$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ddf7c39-6c6c-3a2c-886b-3e4e779757af.roa File: 5ddf7c39-6c6c-3a2c-886b-3e4e779757af.roa (raw, json) Hash identifier: jJAytRqOchGEVLw8Bb3ZSRtotavfG3mmAQbpLDjl3FQ= Subject key identifier: A3:CC:5C:A4:7F:B5:FC:61:9C:4F:17:FB:7D:38:CC:89:E2:3A:6D:DE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4EDB8F8A6DD793412AD100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ddf7c39-6c6c-3a2c-886b-3e4e779757af.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33490 IP address blocks: 24.20.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4e:db:8f:8a:6d:d7:93:41:2a:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=0bb0d9cb-1528-419f-b3e6-2fdd62066218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:25:0b:c1:12:f3:43:4f:5d:ed:fd:90:59:b1: cd:40:05:c0:0a:b8:a4:1f:14:2d:e7:c7:79:bc:d4: 92:bc:b1:82:70:f1:6b:b0:82:d4:7d:c0:11:a9:44: 18:5d:c2:a2:b6:9c:a6:4b:2e:c2:bc:52:fb:4e:56: c9:3d:b1:6c:1a:e8:ea:e0:fb:7f:d2:b8:0c:b0:03: 32:ce:70:99:4c:4a:96:bf:bd:f7:01:5f:90:86:3e: 39:84:eb:ad:5f:74:b2:38:e8:75:17:fd:7c:f0:90: 21:d0:4f:af:f8:7e:3b:4e:3c:b3:4f:b7:e2:4f:c8: ec:b0:0a:d2:d9:db:03:fb:61:88:e4:c8:5c:d3:2b: de:ba:06:e7:d9:47:03:d3:57:b2:c1:b4:94:ba:d7: 8f:28:67:88:ea:5b:3c:d5:24:dd:70:c7:71:82:e6: 4e:46:23:28:98:4e:a0:94:26:7a:e8:8b:8b:60:68: 57:75:0b:d4:b9:15:b1:fa:ec:aa:e7:3a:ef:e4:a1: 8c:2a:c3:e1:29:79:ff:7d:4d:9e:a2:51:5c:c3:73: f1:f3:22:04:c6:55:82:fc:d1:bc:ba:61:0f:a3:38: ea:5d:8f:1d:29:dd:67:ef:e5:3e:31:a3:24:ce:0c: 2b:f5:51:a5:e8:26:74:32:c9:68:ab:fc:07:6a:a7: dd:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:CC:5C:A4:7F:B5:FC:61:9C:4F:17:FB:7D:38:CC:89:E2:3A:6D:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ddf7c39-6c6c-3a2c-886b-3e4e779757af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.20.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:74:6a:d1:83:ad:26:4e:83:f7:f3:fc:15:7d:34:6f:25:43: a4:63:2f:c0:a6:a8:e7:3f:80:10:1b:f8:55:5e:ba:4a:c5:49: 22:80:87:a1:ee:d1:20:01:a2:be:c0:7a:8e:a0:5b:7f:4e:13: b6:16:27:3a:7b:ce:cb:77:e7:7a:52:4f:a8:4d:f2:48:cd:b4: 41:6c:0f:17:41:04:d3:62:4b:9c:10:8a:8b:91:97:88:a4:ea: 9e:39:f8:22:89:bc:bf:1d:0c:7d:4f:fc:1d:ad:26:43:01:64: a8:42:b2:33:6f:7f:10:cb:ae:2f:32:f3:3a:1e:dd:5c:e0:31: c6:4d:50:76:01:07:d3:a7:60:c8:14:31:ab:8a:92:d0:a7:37: 0c:88:d4:28:fd:67:cc:83:d3:fe:d7:7d:11:26:d4:55:45:50: e4:a9:63:6d:e1:ef:da:2d:16:6e:4b:aa:49:bb:e3:50:f5:54: 9f:98:81:5c:c7:db:41:c7:a8:11:94:d8:4b:c2:83:24:9f:1a: 48:8b:de:75:63:74:66:ee:4b:37:e8:79:8b:1a:37:7d:f3:77: d0:cf:e1:55:0f:84:25:4c:ab:da:93:11:3c:29:ab:b9:96:08: 31:b6:46:b0:51:a5:8f:ba:d7:f7:0e:08:cf:90:5a:7a:f8:f8: 8e:7e:ab:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TtuPim3Xk0Eq0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk MGJiMGQ5Y2ItMTUyOC00MTlmLWIzZTYtMmZkZDYyMDY2MjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiULwRLzQ09d7f2QWbHNQAXACrikHxQt58d5 vNSSvLGCcPFrsILUfcARqUQYXcKitpymSy7CvFL7TlbJPbFsGujq4Pt/0rgMsAMy znCZTEqWv733AV+Qhj45hOutX3SyOOh1F/188JAh0E+v+H47TjyzT7fiT8jssArS 2dsD+2GI5Mhc0yveugbn2UcD01eywbSUutePKGeI6ls81STdcMdxguZORiMomE6g lCZ66IuLYGhXdQvUuRWx+uyq5zrv5KGMKsPhKXn/fU2eolFcw3Px8yIExlWC/NG8 umEPozjqXY8dKd1n7+U+MaMkzgwr9VGl6CZ0Msloq/wHaqfdIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKPMXKR/tfxhnE8X+304zIniOm3eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWRkZjdjMzktNmM2Yy0z YTJjLTg4NmItM2U0ZTc3OTc1N2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGBQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL10atGDrSZOg/fz/BV9NG8lQ6RjL8CmqOc/gBAb+FVeukrFSSKAh6Hu 0SABor7Aeo6gW39OE7YWJzp7zst353pST6hN8kjNtEFsDxdBBNNiS5wQiouRl4ik 6p45+CKJvL8dDH1P/B2tJkMBZKhCsjNvfxDLri8y8zoe3VzgMcZNUHYBB9OnYMgU MauKktCnNwyI1Cj9Z8yD0/7XfREm1FVFUOSpY23h79otFm5Lqkm741D1VJ+YgVzH 20HHqBGU2EvCgySfGkiL3nVjdGbuSzfoeYsaN33zd9DP4VUPhCVMq9qTETwpq7mW CDG2RrBRpY+61/cOCM+QWnr4+I5+qwA= -----END CERTIFICATE-----Generated at Wed Oct 21 01:45:52 2026 by rpki-client