$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/539a9797-6be8-3aa6-8d7a-39d114da200a.roa File: 539a9797-6be8-3aa6-8d7a-39d114da200a.roa (raw, json) Hash identifier: Ql+N5cnYRvTinza3K2SZDtJ49gRYwj9cYH2cENFBKbc= Subject key identifier: 8B:76:96:7C:C7:C7:88:AC:60:69:36:52:89:45:0D:A1:3D:51:7E:BF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF774E29900A8B710653FC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/539a9797-6be8-3aa6-8d7a-39d114da200a.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 24.12.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f7:74:e2:99:00:a8:b7:10:65:3f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=2bcbdeec-dcb7-497c-83e7-672f53cb555f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fa:e5:eb:02:78:c0:dd:37:e7:87:6f:40:a0: a7:ae:4d:89:c0:2b:54:fe:59:6b:70:5c:dd:e2:f7: f6:a1:a8:88:95:44:d9:c7:46:9d:97:74:69:2d:ec: 6b:de:e4:95:5f:20:82:ac:79:65:0b:a8:d1:33:0d: d6:a8:25:26:ca:8c:02:7c:76:23:78:7e:61:f8:25: af:69:b5:c5:bf:0f:ed:cc:3c:85:4d:47:b7:18:85: 1f:86:18:be:73:ce:f3:80:32:10:08:3c:b8:84:33: c1:41:18:db:ae:27:a5:ea:90:2e:49:22:b9:bc:d5: 17:85:d8:83:83:95:30:43:a8:85:08:9e:db:dd:aa: 3e:b1:b0:08:42:8a:ce:22:d3:7d:20:26:d8:77:13: 89:a7:28:47:70:f2:57:90:5f:c1:81:53:76:84:26: 24:9f:e5:f4:8d:b4:ed:35:70:a5:d1:7d:fc:0e:dd: 14:1b:bd:e1:1a:ac:fd:ad:ec:8a:ea:db:e1:bc:75: 2f:b3:ef:d0:fa:09:e3:f6:1a:6a:11:36:56:09:21: ba:1f:62:54:e7:55:68:6d:c2:b2:aa:98:ba:9b:79: 37:26:ce:6a:7b:ab:6f:c2:3f:e5:78:5e:19:6d:26: 14:e7:04:82:74:0e:4d:04:ea:7b:9d:f3:8e:26:2f: fa:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:76:96:7C:C7:C7:88:AC:60:69:36:52:89:45:0D:A1:3D:51:7E:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/539a9797-6be8-3aa6-8d7a-39d114da200a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.12.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:cb:fc:9d:74:96:c9:01:73:f7:2f:4e:88:70:bf:9c:85:19: 6b:8c:14:ca:c5:52:20:bc:81:39:5f:a9:44:11:da:0f:d9:2c: 73:d8:e0:7d:46:de:37:16:97:e1:27:ca:35:95:42:b6:4c:55: ae:c9:28:68:85:3b:56:71:ac:58:68:43:b7:d0:2a:7b:9f:65: ef:19:a2:9a:cc:f4:3e:bf:1c:3c:98:1c:19:85:28:44:09:7e: bf:20:a4:7b:3b:29:7a:1f:20:25:e7:e1:d1:6b:e9:82:60:80: 5f:ae:b5:ed:67:da:d1:56:8d:2c:fc:08:53:78:12:dc:5b:d7: ef:66:2f:74:7d:93:35:82:c8:cb:5e:e8:30:89:a4:41:08:dc: 54:eb:cc:35:00:e7:cd:95:c2:93:3c:27:33:0d:b6:bc:f6:a2: ab:95:59:b8:9b:ff:57:c0:88:45:35:e6:3b:9c:a5:b2:24:46: 98:96:1b:4b:26:90:56:46:dc:57:f5:d7:db:a4:3e:47:75:36: 9a:d1:3d:90:da:44:60:11:c8:3b:e3:12:b6:7f:f3:d9:11:20: 90:06:45:79:a6:8a:f3:2b:a7:1b:60:8c:09:fb:ef:d9:22:39: a4:0f:f8:a2:cd:71:dd:da:e6:25:80:c9:7e:7a:6a:9a:f7:70: 2f:1c:64:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O93TimQCotxBlP8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MmJjYmRlZWMtZGNiNy00OTdjLTgzZTctNjcyZjUzY2I1NTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/rl6wJ4wN0354dvQKCnrk2JwCtU/llrcFzd 4vf2oaiIlUTZx0adl3RpLexr3uSVXyCCrHllC6jRMw3WqCUmyowCfHYjeH5h+CWv abXFvw/tzDyFTUe3GIUfhhi+c87zgDIQCDy4hDPBQRjbriel6pAuSSK5vNUXhdiD g5UwQ6iFCJ7b3ao+sbAIQorOItN9ICbYdxOJpyhHcPJXkF/BgVN2hCYkn+X0jbTt NXCl0X38Dt0UG73hGqz9reyK6tvhvHUvs+/Q+gnj9hpqETZWCSG6H2JU51VobcKy qpi6m3k3Js5qe6tvwj/leF4ZbSYU5wSCdA5NBOp7nfOOJi/6DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIt2lnzHx4isYGk2UolFDaE9UX6/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTM5YTk3OTctNmJlOC0z YWE2LThkN2EtMzlkMTE0ZGEyMDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGAwwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLL/J10lskBc/cvTohwv5yFGWuMFMrFUiC8gTlfqUQR2g/ZLHPY4H1G 3jcWl+EnyjWVQrZMVa7JKGiFO1ZxrFhoQ7fQKnufZe8ZoprM9D6/HDyYHBmFKEQJ fr8gpHs7KXofICXn4dFr6YJggF+ute1n2tFWjSz8CFN4Etxb1+9mL3R9kzWCyMte 6DCJpEEI3FTrzDUA582VwpM8JzMNtrz2oquVWbib/1fAiEU15jucpbIkRpiWG0sm kFZG3Ff119ukPkd1NprRPZDaRGARyDvjErZ/89kRIJAGRXmmivMrpxtgjAn779ki OaQP+KLNcd3a5iWAyX56apr3cC8cZGY= -----END CERTIFICATE-----Generated at Tue Apr 21 19:25:52 2026 by rpki-client