$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4a448df-629c-3de8-b3e6-c45c16d29639.roa File: d4a448df-629c-3de8-b3e6-c45c16d29639.roa (raw, json) Hash identifier: hEWKmFyr73Fa+v0ltPb7xsodusRGk+WsPA1ALUdB0xc= Subject key identifier: 18:0B:4E:A9:73:0B:62:74:EA:D3:32:EA:FA:9F:34:A7:86:C0:E8:63 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED861F2D911EA7139E2E09980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4a448df-629c-3de8-b3e6-c45c16d29639.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33490 IP address blocks: 24.20.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:61:f2:d9:11:ea:71:39:e2:e0:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=7f20fe9b-7cb0-44e8-bd33-91a391c4d156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:bd:e5:ca:d2:3f:5b:3c:5a:e8:07:15:ae:ff: 12:d1:da:df:9a:2f:d4:12:6e:7d:13:53:c3:06:d9: a3:36:e7:ea:3b:21:87:d7:14:0f:9f:c9:d4:8a:cb: 5d:c3:df:99:d1:c3:ba:04:9b:0e:60:74:16:90:c6: af:62:f5:d3:aa:91:63:4a:f4:e5:20:26:db:08:e0: 94:59:64:3a:57:b4:29:34:70:82:11:45:10:73:3c: e2:03:17:56:96:bb:33:7a:ba:16:ee:ff:16:82:7c: f3:72:09:01:a6:25:d2:44:e1:f2:36:d6:7d:f9:1c: ef:71:12:96:f2:7f:f4:6b:5a:52:8f:d0:a7:21:6f: 76:ed:c6:29:bb:ad:20:8c:14:dd:0f:5b:84:1b:55: 3b:68:40:98:2d:a9:29:69:a7:12:3d:5a:7a:ef:70: fa:94:df:44:42:4f:9e:7e:26:bd:8b:11:3b:d7:ce: f2:a7:ae:28:56:52:13:b3:86:9a:aa:18:5b:af:33: 15:0c:26:60:37:ce:34:84:35:aa:d7:e1:d3:7d:5e: 2e:40:09:70:a6:6a:4c:37:48:62:75:0c:d9:24:24: 9a:22:24:2c:21:58:1a:ec:cf:08:c8:cd:65:32:2e: 3c:81:45:04:3f:af:c9:7b:39:86:9e:1c:9c:ea:35: 20:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:0B:4E:A9:73:0B:62:74:EA:D3:32:EA:FA:9F:34:A7:86:C0:E8:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4a448df-629c-3de8-b3e6-c45c16d29639.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.20.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:9b:01:27:79:8d:d4:0d:0a:55:fe:30:da:de:d5:03:a8:2c: 74:81:5c:4c:f5:5e:f9:4b:d4:49:1b:c5:a2:d4:bc:4d:3d:bf: 78:7a:59:01:52:bf:4d:b2:e3:e8:ce:bf:5c:b9:2e:56:97:2f: 8f:97:79:fc:1c:d8:00:f1:4b:c8:f2:1e:e6:ce:f1:ea:e0:84: b3:c6:87:14:78:c6:e7:48:b6:8f:69:df:39:ac:43:b1:df:89: 10:27:fc:4b:d0:a4:27:94:0b:e3:a8:a5:a1:ac:78:51:f8:fe: 26:44:00:cf:fc:78:05:70:50:fb:a1:45:aa:28:09:3f:3c:82: 11:4f:9f:a5:99:4f:24:cc:f1:11:6f:9e:4c:ac:cd:78:57:13: a7:3d:db:b4:a1:b9:c6:c0:b3:1d:85:5e:a7:12:79:06:e1:ad: 43:67:c9:c1:99:26:85:f0:6c:6d:65:6e:64:d4:3e:b3:cc:74: ac:ae:3a:c4:86:74:aa:60:68:f0:00:0b:1b:ae:ea:b4:7d:3d: c9:3f:cd:5d:6b:65:4d:03:b8:23:00:d3:7b:0b:7b:05:30:0b: bf:4f:c2:3f:36:ee:4b:65:a7:31:10:8a:01:e6:f3:7c:e0:62: 4d:b6:8f:dd:1e:c5:df:4e:57:c2:f6:cd:c9:af:c7:80:ba:90: 42:34:ea:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYfLZEepxOeLgmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk N2YyMGZlOWItN2NiMC00NGU4LWJkMzMtOTFhMzkxYzRkMTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk73lytI/Wzxa6AcVrv8S0drfmi/UEm59E1PD BtmjNufqOyGH1xQPn8nUistdw9+Z0cO6BJsOYHQWkMavYvXTqpFjSvTlICbbCOCU WWQ6V7QpNHCCEUUQczziAxdWlrszeroW7v8WgnzzcgkBpiXSROHyNtZ9+RzvcRKW 8n/0a1pSj9CnIW927cYpu60gjBTdD1uEG1U7aECYLakpaacSPVp673D6lN9EQk+e fia9ixE7187yp64oVlITs4aaqhhbrzMVDCZgN840hDWq1+HTfV4uQAlwpmpMN0hi dQzZJCSaIiQsIVga7M8IyM1lMi48gUUEP6/JezmGnhyc6jUgSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBgLTqlzC2J06tMy6vqfNKeGwOhjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDRhNDQ4ZGYtNjI5Yy0z ZGU4LWIzZTYtYzQ1YzE2ZDI5NjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGBTcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIabASd5jdQNClX+MNre1QOoLHSBXEz1XvlL1EkbxaLUvE09v3h6WQFS v02y4+jOv1y5LlaXL4+Xefwc2ADxS8jyHubO8erghLPGhxR4xudIto9p3zmsQ7Hf iRAn/EvQpCeUC+OopaGseFH4/iZEAM/8eAVwUPuhRaooCT88ghFPn6WZTyTM8RFv nkyszXhXE6c927ShucbAsx2FXqcSeQbhrUNnycGZJoXwbG1lbmTUPrPMdKyuOsSG dKpgaPAACxuu6rR9Pck/zV1rZU0DuCMA03sLewUwC79Pwj827ktlpzEQigHm83zg Yk22j90exd9OV8L2zcmvx4C6kEI06tU= -----END CERTIFICATE-----Generated at Sat Sep 5 09:34:13 2026 by rpki-client