$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21e5251c-d5d7-32cb-b0e1-05008cee925d.roa File: 21e5251c-d5d7-32cb-b0e1-05008cee925d.roa (raw, json) Hash identifier: mlTXCZCnKcgl1Ua4ivK91O2TqgW+EB5XN0j2qY7N0bI= Subject key identifier: 7C:AB:63:B9:A4:1C:B3:E6:E1:40:C5:0B:D0:FB:E1:C2:E8:AB:80:F7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF6A37B538C67371DAEC600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21e5251c-d5d7-32cb-b0e1-05008cee925d.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33651 IP address blocks: 24.6.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:a3:7b:53:8c:67:37:1d:ae:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=4e92d769-8b40-43fa-83f8-da8f1590a22b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f0:8a:d8:c2:b4:2a:57:02:48:91:81:45:6f: 43:29:69:e9:ea:1b:71:1c:c8:21:ac:fd:6a:b4:49: 55:34:7a:99:e0:d3:24:fc:75:4a:4d:19:eb:fe:92: 8f:ae:66:a1:4d:0f:cf:37:d1:13:53:28:01:f5:53: ad:eb:1b:21:7b:17:d9:b2:64:3c:33:6a:7d:66:4a: 3b:58:81:ef:d0:1a:14:62:d3:69:e7:61:52:cf:84: b7:fd:98:d0:43:bc:fe:78:4f:b0:7d:de:27:f1:ae: f9:4c:a2:c4:ed:7c:9e:77:bf:8a:74:5e:20:1b:f1: dc:20:62:86:ad:7d:03:24:b0:b8:9e:19:87:e9:74: 13:89:12:23:3d:a2:d5:73:7f:3b:a1:0b:90:63:4d: bf:2a:da:5b:54:5f:e6:d2:13:27:ad:b8:8a:34:e7: 8d:3a:3c:c5:24:47:ee:b2:8f:1f:c5:62:42:5d:d3: f0:a5:56:ad:3f:91:97:eb:0e:0f:d2:ff:2f:eb:06: 37:c1:54:58:65:fb:a4:f3:dc:49:07:01:31:c3:99: f5:48:54:ae:57:b8:a2:3f:2d:a3:52:b9:fd:bf:61: 9c:e4:e2:e4:8f:99:89:64:13:d6:95:21:be:18:18: 30:f6:0f:bd:dc:a2:af:b2:8c:e4:e6:cb:27:3b:6a: dd:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:AB:63:B9:A4:1C:B3:E6:E1:40:C5:0B:D0:FB:E1:C2:E8:AB:80:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21e5251c-d5d7-32cb-b0e1-05008cee925d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.6.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:98:e1:43:10:15:7b:60:fd:2f:7e:75:f3:c9:4e:56:13:78: f6:fd:19:38:08:90:31:71:44:92:1f:c9:e6:5f:4d:23:81:ab: f9:67:2e:b3:36:99:2a:b1:14:8c:0a:28:5e:ec:87:17:bd:40: 58:72:77:18:d2:ea:ed:82:c1:1b:cd:3a:f6:60:9e:f3:31:c5: 86:ea:33:3d:a4:ce:d7:1d:b9:59:88:78:ca:e2:e2:83:8a:86: d1:7e:ba:62:3e:e5:47:1f:77:2c:64:18:12:26:7e:27:8a:e7: 4e:6f:ac:fc:ce:35:f1:bd:3e:b3:ba:50:f7:ec:f0:c9:0c:66: 31:51:69:5c:19:79:df:be:91:d5:6b:01:30:14:c0:58:5f:02: 47:b3:43:dd:63:be:f7:99:f4:24:a3:0e:57:6d:8c:17:a7:b1: 8e:6c:68:3e:02:49:19:b4:b3:29:45:ba:15:64:b3:10:69:69: ba:b3:71:5a:f0:67:a5:db:5b:6d:d0:6b:5b:58:99:ae:79:9c: 6a:d5:17:74:9d:7e:97:19:3d:00:ed:82:fd:57:eb:67:ed:46: f2:2e:07:6b:a3:3f:6b:63:45:d6:dd:4f:f0:03:9e:67:4c:86: 72:00:ef:f7:8c:d3:7c:dc:87:70:32:95:e5:4c:fb:f2:2c:0e: 35:c8:75:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9qN7U4xnNx2uxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NGU5MmQ3NjktOGI0MC00M2ZhLTgzZjgtZGE4ZjE1OTBhMjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfCK2MK0KlcCSJGBRW9DKWnp6htxHMghrP1q tElVNHqZ4NMk/HVKTRnr/pKPrmahTQ/PN9ETUygB9VOt6xshexfZsmQ8M2p9Zko7 WIHv0BoUYtNp52FSz4S3/ZjQQ7z+eE+wfd4n8a75TKLE7Xyed7+KdF4gG/HcIGKG rX0DJLC4nhmH6XQTiRIjPaLVc387oQuQY02/KtpbVF/m0hMnrbiKNOeNOjzFJEfu so8fxWJCXdPwpVatP5GX6w4P0v8v6wY3wVRYZfuk89xJBwExw5n1SFSuV7iiPy2j Urn9v2Gc5OLkj5mJZBPWlSG+GBgw9g+93KKvsozk5ssnO2rdRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHyrY7mkHLPm4UDFC9D74cLoq4D3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjFlNTI1MWMtZDVkNy0z MmNiLWIwZTEtMDUwMDhjZWU5MjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGAaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ2Y4UMQFXtg/S9+dfPJTlYTePb9GTgIkDFxRJIfyeZfTSOBq/lnLrM2 mSqxFIwKKF7shxe9QFhydxjS6u2CwRvNOvZgnvMxxYbqMz2kztcduVmIeMri4oOK htF+umI+5UcfdyxkGBImfieK505vrPzONfG9PrO6UPfs8MkMZjFRaVwZed++kdVr ATAUwFhfAkezQ91jvveZ9CSjDldtjBensY5saD4CSRm0sylFuhVksxBpabqzcVrw Z6XbW23Qa1tYma55nGrVF3SdfpcZPQDtgv1X62ftRvIuB2ujP2tjRdbdT/ADnmdM hnIA7/eM03zch3AyleVM+/IsDjXIdVw= -----END CERTIFICATE-----Generated at Tue Apr 21 19:17:53 2026 by rpki-client