$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2cbf91e7-5fc3-3875-935a-28214d1f5a9a.roa File: 2cbf91e7-5fc3-3875-935a-28214d1f5a9a.roa (raw, json) Hash identifier: nHj1emI7APdIavy8LrcpYO5m8l4pebOYz0hVrNNQf/w= Subject key identifier: C1:67:C6:64:B5:A9:10:83:D3:85:CE:FC:A1:90:56:88:F9:6F:AE:CD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF77399871709F7FF5A8628 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2cbf91e7-5fc3-3875-935a-28214d1f5a9a.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 24.12.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f7:73:99:87:17:09:f7:ff:5a:86:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=4672c4cd-b122-4c67-a446-cf127ae5022b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:2f:70:d0:1f:4f:17:dc:a0:02:b7:15:86:3d: 82:35:4e:6a:12:ae:e6:c2:42:bd:ec:72:f2:84:62: 48:6c:4d:3c:03:cc:f6:55:54:7a:ba:29:ef:18:49: 2e:7b:30:28:5f:83:4e:7d:05:ac:58:56:a1:f1:32: 2b:aa:2d:cf:21:aa:c3:d1:56:f9:a2:92:7b:fd:b5: 5a:73:8d:65:fd:98:b5:72:2d:3b:84:a5:bc:9f:e9: 70:08:cd:c6:fc:ce:0c:25:4b:b8:de:9a:a1:ca:76: 70:2f:c4:70:c9:4a:b4:34:4c:7e:86:6a:5f:58:02: 48:ad:bb:12:f1:11:2c:97:8d:c3:25:02:86:40:89: 0e:70:d1:53:e3:5b:ae:a5:97:06:c1:33:cf:b6:ec: 3c:aa:a1:0b:1c:69:40:36:96:fc:96:ba:d1:81:f4: 62:5d:18:71:3b:d9:ec:3b:7a:eb:21:06:7e:b7:96: 81:72:3b:21:67:38:9e:3c:4d:23:2a:76:2f:b7:82: 8f:c0:dc:89:ef:04:ee:71:91:7e:12:d9:4c:af:69: 2a:42:9f:e5:1a:f3:48:8b:bf:91:67:18:45:24:70: d6:97:a9:de:10:c2:ac:85:f2:0d:07:98:ea:0d:12: 29:5c:b3:d2:01:f1:06:3f:db:df:a0:4d:54:77:8e: 8a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:67:C6:64:B5:A9:10:83:D3:85:CE:FC:A1:90:56:88:F9:6F:AE:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2cbf91e7-5fc3-3875-935a-28214d1f5a9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.12.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:28:1d:31:ce:0b:13:49:d2:e5:b5:ad:b6:e6:40:00:f7:63: e7:9d:1c:4d:e1:a9:77:2c:38:d8:7e:ca:19:56:a5:bd:6c:10: 22:11:41:e2:7e:da:5f:f1:a2:e5:53:f2:e3:f8:45:a5:7a:2f: 87:19:41:66:25:de:77:0e:db:bc:7d:6d:3e:93:c8:ae:fa:77: cc:a2:55:b7:36:fc:b6:ee:31:45:a4:14:c7:a6:aa:5b:9b:40: 1b:da:68:09:10:43:1e:d4:d1:d6:f4:3e:68:ad:66:06:24:36: eb:d5:50:12:f9:a6:2e:be:83:cc:dc:f3:28:5c:ed:3e:8f:66: fc:da:c0:fc:0b:42:43:8f:78:f3:74:77:be:11:1f:68:76:e5: 0e:e7:62:ef:26:d1:63:e1:8b:be:09:9d:1a:41:dc:59:27:9d: 72:1c:41:64:ac:0f:5d:82:9f:66:2b:e7:24:9b:ec:61:d2:03: f8:7d:7c:ad:da:f1:5b:8f:2c:d6:07:15:1e:36:24:44:fe:46: 56:cd:9d:62:05:80:01:6a:ec:57:0c:1f:57:7e:0a:02:cc:85: ad:f3:9b:62:cc:1e:1c:03:04:a4:78:be:fa:d5:6e:66:7f:3c: c6:13:2e:b0:09:f0:d3:86:81:09:72:96:cd:e9:c0:bb:a2:7a: 42:73:6a:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O93OZhxcJ9/9ahigwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NDY3MmM0Y2QtYjEyMi00YzY3LWE0NDYtY2YxMjdhZTUwMjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgS9w0B9PF9ygArcVhj2CNU5qEq7mwkK97HLy hGJIbE08A8z2VVR6uinvGEkuezAoX4NOfQWsWFah8TIrqi3PIarD0Vb5opJ7/bVa c41l/Zi1ci07hKW8n+lwCM3G/M4MJUu43pqhynZwL8RwyUq0NEx+hmpfWAJIrbsS 8REsl43DJQKGQIkOcNFT41uupZcGwTPPtuw8qqELHGlANpb8lrrRgfRiXRhxO9ns O3rrIQZ+t5aBcjshZziePE0jKnYvt4KPwNyJ7wTucZF+EtlMr2kqQp/lGvNIi7+R ZxhFJHDWl6neEMKshfINB5jqDRIpXLPSAfEGP9vfoE1Ud46KwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMFnxmS1qRCD04XO/KGQVoj5b67NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmNiZjkxZTctNWZjMy0z ODc1LTkzNWEtMjgyMTRkMWY1YTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGAxyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8oHTHOCxNJ0uW1rbbmQAD3Y+edHE3hqXcsONh+yhlWpb1sECIRQeJ+ 2l/xouVT8uP4RaV6L4cZQWYl3ncO27x9bT6TyK76d8yiVbc2/LbuMUWkFMemqlub QBvaaAkQQx7U0db0PmitZgYkNuvVUBL5pi6+g8zc8yhc7T6PZvzawPwLQkOPePN0 d74RH2h25Q7nYu8m0WPhi74JnRpB3FknnXIcQWSsD12Cn2Yr5ySb7GHSA/h9fK3a 8VuPLNYHFR42JET+RlbNnWIFgAFq7FcMH1d+CgLMha3zm2LMHhwDBKR4vvrVbmZ/ PMYTLrAJ8NOGgQlyls3pwLuiekJzauw= -----END CERTIFICATE-----Generated at Tue Apr 21 20:31:29 2026 by rpki-client