$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/989f2da2-492b-306a-94b3-c4bc9f22c844.roa File: 989f2da2-492b-306a-94b3-c4bc9f22c844.roa (raw, json) Hash identifier: DtGx8McLLzvb0E+OMkbDMtLh3/u6rnpMTQTOf1TFtU8= Subject key identifier: 82:81:5E:F7:90:FB:73:49:0D:5A:DD:D1:A2:0F:AB:B7:DC:2B:61:98 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F4980A9E382AA1FD609FF7980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/989f2da2-492b-306a-94b3-c4bc9f22c844.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33489 IP address blocks: 24.129.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:80:a9:e3:82:aa:1f:d6:09:ff:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b9c32654-4c4a-4118-8034-fd17dbca4ea7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:63:d8:d2:2c:e3:92:2a:6d:6d:79:38:38:bc: c2:70:b0:9f:44:68:d2:46:81:2c:9c:f5:be:2a:7e: fc:12:19:84:e9:29:c5:0b:c5:e2:16:1f:94:c3:48: b4:b6:ea:36:5c:ef:39:c9:82:bb:fb:de:30:65:7d: 74:8c:a1:b0:b8:0a:d9:5b:5f:ca:cc:75:3a:eb:ee: fe:aa:82:20:58:66:6f:72:f3:bd:b9:8e:4c:38:81: 4d:fa:49:1f:0e:1a:39:13:99:64:53:e2:5d:cc:65: 31:b2:ef:b4:81:79:5b:c2:a9:f4:19:c7:9d:e1:14: 38:23:77:9d:4e:a3:86:d4:b3:f7:bd:41:10:ff:3e: 82:c3:1a:80:ae:09:b0:4f:fb:7b:14:b9:5c:f3:88: 2d:c4:9e:17:56:e7:0b:76:da:0d:fd:62:0c:ae:66: a9:f2:dc:29:e4:4c:d4:7f:bf:b2:db:48:00:fb:19: f7:eb:2b:c3:cf:d0:8b:3b:bf:2a:da:c9:8f:a1:fe: b4:8b:57:bb:9f:42:e0:b2:dc:9f:81:2c:52:ad:7a: d4:aa:b9:e7:ee:c1:b3:aa:bb:98:81:36:13:0d:a2: b9:bb:9d:e8:96:72:ea:ac:6a:c7:2c:1a:81:a6:09: e0:78:dd:ed:98:7d:5a:4a:ac:56:02:99:8e:4a:80: 20:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:81:5E:F7:90:FB:73:49:0D:5A:DD:D1:A2:0F:AB:B7:DC:2B:61:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/989f2da2-492b-306a-94b3-c4bc9f22c844.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.129.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:34:48:90:7e:5b:23:f1:96:24:62:27:c0:28:ed:ee:49:87: 6f:f7:34:52:2e:37:5b:23:bc:50:e5:05:46:53:23:a1:e9:43: 87:e4:1f:b8:92:1b:39:fb:15:d6:9b:95:db:3a:2d:e7:95:9d: f1:c5:3c:40:b7:44:08:39:3f:bb:02:d9:c3:48:7d:46:86:c4: 00:68:df:50:ef:15:88:b8:f6:6a:74:41:69:e8:7a:2b:be:70: 19:75:d2:47:0b:18:70:91:60:d7:8a:0d:16:7f:da:ba:9c:34: f5:32:b4:27:81:83:f6:43:30:74:2f:5e:57:09:bc:2e:f2:ac: e1:7d:64:0a:75:38:79:c3:a9:ec:64:e5:e5:4c:54:56:a1:cc: c2:8f:de:8d:03:a7:a1:28:55:5d:31:07:fc:5c:33:e2:19:7a: de:8d:bd:ff:e7:8d:69:d4:13:15:46:4d:02:09:de:ab:2f:4a: 00:3c:20:bc:0f:73:02:35:70:b0:5c:00:8f:42:2f:b3:4c:04: 8f:e8:98:1d:70:dc:7c:eb:3b:bc:44:18:58:55:c1:97:c4:db: 81:f8:20:98:9e:37:3e:11:ab:f5:3b:d0:39:58:7e:3a:1f:36: 61:6c:32:f4:b9:53:d6:3a:a1:34:69:92:4b:92:3d:74:63:6d: 0d:63:f2:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JgKnjgqof1gn/eYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjljMzI2NTQtNGM0YS00MTE4LTgwMzQtZmQxN2RiY2E0ZWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2PY0izjkiptbXk4OLzCcLCfRGjSRoEsnPW+ Kn78EhmE6SnFC8XiFh+Uw0i0tuo2XO85yYK7+94wZX10jKGwuArZW1/KzHU66+7+ qoIgWGZvcvO9uY5MOIFN+kkfDho5E5lkU+JdzGUxsu+0gXlbwqn0Gced4RQ4I3ed TqOG1LP3vUEQ/z6CwxqArgmwT/t7FLlc84gtxJ4XVucLdtoN/WIMrmap8twp5EzU f7+y20gA+xn36yvDz9CLO78q2smPof60i1e7n0LgstyfgSxSrXrUqrnn7sGzqruY gTYTDaK5u53olnLqrGrHLBqBpgngeN3tmH1aSqxWApmOSoAg9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIKBXveQ+3NJDVrd0aIPq7fcK2GYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTg5ZjJkYTItNDkyYi0z MDZhLTk0YjMtYzRiYzlmMjJjODQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGGIEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAw0SJB+WyPxliRiJ8Ao7e5Jh2/3NFIuN1sjvFDlBUZTI6HpQ4fkH7iS Gzn7Fdablds6LeeVnfHFPEC3RAg5P7sC2cNIfUaGxABo31DvFYi49mp0QWnoeiu+ cBl10kcLGHCRYNeKDRZ/2rqcNPUytCeBg/ZDMHQvXlcJvC7yrOF9ZAp1OHnDqexk 5eVMVFahzMKP3o0Dp6EoVV0xB/xcM+IZet6Nvf/njWnUExVGTQIJ3qsvSgA8ILwP cwI1cLBcAI9CL7NMBI/omB1w3HzrO7xEGFhVwZfE24H4IJieNz4Rq/U70DlYfjof NmFsMvS5U9Y6oTRpkkuSPXRjbQ1j8o4= -----END CERTIFICATE-----Generated at Mon Oct 26 00:44:49 2026 by rpki-client