$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5979f69b-6eae-3b59-96b4-8a9f4d15b0e7.roa File: 5979f69b-6eae-3b59-96b4-8a9f4d15b0e7.roa (raw, json) Hash identifier: aEch60/ljaQn7fm712LOucaiP/lp4gQgLlCJjBu4hOg= Subject key identifier: 79:2D:AE:81:8A:27:2A:6C:43:28:75:B5:8E:7B:86:7B:1E:CE:B1:C3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119EFBAC43FE0A75A079C580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5979f69b-6eae-3b59-96b4-8a9f4d15b0e7.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33491 IP address blocks: 24.1.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9e:fb:ac:43:fe:0a:75:a0:79:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=9f457f4e-cf69-4f22-b72e-cdc97964f567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9a:67:22:f2:04:b2:de:1e:22:17:82:99:c0: 6a:4c:e9:92:2f:12:66:2e:49:9c:7b:6d:06:6e:dd: ac:4b:10:d1:ee:1f:c8:47:63:8b:3e:84:3f:2a:52: 8b:2f:2e:c6:4f:3e:55:f9:c0:40:e8:c3:39:24:9b: dc:44:7c:6a:d1:79:ba:d8:88:57:47:5d:c7:87:95: 2f:3f:c0:bd:66:24:ca:a4:aa:aa:cc:6e:da:8b:20: 85:c6:aa:21:bd:20:f2:68:2f:eb:1a:fb:40:6b:11: da:3a:a5:b0:8f:ca:f6:f0:0f:6d:d7:8c:a5:46:c5: ef:9d:73:67:4e:ae:1c:b3:e8:4b:5f:70:d8:d1:f7: 0a:0a:64:ae:b8:27:d1:17:cb:81:ff:c7:f5:d8:03: 3b:32:86:db:26:27:81:cd:71:ae:07:ad:85:df:59: 6f:73:2c:e4:38:7b:c3:6b:4c:3e:73:b7:61:0b:71: 48:09:aa:6c:54:38:a1:31:e7:9b:8a:76:62:42:d8: dc:f9:03:fa:ed:42:5c:e5:1a:3a:cf:a3:10:86:13: bb:28:1b:ad:9e:48:d4:6c:e2:e2:3b:90:fa:dd:82: 9b:b4:de:ab:7f:27:2b:02:be:42:97:71:03:99:12: d4:03:07:52:29:a4:97:3c:3e:d2:0b:c2:04:0e:93: f4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:2D:AE:81:8A:27:2A:6C:43:28:75:B5:8E:7B:86:7B:1E:CE:B1:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5979f69b-6eae-3b59-96b4-8a9f4d15b0e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.1.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:75:de:4c:90:3b:ce:49:f8:8b:c0:c9:7c:4c:33:d7:47:92: 9e:5e:36:61:42:d8:a6:6d:cc:2f:b1:51:72:85:b3:3f:b0:5f: bc:c9:42:46:40:b0:ff:03:79:25:b8:fc:95:3e:67:bc:d1:7a: 97:e3:00:87:41:38:80:7b:5f:5a:d7:8f:13:36:7f:bc:9d:4b: 28:9c:14:b6:e2:42:f3:b5:8c:32:4e:77:c6:85:82:04:7a:8c: f0:d6:b4:e6:b9:72:6a:32:37:ca:5e:5f:f6:ef:c4:0e:07:e3: 5c:0c:c5:59:25:33:4d:e9:b2:45:6a:29:b3:1d:60:f5:fc:64: 79:76:e9:13:52:0e:e8:0a:3a:8e:97:6b:1c:0b:5b:e1:fa:4e: 4f:a8:85:52:17:5b:52:9b:3c:f8:97:57:b5:89:3b:78:11:7e: 21:17:60:35:23:b9:03:e2:2f:46:63:1e:4d:db:93:f0:2e:ce: 32:33:39:11:45:18:61:b8:3a:d1:7a:e3:53:de:26:ef:71:2d: 38:81:95:c2:c4:3f:0f:f6:03:10:33:70:b0:c4:ce:2e:24:5d: a7:16:29:1a:fa:ba:6a:20:fe:59:b2:51:68:7c:49:2e:59:d4: b1:19:cc:7c:a3:24:33:01:99:db:6d:ca:31:0a:04:b3:1e:d5: b3:05:8c:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnvusQ/4KdaB5xYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk OWY0NTdmNGUtY2Y2OS00ZjIyLWI3MmUtY2RjOTc5NjRmNTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqppnIvIEst4eIheCmcBqTOmSLxJmLkmce20G bt2sSxDR7h/IR2OLPoQ/KlKLLy7GTz5V+cBA6MM5JJvcRHxq0Xm62IhXR13Hh5Uv P8C9ZiTKpKqqzG7aiyCFxqohvSDyaC/rGvtAaxHaOqWwj8r28A9t14ylRsXvnXNn Tq4cs+hLX3DY0fcKCmSuuCfRF8uB/8f12AM7MobbJieBzXGuB62F31lvcyzkOHvD a0w+c7dhC3FICapsVDihMeebinZiQtjc+QP67UJc5Ro6z6MQhhO7KButnkjUbOLi O5D63YKbtN6rfycrAr5Cl3EDmRLUAwdSKaSXPD7SC8IEDpP0TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHktroGKJypsQyh1tY57hnsezrHDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTk3OWY2OWItNmVhZS0z YjU5LTk2YjQtOGE5ZjRkMTViMGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGAEcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC113kyQO85J+IvAyXxMM9dHkp5eNmFC2KZtzC+xUXKFsz+wX7zJQkZA sP8DeSW4/JU+Z7zRepfjAIdBOIB7X1rXjxM2f7ydSyicFLbiQvO1jDJOd8aFggR6 jPDWtOa5cmoyN8peX/bvxA4H41wMxVklM03pskVqKbMdYPX8ZHl26RNSDugKOo6X axwLW+H6Tk+ohVIXW1KbPPiXV7WJO3gRfiEXYDUjuQPiL0ZjHk3bk/AuzjIzORFF GGG4OtF641PeJu9xLTiBlcLEPw/2AxAzcLDEzi4kXacWKRr6umog/lmyUWh8SS5Z 1LEZzHyjJDMBmdttyjEKBLMe1bMFjBE= -----END CERTIFICATE-----Generated at Sat Sep 5 12:38:16 2026 by rpki-client