$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d35993c-ae03-3e00-b5d1-75e836d1e5c8.roa File: 1d35993c-ae03-3e00-b5d1-75e836d1e5c8.roa (raw, json) Hash identifier: 0e6702SO6QMUlxj3X5dYhBIMdX8KEw/MUZX9SlY+AMY= Subject key identifier: 18:61:D0:52:20:DC:2C:32:AF:31:CB:FB:75:FC:3B:9E:CD:9C:C8:29 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF6097D2FEB56A0FCA46280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d35993c-ae03-3e00-b5d1-75e836d1e5c8.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 24.1.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:09:7d:2f:eb:56:a0:fc:a4:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=ad0ffb42-a92b-421f-9752-f8c448c7b52c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:da:85:ec:d2:19:bc:ed:07:b2:71:66:6f:a7: 31:2e:03:56:c0:76:9c:19:a7:4a:d5:72:17:ad:28: a1:a7:c8:55:5b:70:67:9e:48:79:31:da:68:58:a4: 09:ac:fd:c4:cb:0f:54:75:2d:89:ed:37:38:3f:f2: 8e:6d:b1:26:84:07:db:85:16:78:5c:ce:76:21:1e: 78:16:2c:5c:6b:8b:4a:bf:fe:c4:97:67:df:03:c6: 41:d5:47:09:23:a5:8e:e5:b1:eb:18:29:9e:91:19: 7c:c9:57:e2:da:10:fa:95:22:b0:8c:1f:bb:d3:1b: dd:2e:f0:02:fe:a1:3c:80:aa:d5:84:75:d2:00:4d: b3:8b:c3:a5:e0:06:7a:c4:94:74:6b:3c:21:1b:bd: 1f:00:b2:35:ad:d6:10:81:87:7a:73:d5:9b:a4:74: da:fe:47:29:48:5b:3a:94:d0:2d:22:e0:02:92:f4: 0d:b8:20:68:af:9c:63:c2:79:ea:37:06:73:d8:86: 42:c8:b5:df:b8:fb:52:7d:8a:51:c7:80:6c:97:53: a3:32:10:8f:83:b4:de:f1:b2:96:5c:b0:91:84:6e: 03:b6:9e:8c:78:ec:f9:5a:1e:c8:3f:7d:4b:7b:e7: ab:2a:86:fa:c3:95:fd:db:bb:c8:8d:2d:07:66:2f: e8:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:61:D0:52:20:DC:2C:32:AF:31:CB:FB:75:FC:3B:9E:CD:9C:C8:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d35993c-ae03-3e00-b5d1-75e836d1e5c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.1.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:c2:8d:aa:41:95:a7:48:a3:bd:df:22:c5:63:4f:a3:63:49: da:95:c7:22:10:60:5b:2e:16:b2:cc:af:59:08:95:64:e2:34: 67:0c:09:ed:52:ce:15:f2:d3:35:e9:ea:3d:61:34:57:5e:fc: a9:5c:f6:b6:b5:52:57:b7:d7:7a:22:48:ea:b5:12:02:36:01: 66:f6:1c:21:46:67:a9:5b:6e:18:47:db:a3:7b:cb:9b:1e:c9: 3d:72:12:e7:b4:c7:77:f7:ea:3e:a4:fb:6c:c0:fe:5b:6d:b3: 47:7b:e4:63:9e:d4:79:f0:81:35:1a:3a:e1:99:ad:e2:c7:43: 61:6f:02:fe:04:45:81:ca:41:7c:61:4d:a5:e7:82:7f:6c:15: 9c:8d:26:41:29:7b:55:8e:e4:91:34:54:6a:7d:0c:07:6c:b5: e2:21:05:d7:83:d0:c3:bd:09:d4:65:1b:37:c7:e8:44:25:73: ba:96:f2:26:3a:8e:d2:c8:4c:c1:ea:71:f8:0d:1a:87:0d:f5: f6:50:5d:08:2b:88:fe:15:01:ce:1d:59:2b:31:85:89:79:d2: 44:f5:24:77:36:79:d3:bd:ef:fe:24:7c:39:cb:bd:99:df:7b: 2a:2a:03:1a:e4:48:8d:c1:3f:69:64:20:d1:33:3c:11:09:0a: 08:1e:3e:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9gl9L+tWoPykYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk YWQwZmZiNDItYTkyYi00MjFmLTk3NTItZjhjNDQ4YzdiNTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNqF7NIZvO0HsnFmb6cxLgNWwHacGadK1XIX rSihp8hVW3Bnnkh5MdpoWKQJrP3Eyw9UdS2J7Tc4P/KObbEmhAfbhRZ4XM52IR54 Fixca4tKv/7El2ffA8ZB1UcJI6WO5bHrGCmekRl8yVfi2hD6lSKwjB+70xvdLvAC /qE8gKrVhHXSAE2zi8Ol4AZ6xJR0azwhG70fALI1rdYQgYd6c9WbpHTa/kcpSFs6 lNAtIuACkvQNuCBor5xjwnnqNwZz2IZCyLXfuPtSfYpRx4Bsl1OjMhCPg7Te8bKW XLCRhG4Dtp6MeOz5Wh7IP31Le+erKob6w5X927vIjS0HZi/o3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBhh0FIg3CwyrzHL+3X8O57NnMgpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWQzNTk5M2MtYWUwMy0z ZTAwLWI1ZDEtNzVlODM2ZDFlNWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGAGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETCjapBladIo73fIsVjT6NjSdqVxyIQYFsuFrLMr1kIlWTiNGcMCe1S zhXy0zXp6j1hNFde/Klc9ra1Ule313oiSOq1EgI2AWb2HCFGZ6lbbhhH26N7y5se yT1yEue0x3f36j6k+2zA/ltts0d75GOe1HnwgTUaOuGZreLHQ2FvAv4ERYHKQXxh TaXngn9sFZyNJkEpe1WO5JE0VGp9DAdsteIhBdeD0MO9CdRlGzfH6EQlc7qW8iY6 jtLITMHqcfgNGocN9fZQXQgriP4VAc4dWSsxhYl50kT1JHc2edO97/4kfDnLvZnf eyoqAxrkSI3BP2lkINEzPBEJCggePlE= -----END CERTIFICATE-----Generated at Tue Apr 21 20:23:30 2026 by rpki-client