$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b28e48d-3336-30de-8e1a-0b04465cd6f2.roa File: 5b28e48d-3336-30de-8e1a-0b04465cd6f2.roa (raw, json) Hash identifier: 5BGozXFNYLBkl3Stv17H8NETqPz7IPD5ShzhXHZ4/SI= Subject key identifier: A7:68:7D:FB:6A:14:F0:C6:86:B3:95:41:78:13:2A:E4:64:1D:FE:30 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584E6F3B4A943A0BDDB246A76480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b28e48d-3336-30de-8e1a-0b04465cd6f2.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 33651 IP address blocks: 24.4.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3b:4a:94:3a:0b:dd:b2:46:a7:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=7e092f12-6005-4cff-b65b-faf818e1242d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:9e:72:ea:cd:34:a9:bb:97:2a:7b:27:59:db: 8a:b5:1b:dd:79:df:b2:12:87:ed:4d:17:0e:bc:1b: 04:c8:1c:e0:96:f6:e5:a8:fe:1f:4a:9b:56:e3:6e: f9:e1:4a:7c:d6:44:df:a9:9e:84:98:8f:1e:16:da: a7:98:2d:21:f9:77:1f:3b:fc:2b:ad:9e:a8:33:57: d9:dd:ca:95:fa:a5:80:51:47:cf:d7:72:9a:ef:fe: 5f:5a:51:56:f3:64:85:13:d8:ac:a6:dd:a8:35:65: db:c1:fd:59:f6:9c:df:43:ad:16:ed:36:a7:7f:32: 9a:9b:e2:d9:65:46:ff:20:a4:51:30:eb:91:13:8d: cd:f7:0f:33:4c:63:2d:be:0b:6e:e5:84:da:1c:fb: 73:5d:bb:11:5a:9d:10:a1:df:07:31:1f:5c:65:90: f2:18:0c:d2:8b:30:4f:f9:25:0b:30:98:a7:33:cc: 4d:57:e3:eb:20:83:8e:44:d9:ce:87:3d:ea:25:5c: 0a:9a:ef:a4:3e:22:c6:8c:85:39:08:9d:05:b7:90: 44:0b:0e:93:9a:3c:25:fc:79:3a:17:f2:a3:b2:f1: 65:c0:c0:79:18:1d:6a:e9:b9:e0:d5:a5:78:52:18: af:d4:5a:64:97:8b:8f:84:49:91:ca:20:91:6d:82: cf:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:68:7D:FB:6A:14:F0:C6:86:B3:95:41:78:13:2A:E4:64:1D:FE:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b28e48d-3336-30de-8e1a-0b04465cd6f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.4.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:a0:a7:2d:d9:fc:f0:af:f6:75:87:38:8f:72:5c:1a:c2:23: 2a:ea:d0:eb:68:7d:4f:0e:ec:8f:f2:4a:55:b3:d6:2c:04:11: e7:17:e9:bc:99:93:d4:24:f7:77:42:f8:31:3c:16:08:c2:10: 6e:fe:7f:8d:2d:8b:ed:41:c8:6a:fc:fd:33:97:6b:c7:e8:46: 84:b9:12:41:88:0d:67:48:f2:d8:e1:76:50:43:af:2a:31:ce: cd:ba:5a:ae:e5:71:e5:b5:83:27:bb:51:f8:9e:88:78:c3:3b: 40:1d:fb:6a:0a:d8:27:fb:9a:bd:01:6c:1e:23:35:78:38:ff: 26:3d:cd:c6:63:6e:98:05:5c:58:1f:36:56:17:63:0f:6e:f1: 81:11:c2:22:dc:a7:09:9a:26:76:f4:3b:4f:61:97:fb:06:f9: ae:df:39:ec:5f:95:1e:92:1d:12:91:de:38:c0:e2:3b:00:30: 0b:3c:6e:26:c9:14:9f:b7:eb:85:90:02:a1:e8:6c:4d:0f:56: a8:ee:d4:c6:2b:0f:06:f6:9c:33:c2:6d:be:77:7f:bc:f3:e8: 2b:7c:b1:4e:37:51:90:df:c1:79:8c:7b:7b:d7:0e:3e:5b:26: b6:af:1e:84:66:7b:22:3f:dd:c7:89:73:fc:94:ca:93:41:80: a8:65:d4:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vO0qUOgvdskanZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk N2UwOTJmMTItNjAwNS00Y2ZmLWI2NWItZmFmODE4ZTEyNDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZ5y6s00qbuXKnsnWduKtRvded+yEoftTRcO vBsEyBzglvblqP4fSptW42754Up81kTfqZ6EmI8eFtqnmC0h+XcfO/wrrZ6oM1fZ 3cqV+qWAUUfP13Ka7/5fWlFW82SFE9ispt2oNWXbwf1Z9pzfQ60W7TanfzKam+LZ ZUb/IKRRMOuRE43N9w8zTGMtvgtu5YTaHPtzXbsRWp0Qod8HMR9cZZDyGAzSizBP +SULMJinM8xNV+PrIIOORNnOhz3qJVwKmu+kPiLGjIU5CJ0Ft5BECw6Tmjwl/Hk6 F/KjsvFlwMB5GB1q6bng1aV4Uhiv1Fpkl4uPhEmRyiCRbYLPqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKdofftqFPDGhrOVQXgTKuRkHf4wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWIyOGU0OGQtMzMzNi0z MGRlLThlMWEtMGIwNDQ2NWNkNmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGARlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABigpy3Z/PCv9nWHOI9yXBrCIyrq0OtofU8O7I/ySlWz1iwEEecX6byZ k9Qk93dC+DE8FgjCEG7+f40ti+1ByGr8/TOXa8foRoS5EkGIDWdI8tjhdlBDryox zs26Wq7lceW1gye7UfieiHjDO0Ad+2oK2Cf7mr0BbB4jNXg4/yY9zcZjbpgFXFgf NlYXYw9u8YERwiLcpwmaJnb0O09hl/sG+a7fOexflR6SHRKR3jjA4jsAMAs8bibJ FJ+364WQAqHobE0PVqju1MYrDwb2nDPCbb53f7zz6Ct8sU43UZDfwXmMe3vXDj5b JravHoRmeyI/3ceJc/yUypNBgKhl1Po= -----END CERTIFICATE-----Generated at Tue Jul 21 20:33:43 2026 by rpki-client