$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25d678f0-b1be-3b88-8144-50db98c9e7bc.roa File: 25d678f0-b1be-3b88-8144-50db98c9e7bc.roa (raw, json) Hash identifier: znrhV8F/qMTMU4zxffHqjbJkcW5IccKP+G178vpUi5s= Subject key identifier: 11:53:BB:E1:3E:B4:C5:93:1A:B1:95:6A:1E:83:FB:87:66:14:FF:0F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED861F34829C12DAEAE8908A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25d678f0-b1be-3b88-8144-50db98c9e7bc.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33490 IP address blocks: 24.20.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:61:f3:48:29:c1:2d:ae:ae:89:08:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=e5224151-1164-4bef-a2a8-20471ad2f333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0f:08:96:04:cb:31:7a:e0:24:f6:91:13:45: fc:78:8d:b8:95:21:9d:60:18:a7:85:ae:5c:8c:e4: fa:f2:14:38:2d:fe:1c:1e:e7:b2:7e:1c:a8:8c:75: 4b:e6:02:8e:3c:5a:11:d4:c7:68:ba:5e:41:b9:b4: 12:f9:38:e9:85:54:51:0d:d3:98:92:b1:70:91:fa: a0:34:e9:16:af:33:3d:79:00:b6:7f:98:a2:8e:6b: 81:cf:78:f5:21:e3:22:6f:0e:16:2d:43:d3:ba:23: dd:9a:34:28:37:57:04:31:23:bb:50:5a:57:f2:1d: 23:a9:00:21:21:03:ce:58:63:88:6e:19:4a:09:5a: 8e:93:80:61:38:83:b1:c5:1d:cd:31:4a:55:9a:28: fb:6b:fd:db:65:d2:77:57:35:aa:f5:ab:d9:ac:53: 11:28:ae:b4:29:98:de:e4:e8:2f:ee:ab:39:9e:f0: 3e:f9:8a:b7:4a:13:8e:5f:6a:99:a0:45:c2:65:04: 79:32:96:3d:9c:20:e5:c2:a8:4e:d5:8a:91:95:3f: 99:3d:9b:a3:74:52:dc:d8:26:9e:24:45:92:a9:2a: fa:cd:d8:a4:48:4b:2d:c6:ef:e7:8a:be:85:2b:ab: 1b:f8:49:66:9f:cc:a2:fb:1f:bf:31:66:89:74:a0: bb:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:53:BB:E1:3E:B4:C5:93:1A:B1:95:6A:1E:83:FB:87:66:14:FF:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25d678f0-b1be-3b88-8144-50db98c9e7bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.20.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:1c:fc:60:fb:c4:c9:9d:9b:df:3e:b0:fc:2f:c2:1d:5e:6a: e8:b3:8d:75:f0:83:73:3c:65:59:9e:77:ff:2a:4e:fd:5b:ed: 25:bf:9a:98:ff:fc:94:8e:f7:25:95:37:23:6a:a0:40:52:43: c9:9b:52:b8:a3:63:0a:ac:b6:aa:7a:09:d8:01:82:5f:f3:cb: 2d:91:4e:27:b7:7c:65:fd:42:5a:6e:9f:56:51:73:f0:c1:82: 24:0d:8d:27:34:cf:36:0a:f6:c3:d7:fa:fe:64:7a:4c:05:a5: 8c:13:ba:0a:19:ba:ad:e3:02:9a:92:29:0b:ec:9b:65:7a:56: 9d:11:05:59:0f:57:f9:37:dc:f6:df:b8:1e:b8:5d:8e:da:ea: 29:3b:f1:34:5f:2b:1d:43:48:a1:9a:7a:51:b7:da:d4:59:59: 69:1d:d3:5b:1a:11:84:df:92:42:6f:05:86:a4:99:88:df:86: 21:ac:08:7f:37:09:65:9f:1d:f1:54:f8:66:27:a4:e4:fd:a5: ba:89:91:80:91:f8:10:7e:6e:e8:51:80:69:5c:0f:c1:69:6d: 6a:b3:1a:5b:e9:8f:15:5e:52:30:2c:78:fb:fa:06:f9:01:a8: ce:f3:96:99:e3:41:e4:b9:9d:99:10:2a:49:a8:17:bd:b0:ea: 35:a4:f9:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYfNIKcEtrq6JCKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk ZTUyMjQxNTEtMTE2NC00YmVmLWEyYTgtMjA0NzFhZDJmMzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg8IlgTLMXrgJPaRE0X8eI24lSGdYBinha5c jOT68hQ4Lf4cHueyfhyojHVL5gKOPFoR1Mdoul5BubQS+TjphVRRDdOYkrFwkfqg NOkWrzM9eQC2f5iijmuBz3j1IeMibw4WLUPTuiPdmjQoN1cEMSO7UFpX8h0jqQAh IQPOWGOIbhlKCVqOk4BhOIOxxR3NMUpVmij7a/3bZdJ3VzWq9avZrFMRKK60KZje 5Ogv7qs5nvA++Yq3ShOOX2qZoEXCZQR5MpY9nCDlwqhO1YqRlT+ZPZujdFLc2Cae JEWSqSr6zdikSEstxu/nir6FK6sb+Elmn8yi+x+/MWaJdKC7UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFTu+E+tMWTGrGVah6D+4dmFP8PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjVkNjc4ZjAtYjFiZS0z Yjg4LTgxNDQtNTBkYjk4YzllN2JjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGBT8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYc/GD7xMmdm98+sPwvwh1eauizjXXwg3M8ZVmed/8qTv1b7SW/mpj/ /JSO9yWVNyNqoEBSQ8mbUrijYwqstqp6CdgBgl/zyy2RTie3fGX9Qlpun1ZRc/DB giQNjSc0zzYK9sPX+v5kekwFpYwTugoZuq3jApqSKQvsm2V6Vp0RBVkPV/k33Pbf uB64XY7a6ik78TRfKx1DSKGaelG32tRZWWkd01saEYTfkkJvBYakmYjfhiGsCH83 CWWfHfFU+GYnpOT9pbqJkYCR+BB+buhRgGlcD8FpbWqzGlvpjxVeUjAsePv6BvkB qM7zlpnjQeS5nZkQKkmoF72w6jWk+aI= -----END CERTIFICATE-----Generated at Sat Sep 5 09:34:11 2026 by rpki-client