$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/00102dae-e0e8-34ac-b7a1-f7b63a027870.roa File: 00102dae-e0e8-34ac-b7a1-f7b63a027870.roa (raw, json) Hash identifier: Wi18pblxpT+B3uFCumjPocrDkUT6bG1zTez9qAH7+50= Subject key identifier: 95:24:BA:C4:77:60:64:DC:92:2B:6C:05:19:EC:8E:E0:58:E9:A1:7D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119EFA6D7DBC4DACA8F1E840 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/00102dae-e0e8-34ac-b7a1-f7b63a027870.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33491 IP address blocks: 24.12.212.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9e:fa:6d:7d:bc:4d:ac:a8:f1:e8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=bf59e2c4-b1fa-4d6b-b87c-a63512e0abb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a6:ff:e0:57:af:35:71:b2:38:e3:7b:2e:df: 6b:0b:68:9a:c8:54:12:df:dc:23:60:1a:7e:76:14: 8f:2c:e3:7a:35:60:41:c5:4d:dd:e5:c6:c3:ac:cd: 4b:ed:7a:8c:77:92:6a:c7:2b:af:57:7a:a2:b5:84: 57:fe:c4:94:87:02:be:b0:02:06:da:7e:23:e2:67: 95:55:8e:f8:4c:66:30:55:60:cb:a9:98:f0:14:c0: bb:42:1c:da:ec:f8:d2:25:7a:69:f3:d4:ac:8d:bd: b3:33:f0:af:bf:23:37:69:a0:11:8d:14:f5:18:21: 04:9a:a1:b2:7d:79:5f:12:78:a3:91:24:74:be:67: 71:f5:98:50:39:82:d9:3d:0a:15:cf:9a:0d:42:a0: b0:76:ef:16:c7:fe:e1:d5:9f:35:30:46:f2:dc:af: b9:e2:9d:d9:df:51:5a:4f:49:00:e5:05:93:3b:dc: 03:01:ca:a3:6a:7b:d8:45:ea:ec:fb:18:b6:d6:e2: 0e:a1:1e:66:04:06:bf:ef:36:32:e2:03:97:d0:5c: cf:c7:08:cc:bd:05:8d:ec:ef:e7:62:29:df:20:69: ce:96:e4:31:b7:04:e9:ac:34:04:6f:f7:94:89:c5: e1:22:91:b6:39:f3:eb:7c:d7:37:19:c4:8b:de:fb: 37:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:24:BA:C4:77:60:64:DC:92:2B:6C:05:19:EC:8E:E0:58:E9:A1:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/00102dae-e0e8-34ac-b7a1-f7b63a027870.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.12.212.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:45:fa:77:91:6a:d3:f5:d5:1e:6b:39:7a:4d:d3:14:2e:87: 44:9b:be:29:4f:f3:26:c9:59:00:e7:a7:8a:85:8d:5c:9c:89: bd:d8:71:38:5c:a7:8d:cd:aa:9e:3e:8e:72:17:e5:d1:9c:08: f4:f2:fc:8c:ae:18:36:dd:f4:ef:e3:aa:7f:11:47:bb:07:d3: fc:27:08:c3:6f:f1:fe:e1:ab:7d:20:13:82:d9:30:92:41:fa: e5:10:d9:e4:f9:fc:d5:7a:ac:19:77:bd:02:56:45:9f:44:21: 6d:10:62:55:5e:51:7c:07:6d:41:33:39:48:5b:b8:36:2b:a8: 2f:cb:c8:36:8e:03:ed:bd:12:a1:6a:37:7f:a0:2c:96:01:65: 1a:cf:6c:40:ee:94:35:a6:0a:8e:a7:3a:0d:ae:55:b7:4c:fe: 63:a3:6d:21:07:21:53:4c:dc:03:a9:d2:e4:f7:82:23:1b:05: f0:23:28:a7:27:d2:70:48:6c:2e:fd:ce:5a:93:48:b4:b2:b8: ae:21:f6:1c:a2:4a:1a:4a:2e:67:75:ce:b8:67:1e:c8:4d:29: 89:5f:dc:dd:44:8b:20:76:fe:f6:2a:50:1c:34:c4:23:ef:c3: 8d:1f:e5:87:79:68:e1:56:df:ec:1e:81:93:99:69:14:9a:88: 0a:c2:ee:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnvptfbxNrKjx6EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk YmY1OWUyYzQtYjFmYS00ZDZiLWI4N2MtYTYzNTEyZTBhYmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qb/4FevNXGyOON7Lt9rC2iayFQS39wjYBp+ dhSPLON6NWBBxU3d5cbDrM1L7XqMd5JqxyuvV3qitYRX/sSUhwK+sAIG2n4j4meV VY74TGYwVWDLqZjwFMC7Qhza7PjSJXpp89Ssjb2zM/CvvyM3aaARjRT1GCEEmqGy fXlfEnijkSR0vmdx9ZhQOYLZPQoVz5oNQqCwdu8Wx/7h1Z81MEby3K+54p3Z31Fa T0kA5QWTO9wDAcqjanvYRers+xi21uIOoR5mBAa/7zYy4gOX0FzPxwjMvQWN7O/n YinfIGnOluQxtwTprDQEb/eUicXhIpG2OfPrfNc3GcSL3vs3pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJUkusR3YGTckitsBRnsjuBY6aF9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDAxMDJkYWUtZTBlOC0z NGFjLWI3YTEtZjdiNjNhMDI3ODcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGAzUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJpF+neRatP11R5rOXpN0xQuh0SbvilP8ybJWQDnp4qFjVycib3YcThc p43Nqp4+jnIX5dGcCPTy/IyuGDbd9O/jqn8RR7sH0/wnCMNv8f7hq30gE4LZMJJB +uUQ2eT5/NV6rBl3vQJWRZ9EIW0QYlVeUXwHbUEzOUhbuDYrqC/LyDaOA+29EqFq N3+gLJYBZRrPbEDulDWmCo6nOg2uVbdM/mOjbSEHIVNM3AOp0uT3giMbBfAjKKcn 0nBIbC79zlqTSLSyuK4h9hyiShpKLmd1zrhnHshNKYlf3N1EiyB2/vYqUBw0xCPv w40f5Yd5aOFW3+wegZOZaRSaiArC7g0= -----END CERTIFICATE-----Generated at Sat Sep 5 16:10:24 2026 by rpki-client