$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/19bd4717-ed34-36d3-9435-7671e9adaac2.roa File: 19bd4717-ed34-36d3-9435-7671e9adaac2.roa (raw, json) Hash identifier: SKGEIGKG91G8Kg/7Xxf/TutoW7gnc5wF7u5PHiSrF2U= Subject key identifier: 0C:78:D5:2A:26:4B:1F:4F:DA:E4:02:45:EC:C4:A8:A8:6D:75:7D:D0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119D9A33B1F7A9876FFC4400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/19bd4717-ed34-36d3-9435-7671e9adaac2.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33491 IP address blocks: 24.1.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:9a:33:b1:f7:a9:87:6f:fc:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=3bc87bc3-c991-4fd5-a3ec-04571e17bfb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:45:4d:21:e3:b0:80:7a:9f:d6:37:c7:1b:7c: 0f:41:3b:6a:a4:de:42:f1:34:17:4b:3b:3a:2b:c0: 0e:f9:d9:28:15:47:bb:20:1c:14:4a:3a:11:ce:48: 8d:e9:95:41:89:6b:ed:37:bd:34:a7:87:3c:13:e5: f9:55:a7:ac:c4:e1:c6:ff:0b:be:03:b2:4c:fe:74: 38:7e:8a:19:54:3d:0b:56:20:5c:33:77:06:df:55: 28:a1:69:ff:fb:06:fb:40:20:29:47:bb:bd:dc:62: f6:21:b4:85:1e:fd:cc:36:74:a0:1c:3b:c2:30:af: 71:05:9a:12:d6:2d:80:96:ec:c8:26:4b:f5:3d:1f: b4:80:15:26:a1:fe:dd:b3:ab:5c:a1:6b:97:e0:5d: 42:59:3c:3c:09:c0:e2:89:e2:eb:25:f4:71:0e:6f: 50:16:3c:e0:c6:31:4c:20:dd:bb:ea:ec:32:ac:2a: bc:53:07:ef:33:17:01:6c:02:9e:5a:4e:bc:01:42: 8e:29:86:c3:aa:32:45:f5:e8:c3:1f:ef:2c:a0:5d: 47:04:c4:83:19:59:84:8f:cd:21:83:c9:18:3c:79: 04:77:9a:40:bc:7d:60:f8:97:f0:9e:47:48:2a:a6: 14:de:04:e9:f8:42:f0:c0:f6:ae:9b:82:42:f1:4c: 3e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:78:D5:2A:26:4B:1F:4F:DA:E4:02:45:EC:C4:A8:A8:6D:75:7D:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/19bd4717-ed34-36d3-9435-7671e9adaac2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.1.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:f7:bd:00:4f:92:0b:6a:a6:a1:49:9a:40:41:78:be:83:11: b6:22:fa:c0:1b:eb:9a:03:d2:44:d3:81:df:90:f3:f7:25:33: 5d:e2:59:11:b5:1d:29:42:40:c5:35:94:7b:09:13:60:36:94: 1d:f9:45:92:c6:30:29:b1:e6:06:c7:d1:b8:d0:7a:94:03:41: 7b:06:9e:be:9e:b2:e9:32:8c:f6:32:de:f8:02:4f:7e:ea:cc: 38:46:b9:78:32:5a:23:d4:55:99:02:e2:bd:de:d3:05:d6:2a: bd:99:cf:89:7a:b0:1e:e4:e7:64:53:bc:44:d4:f4:7e:66:38: 19:e8:b7:02:c3:5c:c6:dd:b9:c6:63:78:7e:82:1d:1e:7b:1e: 75:bd:30:fa:ae:4b:8d:bb:79:ca:58:57:9d:ea:d1:73:ba:4e: 1a:70:fb:9a:5c:6f:d8:3a:52:2a:26:94:a2:23:be:5c:c7:86: 45:b0:a6:f1:cc:41:fc:4f:c1:48:95:da:3e:c7:38:00:cf:53: dd:e5:9b:a4:7f:8a:ec:74:3c:25:b4:a1:a7:24:f5:eb:40:98: 86:7b:ac:91:b7:92:55:0a:77:0e:bd:06:5f:f9:5b:ea:38:59: e8:d6:86:dd:98:8b:59:3f:9e:eb:d9:9d:09:2f:06:43:90:b4: 60:94:da:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnZozsfeph2/8RAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk M2JjODdiYzMtYzk5MS00ZmQ1LWEzZWMtMDQ1NzFlMTdiZmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0VNIeOwgHqf1jfHG3wPQTtqpN5C8TQXSzs6 K8AO+dkoFUe7IBwUSjoRzkiN6ZVBiWvtN700p4c8E+X5VaesxOHG/wu+A7JM/nQ4 fooZVD0LViBcM3cG31UooWn/+wb7QCApR7u93GL2IbSFHv3MNnSgHDvCMK9xBZoS 1i2AluzIJkv1PR+0gBUmof7ds6tcoWuX4F1CWTw8CcDiieLrJfRxDm9QFjzgxjFM IN276uwyrCq8UwfvMxcBbAKeWk68AUKOKYbDqjJF9ejDH+8soF1HBMSDGVmEj80h g8kYPHkEd5pAvH1g+JfwnkdIKqYU3gTp+ELwwPaum4JC8Uw+HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAx41SomSx9P2uQCRezEqKhtdX3QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTliZDQ3MTctZWQzNC0z NmQzLTk0MzUtNzY3MWU5YWRhYWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGAEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEf3vQBPkgtqpqFJmkBBeL6DEbYi+sAb65oD0kTTgd+Q8/clM13iWRG1 HSlCQMU1lHsJE2A2lB35RZLGMCmx5gbH0bjQepQDQXsGnr6esukyjPYy3vgCT37q zDhGuXgyWiPUVZkC4r3e0wXWKr2Zz4l6sB7k52RTvETU9H5mOBnotwLDXMbducZj eH6CHR57HnW9MPquS427ecpYV53q0XO6Thpw+5pcb9g6UiomlKIjvlzHhkWwpvHM QfxPwUiV2j7HOADPU93lm6R/iux0PCW0oack9etAmIZ7rJG3klUKdw69Bl/5W+o4 WejWht2Yi1k/nuvZnQkvBkOQtGCU2og= -----END CERTIFICATE-----Generated at Sat Sep 5 14:25:16 2026 by rpki-client