:60:04:b2: 23:30:34:bb:46:d2:ef:23:93:21:60:af:36:3f:43: 7f:d1:d5:e3:06:62:46:12:a5:4d:7b:7a:57:7a:04: 03:4a:26:25:77:d7:b2:05:bd:3a:24:08:55:5c:84: 48:27:03:20:32:52:c1:6b:4a:17:cc:b7:ba:71:f7: 2d:aa:bf:47:ee:4a:c8:8c:92:a6:f4:c9:e9:27:50: e7:4e:3c:f4:cb:9a:3e:06:ff:eb:43:98:82:7e:38: 9d:9e:71:eb:68:af:35:d2:2d:60:aa:db:ba:11:e1: a9:a1:ff:ad:cc:f0:f5:62:96:76:34:fc:b3:e2:19: 54:c8:a8:79:bd:57:a9:be:fb:67:fe:7c:1b:76:c7: be:7d:cd:c3:56:3c:f8:e0:13:01:8e:0d:c5:c7:41: d8:4f:17:80:db:8e:07:48:a2:54:c1:10:56:61:3c: 1a:8f:f8:95:1e:7d:07:0d:9b:3c:5b:5a:5d:ca:0b: 3a:5e:64:4c:7f:42:1b:0f:8c:06:0f:55:54:56:ae: 46:f0:f5:d5:a2:d8:33:92:c1:76:92:b1:09:65:ed: f0:63:e9:31:44:7a:b7:dd:03:ae:70:6b:b8:e5:e3: a1:99:81:18:8f:e2:aa:52:fc:d1:29:f7:b2:54:93: 7c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:ED:52:B5:15:CD:F7:D6:9C:A7:0C:BA:DB:12:32:C8:31:26:9A:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f8772172-58a9-3910-9d29-74ae18de6e94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.2.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:7f:66:c0:2f:f8:a5:bd:06:b7:54:e0:23:41:5d:9e:25:99: 81:fe:a0:7e:83:14:37:92:65:11:92:b4:ff:d5:f7:43:57:2c: 9f:ea:62:44:8d:af:2f:5a:b0:5e:65:5b:99:11:15:59:79:94: d9:80:74:f0:c2:0d:25:ec:02:3e:a3:64:1a:b1:70:f8:dd:83: b2:44:12:81:47:c4:6a:df:1b:be:98:c0:0d:e3:83:89:d7:0b: 29:ea:70:4c:ff:b9:e4:20:5f:96:a8:76:e4:04:f6:ff:5b:1b: 0f:e3:ce:7b:5d:f4:31:fd:37:8f:d9:58:8b:07:bb:6b:b1:1c: 1f:15:0e:90:8f:7e:14:40:83:47:48:76:3c:74:51:31:c4:d1: de:06:a5:9d:e1:0f:2b:6b:73:42:19:97:8a:d9:45:93:fe:ae: c9:21:41:bc:1a:34:3a:5e:7c:a3:16:ad:c2:f5:f3:8d:ee:b7: 68:8f:1e:c6:87:e0:66:ec:81:c1:e2:87:05:53:ef:14:0b:3a: 2e:df:fd:40:d3:e5:19:82:3f:ea:53:6a:8e:7c:0f:fd:6c:57: 7f:88:0c:e3:2a:41:fa:c4:16:4b:a2:9e:37:e6:35:ad:5e:e2: 12:e7:f7:54:09:16:aa:8a:75:86:9b:5c:8d:50:1c:c4:9c:be: 37:c7:0e:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VuoLx3jad7PvH1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk ODliNWI2YjctZTZjZi00YWY5LTllNmQtM2FkYjAzNGE2NDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjKkeOLcM4meU2dgBLIjMDS7RtLvI5MhYK82 P0N/0dXjBmJGEqVNe3pXegQDSiYld9eyBb06JAhVXIRIJwMgMlLBa0oXzLe6cfct qr9H7krIjJKm9MnpJ1DnTjz0y5o+Bv/rQ5iCfjidnnHraK810i1gqtu6EeGpof+t zPD1YpZ2NPyz4hlUyKh5vVepvvtn/nwbdse+fc3DVjz44BMBjg3Fx0HYTxeA244H SKJUwRBWYTwaj/iVHn0HDZs8W1pdygs6XmRMf0IbD4wGD1VUVq5G8PXVotgzksF2 krEJZe3wY+kxRHq33QOucGu45eOhmYEYj+KqUvzRKfeyVJN8YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHDtUrUVzffWnKcMutsSMsgxJprBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjg3NzIxNzItNThhOS0z OTEwLTlkMjktNzRhZTE4ZGU2ZTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGAKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADR/ZsAv+KW9BrdU4CNBXZ4lmYH+oH6DFDeSZRGStP/V90NXLJ/qYkSN ry9asF5lW5kRFVl5lNmAdPDCDSXsAj6jZBqxcPjdg7JEEoFHxGrfG76YwA3jg4nX CynqcEz/ueQgX5aoduQE9v9bGw/jzntd9DH9N4/ZWIsHu2uxHB8VDpCPfhRAg0dI djx0UTHE0d4GpZ3hDytrc0IZl4rZRZP+rskhQbwaNDpefKMWrcL1843ut2iPHsaH 4GbsgcHihwVT7xQLOi7f/UDT5RmCP+pTao58D/1sV3+IDOMqQfrEFkuinjfmNa1e 4hLn91QJFqqKdYabXI1QHMScvjfHDjw= -----END CERTIFICATE-----Generated at Sat Apr 18 08:54:37 2026 by rpki-client