$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10c2af41-a2c0-3874-8714-bf91275be430.roa File: 10c2af41-a2c0-3874-8714-bf91275be430.roa (raw, json) Hash identifier: c7z/VlhIPdugsp9QP3GBJN4GUb/Bxz6X90IlzaENTwg= Subject key identifier: 17:AF:CA:BB:F7:8C:9E:96:09:66:20:E1:20:BA:8D:05:F2:48:BF:39 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4DDCC7069DC2360052F580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10c2af41-a2c0-3874-8714-bf91275be430.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 7015 IP address blocks: 24.61.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4d:dc:c7:06:9d:c2:36:00:52:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=655c6368-e53c-499b-8bca-fd0446000c66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c7:f5:86:d2:ee:6b:58:aa:06:12:02:15:93: e2:e3:ae:de:88:10:cf:90:82:18:f3:f3:9c:8a:2f: 3f:27:26:66:fc:8e:e5:18:22:2a:6c:92:6f:dc:bc: 1f:54:e4:28:99:3f:5e:4a:c0:d7:b7:a1:29:fa:2a: 54:7f:1a:27:62:26:eb:e8:0d:48:b9:35:b4:79:37: dd:35:28:15:92:e7:ce:64:f7:bc:12:cc:11:cc:9e: df:a4:38:5c:4e:80:2e:37:9d:8e:66:eb:5c:30:c1: fc:45:44:a6:59:a4:ef:d0:72:17:55:ea:a6:3f:fd: e6:9f:14:9f:78:0c:8e:c7:bc:71:36:82:d3:43:54: 4c:00:79:64:b1:d2:d4:00:e8:6e:4b:cf:05:4d:d2: 46:ad:cb:65:7b:04:24:48:15:e4:24:3e:29:59:ba: 16:53:07:cc:2c:83:26:20:ee:97:1a:c1:84:71:17: b0:7a:ec:21:91:22:d5:b3:3e:23:50:3a:15:18:d6: 40:7e:f9:3f:de:56:eb:ec:c0:a7:52:73:f1:a7:6b: 20:47:1b:28:14:ce:79:db:bb:e5:e7:8a:65:f2:2b: a7:1b:e9:e9:ca:71:81:3a:94:f1:c2:23:b7:8f:01: 47:b7:c6:9b:10:a5:41:42:83:69:04:1e:41:88:93: 89:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:AF:CA:BB:F7:8C:9E:96:09:66:20:E1:20:BA:8D:05:F2:48:BF:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10c2af41-a2c0-3874-8714-bf91275be430.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.61.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:88:3d:7f:c2:fe:31:eb:02:29:6a:1a:6e:0a:76:ab:0d:d1: 7b:7b:48:20:3e:77:f2:8a:83:a6:c5:b2:cc:79:aa:90:da:5f: cf:0c:03:7b:81:af:6f:c0:5b:f1:24:89:7e:0c:ab:e5:96:0a: 63:46:45:4b:d7:00:58:3a:70:e4:7a:ef:01:e4:e2:7f:09:e1: eb:77:ff:35:e5:a1:5e:70:e3:a3:cf:7f:3e:ff:09:d4:47:d9: 79:a3:63:79:96:18:a0:ab:32:5f:4f:b5:fa:c2:d7:b6:17:98: 37:6f:eb:e1:34:fd:76:48:77:3f:c4:d2:85:c1:72:60:e1:b2: 6f:6c:e8:47:ce:05:49:10:27:1a:7a:0e:fa:14:82:da:19:98: 62:1e:60:05:25:dc:31:bc:ad:d1:82:f2:1e:89:8d:68:1b:e2: b9:c2:12:ed:6e:be:6f:7b:3c:86:62:01:0a:ec:c9:c5:96:83: a4:2a:19:b3:af:b7:dc:00:81:f3:af:6b:e3:e0:26:4a:61:e0: cb:28:48:27:12:42:00:62:7f:31:e8:1c:25:cd:8c:c0:0e:d0: 9e:29:08:aa:20:08:48:a7:cd:8f:5c:f7:4e:b5:6f:b7:9f:7d: c5:58:3a:12:87:26:f6:65:d7:14:3f:4e:76:1d:16:d3:89:5b: c9:fa:b5:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TdzHBp3CNgBS9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk NjU1YzYzNjgtZTUzYy00OTliLThiY2EtZmQwNDQ2MDAwYzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8f1htLua1iqBhICFZPi467eiBDPkIIY8/Oc ii8/JyZm/I7lGCIqbJJv3LwfVOQomT9eSsDXt6Ep+ipUfxonYibr6A1IuTW0eTfd NSgVkufOZPe8EswRzJ7fpDhcToAuN52OZutcMMH8RUSmWaTv0HIXVeqmP/3mnxSf eAyOx7xxNoLTQ1RMAHlksdLUAOhuS88FTdJGrctlewQkSBXkJD4pWboWUwfMLIMm IO6XGsGEcReweuwhkSLVsz4jUDoVGNZAfvk/3lbr7MCnUnPxp2sgRxsoFM5527vl 54pl8iunG+npynGBOpTxwiO3jwFHt8abEKVBQoNpBB5BiJOJ3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBevyrv3jJ6WCWYg4SC6jQXySL85MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTBjMmFmNDEtYTJjMC0z ODc0LTg3MTQtYmY5MTI3NWJlNDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGD2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqIPX/C/jHrAilqGm4KdqsN0Xt7SCA+d/KKg6bFssx5qpDaX88MA3uB r2/AW/EkiX4Mq+WWCmNGRUvXAFg6cOR67wHk4n8J4et3/zXloV5w46PPfz7/CdRH 2XmjY3mWGKCrMl9PtfrC17YXmDdv6+E0/XZIdz/E0oXBcmDhsm9s6EfOBUkQJxp6 DvoUgtoZmGIeYAUl3DG8rdGC8h6JjWgb4rnCEu1uvm97PIZiAQrsycWWg6QqGbOv t9wAgfOva+PgJkph4MsoSCcSQgBifzHoHCXNjMAO0J4pCKogCEinzY9c9061b7ef fcVYOhKHJvZl1xQ/TnYdFtOJW8n6tQw= -----END CERTIFICATE-----Generated at Thu Nov 5 15:06:48 2026 by rpki-client