$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/a474ef21-5145-3424-b8cb-6fe09836be86.roa File: a474ef21-5145-3424-b8cb-6fe09836be86.roa (raw, json) Hash identifier: eUUo24rhkvw4ra5cBnna23QH3y9isL2LoOKev5o3gy8= Subject key identifier: 4B:AE:DA:6B:4C:02:9F:AA:DC:2C:79:01:2F:CE:EA:CD:C6:3F:85:4A Certificate issuer: /CN=d455139a-f627-4743-8284-7fbd2f76dd8b Certificate serial: 010D0C9F4328584F4973A3382A198BC52FBC4040 Authority key identifier: 05:07:B2:96:74:08:2D:02:EF:EC:F8:37:85:3C:62:40:1C:25:37:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/a474ef21-5145-3424-b8cb-6fe09836be86.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 53542 IP address blocks: 199.255.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:a3:38:2a:19:8b:c5:2f:bc:40:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d455139a-f627-4743-8284-7fbd2f76dd8b Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=58f8415f-d4f6-42b6-966c-6ba534473c43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:0f:68:b2:49:29:0f:ac:bd:a6:0c:e0:db:e1: 52:17:1f:66:5b:4a:33:5a:2d:54:41:c4:16:a2:5d: 17:b5:f7:9b:f5:77:7d:35:7e:ad:e1:f3:d8:b8:0d: 3d:e2:24:b3:25:74:c7:1f:6c:3f:ec:77:b2:9e:db: 94:e9:09:2a:4b:12:c6:14:e7:0c:68:a6:5a:2f:90: fd:27:4a:0c:b6:22:6d:50:c7:91:da:2a:4f:ea:cd: 92:66:8f:24:f0:1c:aa:48:76:cf:f5:d2:de:e9:5a: fd:9c:c5:fa:9a:71:a9:0a:d4:97:dd:fb:e2:4d:dd: 90:2a:e7:63:4a:e6:9f:4c:26:35:aa:ea:88:9e:94: 97:3a:22:f9:fa:74:28:5e:10:48:24:7a:f4:3a:bb: 9b:e7:2d:be:2a:1e:34:e2:92:14:8c:6a:87:51:39: a1:b5:3a:34:d9:99:7a:80:2b:a6:02:69:b4:cf:d3: c2:c8:98:9d:f6:cb:8b:ba:59:fe:a4:9d:13:8a:4c: 61:95:a9:19:d7:c1:1f:86:66:42:ac:3f:2d:1d:8c: ba:3b:fc:36:bb:86:28:1f:3d:dd:6d:99:0a:6a:19: 92:3f:ca:62:f1:5a:85:17:2a:11:6d:6b:d5:2b:e5: 5d:81:f3:d4:c6:08:84:4f:53:64:ce:fc:02:c9:21: 3a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:AE:DA:6B:4C:02:9F:AA:DC:2C:79:01:2F:CE:EA:CD:C6:3F:85:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/a474ef21-5145-3424-b8cb-6fe09836be86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.crl X509v3 Authority Key Identifier: keyid:05:07:B2:96:74:08:2D:02:EF:EC:F8:37:85:3C:62:40:1C:25:37:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer sbgp-ipAddrBlock: critical IPv4: 199.255.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:2d:9c:be:06:e1:82:e1:38:61:67:02:e3:c4:0e:4d:03:24: 95:dd:ec:02:1b:93:ee:0f:c8:87:5a:d2:7b:eb:db:7d:74:22: 45:fd:d2:ff:ef:c0:57:96:b7:3a:32:f3:3d:ac:72:4b:2c:7e: 63:57:b3:2a:63:1c:89:6e:1b:9f:04:79:34:32:38:80:64:f5: fe:b8:4d:df:a5:04:8e:6d:0b:bf:ea:9a:99:af:62:6f:9e:42: 84:25:0a:a4:3f:86:37:b4:8e:ca:9f:0b:15:dc:80:b7:44:47: 3f:e1:e5:6e:39:47:05:42:33:ce:64:15:d4:f9:45:dd:a0:ca: eb:b9:95:4f:d2:fb:40:80:3e:cf:9b:bf:48:b1:7d:68:d9:08: 75:58:dd:7f:a7:ea:40:a0:3c:99:c8:04:6f:04:c5:5c:06:8f: d3:a2:e8:0b:cc:9c:66:fb:d0:18:3f:ab:02:1b:31:66:b5:bc: 80:58:1d:63:37:32:1d:4b:53:c6:49:5f:11:ad:b5:dc:68:fc: b5:18:0f:85:55:6b:7b:78:00:ed:96:a5:49:1f:0b:ff:79:62: e4:28:06:b9:55:66:9f:aa:1e:04:c4:77:fc:5a:16:13:e0:f4: e0:54:e1:c1:11:41:2f:15:69:da:d5:62:f0:f3:db:d2:f9:de: ef:69:68:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc6M4KhmLxS+8QEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NTEzOWEtZjYyNy00NzQzLTgyODQtN2ZiZDJmNzZk ZDhiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NThmODQxNWYtZDRmNi00MmI2LTk2NmMtNmJhNTM0NDczYzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQ9oskkpD6y9pgzg2+FSFx9mW0ozWi1UQcQW ol0Xtfeb9Xd9NX6t4fPYuA094iSzJXTHH2w/7HeyntuU6QkqSxLGFOcMaKZaL5D9 J0oMtiJtUMeR2ipP6s2SZo8k8ByqSHbP9dLe6Vr9nMX6mnGpCtSX3fviTd2QKudj SuafTCY1quqInpSXOiL5+nQoXhBIJHr0Orub5y2+Kh404pIUjGqHUTmhtTo02Zl6 gCumAmm0z9PCyJid9suLuln+pJ0TikxhlakZ18EfhmZCrD8tHYy6O/w2u4YoHz3d bZkKahmSP8pi8VqFFyoRbWvVK+VdgfPUxgiET1NkzvwCySE69QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEuu2mtMAp+q3Cx5AS/O6s3GP4VKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDU1 MTM5YS1mNjI3LTQ3NDMtODI4NC03ZmJkMmY3NmRkOGIvYTQ3NGVmMjEtNTE0NS0z NDI0LWI4Y2ItNmZlMDk4MzZiZTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ1NTEzOWEtZjYyNy00NzQzLTgy ODQtN2ZiZDJmNzZkZDhiL2Q0NTUxMzlhLWY2MjctNDc0My04Mjg0LTdmYmQyZjc2 ZGQ4Yi5jcmwwHwYDVR0jBBgwFoAUBQeylnQILQLv7Pg3hTxiQBwlN6owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDU1MTM5YS1mNjI3LTQ3NDMtODI4NC03ZmJk MmY3NmRkOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx//wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMtnL4G4YLhOGFnAuPEDk0DJJXd7AIbk+4PyIda0nvr2310IkX90v/v wFeWtzoy8z2sckssfmNXsypjHIluG58EeTQyOIBk9f64Td+lBI5tC7/qmpmvYm+e QoQlCqQ/hje0jsqfCxXcgLdERz/h5W45RwVCM85kFdT5Rd2gyuu5lU/S+0CAPs+b v0ixfWjZCHVY3X+n6kCgPJnIBG8ExVwGj9Oi6AvMnGb70Bg/qwIbMWa1vIBYHWM3 Mh1LU8ZJXxGttdxo/LUYD4VVa3t4AO2WpUkfC/95YuQoBrlVZp+qHgTEd/xaFhPg 9OBU4cERQS8VadrVYvDz29L53u9paAg= -----END CERTIFICATE-----Generated at Mon Sep 28 23:24:06 2026 by rpki-client