$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/abac5b99-a0df-3c9a-b10f-4d7e02693d92.roa File: abac5b99-a0df-3c9a-b10f-4d7e02693d92.roa (raw, json) Hash identifier: GO9PLFT+x8T6rAX68WqAe0vjUrsTLp66m1zOiROCubc= Subject key identifier: AE:92:26:B1:3E:1F:36:49:0F:DD:7B:42:85:37:1B:8C:7D:02:A3:D9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED861F4EDF3BEFA87B5B7EB00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/abac5b99-a0df-3c9a-b10f-4d7e02693d92.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33490 IP address blocks: 24.21.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:61:f4:ed:f3:be:fa:87:b5:b7:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=e0f86c5a-146b-4991-a5e0-bfbd9c2f0955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f2:49:fb:27:1d:cc:dd:f8:40:c2:c0:77:ef: b3:89:0b:70:c3:58:1e:00:f0:0c:a1:87:9c:e8:f1: fc:75:c1:1b:c4:ce:8c:32:73:d4:76:65:ee:e8:5b: 7e:8f:cc:e9:53:70:64:81:c0:c6:8f:2f:9b:e5:bd: 29:a2:d9:19:b3:d7:d2:e6:4a:b4:1b:79:34:2c:b7: 26:07:eb:9e:91:43:d9:e3:e5:5d:73:f7:a6:df:9f: 4e:8e:6e:d1:99:67:ad:cf:cb:3d:39:6d:68:00:e6: 71:d3:ea:77:2e:bc:63:2e:a4:62:16:db:06:bb:95: 75:cb:45:b1:bf:ab:1b:a6:ca:50:dd:83:08:02:a7: b6:b1:0f:48:99:22:9b:7b:24:67:dc:50:eb:02:52: 8e:25:b8:78:40:a9:b8:38:36:ca:68:ed:df:15:f5: ef:df:db:62:e3:7e:8b:63:eb:61:77:16:89:10:fd: af:07:3d:df:9c:8c:3d:bc:9e:44:83:4c:64:02:5c: 3f:ae:fa:10:fb:7a:9e:62:8c:af:1c:11:c6:08:77: d7:7b:f9:ed:3e:42:df:d8:f0:97:27:0e:60:e1:0a: 3d:35:2d:72:c3:b4:ae:27:2b:ce:a7:af:70:d7:f2: 2f:0a:4a:1e:b9:fa:6b:3d:1f:46:b0:df:c4:82:cb: 35:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:92:26:B1:3E:1F:36:49:0F:DD:7B:42:85:37:1B:8C:7D:02:A3:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/abac5b99-a0df-3c9a-b10f-4d7e02693d92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.21.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:b5:61:15:f2:5f:fd:a5:2e:f4:73:58:7a:28:81:dc:1b:eb: a8:1d:eb:5b:56:ea:cd:c6:50:a3:f0:1e:2b:f7:2f:c1:01:72: 7e:98:1d:3b:f4:24:de:7f:ad:43:ce:47:98:39:5d:28:e2:b1: 0f:01:b7:05:d7:28:8c:ec:fe:61:ff:aa:98:70:fb:12:09:a4: 1e:c1:bc:87:fa:c2:d8:97:58:52:05:72:73:6f:20:6e:f6:6a: 77:e3:ce:f2:48:08:c0:d9:fc:1c:fa:d1:47:5c:96:f4:9c:69: 42:b8:33:d0:1f:66:ba:51:37:b5:38:8b:e2:13:13:3d:37:b8: df:95:17:46:e4:e2:c4:e8:12:dc:96:47:3b:f8:05:4d:18:2a: 88:db:b9:3d:6c:78:26:73:22:71:2a:c2:53:50:ee:2d:99:0d: d7:d9:04:3e:11:14:5a:bd:9f:dd:16:22:89:77:2f:c2:b1:14: a8:ec:1d:69:dc:04:94:6a:b2:c0:ac:f3:42:23:d8:28:44:9c: e3:a2:ea:67:e8:18:81:fc:28:cd:fa:9c:ad:80:d0:1a:2e:79: 69:c4:ff:de:fa:e8:e6:9a:ea:13:60:b7:6c:e6:4e:c8:ed:83: b1:d6:cc:8a:a7:3d:be:c7:4a:ef:04:fa:2e:f6:b4:02:52:c3: 13:54:40:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYfTt8776h7W36wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk ZTBmODZjNWEtMTQ2Yi00OTkxLWE1ZTAtYmZiZDljMmYwOTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/JJ+ycdzN34QMLAd++ziQtww1geAPAMoYec 6PH8dcEbxM6MMnPUdmXu6Ft+j8zpU3BkgcDGjy+b5b0potkZs9fS5kq0G3k0LLcm B+uekUPZ4+Vdc/em359Ojm7RmWetz8s9OW1oAOZx0+p3LrxjLqRiFtsGu5V1y0Wx v6sbpspQ3YMIAqe2sQ9ImSKbeyRn3FDrAlKOJbh4QKm4ODbKaO3fFfXv39ti436L Y+thdxaJEP2vBz3fnIw9vJ5Eg0xkAlw/rvoQ+3qeYoyvHBHGCHfXe/ntPkLf2PCX Jw5g4Qo9NS1yw7SuJyvOp69w1/IvCkoeufprPR9GsN/Egss1gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6SJrE+HzZJD917QoU3G4x9AqPZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWJhYzViOTktYTBkZi0z YzlhLWIxMGYtNGQ3ZTAyNjkzZDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGBUUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE61YRXyX/2lLvRzWHoogdwb66gd61tW6s3GUKPwHiv3L8EBcn6YHTv0 JN5/rUPOR5g5XSjisQ8BtwXXKIzs/mH/qphw+xIJpB7BvIf6wtiXWFIFcnNvIG72 anfjzvJICMDZ/Bz60UdclvScaUK4M9AfZrpRN7U4i+ITEz03uN+VF0bk4sToEtyW Rzv4BU0YKojbuT1seCZzInEqwlNQ7i2ZDdfZBD4RFFq9n90WIol3L8KxFKjsHWnc BJRqssCs80Ij2ChEnOOi6mfoGIH8KM36nK2A0BoueWnE/9766Oaa6hNgt2zmTsjt g7HWzIqnPb7HSu8E+i72tAJSwxNUQFo= -----END CERTIFICATE-----Generated at Sat Sep 5 09:29:55 2026 by rpki-client