$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8397fb81-876a-3a7a-847b-f0a51269a487.roa File: 8397fb81-876a-3a7a-847b-f0a51269a487.roa (raw, json) Hash identifier: V2dYhRxoANzZLxtTG+Rx9Prj5e5SN8LphZU4+N0aMuw= Subject key identifier: D5:A8:D7:0D:9F:13:AD:A2:D7:C5:87:5F:BD:22:A7:56:F8:61:23:B2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF776204DAF5AD2DAF20400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8397fb81-876a-3a7a-847b-f0a51269a487.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 24.13.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f7:76:20:4d:af:5a:d2:da:f2:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=68e5936d-5d4e-42f2-902d-21853084b43f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bf:c2:ff:1b:ab:c8:3e:64:09:e8:5e:4f:87: 4e:90:11:9b:74:f3:dd:7e:95:cf:19:42:13:c0:55: 1a:34:43:44:91:39:cc:3e:15:91:00:a0:b7:b7:fb: 14:d9:9c:15:ec:9b:a2:82:26:f4:3f:ba:d0:24:cd: a6:49:e6:30:86:d1:dd:e0:aa:05:ac:0a:68:28:74: 83:86:66:8c:c7:e9:e2:dc:73:3d:19:5b:79:d1:ab: 1f:28:f1:81:0e:a7:da:a1:60:cd:8d:ad:33:5d:72: 17:b7:b2:3f:32:3e:b4:44:98:bb:63:3c:f9:fa:5d: aa:e6:39:df:79:94:5d:53:f0:8d:e8:95:3f:98:3f: 7d:ec:29:9d:cb:c5:66:eb:48:2c:fa:e5:5d:5a:b9: 15:cd:df:e6:e0:e5:5d:65:2c:b4:56:86:79:dd:d7: e5:c4:a9:cc:f2:8c:d2:d3:78:dd:48:10:da:a8:47: 5c:e0:81:93:50:8e:1b:d6:56:d6:27:d6:f2:e8:6e: de:d9:50:ab:50:6f:b9:64:71:8f:5d:43:18:17:4e: 30:b6:48:71:c8:22:c4:79:4b:eb:a2:0c:6d:98:12: 4a:67:80:57:83:ed:66:fc:ea:79:5e:97:dc:d5:f3: 93:00:09:64:1d:ed:6f:b5:6f:dd:f5:a0:4c:3b:0c: 0a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:A8:D7:0D:9F:13:AD:A2:D7:C5:87:5F:BD:22:A7:56:F8:61:23:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8397fb81-876a-3a7a-847b-f0a51269a487.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.13.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:31:48:8a:c4:14:a0:db:55:6b:8e:07:ac:0b:86:87:b7:53: ad:db:92:5d:dc:5d:84:f3:c6:2b:e3:61:79:8b:20:e3:4f:94: 21:77:33:ca:e6:4f:81:00:41:65:f0:2e:e8:cc:a8:03:03:a2: f6:35:7d:74:ca:9c:a8:54:b4:ed:f6:2e:4b:64:c5:8f:32:5e: f8:21:eb:63:f9:00:43:da:61:1e:a5:3a:75:cd:07:b7:51:13: b8:e0:2e:d0:31:8c:4d:2a:d3:fa:55:73:23:8d:68:ea:eb:b1: f2:00:61:98:59:53:a8:de:a6:a1:40:b4:a4:58:cc:34:cf:2e: 89:e3:0b:27:00:ec:75:da:b5:89:63:43:6b:57:18:62:4e:9e: 5f:2c:3e:63:35:99:96:c6:52:df:23:87:7c:b9:89:ef:0f:da: 14:a1:2f:fe:70:0b:89:20:14:91:04:18:5e:7a:93:36:26:89: fb:0e:68:9e:26:54:4c:df:55:b7:98:c2:48:8e:20:60:32:51: 7d:d9:16:c2:04:5a:4f:62:a5:23:f5:35:7f:ac:26:41:8f:a8: 4f:fd:48:42:f1:cd:8d:8e:66:d1:ae:4b:99:4d:e7:55:af:53: f2:67:98:08:b3:3b:85:13:8e:a1:90:ac:7e:d4:64:d8:67:84: 27:02:0d:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O93YgTa9a0tryBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NjhlNTkzNmQtNWQ0ZS00MmYyLTkwMmQtMjE4NTMwODRiNDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqr/C/xuryD5kCeheT4dOkBGbdPPdfpXPGUIT wFUaNENEkTnMPhWRAKC3t/sU2ZwV7Juigib0P7rQJM2mSeYwhtHd4KoFrApoKHSD hmaMx+ni3HM9GVt50asfKPGBDqfaoWDNja0zXXIXt7I/Mj60RJi7Yzz5+l2q5jnf eZRdU/CN6JU/mD997Cmdy8Vm60gs+uVdWrkVzd/m4OVdZSy0VoZ53dflxKnM8ozS 03jdSBDaqEdc4IGTUI4b1lbWJ9by6G7e2VCrUG+5ZHGPXUMYF04wtkhxyCLEeUvr ogxtmBJKZ4BXg+1m/Op5Xpfc1fOTAAlkHe1vtW/d9aBMOwwKPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWo1w2fE62i18WHX70ip1b4YSOyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODM5N2ZiODEtODc2YS0z YTdhLTg0N2ItZjBhNTEyNjlhNDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGA2EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALUxSIrEFKDbVWuOB6wLhoe3U63bkl3cXYTzxivjYXmLIONPlCF3M8rm T4EAQWXwLujMqAMDovY1fXTKnKhUtO32LktkxY8yXvgh62P5AEPaYR6lOnXNB7dR E7jgLtAxjE0q0/pVcyONaOrrsfIAYZhZU6jepqFAtKRYzDTPLonjCycA7HXatYlj Q2tXGGJOnl8sPmM1mZbGUt8jh3y5ie8P2hShL/5wC4kgFJEEGF56kzYmifsOaJ4m VEzfVbeYwkiOIGAyUX3ZFsIEWk9ipSP1NX+sJkGPqE/9SELxzY2OZtGuS5lN51Wv U/JnmAizO4UTjqGQrH7UZNhnhCcCDeU= -----END CERTIFICATE-----Generated at Tue Apr 21 20:54:29 2026 by rpki-client