$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3851f3e1-b7a2-3a1c-a2dd-44d8f26b1dc5.roa File: 3851f3e1-b7a2-3a1c-a2dd-44d8f26b1dc5.roa (raw, json) Hash identifier: e67qrOsWzNxnq5dyOxAqsfD9dLcoKzZhw+c4FYIbWwc= Subject key identifier: F7:E3:C2:25:13:84:2F:1D:35:99:7A:65:7E:BB:8D:C2:32:B4:74:6A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF8587B9F9C9FB91A9D4640 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3851f3e1-b7a2-3a1c-a2dd-44d8f26b1dc5.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33651 IP address blocks: 24.23.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f8:58:7b:9f:9c:9f:b9:1a:9d:46:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=e759faff-7072-4b8f-913a-7f281b6df524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:04:b1:4b:d8:07:a7:0a:9a:6c:76:1d:06:b5: 09:ac:d4:d4:0c:89:e5:33:a6:99:56:e5:48:19:31: 32:92:e8:b6:6d:13:0e:fc:8b:1b:43:1e:e9:52:de: 6d:af:b9:7c:78:ba:83:9d:55:a9:c2:30:d4:55:dc: 2c:ee:59:64:dd:6d:61:b8:ab:af:a0:a9:df:f3:ba: f3:a1:05:4c:2d:29:6d:16:df:b5:54:de:a0:0d:2a: a4:e5:2f:da:3c:7b:48:d4:0e:c1:0c:19:a1:62:06: d8:58:74:19:d2:3b:e5:bd:d6:e9:23:16:9d:5f:3d: 8d:ae:cd:95:3f:71:eb:50:e0:15:08:72:27:e3:fc: d2:68:fb:9d:25:73:81:92:74:c6:c3:12:c2:53:a9: 73:1d:dd:19:dd:a1:b4:b7:f4:b5:60:d3:c8:92:f8: 42:44:c0:36:21:ba:c8:25:1c:65:e0:90:60:e7:2b: f8:38:bf:44:83:99:50:bb:a0:7e:44:4e:c4:8a:60: c6:b3:2c:d1:ed:5a:2f:4f:bd:88:58:40:66:1c:5d: d1:b8:59:98:08:b2:22:01:af:8b:75:04:2c:5c:bf: 9e:f1:cb:86:9c:55:90:2b:52:32:38:40:18:66:ac: c7:f7:c4:26:cf:e1:7d:61:19:67:ac:a4:0d:6f:54: 8f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E3:C2:25:13:84:2F:1D:35:99:7A:65:7E:BB:8D:C2:32:B4:74:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3851f3e1-b7a2-3a1c-a2dd-44d8f26b1dc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.23.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:df:9a:72:6b:98:38:c7:50:3c:de:2e:1f:e8:32:22:05:8f: 5b:3c:0b:fe:d5:34:0d:ec:3a:67:3d:70:e0:ae:ca:bb:5a:dc: b9:cc:aa:c8:5a:f5:47:3a:f5:77:d6:78:2a:19:92:a0:22:90: 62:56:86:e0:82:19:b1:86:4a:56:35:34:5e:43:6c:e4:94:d8: 43:fd:10:6e:c1:56:71:72:8b:34:f2:79:c9:2e:d2:4a:22:e1: a2:1e:b2:cf:2a:50:09:7f:5c:0a:0d:99:a9:68:2a:31:39:ab: ca:0f:73:f0:41:85:8b:aa:ff:58:f0:90:98:28:f4:01:4c:9e: 57:dc:83:c2:e0:32:ac:05:fc:f6:c0:f0:a6:cc:a4:b6:27:af: dd:57:bb:fe:a7:5f:b0:8a:ab:48:24:15:cd:74:1e:98:17:5b: 16:0c:63:75:35:02:ae:32:8d:52:60:7a:93:8b:3d:17:16:c8: e0:36:b6:19:d0:0a:46:4b:07:52:bb:4f:fd:48:88:81:fb:90: 24:94:5b:80:c1:24:9f:d4:eb:ce:6a:8c:38:e0:9b:c7:92:4c: 61:dc:17:03:46:bf:48:15:ae:c2:79:35:13:9b:fb:09:cf:c6: bc:cc:7e:2f:ed:50:5a:17:73:14:22:1c:db:0b:ce:c7:45:ee: 5e:34:d4:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+Fh7n5yfuRqdRkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ZTc1OWZhZmYtNzA3Mi00YjhmLTkxM2EtN2YyODFiNmRmNTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgSxS9gHpwqabHYdBrUJrNTUDInlM6aZVuVI GTEykui2bRMO/IsbQx7pUt5tr7l8eLqDnVWpwjDUVdws7llk3W1huKuvoKnf87rz oQVMLSltFt+1VN6gDSqk5S/aPHtI1A7BDBmhYgbYWHQZ0jvlvdbpIxadXz2Nrs2V P3HrUOAVCHIn4/zSaPudJXOBknTGwxLCU6lzHd0Z3aG0t/S1YNPIkvhCRMA2IbrI JRxl4JBg5yv4OL9Eg5lQu6B+RE7EimDGsyzR7VovT72IWEBmHF3RuFmYCLIiAa+L dQQsXL+e8cuGnFWQK1IyOEAYZqzH98Qmz+F9YRlnrKQNb1SPeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPfjwiUThC8dNZl6ZX67jcIytHRqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzg1MWYzZTEtYjdhMi0z YTFjLWEyZGQtNDRkOGYyNmIxZGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGBfcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFffmnJrmDjHUDzeLh/oMiIFj1s8C/7VNA3sOmc9cOCuyrta3LnMqsha 9Uc69XfWeCoZkqAikGJWhuCCGbGGSlY1NF5DbOSU2EP9EG7BVnFyizTyecku0koi 4aIess8qUAl/XAoNmaloKjE5q8oPc/BBhYuq/1jwkJgo9AFMnlfcg8LgMqwF/PbA 8KbMpLYnr91Xu/6nX7CKq0gkFc10HpgXWxYMY3U1Aq4yjVJgepOLPRcWyOA2thnQ CkZLB1K7T/1IiIH7kCSUW4DBJJ/U685qjDjgm8eSTGHcFwNGv0gVrsJ5NROb+wnP xrzMfi/tUFoXcxQiHNsLzsdF7l401B0= -----END CERTIFICATE-----Generated at Tue Apr 21 19:16:49 2026 by rpki-client