$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b7d0bda-909f-3e3a-93a3-58cfa7e4b48c.roa File: 5b7d0bda-909f-3e3a-93a3-58cfa7e4b48c.roa (raw, json) Hash identifier: n4h/nnW24rwwUhgjjJ8o1YxLitkKuTDucgD4TqU9ezg= Subject key identifier: 9E:81:8C:8B:17:91:F4:A4:DD:35:81:AA:1C:97:63:52:73:C3:B5:72 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED861F544AB08A5A1D800F980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b7d0bda-909f-3e3a-93a3-58cfa7e4b48c.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33490 IP address blocks: 24.21.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:61:f5:44:ab:08:a5:a1:d8:00:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=fc908c6d-94f8-468b-9ac8-427a9bfbf404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ac:9c:cb:3b:98:2c:f9:04:38:d4:fd:74:21: 0a:51:5f:eb:b7:c0:59:a1:c7:75:67:60:12:fd:90: 74:9d:a9:40:81:8d:56:b4:95:92:d5:ea:ba:87:ae: 6a:f1:8f:a7:34:69:67:0f:fb:e8:33:ab:67:72:8a: 96:4e:fb:16:35:8f:33:71:ee:68:db:b9:17:0f:b6: 97:29:3f:da:82:31:98:e1:7f:b8:78:8a:b3:d5:7c: 03:16:5b:d2:68:4b:b9:48:7c:65:cc:1e:6c:d0:fb: e8:86:dd:2e:e7:98:41:38:9c:0c:1f:fa:1e:1b:09: d4:36:85:3e:81:2d:95:59:39:e1:36:3d:eb:ed:ea: c2:4d:39:48:f5:8e:95:aa:e8:36:01:69:e4:50:ae: 49:ae:34:4c:ab:ca:a5:39:dc:a5:ba:1f:c4:a4:0f: e8:02:f9:ae:80:3e:b2:1a:34:2e:eb:9f:ee:af:9a: dd:2a:4f:58:13:c9:4b:7e:05:71:e0:e7:b2:cb:f8: 5f:90:ff:8f:c2:6d:c8:b3:93:ec:f7:f2:8e:d3:d9: 49:21:2d:6f:bc:7b:25:cf:5f:90:1e:2a:da:eb:97: 96:ed:4f:d4:a9:b1:1e:6d:bf:e2:25:54:74:7d:9b: 8d:15:66:70:8c:53:71:1f:8e:a5:3d:91:48:48:f7: 72:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:81:8C:8B:17:91:F4:A4:DD:35:81:AA:1C:97:63:52:73:C3:B5:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b7d0bda-909f-3e3a-93a3-58cfa7e4b48c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.21.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:70:1e:15:e2:c1:f3:60:70:3d:a5:c3:fa:11:3c:80:7b:9b: 84:d6:ad:37:f2:83:5b:d5:20:80:83:49:bc:24:54:29:be:18: 08:36:ce:01:d4:3a:38:4d:3d:5e:9b:b7:31:9f:0b:d2:ba:ae: fc:43:4f:8d:4b:3a:e6:07:5d:91:09:2b:44:9b:d5:70:d4:da: 75:2e:fb:08:bb:da:40:18:a1:fa:43:6f:08:10:96:a3:60:de: ee:e2:61:ab:04:ee:06:b6:80:8f:83:46:d6:83:6d:8d:38:a2: 92:d9:42:91:67:0e:74:11:53:17:76:3f:75:20:62:cf:3e:8f: 2c:03:2a:1c:9d:87:26:a5:b5:42:76:f6:08:f2:a7:d3:52:0c: 99:e5:d6:c2:7d:ac:b1:0b:5c:ad:62:0d:59:93:65:34:b3:6b: ee:16:8f:4b:eb:62:7a:5f:0f:24:66:fb:23:dc:7d:83:e7:0d: c6:08:e2:f0:79:ef:22:f4:bd:57:b2:bf:8f:fa:55:95:d0:81: 10:cb:99:74:e4:19:f2:c7:7a:fb:ac:21:22:3a:96:13:df:b2: f0:5d:96:5c:cf:59:ed:0f:ee:1d:1f:92:6c:3c:c1:2e:61:1b: 96:d3:5c:43:c0:68:bc:6d:01:7e:54:a7:98:82:4a:cd:d2:20: 8d:dd:d7:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYfVEqwilodgA+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk ZmM5MDhjNmQtOTRmOC00NjhiLTlhYzgtNDI3YTliZmJmNDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKycyzuYLPkEONT9dCEKUV/rt8BZocd1Z2AS /ZB0nalAgY1WtJWS1eq6h65q8Y+nNGlnD/voM6tncoqWTvsWNY8zce5o27kXD7aX KT/agjGY4X+4eIqz1XwDFlvSaEu5SHxlzB5s0Pvoht0u55hBOJwMH/oeGwnUNoU+ gS2VWTnhNj3r7erCTTlI9Y6Vqug2AWnkUK5JrjRMq8qlOdyluh/EpA/oAvmugD6y GjQu65/ur5rdKk9YE8lLfgVx4Oeyy/hfkP+Pwm3Is5Ps9/KO09lJIS1vvHslz1+Q Hira65eW7U/UqbEebb/iJVR0fZuNFWZwjFNxH46lPZFISPdyvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ6BjIsXkfSk3TWBqhyXY1Jzw7VyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWI3ZDBiZGEtOTA5Zi0z ZTNhLTkzYTMtNThjZmE3ZTRiNDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGBX4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALhwHhXiwfNgcD2lw/oRPIB7m4TWrTfyg1vVIICDSbwkVCm+GAg2zgHU OjhNPV6btzGfC9K6rvxDT41LOuYHXZEJK0Sb1XDU2nUu+wi72kAYofpDbwgQlqNg 3u7iYasE7ga2gI+DRtaDbY04opLZQpFnDnQRUxd2P3UgYs8+jywDKhydhyaltUJ2 9gjyp9NSDJnl1sJ9rLELXK1iDVmTZTSza+4Wj0vrYnpfDyRm+yPcfYPnDcYI4vB5 7yL0vVeyv4/6VZXQgRDLmXTkGfLHevusISI6lhPfsvBdllzPWe0P7h0fkmw8wS5h G5bTXEPAaLxtAX5Up5iCSs3SII3d1+Y= -----END CERTIFICATE-----Generated at Sat Sep 5 11:06:12 2026 by rpki-client