$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4c57f1d-b5f9-3087-9013-19e2310db85d.roa File: a4c57f1d-b5f9-3087-9013-19e2310db85d.roa (raw, json) Hash identifier: CTi/emXwrYGKnWQjsx8HLPoFsGpf33mdvdYkXJcIWJw= Subject key identifier: DE:AD:38:52:FF:4A:A9:DC:D6:BE:A9:AD:17:12:A2:D5:DE:FA:8D:6A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4EDBF46436EA5EF6729400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4c57f1d-b5f9-3087-9013-19e2310db85d.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33490 IP address blocks: 24.21.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4e:db:f4:64:36:ea:5e:f6:72:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=25838c8a-bbf0-45d7-8735-f3c1cac8603b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:5e:74:a4:99:9b:20:79:fe:08:74:05:aa:8c: 03:a5:e5:86:36:bb:1c:e3:de:54:8d:76:6f:6f:81: db:38:18:b0:18:97:58:3b:86:0a:81:e4:16:c8:c6: 5b:6b:6d:e2:83:22:84:c2:49:5e:ce:ad:16:8e:80: 57:cc:d4:84:9e:13:22:44:de:e9:2c:3f:1d:cb:ba: b9:9f:13:3e:94:fd:2f:2a:d0:0a:a8:30:9a:27:fe: ad:1a:7d:8d:2e:1e:9b:e8:8b:58:fd:a0:89:87:fd: 8e:de:55:56:60:95:10:07:d4:77:8f:fb:a1:e5:e3: de:54:2a:df:0f:f6:f8:73:c0:91:b2:fc:f4:ae:bc: 2d:3b:dd:c9:4d:87:e1:f7:f7:50:17:f6:88:f9:84: 71:21:e5:e0:fd:e2:4f:83:04:90:0b:e5:d0:99:9c: 9a:ab:e0:9c:ec:01:07:04:b5:85:e9:74:87:66:b0: ef:1c:bc:81:ad:df:31:c3:ae:85:96:01:02:6f:31: 37:82:e5:9e:b0:59:57:ad:fd:1a:9d:12:7d:46:5b: 88:35:f0:83:6f:cf:23:c5:99:72:ac:59:e1:d0:ba: ac:fc:0b:97:27:b9:fc:43:be:3a:59:49:0d:c8:31: 8f:dd:cd:40:97:26:27:a1:e5:8b:9b:e4:4d:ab:f8: dd:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:AD:38:52:FF:4A:A9:DC:D6:BE:A9:AD:17:12:A2:D5:DE:FA:8D:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4c57f1d-b5f9-3087-9013-19e2310db85d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.21.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:59:04:f1:8d:36:aa:29:7c:30:ce:1a:bb:8f:f0:e1:23:2b: d8:18:3a:63:71:bc:d9:6e:6c:ac:44:0d:7c:b1:5c:08:63:90: 72:f7:9c:0e:b3:05:b0:d9:b9:22:2c:63:78:26:75:cf:a2:d8: 33:65:00:10:aa:4d:0f:6a:0d:b2:e3:e4:28:32:b4:4a:90:55: bc:a4:a0:eb:f5:0a:4c:95:c3:85:93:9a:0a:04:61:0e:6d:db: 87:2c:fb:ac:1a:a8:cb:54:33:69:c6:80:b0:66:ab:4c:6c:88: fc:38:35:92:45:d8:d3:20:25:a6:b1:0e:fa:80:ef:05:e4:d2: 43:f2:60:2a:be:3f:1d:00:02:d5:86:b6:70:5b:cb:68:b2:fd: f8:fe:e6:87:4c:79:41:b2:9e:95:36:3c:97:14:5d:7f:7d:a8: 03:26:2c:4b:a1:fa:05:5b:c4:d4:8c:3a:e7:fc:3c:23:e0:cf: f0:2a:37:5a:1d:1e:80:d6:49:23:e9:10:3b:e5:e8:48:de:0d: fa:aa:83:32:c6:8d:a4:30:73:95:c5:73:c3:58:6a:68:1b:d0: 86:85:68:bf:a6:39:63:24:b7:a2:48:93:08:ad:99:b7:f3:93: dc:df:5a:62:8f:75:4d:f6:28:79:6e:f2:78:ec:fe:4d:4d:37: d4:86:66:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96Ttv0ZDbqXvZylAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk MjU4MzhjOGEtYmJmMC00NWQ3LTg3MzUtZjNjMWNhYzg2MDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhl50pJmbIHn+CHQFqowDpeWGNrsc495UjXZv b4HbOBiwGJdYO4YKgeQWyMZba23igyKEwklezq0WjoBXzNSEnhMiRN7pLD8dy7q5 nxM+lP0vKtAKqDCaJ/6tGn2NLh6b6ItY/aCJh/2O3lVWYJUQB9R3j/uh5ePeVCrf D/b4c8CRsvz0rrwtO93JTYfh9/dQF/aI+YRxIeXg/eJPgwSQC+XQmZyaq+Cc7AEH BLWF6XSHZrDvHLyBrd8xw66FlgECbzE3guWesFlXrf0anRJ9RluINfCDb88jxZly rFnh0Lqs/AuXJ7n8Q746WUkNyDGP3c1AlyYnoeWLm+RNq/jdHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6tOFL/Sqnc1r6prRcSotXe+o1qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTRjNTdmMWQtYjVmOS0z MDg3LTkwMTMtMTllMjMxMGRiODVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGBVoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRZBPGNNqopfDDOGruP8OEjK9gYOmNxvNlubKxEDXyxXAhjkHL3nA6z BbDZuSIsY3gmdc+i2DNlABCqTQ9qDbLj5CgytEqQVbykoOv1CkyVw4WTmgoEYQ5t 24cs+6waqMtUM2nGgLBmq0xsiPw4NZJF2NMgJaaxDvqA7wXk0kPyYCq+Px0AAtWG tnBby2iy/fj+5odMeUGynpU2PJcUXX99qAMmLEuh+gVbxNSMOuf8PCPgz/AqN1od HoDWSSPpEDvl6EjeDfqqgzLGjaQwc5XFc8NYamgb0IaFaL+mOWMkt6JIkwitmbfz k9zfWmKPdU32KHlu8njs/k1NN9SGZrI= -----END CERTIFICATE-----Generated at Wed Oct 21 10:24:03 2026 by rpki-client