$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4a448df-629c-3de8-b3e6-c45c16d29639.roa File: d4a448df-629c-3de8-b3e6-c45c16d29639.roa (raw, json) Hash identifier: ZQ5oMSle7uupM4F0qwypVjP3j9jdUxt7lF5tYtIpfFQ= Subject key identifier: 4E:2C:DA:AF:BA:2E:04:8B:96:F0:E8:CB:7A:B6:28:D5:9E:6F:EB:65 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4DA25D2F859B5636CB3500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4a448df-629c-3de8-b3e6-c45c16d29639.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33490 IP address blocks: 24.20.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 24 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4d:a2:5d:2f:85:9b:56:36:cb:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=1cea9305-852b-49c4-8243-c1dc66cf71e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:09:34:a0:a6:89:59:89:d9:59:db:b4:35:63: c9:90:f0:1d:ec:37:c1:c7:d4:45:fb:2d:ce:fc:89: 9a:39:8d:70:2a:d3:ae:d8:a8:da:3f:62:a6:0c:4c: d4:aa:3d:8b:69:6e:31:40:01:d4:17:90:63:8a:61: db:50:f3:98:01:b2:e8:f3:31:b2:8a:09:f1:e1:a4: 79:29:26:81:b4:3e:38:3d:f5:4f:db:19:3d:b9:5a: 80:19:5e:db:bc:ef:07:e4:d9:24:78:66:26:6e:be: 2f:76:fc:48:78:d1:35:3c:29:46:17:2b:c8:ce:da: 97:4d:c6:14:8e:cf:a4:d3:8d:d6:10:9a:e3:8a:14: 21:86:e0:48:16:bb:97:00:5d:d3:d6:f6:2b:c6:9b: ff:bc:e9:59:ab:ea:2a:86:7c:0d:c3:da:a2:cf:e5: 65:aa:88:79:b0:12:e9:bb:c6:f8:a3:92:93:f7:5c: 97:64:d9:7b:50:0b:cb:41:67:b6:e4:4c:2e:85:a3: c4:62:1f:ec:c2:50:1b:5d:7f:6c:74:a1:dd:a7:4b: 1a:bd:93:96:d5:17:86:a7:b3:e7:fc:1e:ae:56:18: 25:eb:8c:9b:d2:03:1a:42:2e:19:00:95:2b:d8:2d: 1e:2a:e4:dd:c5:83:e4:b1:29:ca:7b:1e:a7:12:a7: 71:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:2C:DA:AF:BA:2E:04:8B:96:F0:E8:CB:7A:B6:28:D5:9E:6F:EB:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4a448df-629c-3de8-b3e6-c45c16d29639.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.20.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:10:e8:f8:9c:9a:56:b0:66:82:f3:ec:5d:29:29:79:44:66: 91:6b:ba:13:84:dc:b0:8c:ea:0f:63:a2:03:30:29:9f:1f:a1: 51:d1:18:9a:f4:c7:80:c7:6e:28:b4:06:59:fa:9f:a0:87:ec: 01:db:a1:ab:be:43:41:13:04:b0:3e:05:89:6f:7c:7a:34:7c: b6:80:00:d8:34:64:d0:94:b4:31:e6:c1:6b:73:a0:b7:f2:1e: 37:56:36:9f:f8:cd:9e:4d:5e:ae:ad:72:62:99:61:49:26:ba: d9:25:4c:c7:79:ef:81:e3:f1:75:9f:c9:db:44:0d:c3:a5:0c: 64:9b:1e:ba:1f:91:99:0f:1b:a3:65:17:23:96:78:08:11:f6: 4c:73:17:ae:80:17:07:d7:79:de:f8:50:c5:75:e7:c7:11:e5: d5:00:83:8a:f6:28:dd:d6:ab:f5:b6:d5:14:77:ed:22:6b:37: c5:5d:d5:e5:37:1d:eb:6c:5c:7d:18:cc:41:98:f0:05:db:f7: 05:f1:ed:87:e7:3a:d9:3c:1a:9e:c5:6d:79:8e:7f:74:1f:13: aa:48:53:3f:62:8c:6c:3f:ab:33:1c:f7:d8:ba:57:65:3c:ae: 03:b1:d4:72:c0:68:cf:66:11:a4:1d:60:d2:e7:e8:93:ae:9a: 4f:65:7a:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TaJdL4WbVjbLNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk MWNlYTkzMDUtODUyYi00OWM0LTgyNDMtYzFkYzY2Y2Y3MWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAk0oKaJWYnZWdu0NWPJkPAd7DfBx9RF+y3O /ImaOY1wKtOu2KjaP2KmDEzUqj2LaW4xQAHUF5BjimHbUPOYAbLo8zGyignx4aR5 KSaBtD44PfVP2xk9uVqAGV7bvO8H5NkkeGYmbr4vdvxIeNE1PClGFyvIztqXTcYU js+k043WEJrjihQhhuBIFruXAF3T1vYrxpv/vOlZq+oqhnwNw9qiz+Vlqoh5sBLp u8b4o5KT91yXZNl7UAvLQWe25EwuhaPEYh/swlAbXX9sdKHdp0savZOW1ReGp7Pn /B6uVhgl64yb0gMaQi4ZAJUr2C0eKuTdxYPksSnKex6nEqdxJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4s2q+6LgSLlvDoy3q2KNWeb+tlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDRhNDQ4ZGYtNjI5Yy0z ZGU4LWIzZTYtYzQ1YzE2ZDI5NjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGBTcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMIQ6PicmlawZoLz7F0pKXlEZpFruhOE3LCM6g9jogMwKZ8foVHRGJr0 x4DHbii0Bln6n6CH7AHboau+Q0ETBLA+BYlvfHo0fLaAANg0ZNCUtDHmwWtzoLfy HjdWNp/4zZ5NXq6tcmKZYUkmutklTMd574Hj8XWfydtEDcOlDGSbHrofkZkPG6Nl FyOWeAgR9kxzF66AFwfXed74UMV158cR5dUAg4r2KN3Wq/W21RR37SJrN8Vd1eU3 HetsXH0YzEGY8AXb9wXx7YfnOtk8Gp7FbXmOf3QfE6pIUz9ijGw/qzMc99i6V2U8 rgOx1HLAaM9mEaQdYNLn6JOumk9lev8= -----END CERTIFICATE-----Generated at Thu Oct 22 19:27:41 2026 by rpki-client