$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5dd258ba-f47d-355c-b05d-a9546011b25a.roa File: 5dd258ba-f47d-355c-b05d-a9546011b25a.roa (raw, json) Hash identifier: 3qP+HcgHopzKRgk9iadDA5G5U7LF9INa3sR9wepX/GY= Subject key identifier: BE:5D:F2:8C:D6:99:6A:2E:B2:7D:A3:4D:B4:5E:E8:F8:1C:23:63:B2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED86324F0A8F4FAFE9581CEE0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5dd258ba-f47d-355c-b05d-a9546011b25a.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33490 IP address blocks: 24.20.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:63:24:f0:a8:f4:fa:fe:95:81:ce:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=6cd3e7e0-b44d-449e-85cf-126cd2146927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:95:74:63:f9:5e:b5:ec:17:c4:ca:fb:35:76: 3b:e5:04:b1:bf:b9:6d:d7:fd:67:ef:fc:8e:2f:1c: 6c:56:db:23:e1:8c:8e:3d:c7:a0:2c:ae:ba:5b:ce: 06:6d:36:78:89:a6:8a:80:4c:58:07:73:b9:21:14: 1c:76:d8:f0:b8:c1:b2:55:75:ed:14:c9:33:45:58: a3:1c:52:3f:b0:f1:77:a2:b4:d0:19:b8:00:ba:2f: bd:e2:65:a8:80:b3:2e:96:ff:d1:86:24:35:9f:7a: 05:4b:b2:89:c8:2b:c6:0d:f4:28:9e:ff:7c:67:f8: 1a:89:18:35:0b:c1:96:11:35:bf:f1:49:f2:e8:a4: d3:b8:05:bb:87:cc:58:53:1e:a4:c4:ef:6a:67:9b: 5a:6d:e9:21:a9:23:d4:ed:b2:1f:da:96:77:05:48: bb:80:13:a6:74:cd:5e:4a:d0:62:74:8f:89:bd:74: 4a:db:73:90:6f:65:8f:c9:30:48:f9:c2:f6:b9:d7: 47:14:74:61:10:b1:b7:89:63:b1:31:11:f0:ab:c0: 5d:32:aa:40:43:65:14:4b:92:c2:fc:c3:1e:4f:4a: 2b:8c:2e:f0:5c:49:37:6d:9f:04:e5:9a:f8:0d:d0: cb:a8:1d:a2:56:fa:a2:06:e8:30:d5:0f:41:cc:b2: 5d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:5D:F2:8C:D6:99:6A:2E:B2:7D:A3:4D:B4:5E:E8:F8:1C:23:63:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5dd258ba-f47d-355c-b05d-a9546011b25a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.20.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:89:e4:19:8d:7a:73:a2:81:3d:0e:02:71:74:84:fb:b6:21: 9f:ff:97:85:76:fc:4e:de:5a:3e:13:ba:32:ec:96:e4:b2:60: 3c:39:da:54:d3:ae:ab:72:67:de:47:38:84:e3:2a:37:56:17: 9f:75:ed:4d:4d:a1:76:22:3d:18:05:8e:8c:fb:f8:b9:1e:65: 9d:e9:59:a9:16:2b:74:74:df:1d:f5:51:bd:09:55:63:81:e3: 05:8b:3c:c9:24:ae:5f:2c:aa:8a:13:68:e4:81:79:93:39:c5: eb:4f:98:c8:b2:6c:61:ca:6d:a5:2f:14:da:1b:23:1d:c7:56: bd:b6:fb:4a:e7:52:59:77:7a:d5:11:c5:a4:99:d1:f0:32:d2: 56:6a:4a:0b:9f:97:f6:9e:3b:9b:ac:ac:1b:7e:0d:45:c2:c3: 5a:a4:be:c4:f2:b4:66:69:a4:a1:6b:7b:2a:2f:aa:07:d5:a1: 02:9b:59:f7:2e:78:64:03:f4:50:d9:f2:7d:08:6c:c0:96:42: f3:6c:8c:2e:1d:16:a5:29:01:cc:97:51:b1:82:30:89:19:f3: f9:74:f5:d1:e8:ac:d7:bf:fb:58:6a:31:54:d6:70:1a:09:31: a9:f7:e3:f1:5c:14:a6:b9:df:f9:ea:9f:70:81:e1:3f:a2:8f: e4:c3:2c:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYyTwqPT6/pWBzuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk NmNkM2U3ZTAtYjQ0ZC00NDllLTg1Y2YtMTI2Y2QyMTQ2OTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppV0Y/letewXxMr7NXY75QSxv7lt1/1n7/yO LxxsVtsj4YyOPcegLK66W84GbTZ4iaaKgExYB3O5IRQcdtjwuMGyVXXtFMkzRVij HFI/sPF3orTQGbgAui+94mWogLMulv/RhiQ1n3oFS7KJyCvGDfQonv98Z/gaiRg1 C8GWETW/8Uny6KTTuAW7h8xYUx6kxO9qZ5tabekhqSPU7bIf2pZ3BUi7gBOmdM1e StBidI+JvXRK23OQb2WPyTBI+cL2uddHFHRhELG3iWOxMRHwq8BdMqpAQ2UUS5LC /MMeT0orjC7wXEk3bZ8E5Zr4DdDLqB2iVvqiBugw1Q9BzLJd/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL5d8ozWmWousn2jTbRe6PgcI2OyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWRkMjU4YmEtZjQ3ZC0z NTVjLWIwNWQtYTk1NDYwMTFiMjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGBQ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmJ5BmNenOigT0OAnF0hPu2IZ//l4V2/E7eWj4TujLsluSyYDw52lTT rqtyZ95HOITjKjdWF5917U1NoXYiPRgFjoz7+LkeZZ3pWakWK3R03x31Ub0JVWOB 4wWLPMkkrl8sqooTaOSBeZM5xetPmMiybGHKbaUvFNobIx3HVr22+0rnUll3etUR xaSZ0fAy0lZqSgufl/aeO5usrBt+DUXCw1qkvsTytGZppKFreyovqgfVoQKbWfcu eGQD9FDZ8n0IbMCWQvNsjC4dFqUpAcyXUbGCMIkZ8/l09dHorNe/+1hqMVTWcBoJ Man34/FcFKa53/nqn3CB4T+ij+TDLNk= -----END CERTIFICATE-----Generated at Sat Sep 5 10:19:23 2026 by rpki-client