$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5486b290-41c9-3a24-818a-cd32d82c3909.roa File: 5486b290-41c9-3a24-818a-cd32d82c3909.roa (raw, json) Hash identifier: NOAYRg6OlkIGW4Z3ywY4gVwTQOM0k+vDFXPBI0KZjBY= Subject key identifier: A1:06:BF:40:AD:04:12:68:A4:75:CC:8C:6B:AD:A5:C8:11:DC:D5:C1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED861F19450B84FA355C92C00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5486b290-41c9-3a24-818a-cd32d82c3909.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33490 IP address blocks: 24.20.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:61:f1:94:50:b8:4f:a3:55:c9:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=17f991ec-498a-49af-8378-a57af002e53c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:37:ad:92:55:87:ee:bf:55:32:00:18:e3:6f: 03:5e:84:0f:21:b6:0c:c2:09:48:7a:4c:e2:08:a3: 68:2e:75:e6:42:52:76:85:b7:fc:93:25:b7:44:d5: 86:31:ac:c2:87:1f:a8:a1:9f:78:d3:19:90:80:15: f6:47:4e:ae:4f:23:87:95:f8:c5:08:fa:f9:07:05: ba:68:cc:cd:89:b8:b5:2f:9a:dd:3c:d8:c9:11:18: fb:f0:25:11:05:45:32:6b:6e:44:3b:fe:7e:56:94: cb:a4:36:66:d6:87:2e:14:03:a5:3b:0d:9a:19:d2: 44:07:3f:08:a2:46:e3:00:6c:de:ea:d0:1c:27:d1: a8:04:78:8c:1b:42:63:94:01:7c:33:04:83:2c:46: c1:f2:d0:31:6f:62:de:1a:ee:42:4e:b0:61:17:d1: 4a:55:5f:0c:ff:ef:60:c2:b8:d7:c5:18:f8:6b:bc: e8:1f:1d:49:49:2f:90:ce:09:70:ac:f1:fa:c9:4a: 51:bd:59:d9:73:ed:56:74:02:c9:41:a9:39:5b:86: 9f:24:b9:86:3f:45:08:ff:88:97:3d:ba:15:e0:55: e5:c0:bc:2d:30:78:82:ae:7c:3f:44:98:18:28:ef: 2a:e5:83:a7:5b:b1:cb:19:51:ff:4c:67:ee:31:3f: c8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:06:BF:40:AD:04:12:68:A4:75:CC:8C:6B:AD:A5:C8:11:DC:D5:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5486b290-41c9-3a24-818a-cd32d82c3909.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.20.102.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:1e:61:13:42:4d:75:b8:70:cc:b5:ae:39:39:53:c0:b5:6e: 62:9f:c8:da:c1:2d:c0:8a:09:78:6e:1d:82:f4:5d:8b:43:79: 76:b2:91:89:35:df:63:99:4e:65:15:e8:11:5b:9b:d5:19:e6: f3:50:c4:5e:84:72:4c:40:a2:87:b2:d7:1d:f4:4f:94:ac:12: 30:66:bf:64:51:a8:13:a7:35:ca:11:92:67:46:bf:bb:c0:4b: 27:7c:8d:36:77:5a:4d:8b:f1:81:c5:64:23:05:93:89:75:0f: dc:75:d9:55:2d:b6:13:84:4b:df:75:1b:a0:28:01:4f:20:b3: 27:f1:d0:84:ac:c3:b8:56:75:ac:8c:4f:ce:38:69:2b:8a:d8: 03:f3:15:fa:65:3a:96:f1:4f:33:66:28:58:a5:90:e6:33:36: 72:eb:21:82:ab:57:e6:2a:3a:3d:c0:68:b6:88:80:f8:e1:d6: c9:2b:d7:9f:b5:60:19:44:ef:52:4d:6f:69:69:96:38:30:c9: 82:7e:b8:a2:09:e8:3b:16:8c:da:91:98:94:74:56:34:05:84: b9:8a:8f:d8:5a:b1:47:c6:b0:0d:01:f7:18:6d:36:2c:6f:44: 1c:3c:9f:35:c9:32:69:64:45:61:25:25:2b:39:2b:69:21:fe: c5:c3:0b:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYfGUULhPo1XJLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk MTdmOTkxZWMtNDk4YS00OWFmLTgzNzgtYTU3YWYwMDJlNTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszetklWH7r9VMgAY428DXoQPIbYMwglIekzi CKNoLnXmQlJ2hbf8kyW3RNWGMazChx+ooZ940xmQgBX2R06uTyOHlfjFCPr5BwW6 aMzNibi1L5rdPNjJERj78CURBUUya25EO/5+VpTLpDZm1ocuFAOlOw2aGdJEBz8I okbjAGze6tAcJ9GoBHiMG0JjlAF8MwSDLEbB8tAxb2LeGu5CTrBhF9FKVV8M/+9g wrjXxRj4a7zoHx1JSS+QzglwrPH6yUpRvVnZc+1WdALJQak5W4afJLmGP0UI/4iX PboV4FXlwLwtMHiCrnw/RJgYKO8q5YOnW7HLGVH/TGfuMT/IrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKEGv0CtBBJopHXMjGutpcgR3NXBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTQ4NmIyOTAtNDFjOS0z YTI0LTgxOGEtY2QzMmQ4MmMzOTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGBRmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABseYRNCTXW4cMy1rjk5U8C1bmKfyNrBLcCKCXhuHYL0XYtDeXaykYk1 32OZTmUV6BFbm9UZ5vNQxF6EckxAooey1x30T5SsEjBmv2RRqBOnNcoRkmdGv7vA Syd8jTZ3Wk2L8YHFZCMFk4l1D9x12VUtthOES991G6AoAU8gsyfx0ISsw7hWdayM T844aSuK2APzFfplOpbxTzNmKFilkOYzNnLrIYKrV+YqOj3AaLaIgPjh1skr15+1 YBlE71JNb2lpljgwyYJ+uKIJ6DsWjNqRmJR0VjQFhLmKj9hasUfGsA0B9xhtNixv RBw8nzXJMmlkRWElJSs5K2kh/sXDC/A= -----END CERTIFICATE-----Generated at Sat Sep 5 09:32:08 2026 by rpki-client