$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02cf899b-1955-3b78-b131-f63bb60e1c8a.roa File: 02cf899b-1955-3b78-b131-f63bb60e1c8a.roa (raw, json) Hash identifier: 8bP8ZfQlKg1HC1NcZPODHYaRSmkk7fADP0fjH5q/v78= Subject key identifier: 1D:A5:F7:F7:5F:50:1B:4E:67:D2:42:47:A0:23:B6:04:16:EF:0D:FA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4EDCF91A853617D8784140 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02cf899b-1955-3b78-b131-f63bb60e1c8a.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33490 IP address blocks: 24.21.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4e:dc:f9:1a:85:36:17:d8:78:41:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=b1012517-12d6-4244-9503-66e77b736cf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2d:50:a7:c5:20:42:5d:c4:12:16:6b:50:77: c7:bf:1b:e8:27:39:7e:db:5a:48:d4:96:39:35:ba: 89:57:9d:4b:23:d7:0e:18:fc:9d:ca:f3:d9:b3:b4: 52:6f:d0:c1:10:49:e7:9c:bb:22:81:72:96:08:fc: 98:e6:30:49:5e:4d:63:3d:da:da:78:69:58:e8:96: f5:ac:61:d4:77:ce:98:a8:7e:f6:b0:d6:22:66:78: 4b:45:fc:d2:f6:66:ac:b3:09:b2:47:fa:1e:ff:0b: 47:59:e9:a0:75:2d:c7:1b:de:ed:66:ff:f0:ed:47: 99:42:0d:0e:93:a8:1f:01:e3:77:fb:8f:7e:cf:13: fc:96:21:a7:4e:59:e2:2e:c7:2b:95:1c:01:28:19: 16:ae:69:93:47:ef:8a:53:ea:83:9d:6b:bb:f4:8e: 53:ea:f6:65:8f:e8:1c:b2:6a:8b:8f:8a:85:24:3a: e3:70:75:a1:80:44:65:e2:1f:d6:44:c1:57:65:7c: 5d:b7:03:f8:a4:bd:5f:14:c3:2e:97:e0:ef:a2:44: 4f:2c:2a:0e:40:17:32:de:40:fe:ac:46:c0:61:3d: b3:38:69:f2:0f:9b:10:88:33:af:66:0e:06:91:c9: 61:32:08:b0:0f:0d:eb:76:c3:d3:ac:e9:db:b3:72: 84:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A5:F7:F7:5F:50:1B:4E:67:D2:42:47:A0:23:B6:04:16:EF:0D:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02cf899b-1955-3b78-b131-f63bb60e1c8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.21.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:25:16:a6:23:33:72:22:bf:30:35:b4:d6:ef:0d:ff:e3:74: ef:95:af:08:13:ae:c6:9a:2b:bc:cd:a2:b3:43:c7:2e:c2:63: aa:55:6f:15:44:6c:15:83:c4:8b:e3:9e:d5:6e:ad:76:cd:ab: 91:bd:25:23:a0:4d:7a:b1:b7:a3:a4:5a:de:2f:12:46:03:bd: 2d:48:9b:72:bd:77:e9:17:ab:38:0d:f1:8e:f6:22:5f:2f:ba: ed:76:59:ec:0d:75:23:cd:6b:44:36:43:61:76:4e:65:37:45: 7e:db:7c:65:c8:74:30:2f:ad:32:8f:c0:61:2d:c1:19:47:f3: d2:96:4f:8b:80:52:1a:19:32:b7:45:67:ed:9e:1b:0e:db:18: 86:e7:08:c0:a4:30:37:f1:f7:7d:96:ea:4f:22:04:bd:30:91: 6e:cb:37:18:e4:2c:77:4e:98:3c:0f:31:1a:17:c7:9b:22:4e: 34:6b:14:44:0f:d7:99:2c:9f:2b:5c:1c:4b:9f:8f:fa:44:d4: 78:1b:e2:d0:da:eb:e3:cf:68:24:c7:ce:5c:0e:13:52:1b:c7: 35:f7:0a:7f:ce:2b:95:bf:dc:26:9f:a6:25:e6:24:45:a4:13: 1f:82:5c:d0:39:a4:f1:b3:21:9b:fe:d4:25:c1:7c:d9:2c:93: d3:3a:32:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96Ttz5GoU2F9h4QUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk YjEwMTI1MTctMTJkNi00MjQ0LTk1MDMtNjZlNzdiNzM2Y2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsy1Qp8UgQl3EEhZrUHfHvxvoJzl+21pI1JY5 NbqJV51LI9cOGPydyvPZs7RSb9DBEEnnnLsigXKWCPyY5jBJXk1jPdraeGlY6Jb1 rGHUd86YqH72sNYiZnhLRfzS9masswmyR/oe/wtHWemgdS3HG97tZv/w7UeZQg0O k6gfAeN3+49+zxP8liGnTlniLscrlRwBKBkWrmmTR++KU+qDnWu79I5T6vZlj+gc smqLj4qFJDrjcHWhgERl4h/WRMFXZXxdtwP4pL1fFMMul+DvokRPLCoOQBcy3kD+ rEbAYT2zOGnyD5sQiDOvZg4GkclhMgiwDw3rdsPTrOnbs3KESQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB2l9/dfUBtOZ9JCR6AjtgQW7w36MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDJjZjg5OWItMTk1NS0z Yjc4LWIxMzEtZjYzYmI2MGUxYzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGBXqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMolFqYjM3IivzA1tNbvDf/jdO+VrwgTrsaaK7zNorNDxy7CY6pVbxVE bBWDxIvjntVurXbNq5G9JSOgTXqxt6OkWt4vEkYDvS1Im3K9d+kXqzgN8Y72Il8v uu12WewNdSPNa0Q2Q2F2TmU3RX7bfGXIdDAvrTKPwGEtwRlH89KWT4uAUhoZMrdF Z+2eGw7bGIbnCMCkMDfx932W6k8iBL0wkW7LNxjkLHdOmDwPMRoXx5siTjRrFEQP 15ksnytcHEufj/pE1Hgb4tDa6+PPaCTHzlwOE1IbxzX3Cn/OK5W/3CafpiXmJEWk Ex+CXNA5pPGzIZv+1CXBfNksk9M6Mvw= -----END CERTIFICATE-----Generated at Sat Oct 24 10:30:31 2026 by rpki-client