$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/a04b1006-9564-3ccc-99b9-4cd1c222b0a6.roa File: a04b1006-9564-3ccc-99b9-4cd1c222b0a6.roa (raw, json) Hash identifier: MNQwbJQGaN5TGAERFHVZE2q1kgLinZY+QGvO+x2hRYc= Subject key identifier: 6F:F0:25:B5:90:14:56:B1:19:F4:5A:AC:45:E8:7A:56:56:12:A4:0E Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584DA6B00FB5F65C209FE8812180 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/a04b1006-9564-3ccc-99b9-4cd1c222b0a6.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 14061 IP address blocks: 24.144.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:0f:b5:f6:5c:20:9f:e8:81:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=5b46289d-bd3a-4dc9-bb6b-8a791e190760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d1:b4:0e:95:03:a5:55:ad:31:b0:5c:c8:05: 02:23:02:3c:5a:e8:5b:7c:b9:dd:91:36:6e:fd:20: 99:60:95:fd:ea:6f:e9:6f:13:4b:12:3e:d5:91:08: 91:3e:70:35:62:a7:41:36:f6:ff:fc:35:3f:c4:24: dd:f9:b5:df:a5:a5:5e:9e:64:26:b0:6e:1a:32:34: 5b:26:3f:7c:13:7f:59:b1:de:80:49:fc:e9:6b:32: 63:ab:83:4f:22:17:28:8a:b5:eb:8f:5f:c2:49:b5: de:a4:86:9b:ca:f4:68:8d:7d:eb:1e:6a:21:4d:5f: a6:46:ea:09:91:75:04:80:41:b6:b6:57:1d:1a:1a: a3:a1:14:d3:7f:a0:c6:ca:13:0f:eb:cf:f1:4b:eb: aa:12:45:ae:58:c6:4c:78:c3:99:1f:70:1e:47:3b: b3:35:66:9d:14:50:48:6e:4a:04:cf:28:94:0f:16: 9e:c7:51:a4:22:5a:0f:46:6d:f7:c2:bf:c3:74:3f: 5a:99:1c:05:0b:1a:35:23:9e:3d:bf:77:ae:25:4c: 54:df:72:d3:98:e5:d6:6c:a8:f9:f4:7b:87:46:1b: c4:c2:8a:9c:00:4a:91:df:09:be:9b:40:2a:2f:a6: 77:1e:5e:2d:b8:88:f9:ac:ca:29:1f:91:41:a7:2c: 88:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:F0:25:B5:90:14:56:B1:19:F4:5A:AC:45:E8:7A:56:56:12:A4:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/a04b1006-9564-3ccc-99b9-4cd1c222b0a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 24.144.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:f5:99:98:94:39:9a:c9:10:0d:56:60:06:91:1f:29:aa:9c: 0d:87:6d:75:75:71:53:3f:ca:b1:75:ae:f7:2f:54:d4:06:51: 19:78:e0:8a:47:eb:6a:c6:4d:28:83:20:43:13:0b:30:ce:37: af:40:29:d7:7e:01:29:bd:20:03:8e:c0:75:fb:82:95:16:be: 1b:92:29:06:7b:26:2b:6d:e3:fe:40:0c:8a:4a:fb:e0:61:94: ac:35:85:c7:cb:00:c5:58:fe:0d:c9:91:c8:33:17:ea:92:1b: ad:a9:40:21:86:c0:13:54:3a:00:fc:00:4b:26:7d:8e:1c:35: 87:c0:c2:b6:12:e6:2f:8e:0d:07:6a:0f:3a:e9:6e:36:7e:c9: 85:b7:6d:9c:cb:39:79:7a:1c:db:9f:23:39:34:e1:85:f0:73: 74:47:07:3c:72:2f:67:e7:e9:14:46:f1:2e:6f:33:d6:4b:ec: 6d:dd:6d:8e:2e:a8:cf:4b:02:2f:c5:93:6a:a2:15:37:0c:d0: 44:ef:89:aa:56:9e:34:5f:85:d4:65:e4:d5:e5:f3:6f:7a:4c: 4d:f2:6f:a2:40:af:11:bc:04:48:5d:9c:ae:d3:c1:f5:78:84: e9:04:68:e5:4e:21:84:96:46:0e:f4:35:19:f7:c2:a5:63:ea: 39:2f:d2:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msA+19lwgn+iBIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk NWI0NjI4OWQtYmQzYS00ZGM5LWJiNmItOGE3OTFlMTkwNzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9G0DpUDpVWtMbBcyAUCIwI8WuhbfLndkTZu /SCZYJX96m/pbxNLEj7VkQiRPnA1YqdBNvb//DU/xCTd+bXfpaVenmQmsG4aMjRb Jj98E39Zsd6ASfzpazJjq4NPIhcoirXrj1/CSbXepIabyvRojX3rHmohTV+mRuoJ kXUEgEG2tlcdGhqjoRTTf6DGyhMP68/xS+uqEkWuWMZMeMOZH3AeRzuzNWadFFBI bkoEzyiUDxaex1GkIloPRm33wr/DdD9amRwFCxo1I549v3euJUxU33LTmOXWbKj5 9HuHRhvEwoqcAEqR3wm+m0AqL6Z3Hl4tuIj5rMopH5FBpyyI3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG/wJbWQFFaxGfRarEXoelZWEqQOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvYTA0YjEwMDYtOTU2NC0z Y2NjLTk5YjktNGNkMWMyMjJiMGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGGJBAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/1mZiUOZrJEA1WYAaRHymqnA2HbXV1cVM/yrF1rvcvVNQGURl44IpH 62rGTSiDIEMTCzDON69AKdd+ASm9IAOOwHX7gpUWvhuSKQZ7Jitt4/5ADIpK++Bh lKw1hcfLAMVY/g3JkcgzF+qSG62pQCGGwBNUOgD8AEsmfY4cNYfAwrYS5i+ODQdq DzrpbjZ+yYW3bZzLOXl6HNufIzk04YXwc3RHBzxyL2fn6RRG8S5vM9ZL7G3dbY4u qM9LAi/Fk2qiFTcM0ETviapWnjRfhdRl5NXl8296TE3yb6JArxG8BEhdnK7TwfV4 hOkEaOVOIYSWRg70NRn3wqVj6jkv0tA= -----END CERTIFICATE-----Generated at Wed May 13 08:26:54 2026 by rpki-client