$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a052fa43-81ca-302d-b803-a173b9f06644.roa File: a052fa43-81ca-302d-b803-a173b9f06644.roa (raw, json) Hash identifier: XUSPz/7Txrp+6pxBv4w6fdrBNQpGG3TmyJeYzHiC93I= Subject key identifier: 1C:84:7D:DD:29:B6:BA:5E:F2:5A:EB:C9:36:BE:C1:D4:56:C3:39:2C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4EDC440EF16E0EF6F22CC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a052fa43-81ca-302d-b803-a173b9f06644.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33490 IP address blocks: 24.21.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4e:dc:44:0e:f1:6e:0e:f6:f2:2c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=cc84dca0-e069-45f5-b132-4d0778b682c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:12:fb:39:e2:d2:a4:43:89:be:c9:99:78:ae: ed:be:dc:a3:bc:e0:25:ab:45:92:37:db:cb:0e:7e: 2e:c3:74:f5:f1:eb:35:cc:68:22:c4:54:5b:9d:cf: e7:8f:ed:2c:d8:95:28:05:3e:20:ac:25:cd:a7:b8: 67:eb:56:59:ed:24:80:c3:5e:b6:e4:99:cd:45:54: 5e:90:d6:f4:0a:24:56:7b:09:20:83:86:2f:a6:fd: 52:be:62:f9:2b:b1:53:ff:48:c0:e4:9b:34:b3:77: a8:36:26:59:7e:4c:38:64:56:d7:e3:67:32:be:2f: 91:de:f4:34:e9:4e:bf:b9:4b:3a:ee:3a:af:de:de: 23:d8:97:e9:2c:16:1e:23:c4:a1:86:e0:cd:6b:ea: af:ea:0a:ad:58:60:5b:2f:c8:12:7d:fb:2a:2f:7c: 21:23:7e:d4:4d:6b:7f:2d:3c:e5:df:6d:83:e9:c1: 99:32:70:eb:ff:20:4e:01:0f:25:4a:b3:bb:e8:e3: 32:0b:1f:d9:e7:b3:b9:08:b1:e5:6a:90:e9:15:4d: fd:28:cb:43:9f:e4:c9:7b:9e:4d:7a:65:84:21:ff: d8:a6:6a:2c:fe:b0:a1:59:66:1b:1d:f1:5d:42:f0: cb:09:20:4f:4e:24:ab:39:cc:3b:af:cd:c4:b5:6b: 8a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:84:7D:DD:29:B6:BA:5E:F2:5A:EB:C9:36:BE:C1:D4:56:C3:39:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a052fa43-81ca-302d-b803-a173b9f06644.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.21.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:e9:69:83:0d:c3:34:0c:22:b6:7e:89:20:35:49:34:f0:84: aa:f8:dd:af:40:cc:c3:46:7d:a6:a7:4d:36:8f:e5:ef:65:0e: 70:53:c9:9e:70:00:c9:77:f0:46:ab:34:2d:8f:2a:0c:83:89: 86:e4:e9:4e:b2:52:49:70:39:c3:72:d6:89:9f:9f:02:4d:43: e5:81:b7:3d:1c:f1:bf:db:b8:e6:03:90:0d:a9:2e:c9:7a:a9: ea:1f:fd:21:d0:1b:45:0b:c7:6f:13:3f:d6:67:fa:4c:3f:6a: 99:30:5b:4c:97:1e:66:c6:ba:fd:5c:29:a9:e1:4b:34:5a:55: 81:19:6e:eb:cf:a6:07:f5:fe:61:ab:c3:c9:64:17:89:42:0c: f5:67:32:0a:3c:70:9c:e4:d4:14:db:10:c7:30:bb:07:3b:68: fb:83:13:cc:ed:a4:01:40:4d:23:1c:24:ad:2d:e2:61:2d:ba: ef:e8:53:37:d2:96:66:57:ec:23:91:ec:13:5f:f1:10:9c:06: d1:8e:d7:f6:79:0b:77:e1:09:db:94:b3:e9:d4:1a:34:d1:3e: 2e:6b:15:12:cc:29:00:41:45:77:c4:39:db:6e:79:18:b2:49: 23:1b:43:fd:a0:fd:8e:10:17:a2:c6:45:98:a5:a9:e4:bf:96: 40:90:8b:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TtxEDvFuDvbyLMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk Y2M4NGRjYTAtZTA2OS00NWY1LWIxMzItNGQwNzc4YjY4MmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9xL7OeLSpEOJvsmZeK7tvtyjvOAlq0WSN9vL Dn4uw3T18es1zGgixFRbnc/nj+0s2JUoBT4grCXNp7hn61ZZ7SSAw1625JnNRVRe kNb0CiRWewkgg4Yvpv1SvmL5K7FT/0jA5Js0s3eoNiZZfkw4ZFbX42cyvi+R3vQ0 6U6/uUs67jqv3t4j2JfpLBYeI8ShhuDNa+qv6gqtWGBbL8gSffsqL3whI37UTWt/ LTzl322D6cGZMnDr/yBOAQ8lSrO76OMyCx/Z57O5CLHlapDpFU39KMtDn+TJe55N emWEIf/Ypmos/rChWWYbHfFdQvDLCSBPTiSrOcw7r83EtWuKDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFByEfd0ptrpe8lrryTa+wdRWwzksMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTA1MmZhNDMtODFjYS0z MDJkLWI4MDMtYTE3M2I5ZjA2NjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGBWIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLpaYMNwzQMIrZ+iSA1STTwhKr43a9AzMNGfaanTTaP5e9lDnBTyZ5w AMl38EarNC2PKgyDiYbk6U6yUklwOcNy1omfnwJNQ+WBtz0c8b/buOYDkA2pLsl6 qeof/SHQG0ULx28TP9Zn+kw/apkwW0yXHmbGuv1cKanhSzRaVYEZbuvPpgf1/mGr w8lkF4lCDPVnMgo8cJzk1BTbEMcwuwc7aPuDE8ztpAFATSMcJK0t4mEtuu/oUzfS lmZX7COR7BNf8RCcBtGO1/Z5C3fhCduUs+nUGjTRPi5rFRLMKQBBRXfEOdtueRiy SSMbQ/2g/Y4QF6LGRZilqeS/lkCQi9I= -----END CERTIFICATE-----Generated at Sun Oct 25 01:38:54 2026 by rpki-client