$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3445af72-31a2-3d40-bfbf-b77c4c944923.roa File: 3445af72-31a2-3d40-bfbf-b77c4c944923.roa (raw, json) Hash identifier: MovHvEshVzf+Me26ULhqfRPJm918CmjVTJt27WHgj3c= Subject key identifier: 00:BB:43:67:32:E9:0A:83:EA:34:21:AE:DE:A2:DD:A6:57:2F:30:EC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119EFDD42268F7A325DFE200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3445af72-31a2-3d40-bfbf-b77c4c944923.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33491 IP address blocks: 24.14.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9e:fd:d4:22:68:f7:a3:25:df:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=a80607c1-e947-4c17-ad42-494dbfafeafa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:35:2d:a8:e7:1f:e5:6b:b3:c0:62:db:a5:ed: e9:86:56:09:d8:d2:1e:05:4f:d9:fe:32:63:4c:93: 91:36:ca:81:39:87:03:43:2f:15:fe:a1:83:cf:89: af:33:6f:f7:42:14:91:65:27:51:12:13:98:e2:97: 7d:ca:06:95:c4:25:2a:9e:79:bd:f6:60:29:c5:04: 90:ea:04:13:5d:2f:98:84:77:e0:8a:4d:da:8a:36: f5:fb:6e:64:e7:11:96:6f:e8:c4:07:6e:35:6f:e6: b7:b6:8a:1a:cf:60:3a:45:3e:31:5e:d3:ac:38:90: eb:3c:a2:94:77:7e:64:d1:3b:7b:fc:68:3b:f2:c2: d0:a3:df:a5:19:b7:b0:46:07:9f:18:8c:c0:ca:61: 81:64:b3:88:74:31:d5:08:ec:d2:3f:d4:ec:37:01: 18:db:f9:ff:b0:78:eb:05:87:1e:b0:10:9c:f2:ce: 35:91:b5:66:88:43:be:76:7c:ee:1f:c9:bd:4a:b0: 82:92:72:34:f7:88:99:3b:d6:94:ea:be:c1:26:47: 6e:0e:9a:3c:a7:56:12:b5:65:50:69:e0:85:39:b4: 51:44:6c:c8:0f:2c:78:dd:54:0b:d6:72:89:a8:ad: ab:58:e9:9d:2e:ee:f5:61:3a:b7:b8:12:9c:0d:e9: f6:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:BB:43:67:32:E9:0A:83:EA:34:21:AE:DE:A2:DD:A6:57:2F:30:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3445af72-31a2-3d40-bfbf-b77c4c944923.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.14.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:dd:a6:7b:40:6c:9b:a9:ce:6a:93:7f:5e:23:d2:38:f0:2b: e3:f2:45:d8:45:4e:4a:e8:54:45:b8:b6:98:52:f3:6c:16:9c: e7:b1:2f:78:da:df:05:ce:c9:e4:97:33:e6:90:0b:a4:78:99: 33:d8:e1:76:21:01:83:5f:ff:ac:e0:6f:78:5c:07:5f:0e:39: 19:c0:2e:37:41:d7:18:6f:54:66:67:c5:4c:ea:9e:ff:0e:00: 5d:c4:26:a9:1c:46:20:b4:45:e7:dc:9e:f7:81:68:c3:d9:bd: 5f:cc:dc:cd:d9:c1:b5:77:14:21:6f:15:8c:bf:e8:21:0e:30: 85:21:bc:d2:ad:2a:c2:25:f5:ba:e8:b9:03:3b:a6:5c:1c:47: dc:04:f7:bf:7b:e8:d5:65:9e:4a:a3:20:16:2a:ad:35:e4:b4: 87:17:80:e0:d1:da:e7:7d:72:57:f9:3a:2e:0f:d0:50:11:0f: 3d:09:e5:2c:54:b1:c5:85:b0:74:77:2b:2b:0c:b6:43:1d:cc: 0d:b1:d8:13:d8:f7:c0:21:6a:2b:a0:09:db:29:b8:1e:0e:ea: 6a:f0:bc:80:85:27:d4:e0:7b:c6:73:57:03:57:ee:2f:66:61: 50:a1:94:d3:38:f0:5d:60:7e:02:50:c6:0c:98:72:95:f9:d4: be:ea:82:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Rnv3UImj3oyXf4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk YTgwNjA3YzEtZTk0Ny00YzE3LWFkNDItNDk0ZGJmYWZlYWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujUtqOcf5WuzwGLbpe3phlYJ2NIeBU/Z/jJj TJORNsqBOYcDQy8V/qGDz4mvM2/3QhSRZSdREhOY4pd9ygaVxCUqnnm99mApxQSQ 6gQTXS+YhHfgik3aijb1+25k5xGWb+jEB241b+a3tooaz2A6RT4xXtOsOJDrPKKU d35k0Tt7/Gg78sLQo9+lGbewRgefGIzAymGBZLOIdDHVCOzSP9TsNwEY2/n/sHjr BYcesBCc8s41kbVmiEO+dnzuH8m9SrCCknI094iZO9aU6r7BJkduDpo8p1YStWVQ aeCFObRRRGzIDyx43VQL1nKJqK2rWOmdLu71YTq3uBKcDen2yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAC7Q2cy6QqD6jQhrt6i3aZXLzDsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzQ0NWFmNzItMzFhMi0z ZDQwLWJmYmYtYjc3YzRjOTQ0OTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGA58MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJvdpntAbJupzmqTf14j0jjwK+PyRdhFTkroVEW4tphS82wWnOexL3ja 3wXOyeSXM+aQC6R4mTPY4XYhAYNf/6zgb3hcB18OORnALjdB1xhvVGZnxUzqnv8O AF3EJqkcRiC0RefcnveBaMPZvV/M3M3ZwbV3FCFvFYy/6CEOMIUhvNKtKsIl9bro uQM7plwcR9wE97976NVlnkqjIBYqrTXktIcXgODR2ud9clf5Oi4P0FARDz0J5SxU scWFsHR3KysMtkMdzA2x2BPY98AhaiugCdspuB4O6mrwvICFJ9Tge8ZzVwNX7i9m YVChlNM48F1gfgJQxgyYcpX51L7qgsQ= -----END CERTIFICATE-----Generated at Sat Sep 5 14:22:15 2026 by rpki-client