$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2c7efea-5b5c-3695-a31a-c0ffc8f01030.roa File: a2c7efea-5b5c-3695-a31a-c0ffc8f01030.roa (raw, json) Hash identifier: PN3gXz7Fk0zQJB7b4fP8NVOkDKCwoTaFDU+fttUOmmQ= Subject key identifier: 1F:7B:66:B9:B8:B6:58:06:C9:30:02:AD:2A:80:43:52:5E:25:25:3F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119D9B538A19BFFA3B2E1B80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2c7efea-5b5c-3695-a31a-c0ffc8f01030.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33491 IP address blocks: 24.12.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:9b:53:8a:19:bf:fa:3b:2e:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=3cc823aa-122f-42f9-90fc-1b1f7cf091c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:77:05:06:c8:ee:ed:3e:a0:b4:dc:26:5a:2e: e5:79:38:b7:32:0e:d3:72:80:04:47:ff:d8:6f:16: e4:dd:18:d3:68:ab:94:fa:34:af:59:52:9a:91:88: 57:6a:bc:01:06:c3:60:43:0c:27:90:7c:ca:10:fd: 62:9d:b5:64:e8:57:88:91:a2:63:89:e1:84:5d:4f: 51:e0:3d:ba:4f:1c:cf:83:0e:f9:8c:4c:1f:6d:c6: 02:f1:99:26:e3:52:36:ff:a7:d7:20:4d:09:95:a0: f8:86:2b:89:58:9f:0e:e8:2a:8a:21:88:25:e2:04: 51:2b:b9:e1:f0:3c:1d:d3:f2:a2:20:02:e4:75:b0: 77:66:0d:ac:56:ec:1c:70:78:33:d1:3d:35:cf:94: 69:b6:59:e2:ec:78:23:55:26:90:8f:d1:97:f4:ed: f1:47:92:7d:b8:2a:b8:19:38:c3:f0:67:1f:24:89: 04:c8:99:33:19:29:29:d5:78:5e:a8:40:1d:0c:b9: a8:58:35:dd:58:23:97:07:53:f7:8a:14:99:a5:b7: 52:7b:4c:e7:e6:45:23:03:ea:05:ea:4d:f7:b9:06: 3e:d6:54:9e:80:6e:5f:36:25:fa:f6:79:42:a4:56: 81:01:35:4a:3c:ae:66:34:39:e5:fb:86:10:43:9e: fa:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:7B:66:B9:B8:B6:58:06:C9:30:02:AD:2A:80:43:52:5E:25:25:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2c7efea-5b5c-3695-a31a-c0ffc8f01030.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.12.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:38:06:8f:58:f3:eb:b0:fd:bd:6d:64:56:84:00:3c:07:03: a0:e4:06:ce:f8:05:14:72:13:73:b5:5f:96:6a:b9:76:5d:c7: 51:61:93:e8:ac:65:ec:c1:09:73:1c:90:e3:1f:45:d9:ab:f0: 90:05:e3:20:4e:62:0b:1b:24:ca:1d:91:39:18:7c:fa:6f:aa: 05:ad:23:8b:b0:26:4b:74:0a:77:c4:e5:1f:fd:59:40:eb:26: a2:39:a8:23:ad:fe:8b:84:ae:3b:4f:de:1c:44:c8:82:2c:32: b6:6d:82:a1:40:a0:c7:8e:32:88:ad:8d:7f:9d:dc:9d:a2:97: 73:51:53:3e:db:5c:1e:cd:71:b2:8a:b9:ba:13:dd:60:da:b0: 8b:e7:05:44:92:88:ac:ec:76:ba:16:08:d9:5b:73:4d:5c:46: 22:11:13:ef:f7:51:30:c0:4a:0e:e7:c4:42:47:d2:ca:56:c5: 57:6b:a8:da:09:5a:af:ec:20:d6:bc:0f:55:fb:98:fe:9f:9c: cd:02:22:2d:d0:60:12:66:aa:35:1d:b9:4d:99:2e:cb:2e:f9: af:03:53:77:dc:cb:a2:07:49:7e:de:94:f5:12:65:1e:8c:22: 6d:76:34:8e:93:b3:e3:f7:9a:51:9b:fa:d5:2e:0b:f3:70:96: 96:22:49:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnZtTihm/+jsuG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk M2NjODIzYWEtMTIyZi00MmY5LTkwZmMtMWIxZjdjZjA5MWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXcFBsju7T6gtNwmWi7leTi3Mg7TcoAER//Y bxbk3RjTaKuU+jSvWVKakYhXarwBBsNgQwwnkHzKEP1inbVk6FeIkaJjieGEXU9R 4D26TxzPgw75jEwfbcYC8Zkm41I2/6fXIE0JlaD4hiuJWJ8O6CqKIYgl4gRRK7nh 8Dwd0/KiIALkdbB3Zg2sVuwccHgz0T01z5Rptlni7HgjVSaQj9GX9O3xR5J9uCq4 GTjD8GcfJIkEyJkzGSkp1XheqEAdDLmoWDXdWCOXB1P3ihSZpbdSe0zn5kUjA+oF 6k33uQY+1lSegG5fNiX69nlCpFaBATVKPK5mNDnl+4YQQ5765QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB97Zrm4tlgGyTACrSqAQ1JeJSU/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTJjN2VmZWEtNWI1Yy0z Njk1LWEzMWEtYzBmZmM4ZjAxMDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGAzYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALc4Bo9Y8+uw/b1tZFaEADwHA6DkBs74BRRyE3O1X5ZquXZdx1Fhk+is ZezBCXMckOMfRdmr8JAF4yBOYgsbJModkTkYfPpvqgWtI4uwJkt0CnfE5R/9WUDr JqI5qCOt/ouErjtP3hxEyIIsMrZtgqFAoMeOMoitjX+d3J2il3NRUz7bXB7NcbKK uboT3WDasIvnBUSSiKzsdroWCNlbc01cRiIRE+/3UTDASg7nxEJH0spWxVdrqNoJ Wq/sINa8D1X7mP6fnM0CIi3QYBJmqjUduU2ZLssu+a8DU3fcy6IHSX7elPUSZR6M Im12NI6Ts+P3mlGb+tUuC/NwlpYiSQY= -----END CERTIFICATE-----Generated at Sat Sep 5 13:21:40 2026 by rpki-client