$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/856a02d1-b7a3-3aa8-962e-e27adb1a4174.roa File: 856a02d1-b7a3-3aa8-962e-e27adb1a4174.roa (raw, json) Hash identifier: MeP1yaGXZaOmHZzVMS+nVqTLdQ5K2m0Zh3iGf8ecNJ8= Subject key identifier: 9E:3C:1F:1E:45:37:04:77:4D:5B:A0:CD:AC:43:57:86:7D:B9:2D:CB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF777E93F27F66E7639D0D0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/856a02d1-b7a3-3aa8-962e-e27adb1a4174.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 24.14.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f7:77:e9:3f:27:f6:6e:76:39:d0:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=79c69310-2ef0-4980-80ac-1ab07bae1917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:00:04:c0:2f:bd:57:bd:ba:8f:82:12:53:49: 24:27:81:23:fc:8c:f0:24:b3:89:fb:e4:37:57:3a: fe:c1:d6:62:cf:a8:67:17:af:86:9e:f0:e1:be:65: ad:ad:78:c0:a3:ed:5e:c8:ea:4f:4f:cf:57:d1:ee: ce:21:dc:9b:0a:a9:58:0e:58:58:d2:de:ea:72:7d: 5b:65:ff:e1:37:21:f7:64:1c:b1:bb:08:9e:08:bf: 8e:09:c9:3a:b5:e0:6e:a1:c9:58:e3:d8:a4:79:c3: 17:4b:8b:3c:01:02:ec:e5:6a:21:c8:64:1a:1f:78: 68:04:ef:13:f8:44:87:ef:15:6a:87:d7:e5:9f:aa: 70:a5:ce:07:15:ba:30:d1:0d:5b:c3:60:88:68:5c: b8:a9:92:32:60:35:2d:21:82:7f:a4:87:a4:a9:3c: 47:b8:2d:26:22:7b:81:06:61:1c:b3:6d:a3:22:02: f8:34:15:25:18:dd:28:53:ef:22:ee:a4:06:2a:59: 9c:9b:45:69:55:e1:d3:c0:dd:0b:1a:df:66:b6:93: be:09:b2:b5:08:90:ac:68:b1:28:7d:69:d5:79:5a: 7e:70:7e:72:0c:a3:64:34:74:e3:f6:cf:ba:6c:18: 0f:2c:b5:28:69:db:15:32:7e:0d:64:e8:8e:78:87: 7c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:3C:1F:1E:45:37:04:77:4D:5B:A0:CD:AC:43:57:86:7D:B9:2D:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/856a02d1-b7a3-3aa8-962e-e27adb1a4174.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.14.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:44:c6:3b:71:97:a9:98:4d:64:34:46:0e:36:44:f6:0f:9b: 18:4d:4b:99:81:bf:f9:f5:90:fd:33:48:f8:13:2f:85:c2:73: 5a:3d:97:0e:da:30:ef:b3:0d:e8:b1:a6:7e:01:9c:12:cf:f3: df:26:85:fd:1e:82:84:b1:f9:3a:2b:1d:0e:77:3c:b9:3d:85: f3:6a:3e:fa:2a:fb:7d:a9:a5:af:b5:00:2f:b9:c9:1b:09:4b: e5:1c:ec:07:36:70:ef:17:fa:4f:1a:b2:c4:ed:98:e2:11:66: 62:0e:e1:50:20:5e:d6:90:da:f2:42:49:87:45:86:a2:ee:d9: 94:6d:37:ca:8b:ac:d1:00:eb:9b:f9:76:a0:12:e3:20:fe:cd: dc:3a:4b:1e:0e:3a:94:d1:44:7c:a7:b2:12:cb:8a:d8:5a:93: d7:24:42:62:63:2a:fb:3d:1d:75:7a:e3:77:66:46:2a:e0:ed: 23:20:d2:c1:e1:96:03:b6:a0:12:fe:65:43:c6:95:9b:29:f5: 9c:c2:9d:ba:fc:9b:fc:70:63:ab:f0:6e:6f:14:bf:6c:52:4c: 54:b3:0b:f3:27:02:0e:22:d9:19:88:b0:4e:64:3b:b3:de:7d: f7:e2:d9:e6:5d:ee:37:8d:bd:56:06:bc:53:4e:0a:3f:86:1e: 3c:af:c6:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O93fpPyf2bnY50NAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NzljNjkzMTAtMmVmMC00OTgwLTgwYWMtMWFiMDdiYWUxOTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggAEwC+9V726j4ISU0kkJ4Ej/IzwJLOJ++Q3 Vzr+wdZiz6hnF6+GnvDhvmWtrXjAo+1eyOpPT89X0e7OIdybCqlYDlhY0t7qcn1b Zf/hNyH3ZByxuwieCL+OCck6teBuoclY49ikecMXS4s8AQLs5WohyGQaH3hoBO8T +ESH7xVqh9fln6pwpc4HFbow0Q1bw2CIaFy4qZIyYDUtIYJ/pIekqTxHuC0mInuB BmEcs22jIgL4NBUlGN0oU+8i7qQGKlmcm0VpVeHTwN0LGt9mtpO+CbK1CJCsaLEo fWnVeVp+cH5yDKNkNHTj9s+6bBgPLLUoadsVMn4NZOiOeId8UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ48Hx5FNwR3TVugzaxDV4Z9uS3LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODU2YTAyZDEtYjdhMy0z YWE4LTk2MmUtZTI3YWRiMWE0MTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGA6KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALhExjtxl6mYTWQ0Rg42RPYPmxhNS5mBv/n1kP0zSPgTL4XCc1o9lw7a MO+zDeixpn4BnBLP898mhf0egoSx+TorHQ53PLk9hfNqPvoq+32ppa+1AC+5yRsJ S+Uc7Ac2cO8X+k8assTtmOIRZmIO4VAgXtaQ2vJCSYdFhqLu2ZRtN8qLrNEA65v5 dqAS4yD+zdw6Sx4OOpTRRHynshLLithak9ckQmJjKvs9HXV643dmRirg7SMg0sHh lgO2oBL+ZUPGlZsp9ZzCnbr8m/xwY6vwbm8Uv2xSTFSzC/MnAg4i2RmIsE5kO7Pe fffi2eZd7jeNvVYGvFNOCj+GHjyvxlo= -----END CERTIFICATE-----Generated at Tue Apr 21 20:17:21 2026 by rpki-client