$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b72e5819-7774-3487-8440-50e7e6d7221e.roa File: b72e5819-7774-3487-8440-50e7e6d7221e.roa (raw, json) Hash identifier: JL+EFMTZ5AfJgQ3akyN+WP47F9ECNag4NFDVBElHNOA= Subject key identifier: 26:96:DB:98:A1:C1:DE:29:F7:AB:CB:DF:40:35:40:07:CF:10:2F:08 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED8629D93F786CEB85FFD8980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b72e5819-7774-3487-8440-50e7e6d7221e.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33668 IP address blocks: 24.127.40.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:62:9d:93:f7:86:ce:b8:5f:fd:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=1ed8f704-cc33-41a5-92c2-9bacb65d22e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d0:6c:58:5e:73:27:f6:26:52:11:65:74:05: 10:a3:e4:0c:14:cd:c9:4a:62:0a:4c:81:65:23:5f: 0c:09:31:6a:62:b3:6c:a1:b7:ef:36:27:98:d8:6b: 4f:23:77:93:91:2d:f6:32:85:b1:b2:89:19:8f:ad: 81:67:89:81:13:28:ab:74:05:29:05:1a:e7:4c:0a: 98:83:41:8e:49:02:4d:a2:a5:cc:96:f1:76:bf:96: f1:a4:0d:58:55:ca:08:c7:ec:46:05:19:56:c6:1b: f3:78:35:0d:b5:03:ec:d4:49:b1:60:d1:74:c3:c5: 5c:fb:25:d9:57:ad:a6:86:42:86:ea:22:d8:ff:18: df:7f:64:c4:dd:56:73:86:70:71:ea:1a:5e:b0:09: f3:22:95:a6:5a:6b:89:80:eb:17:1f:31:a6:fc:db: 8e:fc:b4:1c:d0:27:ec:fb:15:70:54:db:73:a6:0c: 76:19:ea:60:e6:3b:0a:ba:0b:75:b8:83:43:70:5b: 79:42:8f:2f:c0:8b:fd:a6:c0:18:4e:35:1b:de:a0: 40:b4:3a:27:e1:1c:bb:b8:6b:5f:1f:90:9b:6c:27: bc:6a:79:3c:25:b6:08:ac:a4:4e:72:fb:29:59:60: 6e:d5:b6:39:d5:c5:32:d9:cd:eb:d4:d6:30:59:53: e1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:96:DB:98:A1:C1:DE:29:F7:AB:CB:DF:40:35:40:07:CF:10:2F:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b72e5819-7774-3487-8440-50e7e6d7221e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.127.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:09:bc:e4:8b:73:6d:2d:36:32:88:9b:16:cd:a0:98:0e:b0: 89:42:ca:14:20:89:23:f5:72:8f:88:57:ff:34:2f:7d:7b:27: c9:21:0e:63:df:7f:2f:e0:19:fc:91:57:2e:af:20:9b:38:50: 4a:68:0d:7a:a5:b9:7b:70:8a:9c:fa:17:d2:69:5f:4f:d9:88: f2:48:83:5d:29:8a:48:74:81:cb:8d:59:ed:c0:a6:b1:0d:49: 6b:3e:7c:72:82:15:21:5e:b4:9b:8a:21:05:c9:b5:4a:54:6a: 69:db:88:34:2a:d6:25:b4:7b:19:1c:0f:d0:a3:31:4f:cb:4a: 43:33:80:30:7b:a3:0e:ad:d0:10:44:d5:2b:88:8e:f3:08:e5: f1:74:0b:a0:66:eb:ca:89:5d:14:0b:6f:a3:65:16:75:70:2f: 61:d4:4e:21:cf:d7:6e:06:f4:de:22:5c:12:35:31:65:89:d5: 9e:ac:e7:52:34:4e:08:e9:dc:07:34:96:fa:ce:71:3a:52:7b: 29:3d:20:45:0a:36:e9:95:a2:29:99:60:2c:c3:f0:0e:b0:01: 64:dc:e9:5e:3e:26:b7:0a:6f:38:52:54:03:f8:09:6f:dc:0f: 40:91:32:61:1f:11:87:49:25:f4:e2:5a:42:60:90:90:26:f0: 5a:0d:b5:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYp2T94bOuF/9iYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk MWVkOGY3MDQtY2MzMy00MWE1LTkyYzItOWJhY2I2NWQyMmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNBsWF5zJ/YmUhFldAUQo+QMFM3JSmIKTIFl I18MCTFqYrNsobfvNieY2GtPI3eTkS32MoWxsokZj62BZ4mBEyirdAUpBRrnTAqY g0GOSQJNoqXMlvF2v5bxpA1YVcoIx+xGBRlWxhvzeDUNtQPs1EmxYNF0w8Vc+yXZ V62mhkKG6iLY/xjff2TE3VZzhnBx6hpesAnzIpWmWmuJgOsXHzGm/NuO/LQc0Cfs +xVwVNtzpgx2Gepg5jsKugt1uINDcFt5Qo8vwIv9psAYTjUb3qBAtDon4Ry7uGtf H5CbbCe8ank8JbYIrKROcvspWWBu1bY51cUy2c3r1NYwWVPhzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCaW25ihwd4p96vL30A1QAfPEC8IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjcyZTU4MTktNzc3NC0z NDg3LTg0NDAtNTBlN2U2ZDcyMjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGH8oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0JvOSLc20tNjKImxbNoJgOsIlCyhQgiSP1co+IV/80L317J8khDmPf fy/gGfyRVy6vIJs4UEpoDXqluXtwipz6F9JpX0/ZiPJIg10pikh0gcuNWe3AprEN SWs+fHKCFSFetJuKIQXJtUpUamnbiDQq1iW0exkcD9CjMU/LSkMzgDB7ow6t0BBE 1SuIjvMI5fF0C6Bm68qJXRQLb6NlFnVwL2HUTiHP124G9N4iXBI1MWWJ1Z6s51I0 Tgjp3Ac0lvrOcTpSeyk9IEUKNumVoimZYCzD8A6wAWTc6V4+JrcKbzhSVAP4CW/c D0CRMmEfEYdJJfTiWkJgkJAm8FoNtRY= -----END CERTIFICATE-----Generated at Tue Sep 1 05:03:08 2026 by rpki-client