$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b31a7f4f-a23e-3455-be6c-3e711b9802b4.roa File: b31a7f4f-a23e-3455-be6c-3e711b9802b4.roa (raw, json) Hash identifier: fz+8845fl+/iFHYytRWJg3y7REMjZfYUl7Hr4Aiaq/Q= Subject key identifier: C9:F7:6B:E8:9E:1B:32:17:26:5F:CA:57:0C:FC:1F:13:82:3E:02:07 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED8632416348DF4BF469E0780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b31a7f4f-a23e-3455-be6c-3e711b9802b4.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33490 IP address blocks: 24.20.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:63:24:16:34:8d:f4:bf:46:9e:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=42c7a5df-34c4-40d4-8c8d-a9fb3790a402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cf:cf:47:14:d4:7b:a5:a2:45:a0:c4:f1:e3: 26:ce:83:81:46:d0:9c:8c:f1:47:46:bb:51:77:6c: 65:27:a0:16:04:99:97:bf:64:bc:31:db:ee:17:8e: 82:0b:e8:2c:24:a4:90:dd:f3:e0:f0:48:5b:b2:83: 38:2a:0c:b1:03:10:ec:f3:3d:60:99:2f:95:0b:12: d9:fa:dc:c0:4b:c0:c3:d6:c6:06:e0:0a:4b:98:6f: 6a:fa:1a:b7:53:c9:b1:c7:1e:b7:7e:59:3c:fa:df: 48:b1:cf:82:47:2c:9f:1c:8d:bb:de:74:50:7b:e3: f3:3e:3e:52:9b:92:92:d8:b2:fd:5c:96:fd:8d:9d: 6c:86:7e:00:7a:7b:4e:32:8e:bd:19:92:a1:65:bb: 4a:28:07:a9:d9:4d:51:c2:8e:71:a5:09:e5:c8:c6: 14:79:02:30:5e:9b:05:63:ba:86:e8:ca:0a:30:a1: 56:35:de:74:e0:1a:32:6c:10:3c:db:e3:a8:dd:0b: 4f:be:c1:bc:59:2f:81:52:85:0c:1b:7f:fc:84:5f: f2:83:2a:77:89:52:f7:63:a7:b0:ad:c2:58:b6:a0: 2e:c9:2a:de:04:cb:f9:4e:ab:70:b2:53:b3:38:10: 75:c6:29:26:6e:88:a2:d7:c1:f3:c8:bb:c3:99:46: 36:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:F7:6B:E8:9E:1B:32:17:26:5F:CA:57:0C:FC:1F:13:82:3E:02:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b31a7f4f-a23e-3455-be6c-3e711b9802b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.20.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:7d:40:d4:30:ea:25:22:05:60:ff:4e:37:67:1b:27:3c:19: c2:91:f9:4f:e1:50:9b:e0:84:a4:13:08:54:71:e7:1b:be:77: 09:e3:53:9f:51:0a:45:9e:63:ef:58:1d:4c:89:08:8c:06:bb: a4:b3:c5:e0:20:d4:27:be:e6:a6:43:ff:07:4d:cd:dc:07:d9: 6d:1b:3c:8b:eb:1b:b8:93:2c:a2:fa:95:2f:e4:f4:a7:d4:7e: 42:c7:e8:4b:d9:25:5f:aa:60:cf:62:8a:72:5a:f1:b3:55:50: de:6c:f8:dc:54:99:ad:7a:e4:7f:00:a9:fb:93:89:9e:b0:93: b5:ec:2c:fa:2e:12:15:1c:b8:39:22:1d:cc:bd:8e:fe:11:47: 58:8b:db:bd:00:f8:06:66:06:39:ec:c7:2a:5d:4b:a2:3f:90: dc:b6:c8:fa:a6:91:4e:ab:f4:a5:30:b0:94:ca:11:f2:39:d1: 88:ea:5c:d6:8c:a3:a8:e6:81:ea:6d:31:7b:3c:7a:43:2b:a2: d8:7e:83:95:e3:9a:71:69:b6:0d:3c:98:32:b0:21:5f:b0:26: 62:f9:8c:65:b5:8d:59:79:6b:85:85:9d:c0:f4:1a:71:e8:b4: c9:36:fd:bb:1a:ac:44:ac:cc:e2:5c:53:9c:3e:37:f8:59:57: d2:8f:0f:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYyQWNI30v0aeB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk NDJjN2E1ZGYtMzRjNC00MGQ0LThjOGQtYTlmYjM3OTBhNDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAos/PRxTUe6WiRaDE8eMmzoOBRtCcjPFHRrtR d2xlJ6AWBJmXv2S8MdvuF46CC+gsJKSQ3fPg8EhbsoM4KgyxAxDs8z1gmS+VCxLZ +tzAS8DD1sYG4ApLmG9q+hq3U8mxxx63flk8+t9Isc+CRyyfHI273nRQe+PzPj5S m5KS2LL9XJb9jZ1shn4AentOMo69GZKhZbtKKAep2U1Rwo5xpQnlyMYUeQIwXpsF Y7qG6MoKMKFWNd504BoybBA82+Oo3QtPvsG8WS+BUoUMG3/8hF/ygyp3iVL3Y6ew rcJYtqAuySreBMv5TqtwslOzOBB1xikmboii18HzyLvDmUY2xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMn3a+ieGzIXJl/KVwz8HxOCPgIHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjMxYTdmNGYtYTIzZS0z NDU1LWJlNmMtM2U3MTFiOTgwMmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGBRoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALx9QNQw6iUiBWD/TjdnGyc8GcKR+U/hUJvghKQTCFRx5xu+dwnjU59R CkWeY+9YHUyJCIwGu6SzxeAg1Ce+5qZD/wdNzdwH2W0bPIvrG7iTLKL6lS/k9KfU fkLH6EvZJV+qYM9iinJa8bNVUN5s+NxUma165H8AqfuTiZ6wk7XsLPouEhUcuDki Hcy9jv4RR1iL270A+AZmBjnsxypdS6I/kNy2yPqmkU6r9KUwsJTKEfI50YjqXNaM o6jmgeptMXs8ekMroth+g5XjmnFptg08mDKwIV+wJmL5jGW1jVl5a4WFncD0GnHo tMk2/bsarESszOJcU5w+N/hZV9KPDwA= -----END CERTIFICATE-----Generated at Sat Sep 5 11:05:55 2026 by rpki-client