$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/baa2558e-41e4-3fa9-981d-00d87581e94c.roa File: baa2558e-41e4-3fa9-981d-00d87581e94c.roa (raw, json) Hash identifier: auBn5+Lsa78sxJ4gpSoH8aKL+j2UbYoQVKU1LSOwZe8= Subject key identifier: D5:62:D8:22:D6:3D:09:9A:99:32:5A:9C:F9:16:89:1F:35:58:FE:17 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED8622A9BAC31E24E56805900 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/baa2558e-41e4-3fa9-981d-00d87581e94c.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 7015 IP address blocks: 24.34.90.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:62:2a:9b:ac:31:e2:4e:56:80:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=01d41ecc-a668-4318-be5e-5c7865287aa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:62:0d:a8:e3:0b:36:76:23:2b:15:d9:7d:fa: 24:89:52:5f:bc:f6:d4:73:2f:e6:39:4b:76:8c:21: 83:68:b3:de:5d:8b:26:11:3f:47:a8:77:f2:bd:68: bc:08:53:20:98:1f:95:cf:12:b1:0b:cd:5c:49:72: 97:c6:ba:d3:95:62:d6:86:9d:33:b6:70:70:35:0e: 8c:bb:d0:7e:80:84:03:f3:f5:35:d5:8f:a1:8e:be: a2:d6:2f:bc:07:fd:37:62:b8:85:26:e9:8f:b0:4d: db:72:a0:27:9b:67:e6:0f:3c:cb:05:e4:d0:00:41: 8c:18:20:2d:4a:3c:6a:9b:d5:91:01:e7:bb:52:b6: 8f:05:9a:75:8c:cb:47:3c:c2:f5:f5:19:ee:52:ab: 50:83:78:26:ed:c4:09:2a:58:a2:eb:0f:2c:4b:ae: c0:fb:4e:30:28:25:77:76:8f:0f:90:e6:81:65:bb: df:24:90:0b:6b:bc:6f:06:05:9e:b2:30:bb:42:69: 35:3f:7e:c0:53:08:f0:3e:72:88:b7:ad:54:ee:81: a2:2b:ae:88:64:7f:a5:91:3d:14:be:f5:a3:1a:a1: 46:a4:44:a3:21:fa:18:6c:65:28:e0:77:60:61:51: 16:a9:64:08:02:a9:d9:ea:00:5e:51:4d:19:45:5d: cc:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:62:D8:22:D6:3D:09:9A:99:32:5A:9C:F9:16:89:1F:35:58:FE:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/baa2558e-41e4-3fa9-981d-00d87581e94c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.34.90.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:e0:ea:2d:51:5c:ae:40:c4:9f:bd:f2:83:f5:eb:b5:31:1f: 6f:7f:33:f5:df:b3:54:54:46:85:b4:00:6b:22:a4:92:5c:cf: c0:c3:a7:da:f1:dc:41:b8:91:84:36:95:c5:dd:68:e3:e8:2a: 6d:db:d1:0a:31:be:99:70:61:b4:0b:54:45:39:77:b3:38:82: 6b:51:15:2b:87:02:36:8f:32:f2:b1:d0:41:60:3e:53:97:f9: 17:8c:68:6c:70:52:42:f9:8d:de:9e:08:a8:8a:da:71:b1:73: bb:b6:71:d8:83:46:ff:d0:bf:1d:19:0b:38:f7:36:02:92:09: 3c:78:7a:45:a2:18:03:05:09:0b:12:e1:4c:cd:80:44:7b:b1: d3:d9:5e:90:36:9e:d5:d3:2f:eb:e6:db:31:a2:5f:9e:4a:bf: 98:e9:a8:66:9c:9d:f5:60:75:4a:72:2c:bf:18:23:a1:30:d7: 64:94:a7:2e:d5:47:d8:6c:7e:57:a1:ac:0a:76:67:e5:f2:7d: 9e:24:70:d9:56:97:88:6e:fe:7f:b0:95:61:cb:f4:ca:13:a8: 90:22:62:d0:57:b2:9f:83:99:bc:10:2c:55:ed:e8:b5:f2:46: 11:cc:62:71:b6:6e:66:e3:0c:94:b1:03:97:f0:8a:40:de:3a: 26:39:04:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYiqbrDHiTlaAWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk MDFkNDFlY2MtYTY2OC00MzE4LWJlNWUtNWM3ODY1Mjg3YWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmINqOMLNnYjKxXZffokiVJfvPbUcy/mOUt2 jCGDaLPeXYsmET9HqHfyvWi8CFMgmB+VzxKxC81cSXKXxrrTlWLWhp0ztnBwNQ6M u9B+gIQD8/U11Y+hjr6i1i+8B/03YriFJumPsE3bcqAnm2fmDzzLBeTQAEGMGCAt Sjxqm9WRAee7UraPBZp1jMtHPML19RnuUqtQg3gm7cQJKlii6w8sS67A+04wKCV3 do8PkOaBZbvfJJALa7xvBgWesjC7Qmk1P37AUwjwPnKIt61U7oGiK66IZH+lkT0U vvWjGqFGpESjIfoYbGUo4HdgYVEWqWQIAqnZ6gBeUU0ZRV3MvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNVi2CLWPQmamTJanPkWiR81WP4XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmFhMjU1OGUtNDFlNC0z ZmE5LTk4MWQtMDBkODc1ODFlOTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGCJaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALTg6i1RXK5AxJ+98oP167UxH29/M/Xfs1RURoW0AGsipJJcz8DDp9rx 3EG4kYQ2lcXdaOPoKm3b0QoxvplwYbQLVEU5d7M4gmtRFSuHAjaPMvKx0EFgPlOX +ReMaGxwUkL5jd6eCKiK2nGxc7u2cdiDRv/Qvx0ZCzj3NgKSCTx4ekWiGAMFCQsS 4UzNgER7sdPZXpA2ntXTL+vm2zGiX55Kv5jpqGacnfVgdUpyLL8YI6Ew12SUpy7V R9hsflehrAp2Z+XyfZ4kcNlWl4hu/n+wlWHL9MoTqJAiYtBXsp+DmbwQLFXt6LXy RhHMYnG2bmbjDJSxA5fwikDeOiY5BNM= -----END CERTIFICATE-----Generated at Mon Sep 14 22:52:54 2026 by rpki-client