$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/305e9c87-0175-3017-83fc-7b16be41103a.roa File: 305e9c87-0175-3017-83fc-7b16be41103a.roa (raw, json) Hash identifier: qhBjzIDlfvqycWRGkEm/Nn93i5yiLonDE3yZeHdZ54M= Subject key identifier: F9:48:0C:3F:00:83:A1:1D:B9:A2:A5:2A:7A:6A:08:02:07:E0:66:EF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4E527B2D1BD3953806D580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/305e9c87-0175-3017-83fc-7b16be41103a.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33668 IP address blocks: 24.128.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4e:52:7b:2d:1b:d3:95:38:06:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=2e9ae17c-8730-4153-b058-ac63274edc64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8f:53:5a:12:b8:6b:de:5c:93:03:ff:69:6e: ea:ae:ab:31:48:d1:61:2b:55:f8:29:70:56:2d:db: 71:bb:a8:2c:3f:d7:75:cc:89:be:bb:00:be:bd:58: 9a:56:d5:e4:27:dd:e9:19:50:b0:89:9d:45:6e:8c: 84:5c:e0:59:1b:f7:38:89:64:c5:0c:eb:81:37:d6: 79:25:9b:6b:4a:e0:d1:a1:24:7f:73:fc:71:a9:53: 5c:3f:8c:cb:46:f7:40:8e:6b:ce:b0:d5:ee:39:db: 2e:b8:0d:1f:25:8f:f6:1a:e9:d8:4f:5a:2d:0d:26: fc:84:69:f8:33:62:90:e7:fa:92:30:0e:1a:94:06: 47:8a:66:cf:61:27:b4:1a:29:2a:c1:15:49:7b:9d: ec:31:a3:34:62:72:e7:df:0e:e0:cb:f8:1c:0c:9c: 2e:4c:4c:09:33:b3:95:d2:44:6b:55:23:4f:39:4b: 4e:4a:eb:39:6a:6b:d3:02:10:55:40:ce:97:b0:c3: ce:89:34:03:21:c5:23:15:2f:4c:86:41:35:fd:3a: 44:46:93:f3:43:3b:3c:a7:00:77:a4:72:5d:e9:a6: 48:56:37:9b:26:0a:d1:18:06:3d:b2:fd:d1:f9:53: 91:d8:06:a4:90:51:ba:26:1e:3b:5b:9d:4f:5d:cf: 9c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:48:0C:3F:00:83:A1:1D:B9:A2:A5:2A:7A:6A:08:02:07:E0:66:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/305e9c87-0175-3017-83fc-7b16be41103a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.128.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:70:e3:88:aa:fe:bb:c9:66:53:06:2c:1e:d6:6b:88:0d:0b: a4:f1:57:7d:0b:6b:9e:d9:a8:0e:80:3c:96:73:30:d7:02:43: 43:e9:13:81:6e:88:12:57:da:5c:03:c2:43:a9:31:12:0a:c8: 3d:d4:69:b9:65:63:15:a6:34:06:ec:71:a6:ab:83:34:68:4c: 04:83:10:c0:03:48:21:c6:26:0f:e3:f2:27:73:7e:21:84:91: 9e:73:54:4b:9a:02:b6:49:cc:34:bd:5d:a7:b2:45:0e:9b:a9: fa:ae:db:91:14:7a:aa:22:2e:7d:5d:cb:57:97:8c:46:01:10: 3c:17:5f:e7:dc:b0:89:e8:8a:80:78:81:64:39:30:cf:2b:c8: 4a:28:e1:b4:45:4b:5f:12:f1:37:6b:ed:3c:de:0a:f7:36:78: 0b:96:cd:19:a5:50:c5:9b:d8:71:43:91:40:2b:9e:ad:f7:7c: 3d:d7:49:a0:53:49:aa:5f:fb:48:4e:23:1b:e3:1f:19:dc:78: 47:b1:2a:47:c2:84:08:42:b2:60:a7:6a:48:1a:ae:fa:2b:1d: 3f:87:db:83:6a:cf:59:03:9b:e1:11:c3:31:0d:b7:28:89:ad: 61:f8:95:c8:a4:9a:6a:7f:df:2b:b3:bf:7d:27:26:c0:6d:74: bf:5b:f1:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TlJ7LRvTlTgG1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk MmU5YWUxN2MtODczMC00MTUzLWIwNTgtYWM2MzI3NGVkYzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtY9TWhK4a95ckwP/aW7qrqsxSNFhK1X4KXBW Ldtxu6gsP9d1zIm+uwC+vViaVtXkJ93pGVCwiZ1FboyEXOBZG/c4iWTFDOuBN9Z5 JZtrSuDRoSR/c/xxqVNcP4zLRvdAjmvOsNXuOdsuuA0fJY/2GunYT1otDSb8hGn4 M2KQ5/qSMA4alAZHimbPYSe0GikqwRVJe53sMaM0YnLn3w7gy/gcDJwuTEwJM7OV 0kRrVSNPOUtOSus5amvTAhBVQM6XsMPOiTQDIcUjFS9MhkE1/TpERpPzQzs8pwB3 pHJd6aZIVjebJgrRGAY9sv3R+VOR2AakkFG6Jh47W51PXc+cRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPlIDD8Ag6EduaKlKnpqCAIH4GbvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzA1ZTljODctMDE3NS0z MDE3LTgzZmMtN2IxNmJlNDExMDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGICaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZw44iq/rvJZlMGLB7Wa4gNC6TxV30La57ZqA6APJZzMNcCQ0PpE4Fu iBJX2lwDwkOpMRIKyD3UabllYxWmNAbscaargzRoTASDEMADSCHGJg/j8idzfiGE kZ5zVEuaArZJzDS9XaeyRQ6bqfqu25EUeqoiLn1dy1eXjEYBEDwXX+fcsInoioB4 gWQ5MM8ryEoo4bRFS18S8Tdr7TzeCvc2eAuWzRmlUMWb2HFDkUArnq33fD3XSaBT Sapf+0hOIxvjHxnceEexKkfChAhCsmCnakgarvorHT+H24Nqz1kDm+ERwzENtyiJ rWH4lcikmmp/3yuzv30nJsBtdL9b8W8= -----END CERTIFICATE-----Generated at Sat Oct 24 16:57:05 2026 by rpki-client