$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70e6193f-5ef8-386d-9d38-a46941bdcbde.roa File: 70e6193f-5ef8-386d-9d38-a46941bdcbde.roa (raw, json) Hash identifier: 7UDbRtDXlVFhZU7tDdrXp1TaM4vSfaGMDujsqpbbmDs= Subject key identifier: 02:D7:7B:6C:7A:78:3D:0A:A2:EE:10:AD:2C:1F:15:73:5E:7D:F4:4D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF6104613D3F35C96227600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70e6193f-5ef8-386d-9d38-a46941bdcbde.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 24.1.66.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:10:46:13:d3:f3:5c:96:22:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=b4c045a9-43ef-4bf5-9279-fd13b31245ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4b:76:b6:cf:27:ec:a5:18:73:d2:d1:82:bd: 7f:f8:78:8b:27:43:7a:35:50:b1:9e:d9:3e:86:67: 4e:62:89:61:1f:25:29:e6:60:51:ce:e4:36:c3:03: d5:c0:26:19:7d:1c:ce:ac:c4:71:34:96:b9:e6:14: a3:11:88:23:af:16:ab:49:ad:13:27:fb:5e:27:18: 29:12:84:49:be:ec:f5:73:ec:07:3d:6c:d0:f8:ba: 03:ce:91:a9:b0:55:43:0b:0b:10:b0:0f:4c:27:ee: c2:e2:61:5b:13:c2:de:a0:4e:aa:06:d5:76:88:17: 8f:2e:f4:cd:21:23:e7:ef:36:84:64:de:6f:92:ef: b4:68:8e:f9:ff:7e:34:c9:dc:7b:19:87:af:60:26: 82:5c:25:40:4e:bd:72:f6:1d:38:e8:4e:2c:71:4a: 41:1b:58:ed:61:e3:a6:6f:9b:45:e5:02:92:8f:1e: 3f:97:b2:a6:34:0a:2b:4e:ab:22:a4:ee:be:05:1e: 0c:14:fd:72:b4:43:fb:c4:54:0a:1b:60:cd:d0:24: 13:b9:03:f6:70:65:a8:67:36:4d:51:22:ba:17:c3: 90:d2:f3:03:14:36:83:0a:78:4e:58:de:8d:c3:93: 8c:2f:a7:68:0f:10:7b:a0:c4:2e:63:fd:db:7d:76: 9e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D7:7B:6C:7A:78:3D:0A:A2:EE:10:AD:2C:1F:15:73:5E:7D:F4:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70e6193f-5ef8-386d-9d38-a46941bdcbde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.1.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:1e:ca:94:cd:d0:ec:11:9d:cc:a8:e8:2b:56:20:7d:9f:69: 01:e8:58:0d:6e:45:28:e9:18:93:4b:72:64:4b:2d:f8:67:39: 99:50:6e:f2:2e:9c:f6:dc:d1:f4:28:e3:7d:02:db:57:f2:b1: 86:16:c3:ef:b7:95:13:03:e7:dc:94:e4:a2:c7:9a:96:b7:93: fe:4e:7f:15:6b:3f:0f:60:bb:47:01:49:62:d6:be:a8:9a:c8: d9:65:ac:ee:f3:da:c2:dc:07:33:aa:4b:d6:de:a3:5a:7c:c4: 06:48:f2:22:b1:40:2b:7c:28:91:01:3d:1f:52:bd:0a:17:75: 5c:0f:a4:17:ad:46:cc:c8:c5:fb:20:b1:91:bb:93:92:91:3c: 45:f9:fc:78:6e:cd:1a:70:85:4e:6e:5d:5d:b6:a3:d9:a6:3e: 56:c6:8d:ab:b8:b4:e2:a8:57:1d:77:15:c1:a3:d7:9f:d5:fc: ab:50:eb:8e:7b:fb:f4:f0:e0:6e:6e:30:46:b4:58:49:03:fb: 8a:1a:05:8a:c6:53:59:bb:45:81:ab:92:58:be:f5:45:66:4f: 49:9d:af:42:e5:17:d0:da:63:40:a2:f1:22:75:be:7b:1d:ba: 97:18:5f:53:8b:81:36:43:00:02:0f:19:ef:b2:78:e5:de:25: ab:0e:9c:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9hBGE9PzXJYidgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk YjRjMDQ1YTktNDNlZi00YmY1LTkyNzktZmQxM2IzMTI0NWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukt2ts8n7KUYc9LRgr1/+HiLJ0N6NVCxntk+ hmdOYolhHyUp5mBRzuQ2wwPVwCYZfRzOrMRxNJa55hSjEYgjrxarSa0TJ/teJxgp EoRJvuz1c+wHPWzQ+LoDzpGpsFVDCwsQsA9MJ+7C4mFbE8LeoE6qBtV2iBePLvTN ISPn7zaEZN5vku+0aI75/340ydx7GYevYCaCXCVATr1y9h046E4scUpBG1jtYeOm b5tF5QKSjx4/l7KmNAorTqsipO6+BR4MFP1ytEP7xFQKG2DN0CQTuQP2cGWoZzZN USK6F8OQ0vMDFDaDCnhOWN6Nw5OML6doDxB7oMQuY/3bfXaeowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFALXe2x6eD0Kou4QrSwfFXNeffRNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzBlNjE5M2YtNWVmOC0z ODZkLTlkMzgtYTQ2OTQxYmRjYmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGAFCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK0eypTN0OwRncyo6CtWIH2faQHoWA1uRSjpGJNLcmRLLfhnOZlQbvIu nPbc0fQo430C21fysYYWw++3lRMD59yU5KLHmpa3k/5OfxVrPw9gu0cBSWLWvqia yNllrO7z2sLcBzOqS9beo1p8xAZI8iKxQCt8KJEBPR9SvQoXdVwPpBetRszIxfsg sZG7k5KRPEX5/HhuzRpwhU5uXV22o9mmPlbGjau4tOKoVx13FcGj15/V/KtQ6457 +/Tw4G5uMEa0WEkD+4oaBYrGU1m7RYGrkli+9UVmT0mdr0LlF9DaY0Ci8SJ1vnsd upcYX1OLgTZDAAIPGe+yeOXeJasOnBY= -----END CERTIFICATE-----Generated at Wed Apr 22 00:48:14 2026 by rpki-client