$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/94a49f78-aa01-3760-a513-867975d6019c.roa File: 94a49f78-aa01-3760-a513-867975d6019c.roa (raw, json) Hash identifier: s59lst0ieTw9A72V9LdCHfnjw7w8rghsrhGOQVoJx2M= Subject key identifier: 3D:90:58:31:6D:21:7F:CB:1F:23:24:09:41:33:63:D2:6B:73:8A:DC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED86326578D957E8C37324280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/94a49f78-aa01-3760-a513-867975d6019c.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33490 IP address blocks: 24.21.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:63:26:57:8d:95:7e:8c:37:32:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=5af64d99-ecd1-46d4-9e05-f87bd6d00af0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:89:00:10:a6:56:d8:ff:13:fd:d0:57:d5:59: 07:32:32:39:72:4c:10:92:e3:52:18:2d:65:08:df: 0f:91:41:77:a6:8f:3b:65:30:7a:ef:05:e9:9b:fa: 97:90:42:ba:32:0d:84:a6:78:17:15:ef:6d:68:9b: 9b:be:1c:5e:83:5d:62:29:3e:f6:25:84:d2:5a:ae: 6f:01:af:a4:8e:26:bc:e1:3b:40:c5:70:8b:06:d6: ef:3e:1a:81:27:c4:13:60:db:29:97:51:0d:c6:33: 2a:6b:04:53:25:98:22:52:66:39:b8:eb:23:7a:5e: 9d:5d:0a:01:43:ce:51:4c:3c:c3:ab:19:2d:e2:97: 4d:94:c8:46:72:85:69:b1:f5:a1:0b:0e:e0:c8:84: 99:8f:36:9a:ff:71:60:97:8f:03:ee:ee:f5:10:c2: 62:84:96:a3:d0:1d:c8:61:29:a1:54:2a:92:2e:6a: bf:a7:86:b5:8c:f6:ca:16:8d:80:8a:25:dc:08:5d: 51:8d:00:4d:93:4a:44:4c:98:f3:47:e5:96:6e:4f: 4f:ef:bb:1e:9c:f5:10:59:ac:70:bf:00:c4:51:a5: 3e:ba:67:46:8e:a6:0a:e0:5e:a2:95:3f:98:6c:d7: af:49:12:75:68:27:d7:76:4f:b2:da:96:16:b1:7f: 07:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:90:58:31:6D:21:7F:CB:1F:23:24:09:41:33:63:D2:6B:73:8A:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/94a49f78-aa01-3760-a513-867975d6019c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.21.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:24:95:41:23:31:f0:5d:3c:80:5f:ee:79:79:c7:e8:f0:5a: 8a:dd:a9:2b:01:f3:0c:6d:2f:26:74:a1:17:01:0b:c6:b9:93: 29:46:5e:22:55:1b:7b:e3:0f:4c:b7:ee:0c:6e:9e:59:fb:0c: 8f:9a:f7:74:64:41:29:a9:82:5e:52:2b:8a:53:0e:5c:21:27: 41:f3:79:76:cd:97:9c:35:41:1a:d6:3f:76:ab:a6:89:a1:a2: db:19:6e:ec:b7:7d:38:b2:6a:4a:f3:09:ad:d0:8c:d8:5c:f2: 9f:41:c7:1c:8e:ec:e9:d8:25:51:1f:1f:c5:e0:a5:92:bd:3a: b7:90:dd:22:53:48:a9:27:cc:ff:cb:94:80:59:93:3b:b9:7c: 44:c4:66:3c:de:f3:a0:8c:ed:11:15:00:fa:38:07:6b:7c:5c: 09:2c:51:4c:2b:0a:ee:09:bf:fe:19:46:e5:13:74:cb:2b:22: be:87:92:ad:4d:94:af:8f:0a:f4:13:66:94:85:c9:fd:26:69: 05:bc:b8:fc:1f:b9:3e:70:38:8c:7e:2e:87:ec:c6:cd:2d:3d: cc:8d:b2:79:bc:68:b4:11:7d:08:27:13:c5:87:8a:23:91:6d: 91:56:4c:29:31:79:18:4e:1b:dc:1b:94:32:45:86:83:61:bb: 99:ef:a8:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYyZXjZV+jDcyQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk NWFmNjRkOTktZWNkMS00NmQ0LTllMDUtZjg3YmQ2ZDAwYWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAookAEKZW2P8T/dBX1VkHMjI5ckwQkuNSGC1l CN8PkUF3po87ZTB67wXpm/qXkEK6Mg2EpngXFe9taJubvhxeg11iKT72JYTSWq5v Aa+kjia84TtAxXCLBtbvPhqBJ8QTYNspl1ENxjMqawRTJZgiUmY5uOsjel6dXQoB Q85RTDzDqxkt4pdNlMhGcoVpsfWhCw7gyISZjzaa/3Fgl48D7u71EMJihJaj0B3I YSmhVCqSLmq/p4a1jPbKFo2AiiXcCF1RjQBNk0pETJjzR+WWbk9P77senPUQWaxw vwDEUaU+umdGjqYK4F6ilT+YbNevSRJ1aCfXdk+y2pYWsX8HvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD2QWDFtIX/LHyMkCUEzY9Jrc4rcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTRhNDlmNzgtYWEwMS0z NzYwLWE1MTMtODY3OTc1ZDYwMTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGBUcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABAklUEjMfBdPIBf7nl5x+jwWordqSsB8wxtLyZ0oRcBC8a5kylGXiJV G3vjD0y37gxunln7DI+a93RkQSmpgl5SK4pTDlwhJ0HzeXbNl5w1QRrWP3arpomh otsZbuy3fTiyakrzCa3QjNhc8p9BxxyO7OnYJVEfH8XgpZK9OreQ3SJTSKknzP/L lIBZkzu5fETEZjze86CM7REVAPo4B2t8XAksUUwrCu4Jv/4ZRuUTdMsrIr6Hkq1N lK+PCvQTZpSFyf0maQW8uPwfuT5wOIx+Lofsxs0tPcyNsnm8aLQRfQgnE8WHiiOR bZFWTCkxeRhOG9wblDJFhoNhu5nvqM0= -----END CERTIFICATE-----Generated at Sat Sep 5 08:50:38 2026 by rpki-client