$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3a91960-d454-3be0-a2fb-0a5e4d7975a9.roa File: d3a91960-d454-3be0-a2fb-0a5e4d7975a9.roa (raw, json) Hash identifier: 4Y31Xb5QcwnqFo5F2IyEQxRloHqn81eQXzOmjE6Cqwk= Subject key identifier: F3:52:9F:57:9D:1D:3F:09:6B:2C:DF:AE:05:35:35:52:3E:A1:B1:9E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4EDB4DF31CE5A923215A80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3a91960-d454-3be0-a2fb-0a5e4d7975a9.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33490 IP address blocks: 24.20.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4e:db:4d:f3:1c:e5:a9:23:21:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=ad4ad2e9-c6b8-4324-8b67-e30e09d6deb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:98:16:db:05:a9:99:02:96:5f:39:cc:af:56: b3:a4:79:68:fd:43:25:7c:d4:d8:7a:c7:2f:47:f7: 8d:9f:6d:97:ea:60:0e:5e:55:b9:74:e9:d7:f6:c7: a0:a9:d5:da:8a:15:65:e9:86:93:64:7d:21:c4:02: 1f:5d:1e:18:53:2c:d7:07:2d:ba:80:2b:51:f6:1a: d7:52:fe:cf:8f:13:ca:7f:50:5f:9b:db:68:5e:f8: 52:2c:9c:d9:30:1d:62:54:40:05:c5:71:c4:5b:73: d0:a8:b9:60:d5:a9:b6:5c:05:a4:10:72:d1:01:76: 0a:21:65:4b:1b:a5:56:47:62:78:a6:10:66:3b:6a: 5c:d7:11:41:fb:3b:06:d9:c8:86:c1:fc:7d:e8:21: 7f:3c:f7:42:d3:13:97:99:d3:a6:9e:2c:a6:b7:13: 71:b7:28:57:27:d8:79:6b:f8:7e:19:e6:94:9c:ef: ba:e5:a4:bf:15:ba:97:c2:2f:d8:b9:d5:63:26:10: ad:22:15:21:2e:c5:63:43:d5:de:c6:78:49:08:d8: d4:ca:39:db:c1:78:64:6c:15:68:11:42:c3:65:77: 50:48:06:81:6f:17:76:0b:78:ae:2c:ad:51:8b:47: 98:1c:a9:74:a0:c7:3b:48:8a:1a:e7:18:d2:90:83: 55:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:52:9F:57:9D:1D:3F:09:6B:2C:DF:AE:05:35:35:52:3E:A1:B1:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3a91960-d454-3be0-a2fb-0a5e4d7975a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.20.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:6a:83:b0:d1:61:7b:de:d9:59:44:75:c3:d0:ea:7a:ae:27: 9d:4a:c3:76:00:24:0b:1d:9f:f9:df:a8:30:0e:34:66:e8:77: 1a:e7:6a:a4:4c:cd:53:ce:d4:a3:27:39:4f:10:de:a5:b5:7b: 5f:d5:fd:46:cc:29:51:b4:0d:14:7d:b8:b2:0d:53:f9:01:b6: 3f:ea:89:74:1a:70:4c:33:49:96:80:a4:3c:28:15:bd:33:f9: e3:1b:b3:46:62:0c:47:68:58:62:2a:37:d5:23:30:ef:cd:1f: e2:24:e8:10:dd:55:eb:92:77:10:d5:09:8a:0d:08:15:b4:8c: 01:24:1d:10:3a:62:46:2f:49:2f:85:a8:2e:40:45:2b:61:9b: 6b:b7:84:35:d0:0b:41:ba:0d:de:30:08:05:66:d5:c5:2b:6f: c8:28:8f:b7:39:b1:85:45:c3:d0:87:b0:ff:e1:b4:3b:ef:c2: 10:e6:fc:99:1c:17:8e:4c:e4:55:0a:5f:b0:9d:45:bc:61:b5: 26:08:5b:c7:6b:ed:5d:80:c3:d5:71:40:1f:83:0f:2a:b7:74: 38:f1:55:ca:c7:4c:68:d1:9b:a2:b0:c4:e7:2d:1c:25:75:68: b6:83:56:e0:62:15:b0:f0:a8:47:09:f3:a7:ca:63:25:c4:0d: 0c:03:e9:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TttN8xzlqSMhWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk YWQ0YWQyZTktYzZiOC00MzI0LThiNjctZTMwZTA5ZDZkZWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZgW2wWpmQKWXznMr1azpHlo/UMlfNTYescv R/eNn22X6mAOXlW5dOnX9segqdXaihVl6YaTZH0hxAIfXR4YUyzXBy26gCtR9hrX Uv7PjxPKf1Bfm9toXvhSLJzZMB1iVEAFxXHEW3PQqLlg1am2XAWkEHLRAXYKIWVL G6VWR2J4phBmO2pc1xFB+zsG2ciGwfx96CF/PPdC0xOXmdOmniymtxNxtyhXJ9h5 a/h+GeaUnO+65aS/FbqXwi/YudVjJhCtIhUhLsVjQ9XexnhJCNjUyjnbwXhkbBVo EULDZXdQSAaBbxd2C3iuLK1Ri0eYHKl0oMc7SIoa5xjSkINVvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPNSn1edHT8JayzfrgU1NVI+obGeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDNhOTE5NjAtZDQ1NC0z YmUwLWEyZmItMGE1ZTRkNzk3NWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGBQUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdqg7DRYXve2VlEdcPQ6nquJ51Kw3YAJAsdn/nfqDAONGbodxrnaqRM zVPO1KMnOU8Q3qW1e1/V/UbMKVG0DRR9uLINU/kBtj/qiXQacEwzSZaApDwoFb0z +eMbs0ZiDEdoWGIqN9UjMO/NH+Ik6BDdVeuSdxDVCYoNCBW0jAEkHRA6YkYvSS+F qC5ARSthm2u3hDXQC0G6Dd4wCAVm1cUrb8goj7c5sYVFw9CHsP/htDvvwhDm/Jkc F45M5FUKX7CdRbxhtSYIW8dr7V2Aw9VxQB+DDyq3dDjxVcrHTGjRm6KwxOctHCV1 aLaDVuBiFbDwqEcJ86fKYyXEDQwD6SI= -----END CERTIFICATE-----Generated at Wed Oct 21 03:19:44 2026 by rpki-client