$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7eef8481-a4d0-3cf8-b1d9-8f996fbad37e.roa File: 7eef8481-a4d0-3cf8-b1d9-8f996fbad37e.roa (raw, json) Hash identifier: s4b3UeesLgNBZEoU0OcXQk4CSwZm+NSWqWYFd5Cjv5c= Subject key identifier: 98:88:38:AB:F1:9E:D5:DB:0A:44:58:37:EB:B6:23:B7:EA:8E:62:8C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED863CB485DA8E0A5470C0B80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7eef8481-a4d0-3cf8-b1d9-8f996fbad37e.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33668 IP address blocks: 24.127.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:63:cb:48:5d:a8:e0:a5:47:0c:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=e1978c66-f417-4f65-9bbb-6b3a7ee00476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:72:4c:43:dc:e0:7a:01:a3:3c:cb:4b:c4:88: 35:fc:06:0c:43:4a:b1:79:e1:82:05:af:ab:89:e2: 31:78:a3:24:61:eb:99:11:aa:83:0c:cb:66:ae:5f: a4:cc:a0:53:89:91:13:3b:05:f0:23:ef:8d:05:f1: 79:be:ac:d0:5b:81:f2:ad:64:d2:2b:e4:25:e7:a5: 89:b3:d1:02:e3:5e:f5:5a:18:22:40:a0:13:87:8d: 7d:0c:3f:7d:e3:eb:1b:f2:0f:f7:1f:3f:71:b3:b6: 8d:08:f3:fe:d6:6d:7b:b0:a0:fa:cf:5f:a2:18:7d: 5d:ef:77:04:2f:0d:ef:e0:0d:ff:a8:ac:18:07:36: 3c:1a:e5:bd:71:e6:4c:76:07:e5:d5:3f:77:0e:90: 62:ae:1c:18:9a:c4:4e:88:ca:52:15:2f:0b:c0:f0: 8e:6e:f0:a2:b5:d3:ee:a2:75:5a:cc:06:b6:3c:d0: 47:ae:fd:1c:38:65:26:16:16:43:d9:66:65:f1:f6: 43:7a:53:17:74:7c:1c:94:84:b1:81:56:17:23:96: 42:93:f3:87:e6:61:b8:be:6a:c6:17:6c:4a:30:d9: 10:d8:65:72:30:be:a2:0b:9a:39:df:ac:b3:d1:57: 2b:e7:61:44:b7:c4:d4:c4:d5:55:16:ca:16:aa:89: 34:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:88:38:AB:F1:9E:D5:DB:0A:44:58:37:EB:B6:23:B7:EA:8E:62:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7eef8481-a4d0-3cf8-b1d9-8f996fbad37e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.127.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:33:01:dd:de:8b:f3:d8:36:51:90:bb:d3:f6:37:a8:d6:26: c7:2f:81:ac:ca:0c:30:06:6c:7a:5b:e0:56:c2:4c:36:2d:6a: c7:b7:94:d2:6c:dd:00:5e:45:6e:8b:4f:12:da:21:90:a7:05: ad:e1:2d:e4:a7:00:a2:87:69:2b:9d:85:49:b9:f4:d7:f8:be: 62:a3:1c:f5:0b:f9:f5:d1:d4:f7:dd:b9:10:05:07:a1:6f:1f: 77:66:3c:06:bb:f4:2e:f3:e2:21:16:63:72:c1:72:62:59:79: 38:52:5b:97:a9:26:f7:bf:80:57:bd:d2:e1:ec:c0:89:4a:1d: 59:65:61:82:ee:ae:f7:7b:0c:a7:f7:2c:02:3a:fc:38:24:77: 04:07:3c:0d:90:04:9e:a4:5b:3c:5d:72:c8:cc:e6:e7:ae:f3: d5:83:6c:55:c4:5b:17:90:52:02:1f:cc:93:11:cf:77:f5:33: 56:ad:10:27:fe:8f:2b:5e:19:60:db:1c:6c:3c:6a:a9:24:47: ba:7a:d9:e1:06:dd:98:a0:fe:5a:5a:e8:c4:e3:1f:d6:5f:dd: 37:1d:8f:52:fe:cb:f7:63:76:b5:2e:fa:e2:68:c9:5c:fd:52: d9:4f:cc:03:b6:01:34:ff:29:c4:00:33:c8:a9:82:3e:c9:15: 9b:bc:0e:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YY8tIXajgpUcMC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk ZTE5NzhjNjYtZjQxNy00ZjY1LTliYmItNmIzYTdlZTAwNDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HJMQ9zgegGjPMtLxIg1/AYMQ0qxeeGCBa+r ieIxeKMkYeuZEaqDDMtmrl+kzKBTiZETOwXwI++NBfF5vqzQW4HyrWTSK+Ql56WJ s9EC4171WhgiQKATh419DD994+sb8g/3Hz9xs7aNCPP+1m17sKD6z1+iGH1d73cE Lw3v4A3/qKwYBzY8GuW9ceZMdgfl1T93DpBirhwYmsROiMpSFS8LwPCObvCitdPu onVazAa2PNBHrv0cOGUmFhZD2WZl8fZDelMXdHwclISxgVYXI5ZCk/OH5mG4vmrG F2xKMNkQ2GVyML6iC5o536yz0Vcr52FEt8TUxNVVFsoWqok0wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJiIOKvxntXbCkRYN+u2I7fqjmKMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2VlZjg0ODEtYTRkMC0z Y2Y4LWIxZDktOGY5OTZmYmFkMzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGH+IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwzAd3ei/PYNlGQu9P2N6jWJscvgazKDDAGbHpb4FbCTDYtase3lNJs 3QBeRW6LTxLaIZCnBa3hLeSnAKKHaSudhUm59Nf4vmKjHPUL+fXR1PfduRAFB6Fv H3dmPAa79C7z4iEWY3LBcmJZeThSW5epJve/gFe90uHswIlKHVllYYLurvd7DKf3 LAI6/DgkdwQHPA2QBJ6kWzxdcsjM5ueu89WDbFXEWxeQUgIfzJMRz3f1M1atECf+ jyteGWDbHGw8aqkkR7p62eEG3Zig/lpa6MTjH9Zf3Tcdj1L+y/djdrUu+uJoyVz9 UtlPzAO2ATT/KcQAM8ipgj7JFZu8Dv8= -----END CERTIFICATE-----Generated at Tue Sep 1 05:07:19 2026 by rpki-client