$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40c088d8-b81a-3fba-8ce5-818f95d3d692.roa File: 40c088d8-b81a-3fba-8ce5-818f95d3d692.roa (raw, json) Hash identifier: 1BEyb6eqQjx+Yfj66y803fWFWMdRnchKtSwdY8lDMHQ= Subject key identifier: 45:FF:9F:6B:9C:9F:4B:CB:55:90:95:95:2E:8E:82:99:9B:DD:B9:05 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF58E1CC22746D5026A0A00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40c088d8-b81a-3fba-8ce5-818f95d3d692.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33660 IP address blocks: 24.11.42.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:8e:1c:c2:27:46:d5:02:6a:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=47123011-37ce-4035-8cdf-697ae9f5f927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d6:d8:6f:21:20:a2:0f:92:45:92:4d:79:bd: 55:81:87:af:9b:0f:8a:78:02:81:d3:0f:c5:9e:7c: b9:46:0b:68:f6:7b:65:08:39:88:0b:7c:69:bc:7b: 5a:0d:49:66:84:0b:fc:28:bb:3c:db:f5:91:20:a6: cc:72:6b:a5:0f:cc:64:83:bd:7a:e7:4f:fd:21:96: 57:f1:a5:27:30:f0:99:f9:58:78:5c:5d:a6:c7:a7: 70:c1:79:36:3c:88:f1:99:5b:29:e2:a6:c0:b4:bf: 20:a9:aa:24:68:72:f0:e5:b2:60:a8:89:06:5d:3c: ef:14:43:2d:aa:13:3f:85:d4:68:89:ca:48:ad:5e: 85:cc:2c:29:bc:27:21:9d:74:41:b0:c5:78:ca:f5: ac:74:c3:3d:73:52:2a:12:03:88:d0:a0:ef:07:ce: 6c:21:36:0d:1f:5f:c1:44:52:a1:ae:01:47:79:03: 67:c0:dd:68:f1:5b:10:d0:23:3e:72:8a:02:f5:62: dc:5f:8b:d1:3c:2f:51:3d:5b:9a:80:dc:51:ef:1d: da:2f:0d:ce:e6:46:51:ae:de:de:d7:99:ef:b2:b3: 31:97:43:8c:05:f9:5c:6a:93:52:2e:cc:c2:29:3e: 9c:06:ef:96:f8:83:fa:72:7b:9b:47:d3:44:6b:5f: dd:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:FF:9F:6B:9C:9F:4B:CB:55:90:95:95:2E:8E:82:99:9B:DD:B9:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40c088d8-b81a-3fba-8ce5-818f95d3d692.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.11.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:f3:d5:2e:92:db:97:df:60:7d:4c:73:a9:35:45:d1:56:b7: 00:de:6f:e9:f1:cb:ef:2d:56:1a:ad:98:e3:00:48:c4:82:ef: d8:98:2b:aa:d3:2c:61:50:06:e3:36:0c:9b:a2:ae:2d:6c:77: 83:76:48:60:70:13:42:0b:88:e4:52:ed:2e:8a:fa:23:cf:df: f1:22:ae:c7:a1:b0:23:6a:94:fa:e9:b8:1d:bc:d6:4c:5d:e6: 7e:eb:b6:8b:0b:ff:1e:18:19:0f:e6:39:1f:19:9b:32:67:0b: 16:91:2c:73:8a:b2:31:72:00:e7:4e:e6:4f:d5:40:8c:ae:04: 11:19:4e:54:3d:d7:7c:1d:61:da:ac:93:1e:bc:75:58:3b:bd: 69:0f:b2:b5:1b:a4:46:f1:14:e9:52:80:3b:75:a2:78:b4:d5: e1:14:33:d7:79:e0:7a:af:34:bb:e9:6d:f8:70:58:2f:14:97: 39:93:00:2d:6b:d7:7e:66:6e:8b:dc:c6:0d:7f:e9:f8:36:e0: 43:a2:43:68:9b:aa:a9:19:97:c0:2b:8a:c7:07:d9:cb:f1:93: 9b:08:b5:ac:9e:65:5d:e2:e8:8f:18:62:55:dd:72:65:30:6d: d6:4a:29:31:46:a9:80:bf:fa:5e:f4:6e:23:90:76:09:84:cd: 89:5a:d2:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9Y4cwidG1QJqCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NDcxMjMwMTEtMzdjZS00MDM1LThjZGYtNjk3YWU5ZjVmOTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdbYbyEgog+SRZJNeb1VgYevmw+KeAKB0w/F nny5Rgto9ntlCDmIC3xpvHtaDUlmhAv8KLs82/WRIKbMcmulD8xkg71650/9IZZX 8aUnMPCZ+Vh4XF2mx6dwwXk2PIjxmVsp4qbAtL8gqaokaHLw5bJgqIkGXTzvFEMt qhM/hdRoicpIrV6FzCwpvCchnXRBsMV4yvWsdMM9c1IqEgOI0KDvB85sITYNH1/B RFKhrgFHeQNnwN1o8VsQ0CM+cooC9WLcX4vRPC9RPVuagNxR7x3aLw3O5kZRrt7e 15nvsrMxl0OMBflcapNSLszCKT6cBu+W+IP6cnubR9NEa1/dswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEX/n2ucn0vLVZCVlS6Ogpmb3bkFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDBjMDg4ZDgtYjgxYS0z ZmJhLThjZTUtODE4Zjk1ZDNkNjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGAsqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLz1S6S25ffYH1Mc6k1RdFWtwDeb+nxy+8tVhqtmOMASMSC79iYK6rT LGFQBuM2DJuiri1sd4N2SGBwE0ILiORS7S6K+iPP3/EirsehsCNqlPrpuB281kxd 5n7rtosL/x4YGQ/mOR8ZmzJnCxaRLHOKsjFyAOdO5k/VQIyuBBEZTlQ913wdYdqs kx68dVg7vWkPsrUbpEbxFOlSgDt1oni01eEUM9d54HqvNLvpbfhwWC8UlzmTAC1r 135mbovcxg1/6fg24EOiQ2ibqqkZl8AriscH2cvxk5sItayeZV3i6I8YYlXdcmUw bdZKKTFGqYC/+l70biOQdgmEzYla0pk= -----END CERTIFICATE-----Generated at Wed Apr 22 00:21:24 2026 by rpki-client