$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa9864e9-0eca-3950-a811-29e079393105.roa File: aa9864e9-0eca-3950-a811-29e079393105.roa (raw, json) Hash identifier: E6exaIwvahEh8+ov4iNEuxiBzaz87qbXqGug6BBkeZc= Subject key identifier: 66:58:41:F0:9D:D4:5C:0B:1A:4A:38:E6:CA:C5:D9:BD:1D:84:7C:68 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF6A1A6E9F09741E51BD124 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa9864e9-0eca-3950-a811-29e079393105.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33651 IP address blocks: 24.4.92.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:a1:a6:e9:f0:97:41:e5:1b:d1:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=781c1893-d321-4f24-b2ea-f1d205f6625b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:78:de:f7:84:32:b5:e9:81:4c:50:9a:b8:2d: 7c:f9:1c:61:cc:c2:27:9f:2b:82:e7:82:b7:7f:c6: 76:48:fe:17:41:33:f3:33:a2:80:f9:5b:2e:68:24: e4:12:95:52:cc:18:48:19:45:37:21:35:a1:00:bd: d7:b7:be:5c:01:94:23:4f:d2:5b:98:c6:d6:20:5e: c8:91:5d:6e:5d:ff:24:ef:8c:2d:e9:89:ce:c9:39: a7:3e:75:3e:3a:2a:05:8b:44:af:80:97:58:75:a0: 30:7d:77:4d:d9:2d:b7:f2:e8:5e:4e:09:94:0a:3d: 61:54:f6:82:0a:bc:5b:aa:ae:07:24:5c:38:34:e6: bd:4b:ef:6e:65:b8:c7:56:44:2f:ab:36:b6:ad:2d: fd:60:1a:e7:29:d9:0e:f4:b0:81:20:74:63:d9:15: e0:19:33:df:52:b9:88:27:f1:3d:5c:9d:83:0b:46: a5:fb:31:57:46:cf:40:18:3a:7b:7c:b2:01:70:44: 85:81:7f:a9:0b:81:f3:60:89:42:64:79:9b:be:d4: e1:15:53:da:28:d7:86:27:9a:17:9b:17:bc:a1:3e: 86:46:e6:40:00:65:d9:dc:28:cf:32:0a:3a:ba:e6: 20:34:2e:46:0b:23:a2:31:e1:ad:a6:30:85:8d:41: d6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:58:41:F0:9D:D4:5C:0B:1A:4A:38:E6:CA:C5:D9:BD:1D:84:7C:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa9864e9-0eca-3950-a811-29e079393105.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.4.92.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:d7:a5:5c:27:07:a6:e4:25:42:06:9e:9a:12:d6:38:c8:a9: d2:83:2d:d8:f3:d3:2a:69:08:f2:fc:cc:4e:9b:cb:87:94:e5: b4:10:bf:55:7f:37:34:b0:c3:af:5c:a6:df:14:be:f3:1e:bc: 6b:2f:8d:a9:8c:f9:15:47:47:49:a9:5c:1b:8e:13:9d:41:18: 9a:c2:c3:95:ee:e7:29:49:a5:aa:fc:bc:c9:7b:cf:2a:20:59: 21:15:be:ab:ae:9f:75:8a:c7:3b:06:d1:a7:da:c6:a4:36:ea: 66:e2:c8:23:06:53:d3:82:a3:38:80:f0:30:3f:3e:a3:8f:f8: 08:da:7c:1f:a5:1d:97:90:3a:31:0f:f6:5f:6d:fa:43:b2:3b: 83:7c:f4:3b:72:7b:28:e9:34:8a:c3:9d:c7:60:ec:99:46:72: cd:ef:53:04:b8:4c:40:ae:22:3c:e7:0e:25:54:de:e0:25:a5: 7e:59:78:a9:0d:a9:54:81:9c:5e:b6:2e:46:16:84:37:7c:ab: ae:0f:db:c5:25:9d:72:34:2d:db:e3:f5:85:84:cd:8b:eb:0a: e6:1c:ba:93:fb:da:7c:a3:fe:b7:3b:7f:8a:fc:58:16:6c:de: a0:5f:f2:e2:85:22:18:3d:87:49:eb:fe:fb:83:47:a3:c9:56: 81:25:0f:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9qGm6fCXQeUb0SQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NzgxYzE4OTMtZDMyMS00ZjI0LWIyZWEtZjFkMjA1ZjY2MjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHje94QytemBTFCauC18+RxhzMInnyuC54K3 f8Z2SP4XQTPzM6KA+VsuaCTkEpVSzBhIGUU3ITWhAL3Xt75cAZQjT9JbmMbWIF7I kV1uXf8k74wt6YnOyTmnPnU+OioFi0SvgJdYdaAwfXdN2S238uheTgmUCj1hVPaC Crxbqq4HJFw4NOa9S+9uZbjHVkQvqza2rS39YBrnKdkO9LCBIHRj2RXgGTPfUrmI J/E9XJ2DC0al+zFXRs9AGDp7fLIBcESFgX+pC4HzYIlCZHmbvtThFVPaKNeGJ5oX mxe8oT6GRuZAAGXZ3CjPMgo6uuYgNC5GCyOiMeGtpjCFjUHW/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZYQfCd1FwLGko45srF2b0dhHxoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWE5ODY0ZTktMGVjYS0z OTUwLWE4MTEtMjllMDc5MzkzMTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGARcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALHXpVwnB6bkJUIGnpoS1jjIqdKDLdjz0yppCPL8zE6by4eU5bQQv1V/ NzSww69cpt8UvvMevGsvjamM+RVHR0mpXBuOE51BGJrCw5Xu5ylJpar8vMl7zyog WSEVvquun3WKxzsG0afaxqQ26mbiyCMGU9OCoziA8DA/PqOP+AjafB+lHZeQOjEP 9l9t+kOyO4N89DtyeyjpNIrDncdg7JlGcs3vUwS4TECuIjznDiVU3uAlpX5ZeKkN qVSBnF62LkYWhDd8q64P28UlnXI0Ldvj9YWEzYvrCuYcupP72nyj/rc7f4r8WBZs 3qBf8uKFIhg9h0nr/vuDR6PJVoElD+M= -----END CERTIFICATE-----Generated at Wed Apr 22 00:24:25 2026 by rpki-client