$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/baa71628-4037-360f-b660-53a37214d323.roa File: baa71628-4037-360f-b660-53a37214d323.roa (raw, json) Hash identifier: puHo/1jDV+WT2pVtxt8qLYu9X/q4eup5AZbgRFBHfgQ= Subject key identifier: 32:18:55:EB:BD:FA:E8:E5:B4:40:63:1B:60:65:0C:67:4C:1E:1F:48 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584DF4DB5588D735D2BC359E6E90 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/baa71628-4037-360f-b660-53a37214d323.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 33651 IP address blocks: 24.130.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:55:88:d7:35:d2:bc:35:9e:6e:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=a6ee3f1a-d6f1-4dc2-a26b-c79319d41bbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:50:05:92:d3:ea:8e:f3:5d:5a:6c:f6:ba:88: 5e:9b:79:82:1f:21:b9:9c:f6:ed:b5:e4:8a:ba:3a: 13:de:84:9e:61:f8:c7:79:0c:92:a2:df:7a:2e:af: a1:9c:58:68:d1:87:2d:fd:6d:97:d9:c8:88:8f:0d: 47:ba:2e:69:53:e5:8a:23:73:bf:9f:7e:fb:ce:ab: 62:c0:ca:65:ec:4d:02:b9:8e:f8:91:d2:66:a9:3d: 93:bc:0c:e8:af:25:94:07:6e:ec:67:38:fd:36:df: 60:b7:bb:2a:ca:b6:22:38:3f:75:12:d8:a8:1a:90: a3:7e:cc:65:9f:dc:c9:0c:c6:f2:51:03:04:18:72: 3a:b7:04:b0:a1:90:24:6c:e1:c0:ae:95:3a:38:ad: b2:5c:51:a7:03:d5:c4:c7:a9:36:2f:a2:50:f3:43: 7e:c8:6d:d8:b0:fe:1b:6c:f6:99:eb:06:73:49:c9: 29:6f:30:c8:3e:57:80:86:b7:12:1b:59:05:20:ed: 31:ed:23:0c:34:2d:ed:12:89:0b:41:8a:c5:60:2e: d4:42:b0:c7:35:e7:35:ce:41:6c:1e:ae:6d:f1:a1: d8:a4:74:54:06:08:a8:30:ed:99:b5:3a:be:1a:02: 8f:9e:8b:65:f3:87:4f:f4:82:e0:7a:17:51:ed:d3: 68:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:18:55:EB:BD:FA:E8:E5:B4:40:63:1B:60:65:0C:67:4C:1E:1F:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/baa71628-4037-360f-b660-53a37214d323.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.130.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:d9:16:a5:57:06:49:c9:88:9c:57:8a:43:7f:74:f0:be:44: 12:0c:37:16:e6:d6:00:ea:a2:2d:d3:8b:7e:64:cc:dd:d3:7b: c2:3c:37:ef:1f:25:f7:d0:20:78:0e:90:ca:d7:41:e3:df:f2: 04:b1:d9:d6:83:0c:94:05:7f:7d:d7:a1:30:32:16:de:6b:8a: d4:22:6c:89:e5:f1:6d:a4:c5:68:a6:93:21:b1:e7:6c:ec:0f: f3:ae:3c:68:04:09:6f:7d:3d:81:63:d4:27:c8:37:26:e4:7e: 26:b6:0b:ce:3d:94:10:95:1e:6a:81:c7:89:ab:f1:6a:f8:61: 85:b3:6c:9a:1e:50:82:15:48:f1:57:dd:6a:86:02:3f:df:34: 8a:75:61:60:81:36:5f:87:fd:b4:7d:da:a7:08:d5:de:1c:90: e8:c3:96:51:76:37:bc:be:82:fd:07:0d:61:fb:c8:ec:51:14: ac:69:69:cc:75:79:9f:c9:ac:8b:d0:d9:fd:a7:cc:94:19:c1: 17:f7:f8:98:3a:cc:ab:fd:06:d8:78:70:6e:11:08:ef:18:e2: 88:8e:be:90:e0:6a:37:d0:cd:61:14:f4:8b:fd:1f:ee:36:96: 3b:69:8d:e4:fb:eb:b3:46:e8:a2:5a:cd:1e:97:a9:2f:6e:69: 18:0a:83:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3021WI1zXSvDWebpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk YTZlZTNmMWEtZDZmMS00ZGMyLWEyNmItYzc5MzE5ZDQxYmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFAFktPqjvNdWmz2uohem3mCHyG5nPbtteSK ujoT3oSeYfjHeQySot96Lq+hnFho0Yct/W2X2ciIjw1Hui5pU+WKI3O/n377zqti wMpl7E0CuY74kdJmqT2TvAzoryWUB27sZzj9Nt9gt7sqyrYiOD91EtioGpCjfsxl n9zJDMbyUQMEGHI6twSwoZAkbOHArpU6OK2yXFGnA9XEx6k2L6JQ80N+yG3YsP4b bPaZ6wZzSckpbzDIPleAhrcSG1kFIO0x7SMMNC3tEokLQYrFYC7UQrDHNec1zkFs Hq5t8aHYpHRUBgioMO2ZtTq+GgKPnotl84dP9ILgehdR7dNoAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDIYVeu9+ujltEBjG2BlDGdMHh9IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmFhNzE2MjgtNDAzNy0z NjBmLWI2NjAtNTNhMzcyMTRkMzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGIKwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXZFqVXBknJiJxXikN/dPC+RBIMNxbm1gDqoi3Ti35kzN3Te8I8N+8f JffQIHgOkMrXQePf8gSx2daDDJQFf33XoTAyFt5ritQibInl8W2kxWimkyGx52zs D/OuPGgECW99PYFj1CfINybkfia2C849lBCVHmqBx4mr8Wr4YYWzbJoeUIIVSPFX 3WqGAj/fNIp1YWCBNl+H/bR92qcI1d4ckOjDllF2N7y+gv0HDWH7yOxRFKxpacx1 eZ/JrIvQ2f2nzJQZwRf3+Jg6zKv9Bth4cG4RCO8Y4oiOvpDgajfQzWEU9Iv9H+42 ljtpjeT767NG6KJazR6XqS9uaRgKg44= -----END CERTIFICATE-----Generated at Sat Jun 6 15:58:10 2026 by rpki-client