$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9709ca8-6255-39e7-952a-13c67f56c9b2.roa File: a9709ca8-6255-39e7-952a-13c67f56c9b2.roa (raw, json) Hash identifier: pNY914Vs1ht/nKxrUsp8IwUiE9/AxxaxoDpyp4VUz5s= Subject key identifier: EA:1A:05:DD:8B:0E:35:9C:FD:F0:91:FE:15:75:F0:08:15:82:49:6F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED86324A438523041DD133F70 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9709ca8-6255-39e7-952a-13c67f56c9b2.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33490 IP address blocks: 24.20.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:63:24:a4:38:52:30:41:dd:13:3f:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=f9f69c64-484b-41ee-a133-f13f2d711699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f1:22:bf:d6:15:d3:39:6a:39:f8:6e:d6:a3: a0:ab:62:4c:b7:c9:13:37:6b:7e:f8:26:cb:4f:67: b6:79:f4:09:f0:5b:82:4b:49:ba:d8:20:a0:ea:fc: bb:90:7d:33:3c:fa:a9:35:96:51:2a:71:8b:67:a4: 70:33:8b:09:a3:c5:7d:86:6e:cb:25:f7:7c:82:93: 1f:1e:a1:44:17:4f:cb:09:f1:5e:ee:3f:1c:f0:fa: c5:a0:8e:62:eb:be:d8:a6:45:23:72:59:b3:e6:28: ab:b2:5b:e4:68:54:75:56:83:92:da:ea:f6:4c:a3: 2b:3d:f0:a8:8b:b1:49:21:15:d0:78:82:b6:65:e0: 8d:35:a5:71:b1:6e:4d:56:09:b0:b3:47:14:7d:06: cc:10:80:27:54:a5:69:22:f0:cf:48:cc:3c:22:a5: 46:d1:c2:7b:2f:b9:3e:ef:de:04:b8:7a:d6:8b:61: 90:03:ba:74:55:c9:e0:ae:42:a1:8b:ab:d5:3b:6d: 78:9f:ee:03:eb:2c:10:65:e0:cc:a3:2b:fd:0f:b9: 1d:80:6f:a7:b3:57:8f:5c:54:77:82:34:f6:b2:b2: 75:42:f5:34:26:9b:1a:bd:6c:7c:e1:e3:b5:0a:f3: 18:85:20:69:be:b2:73:eb:c0:82:87:ec:31:a7:28: 2b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:1A:05:DD:8B:0E:35:9C:FD:F0:91:FE:15:75:F0:08:15:82:49:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9709ca8-6255-39e7-952a-13c67f56c9b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.20.214.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:44:63:5d:8a:62:0e:da:ea:17:dc:db:5c:4e:31:1b:48:fa: 7b:54:80:d2:19:32:e0:f5:3e:3f:7d:fe:fd:24:ea:49:77:27: dd:2b:0d:1d:56:27:07:d9:49:2d:15:7f:95:c8:0d:92:99:60: d2:8f:f7:e6:0a:65:51:95:ee:8c:ca:90:06:8a:10:2f:0d:1d: a3:1f:84:9c:86:08:cf:61:a7:67:5b:43:f2:d5:5d:1e:25:8f: f5:7c:7c:67:60:d8:67:40:98:85:0b:83:91:b2:8e:c4:07:3d: bd:17:d8:a7:dc:86:89:8a:54:b7:67:ab:d7:de:9d:e4:f0:b8: 37:5d:7d:8d:92:24:ec:c2:f6:b6:3a:89:75:42:7c:bd:92:da: e1:c1:80:b6:01:47:09:86:04:d0:01:cb:39:5c:e7:f2:2b:16: 79:48:8d:ea:2b:fd:d2:5a:7c:17:f1:92:84:c8:a9:a3:4f:e6: c6:da:a6:49:2b:cd:a7:84:d2:16:bf:70:b0:8d:ab:f9:cb:c9: be:c1:d5:14:42:77:b9:1a:42:f8:83:61:d7:fe:38:12:a2:b4: f7:03:e5:62:0e:ca:da:80:db:5e:d1:2c:64:6e:e5:39:b3:37: a3:80:66:8e:83:c1:f6:1a:05:82:1a:57:8a:6b:9f:97:17:78: 06:c8:fa:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYySkOFIwQd0TP3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk ZjlmNjljNjQtNDg0Yi00MWVlLWExMzMtZjEzZjJkNzExNjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/Eiv9YV0zlqOfhu1qOgq2JMt8kTN2t++CbL T2e2efQJ8FuCS0m62CCg6vy7kH0zPPqpNZZRKnGLZ6RwM4sJo8V9hm7LJfd8gpMf HqFEF0/LCfFe7j8c8PrFoI5i677YpkUjclmz5iirslvkaFR1VoOS2ur2TKMrPfCo i7FJIRXQeIK2ZeCNNaVxsW5NVgmws0cUfQbMEIAnVKVpIvDPSMw8IqVG0cJ7L7k+ 794EuHrWi2GQA7p0VcngrkKhi6vVO214n+4D6ywQZeDMoyv9D7kdgG+ns1ePXFR3 gjT2srJ1QvU0JpsavWx84eO1CvMYhSBpvrJz68CCh+wxpygrtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOoaBd2LDjWc/fCR/hV18AgVgklvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTk3MDljYTgtNjI1NS0z OWU3LTk1MmEtMTNjNjdmNTZjOWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGBTWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ1EY12KYg7a6hfc21xOMRtI+ntUgNIZMuD1Pj99/v0k6kl3J90rDR1W JwfZSS0Vf5XIDZKZYNKP9+YKZVGV7ozKkAaKEC8NHaMfhJyGCM9hp2dbQ/LVXR4l j/V8fGdg2GdAmIULg5GyjsQHPb0X2KfchomKVLdnq9feneTwuDddfY2SJOzC9rY6 iXVCfL2S2uHBgLYBRwmGBNAByzlc5/IrFnlIjeor/dJafBfxkoTIqaNP5sbapkkr zaeE0ha/cLCNq/nLyb7B1RRCd7kaQviDYdf+OBKitPcD5WIOytqA217RLGRu5Tmz N6OAZo6DwfYaBYIaV4prn5cXeAbI+ok= -----END CERTIFICATE-----Generated at Sat Sep 5 12:43:44 2026 by rpki-client