$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/856a02d1-b7a3-3aa8-962e-e27adb1a4174.roa File: 856a02d1-b7a3-3aa8-962e-e27adb1a4174.roa (raw, json) Hash identifier: DJMSQLaIm12chYfIzT3bhO+gksV0avljUTcHXeRub98= Subject key identifier: E1:0E:03:A4:56:EA:A8:A3:4B:1C:CE:98:47:49:CC:DB:67:32:80:00 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584E6F3C186F76EBB09740C23500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/856a02d1-b7a3-3aa8-962e-e27adb1a4174.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 33491 IP address blocks: 24.14.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3c:18:6f:76:eb:b0:97:40:c2:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=804a1d8a-e8cb-4629-aead-303680e1d352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:88:d7:2f:d6:e7:48:78:47:dc:22:9b:05:c4: cc:11:a7:cb:69:aa:45:4c:4d:b0:f2:a3:3f:0a:de: 85:45:86:08:3c:21:8a:62:15:e3:b2:6b:79:9b:04: 64:92:26:32:64:43:da:bd:b9:1c:35:3d:d1:fa:94: 47:f8:fa:a1:d2:fc:46:4b:d8:71:14:88:40:c9:63: 9f:f3:44:4f:7a:a9:ad:0d:44:16:43:7d:03:e5:6a: ce:19:f4:af:5b:b1:14:5a:c4:24:8c:aa:92:5e:9f: ad:da:23:99:57:1d:1b:a3:79:b2:f4:3c:22:a6:b8: 03:bf:2e:dc:ed:54:ee:82:87:fa:29:3a:c4:42:8e: 53:1e:f4:99:ba:ae:0c:2a:cf:b5:3c:0b:38:f3:27: 21:50:a7:eb:9b:1c:f8:48:17:2c:be:ab:54:0f:dd: df:a1:00:f1:48:30:d9:dc:ba:b2:32:87:52:37:85: 27:73:7e:b8:1f:19:04:89:05:fd:ff:39:6a:96:98: 8d:3a:17:6c:31:f1:40:f5:92:2c:7b:5f:b9:00:19: 22:95:ca:71:00:18:a9:50:44:83:25:60:e8:39:b8: bd:ec:ef:29:79:68:4e:96:85:b8:bd:a4:ac:87:56: 84:5f:72:65:28:a3:d8:07:38:4b:1d:21:a1:76:39: 74:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:0E:03:A4:56:EA:A8:A3:4B:1C:CE:98:47:49:CC:DB:67:32:80:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/856a02d1-b7a3-3aa8-962e-e27adb1a4174.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.14.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:4c:3e:72:e2:fa:33:2e:3e:de:86:e7:bd:1e:6a:0c:83:4f: 63:86:10:b9:4a:42:58:84:b0:65:da:b2:21:f5:91:66:01:d4: a5:d4:be:3e:84:68:89:ef:3d:8f:6f:94:88:24:e4:50:55:75: 43:2d:6d:11:cb:e5:6d:2a:e4:59:2a:4c:58:f3:b0:50:fd:de: 00:b7:9c:53:32:4e:f5:be:03:fe:d2:c8:21:93:88:a1:10:10: 18:00:6b:48:f5:98:d5:9e:8a:63:5e:72:c6:c8:ad:89:68:39: a5:a7:4f:78:1a:7a:ef:a6:28:f9:35:c0:62:4f:ee:3e:84:c8: 4e:1f:04:8c:c6:37:02:75:dc:7a:7f:f9:02:27:65:c3:d1:36: 66:ae:7b:26:5e:16:c8:e4:f5:0a:4c:6c:81:d2:0b:73:3e:30: 65:eb:1c:ec:e8:26:c8:6b:bd:52:48:54:c6:dd:33:1e:c9:cf: 61:0b:52:40:e5:0b:36:9e:49:e0:3d:b9:88:26:0d:ae:c1:09: 43:70:28:45:85:70:c0:73:81:90:66:58:42:5b:e5:a0:40:c6: 62:3a:8f:34:ee:2b:69:4d:96:14:4c:85:83:9e:eb:ab:19:37: b8:00:6e:2b:88:51:a1:5c:42:78:15:44:b3:92:8c:99:d1:13: fa:f0:90:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vPBhvduuwl0DCNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk ODA0YTFkOGEtZThjYi00NjI5LWFlYWQtMzAzNjgwZTFkMzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYjXL9bnSHhH3CKbBcTMEafLaapFTE2w8qM/ Ct6FRYYIPCGKYhXjsmt5mwRkkiYyZEPavbkcNT3R+pRH+Pqh0vxGS9hxFIhAyWOf 80RPeqmtDUQWQ30D5WrOGfSvW7EUWsQkjKqSXp+t2iOZVx0bo3my9DwiprgDvy7c 7VTugof6KTrEQo5THvSZuq4MKs+1PAs48ychUKfrmxz4SBcsvqtUD93foQDxSDDZ 3LqyModSN4Unc364HxkEiQX9/zlqlpiNOhdsMfFA9ZIse1+5ABkilcpxABipUESD JWDoObi97O8peWhOloW4vaSsh1aEX3JlKKPYBzhLHSGhdjl0MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOEOA6RW6qijSxzOmEdJzNtnMoAAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODU2YTAyZDEtYjdhMy0z YWE4LTk2MmUtZTI3YWRiMWE0MTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGA6KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlMPnLi+jMuPt6G570eagyDT2OGELlKQliEsGXasiH1kWYB1KXUvj6E aInvPY9vlIgk5FBVdUMtbRHL5W0q5FkqTFjzsFD93gC3nFMyTvW+A/7SyCGTiKEQ EBgAa0j1mNWeimNecsbIrYloOaWnT3gaeu+mKPk1wGJP7j6EyE4fBIzGNwJ13Hp/ +QInZcPRNmaueyZeFsjk9QpMbIHSC3M+MGXrHOzoJshrvVJIVMbdMx7Jz2ELUkDl CzaeSeA9uYgmDa7BCUNwKEWFcMBzgZBmWEJb5aBAxmI6jzTuK2lNlhRMhYOe66sZ N7gAbiuIUaFcQngVRLOSjJnRE/rwkOA= -----END CERTIFICATE-----Generated at Wed Jul 22 00:13:06 2026 by rpki-client