$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c72df34-a1b0-34c9-9d21-84933a5e0682.roa File: 1c72df34-a1b0-34c9-9d21-84933a5e0682.roa (raw, json) Hash identifier: bapwZdQCmiiKLpkbXl0uLDQYH9ZkBt4PBtndY3LzPPw= Subject key identifier: DD:2A:24:FE:8C:73:B1:05:48:12:35:0C:D8:2D:77:F1:40:7B:1D:8C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF85D089B8C541BD6AF5FC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c72df34-a1b0-34c9-9d21-84933a5e0682.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33651 IP address blocks: 24.5.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f8:5d:08:9b:8c:54:1b:d6:af:5f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=cd87a18c-b207-4ef8-a3b4-36cfa09c546d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:4c:5f:80:59:dc:d0:8b:d1:4d:33:22:9d:6c: 07:8f:97:c3:37:6f:79:28:0d:1c:a2:77:66:2c:86: 28:54:61:a1:83:c8:22:c5:6b:c2:b0:2f:12:6b:d3: ca:36:c8:2d:d9:c0:fe:df:d2:98:5c:1c:25:6e:79: d6:d4:f9:07:9d:8c:bd:66:d3:07:9c:ed:e7:48:6f: 76:2f:23:92:66:e4:4c:43:7e:6b:ac:c9:ef:a8:b2: fd:c7:7c:61:8d:de:5a:94:33:a0:ee:54:6e:6b:2c: 15:86:94:35:9a:5a:e1:c9:41:1f:dd:21:c3:4f:2b: 4e:66:bb:b2:93:e1:0a:15:32:51:3c:05:64:00:41: a0:4b:60:16:01:bc:65:bf:fd:d4:4d:5e:38:db:09: d9:a3:a6:71:ae:7e:60:7b:f1:50:fc:86:ed:2c:7b: b9:bd:6a:17:6f:22:c2:08:6c:9f:15:46:f9:2b:1c: 14:71:09:6d:99:e0:4f:12:ef:11:fe:c2:80:e5:f5: 33:5b:c2:cc:7d:dc:b0:22:b6:90:0a:94:a3:3d:84: f7:f1:cb:2f:be:a2:0d:9d:20:08:51:ff:b3:e1:01: 84:4a:c2:31:22:ec:e9:e8:0a:81:ba:f8:3d:f1:c4: 3c:5a:da:33:2c:94:58:ce:1d:3c:d6:b0:da:92:a5: 87:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:2A:24:FE:8C:73:B1:05:48:12:35:0C:D8:2D:77:F1:40:7B:1D:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c72df34-a1b0-34c9-9d21-84933a5e0682.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.5.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d7:37:49:e6:c0:6d:a5:c8:b1:98:d2:51:f4:2a:66:c4:52:d7: d3:8a:e4:ea:b9:cf:73:21:79:f9:39:78:36:a1:88:0d:4a:f9: 75:41:0a:94:35:d2:a1:50:e9:3c:63:ec:c7:68:c5:bc:e8:96: 71:af:94:ce:24:fc:db:35:97:b3:25:d9:92:09:f8:d3:8a:4f: 30:51:95:7b:0f:b4:ab:9e:39:2a:89:f4:51:74:84:ca:47:6c: 4d:6b:89:be:70:dd:4f:13:67:42:a4:c5:db:f9:bc:62:8f:ec: db:20:b0:61:72:fc:ef:04:38:db:c1:7b:f0:d0:34:43:ca:c0: 51:8c:00:ba:48:54:b7:0e:03:5c:ae:eb:20:23:19:96:1a:a7: b0:36:f4:59:ab:3b:68:9c:6b:97:a0:66:d2:81:ed:8e:51:40: 09:11:43:ee:e0:0a:7e:a4:e4:b9:67:6f:b4:3e:94:08:87:e8: 43:f1:1c:38:29:08:3d:f2:71:23:9f:8f:3b:d8:c8:a6:48:91: 44:83:88:fc:be:43:e5:9e:47:a5:f8:0a:98:ab:85:0b:21:77: 17:da:2d:e5:04:33:82:3a:74:25:89:99:4e:7c:7b:51:ad:a0: 73:a4:03:0d:5c:7d:16:f3:04:08:23:6a:c1:6b:6a:b4:fd:47: 18:dc:8e:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+F0Im4xUG9avX8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk Y2Q4N2ExOGMtYjIwNy00ZWY4LWEzYjQtMzZjZmEwOWM1NDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgExfgFnc0IvRTTMinWwHj5fDN295KA0condm LIYoVGGhg8gixWvCsC8Sa9PKNsgt2cD+39KYXBwlbnnW1PkHnYy9ZtMHnO3nSG92 LyOSZuRMQ35rrMnvqLL9x3xhjd5alDOg7lRuaywVhpQ1mlrhyUEf3SHDTytOZruy k+EKFTJRPAVkAEGgS2AWAbxlv/3UTV442wnZo6Zxrn5ge/FQ/IbtLHu5vWoXbyLC CGyfFUb5KxwUcQltmeBPEu8R/sKA5fUzW8LMfdywIraQCpSjPYT38csvvqINnSAI Uf+z4QGESsIxIuzp6AqBuvg98cQ8WtozLJRYzh081rDakqWHuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0qJP6Mc7EFSBI1DNgtd/FAex2MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWM3MmRmMzQtYTFiMC0z NGM5LTlkMjEtODQ5MzNhNWUwNjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGAWUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANc3SebAbaXIsZjSUfQqZsRS19OK5Oq5z3Mhefk5eDahiA1K+XVBCpQ1 0qFQ6Txj7MdoxbzolnGvlM4k/Ns1l7Ml2ZIJ+NOKTzBRlXsPtKueOSqJ9FF0hMpH bE1rib5w3U8TZ0Kkxdv5vGKP7NsgsGFy/O8EONvBe/DQNEPKwFGMALpIVLcOA1yu 6yAjGZYap7A29FmrO2ica5egZtKB7Y5RQAkRQ+7gCn6k5Llnb7Q+lAiH6EPxHDgp CD3ycSOfjzvYyKZIkUSDiPy+Q+WeR6X4CpirhQshdxfaLeUEM4I6dCWJmU58e1Gt oHOkAw1cfRbzBAgjasFrarT9RxjcjuY= -----END CERTIFICATE-----Generated at Tue Apr 21 23:01:11 2026 by rpki-client