$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89e65beb-e013-3222-a5d5-5794e2db27e2.roa File: 89e65beb-e013-3222-a5d5-5794e2db27e2.roa (raw, json) Hash identifier: 4XAI3/YbZlqsSqw6e3rl4VPFwGKd6VnFRP3wHAV25QY= Subject key identifier: FE:34:7D:CA:E1:45:41:AA:81:5C:4A:C7:0C:2F:21:DF:BC:83:92:3E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584E6F3B49C37F31CA762BB086C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89e65beb-e013-3222-a5d5-5794e2db27e2.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 33651 IP address blocks: 24.23.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3b:49:c3:7f:31:ca:76:2b:b0:86:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=aae075d1-4357-4d29-b2aa-daf2eb9b7343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:87:22:60:28:40:ff:c1:ad:c6:28:98:55:85: 43:1a:5f:a6:ad:bd:92:55:25:ff:ec:ec:6d:17:ad: c5:27:91:96:ab:40:00:dc:4d:15:20:1d:2f:18:bb: 3d:aa:fa:e2:d8:d2:98:40:3e:eb:be:ad:6d:92:25: 80:5f:9e:0c:ca:db:9c:70:06:41:dc:15:0c:43:31: a7:ff:d6:81:c6:60:9c:30:32:9a:3f:49:1e:5e:59: e2:41:00:42:f4:10:a5:c6:f3:cf:d8:68:27:3f:f1: 27:aa:31:84:14:61:93:3a:b3:fc:87:c9:d3:6b:2a: 47:fd:f4:10:ef:39:a0:a8:87:2a:77:7b:44:3e:65: 6a:ba:8d:f3:aa:dc:c6:2b:45:be:4a:bd:46:dc:fd: 28:f4:66:6c:91:b8:49:65:85:ea:42:2b:81:08:7a: 84:cf:23:43:c8:c6:c0:56:6f:3a:86:f6:f1:cb:43: 22:76:a5:4e:9c:50:23:5d:c9:7c:35:be:a5:70:16: 3c:7a:c5:59:a2:f3:01:1d:4d:dd:88:d4:c0:5c:18: 5d:ef:3e:7f:4a:fc:8d:93:c8:22:48:d6:dc:ff:09: 03:30:34:7b:8d:40:e1:ef:ac:ed:0f:24:cc:0a:84: 97:d3:dc:0c:7c:dd:b3:c0:b1:45:00:5c:f9:52:1f: 93:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:34:7D:CA:E1:45:41:AA:81:5C:4A:C7:0C:2F:21:DF:BC:83:92:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89e65beb-e013-3222-a5d5-5794e2db27e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.23.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:7f:ff:ff:91:01:f2:73:57:1d:87:10:1b:b5:b5:2a:50:18: bb:10:52:4d:25:d0:fe:56:ed:9e:a5:7b:a3:1c:1a:47:00:3d: 10:e7:8b:15:83:3f:f0:80:f2:8a:8f:b5:c9:71:a6:be:8d:06: fe:32:0c:bd:ab:67:7b:dd:6d:03:59:aa:37:7c:bb:84:40:c9: e9:7c:9a:af:48:6b:c5:c8:44:aa:b3:1d:0a:49:bb:5e:84:fb: 7e:99:c6:cf:c1:4d:9c:80:db:c9:18:cd:61:85:cd:2a:45:7d: e0:68:f3:86:3b:c6:c4:e5:3d:5a:4a:b3:b5:7d:9b:7e:ad:66: 90:94:e9:c9:8b:28:5a:43:b9:a5:59:a7:24:d7:97:d9:7d:3d: 2c:82:be:1b:06:0f:11:3d:91:c7:53:ef:52:ba:52:27:6a:cf: 55:33:5e:40:0e:50:c7:18:89:14:a3:3c:81:73:a1:0d:c7:b4: 50:12:6b:a7:b7:fc:d9:91:55:71:00:43:ff:d3:d5:27:63:f1: a7:32:86:43:d8:01:74:39:b0:27:8c:4a:b3:1d:70:79:36:88: b8:ce:69:e7:71:6e:b6:9b:d1:4a:13:c4:33:a6:88:fc:21:10: 2a:22:f8:a0:7a:2b:58:5f:59:d3:ca:5d:2a:12:ff:2c:0f:d3: dd:bc:f6:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vO0nDfzHKdiuwhsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk YWFlMDc1ZDEtNDM1Ny00ZDI5LWIyYWEtZGFmMmViOWI3MzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYciYChA/8GtxiiYVYVDGl+mrb2SVSX/7Oxt F63FJ5GWq0AA3E0VIB0vGLs9qvri2NKYQD7rvq1tkiWAX54MytuccAZB3BUMQzGn /9aBxmCcMDKaP0keXlniQQBC9BClxvPP2GgnP/EnqjGEFGGTOrP8h8nTaypH/fQQ 7zmgqIcqd3tEPmVquo3zqtzGK0W+Sr1G3P0o9GZskbhJZYXqQiuBCHqEzyNDyMbA Vm86hvbxy0MidqVOnFAjXcl8Nb6lcBY8esVZovMBHU3diNTAXBhd7z5/SvyNk8gi SNbc/wkDMDR7jUDh76ztDyTMCoSX09wMfN2zwLFFAFz5Uh+T0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP40fcrhRUGqgVxKxwwvId+8g5I+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODllNjViZWItZTAxMy0z MjIyLWE1ZDUtNTc5NGUyZGIyN2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGBeMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFN///+RAfJzVx2HEBu1tSpQGLsQUk0l0P5W7Z6le6McGkcAPRDnixWD P/CA8oqPtclxpr6NBv4yDL2rZ3vdbQNZqjd8u4RAyel8mq9Ia8XIRKqzHQpJu16E +36Zxs/BTZyA28kYzWGFzSpFfeBo84Y7xsTlPVpKs7V9m36tZpCU6cmLKFpDuaVZ pyTXl9l9PSyCvhsGDxE9kcdT71K6Uidqz1UzXkAOUMcYiRSjPIFzoQ3HtFASa6e3 /NmRVXEAQ//T1Sdj8acyhkPYAXQ5sCeMSrMdcHk2iLjOaedxbrab0UoTxDOmiPwh ECoi+KB6K1hfWdPKXSoS/ywP09289lA= -----END CERTIFICATE-----Generated at Tue Jul 21 20:04:11 2026 by rpki-client