$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39979579-3f27-315a-b3d5-93961b44274e.roa File: 39979579-3f27-315a-b3d5-93961b44274e.roa (raw, json) Hash identifier: Xd5ByvlsFihiRqyXsUIfQzBkqLbnJBcgtAPsSJ9WhxI= Subject key identifier: 28:87:9E:BE:2E:79:1D:50:09:E4:87:F3:FA:76:31:D5:E3:0E:C7:66 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED86226BB9C63140962D2FB40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39979579-3f27-315a-b3d5-93961b44274e.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 7015 IP address blocks: 24.218.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:62:26:bb:9c:63:14:09:62:d2:fb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=fb7eda29-47f8-4421-82b3-4fea1cb46be3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:19:c7:f8:7f:68:ef:fc:b9:57:9f:d3:2c:0c: 5a:ba:97:0b:37:7d:ea:63:53:56:a6:42:0c:d0:f8: 37:67:57:31:b9:9b:3a:a4:06:69:f8:c8:2c:1c:3c: 7c:b4:58:8e:3f:f6:6d:cd:8c:36:6b:28:7c:8f:53: a2:f0:20:e7:da:be:4f:95:a0:87:68:3c:9d:38:2b: 53:37:d4:6e:36:a1:cc:5d:e7:ce:e5:9e:3f:30:36: 3d:69:52:2e:8d:11:61:c4:d4:7c:17:02:dc:df:b7: e3:94:8f:00:c0:75:a7:39:20:3f:fa:9d:46:88:6c: f9:04:c8:11:32:f4:c7:84:40:53:c0:2c:02:69:56: 4d:a4:6d:15:c2:62:d6:ee:bb:fb:fc:fb:5c:48:07: 9f:23:d9:c2:d5:27:63:33:86:db:e9:0f:a5:5f:f6: a6:ca:09:0f:85:be:4b:33:6c:87:f4:9b:71:26:52: ab:9c:34:d8:3f:16:ec:eb:ab:8a:2b:d5:71:72:2c: 7f:5a:30:0c:e7:5f:ad:00:a2:cf:1b:cd:ab:35:62: 4b:c2:4e:bf:93:ff:82:2a:fd:8e:8e:a5:25:f7:0c: 42:6a:6e:af:61:0e:27:15:66:2d:1a:84:85:d7:13: 4b:c6:72:40:5b:50:59:e4:63:b2:c5:8d:39:66:2f: 5f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:87:9E:BE:2E:79:1D:50:09:E4:87:F3:FA:76:31:D5:E3:0E:C7:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39979579-3f27-315a-b3d5-93961b44274e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.218.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:a0:b0:71:93:b0:aa:84:ee:35:5f:03:fd:53:34:01:65:81: 2c:9a:bf:b2:9a:0e:14:de:1f:54:b0:51:f6:12:04:3d:66:7d: 3b:02:bc:d2:77:12:22:b7:b4:3b:13:a4:35:77:41:54:a1:1b: 00:3a:ac:1e:5b:36:08:97:48:5e:d9:4b:a8:a7:ca:8b:10:2b: 78:1a:3f:ee:4a:2f:23:81:21:6d:45:34:53:75:86:63:44:34: 24:80:90:16:44:97:66:7a:9e:31:15:5a:61:6d:1c:12:12:f4: 31:cc:51:9a:a6:c4:8c:aa:47:18:39:49:35:c9:da:48:0b:9a: fb:a7:75:7b:91:e0:4b:c4:85:d5:b1:93:51:ba:3f:a1:07:44: 70:3c:2f:8f:95:13:de:d7:99:a3:23:07:a0:0b:f0:d7:61:b8: 5a:b7:07:e4:3e:77:8a:79:4d:75:d0:ef:aa:61:64:3c:1d:6f: e6:7a:41:4e:a1:17:14:28:08:f9:33:51:2d:36:b6:d8:d5:84: 32:ea:50:d1:6c:58:01:f2:8a:7d:dc:c7:6b:85:bf:f5:96:e3: 30:6e:c9:8f:55:29:e6:c8:c1:c7:af:68:fa:b2:9b:94:8a:c2: 63:01:24:76:8c:38:82:b8:9e:0f:66:15:e9:3d:46:92:db:c7: 3b:29:49:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYia7nGMUCWLS+0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk ZmI3ZWRhMjktNDdmOC00NDIxLTgyYjMtNGZlYTFjYjQ2YmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBnH+H9o7/y5V5/TLAxaupcLN33qY1NWpkIM 0Pg3Z1cxuZs6pAZp+MgsHDx8tFiOP/ZtzYw2ayh8j1Oi8CDn2r5PlaCHaDydOCtT N9RuNqHMXefO5Z4/MDY9aVIujRFhxNR8FwLc37fjlI8AwHWnOSA/+p1GiGz5BMgR MvTHhEBTwCwCaVZNpG0VwmLW7rv7/PtcSAefI9nC1SdjM4bb6Q+lX/amygkPhb5L M2yH9JtxJlKrnDTYPxbs66uKK9Vxcix/WjAM51+tAKLPG82rNWJLwk6/k/+CKv2O jqUl9wxCam6vYQ4nFWYtGoSF1xNLxnJAW1BZ5GOyxY05Zi9f5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCiHnr4ueR1QCeSH8/p2MdXjDsdmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzk5Nzk1NzktM2YyNy0z MTVhLWIzZDUtOTM5NjFiNDQyNzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGNqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOgsHGTsKqE7jVfA/1TNAFlgSyav7KaDhTeH1SwUfYSBD1mfTsCvNJ3 EiK3tDsTpDV3QVShGwA6rB5bNgiXSF7ZS6inyosQK3gaP+5KLyOBIW1FNFN1hmNE NCSAkBZEl2Z6njEVWmFtHBIS9DHMUZqmxIyqRxg5STXJ2kgLmvundXuR4EvEhdWx k1G6P6EHRHA8L4+VE97XmaMjB6AL8NdhuFq3B+Q+d4p5TXXQ76phZDwdb+Z6QU6h FxQoCPkzUS02ttjVhDLqUNFsWAHyin3cx2uFv/WW4zBuyY9VKebIwcevaPqym5SK wmMBJHaMOIK4ng9mFek9RpLbxzspSag= -----END CERTIFICATE-----Generated at Mon Sep 14 21:42:16 2026 by rpki-client