$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc4617a9-dac4-3a1f-b62a-75970aba05cd.roa File: cc4617a9-dac4-3a1f-b62a-75970aba05cd.roa (raw, json) Hash identifier: 5T2fKHuHf+Jec2oWkZjd3o44OjIiIeN7uhzfKnKbtWM= Subject key identifier: 34:D8:2F:FA:52:AB:96:33:67:7F:53:84:F2:39:A4:35:B1:18:D6:68 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF69F86A8203826EE0B7E20 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc4617a9-dac4-3a1f-b62a-75970aba05cd.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33651 IP address blocks: 24.23.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:9f:86:a8:20:38:26:ee:0b:7e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=7afcc733-cae1-426c-9ad7-88f2606adf7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:90:a4:67:65:e9:8a:b6:d4:9d:9e:47:88:26: 11:27:9c:52:35:4f:b9:23:db:91:7c:11:9e:28:1c: 49:03:7d:cd:f9:0b:de:c3:99:7b:e1:17:c5:6f:80: 24:e9:c5:60:b4:38:61:0a:c2:d6:8f:0a:8f:2b:93: dc:e8:81:ce:25:7c:e3:2a:45:8a:59:8c:fc:24:0a: 18:02:79:7c:1b:75:22:f5:8c:b0:53:cc:c9:76:34: ed:4f:7c:ac:6c:07:68:61:26:c9:f4:3e:46:37:0b: 6b:85:6b:9c:61:59:28:00:0c:cd:f3:ec:75:60:75: 08:9b:8f:55:c6:82:f9:ae:e8:0a:ff:9d:0d:c0:27: 38:ea:25:02:b1:52:4c:9b:55:d2:64:54:a9:89:ee: 68:7c:e0:a6:7f:5a:fc:6c:fe:47:f0:00:b1:1e:2f: a7:e1:b3:bf:e6:6b:44:fd:40:66:33:a7:ca:5a:67: ef:36:57:10:b6:d9:70:ba:be:11:4f:14:f7:82:02: cc:45:27:6a:e2:0f:a5:05:57:8c:76:66:79:a2:fe: e0:12:f9:df:e8:d1:77:a0:32:be:5c:66:1e:44:76: 28:cb:0e:bd:ad:8a:e3:37:f7:97:b7:84:f5:12:9e: 34:62:4b:79:08:9f:5d:5f:63:73:74:89:e2:6d:08: 9e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D8:2F:FA:52:AB:96:33:67:7F:53:84:F2:39:A4:35:B1:18:D6:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc4617a9-dac4-3a1f-b62a-75970aba05cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.23.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:90:c7:a5:73:cc:e4:d5:aa:bd:62:a8:89:04:f5:49:0a:13: f9:4d:93:a6:24:45:99:93:c8:8b:ef:5c:38:5e:b2:09:24:f0: 4a:23:5c:7c:8f:5a:c8:28:cf:3f:c1:e8:93:d4:1f:37:57:fa: d6:ca:24:3f:43:1b:e3:44:0e:4c:d2:c1:c9:7b:1c:ae:9d:ef: fd:2f:fe:47:84:a9:f7:c7:12:5f:61:b7:ea:71:c6:5f:db:b3: de:13:84:09:73:0e:7b:17:a8:a8:6b:f7:92:46:87:5d:78:72: 3d:be:52:96:f8:2c:8b:70:08:f5:c8:7b:40:51:cb:b1:e0:2c: b9:76:13:70:cd:23:bf:d9:87:59:21:a1:9c:bb:e6:9d:fa:8c: 0a:8f:7d:68:46:14:36:c2:6d:fd:35:00:ab:59:a5:50:76:e4: 92:ed:11:a0:b0:6f:d3:53:8e:fb:63:20:76:ea:b9:88:1d:16: 9b:dc:7f:14:38:7d:56:22:e2:d2:07:79:48:db:5c:77:85:56: d4:62:60:9c:04:d8:22:5d:1d:cd:dd:63:3e:46:7e:05:b2:70: 5c:a6:d9:09:00:29:f3:80:4c:7a:bb:1f:56:c2:35:3c:3d:ff: 86:ec:46:3f:b5:1b:56:9d:9d:f4:ea:d2:50:2d:50:a8:a9:0a: 0f:54:79:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9p+GqCA4Ju4LfiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk N2FmY2M3MzMtY2FlMS00MjZjLTlhZDctODhmMjYwNmFkZjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpCkZ2XpirbUnZ5HiCYRJ5xSNU+5I9uRfBGe KBxJA33N+Qvew5l74RfFb4Ak6cVgtDhhCsLWjwqPK5Pc6IHOJXzjKkWKWYz8JAoY Anl8G3Ui9YywU8zJdjTtT3ysbAdoYSbJ9D5GNwtrhWucYVkoAAzN8+x1YHUIm49V xoL5rugK/50NwCc46iUCsVJMm1XSZFSpie5ofOCmf1r8bP5H8ACxHi+n4bO/5mtE /UBmM6fKWmfvNlcQttlwur4RTxT3ggLMRSdq4g+lBVeMdmZ5ov7gEvnf6NF3oDK+ XGYeRHYoyw69rYrjN/eXt4T1Ep40Ykt5CJ9dX2NzdInibQieHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTYL/pSq5YzZ39ThPI5pDWxGNZoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2M0NjE3YTktZGFjNC0z YTFmLWI2MmEtNzU5NzBhYmEwNWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGBfYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaQx6VzzOTVqr1iqIkE9UkKE/lNk6YkRZmTyIvvXDhesgkk8EojXHyP Wsgozz/B6JPUHzdX+tbKJD9DG+NEDkzSwcl7HK6d7/0v/keEqffHEl9ht+pxxl/b s94ThAlzDnsXqKhr95JGh114cj2+Upb4LItwCPXIe0BRy7HgLLl2E3DNI7/Zh1kh oZy75p36jAqPfWhGFDbCbf01AKtZpVB25JLtEaCwb9NTjvtjIHbquYgdFpvcfxQ4 fVYi4tIHeUjbXHeFVtRiYJwE2CJdHc3dYz5GfgWycFym2QkAKfOATHq7H1bCNTw9 /4bsRj+1G1adnfTq0lAtUKipCg9Uebc= -----END CERTIFICATE-----Generated at Tue Apr 21 19:21:49 2026 by rpki-client