$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/5a7572ff-0c1a-36e1-a553-3bbd80d6ecd7.roa File: 5a7572ff-0c1a-36e1-a553-3bbd80d6ecd7.roa (raw, json) Hash identifier: jhhA65omCIny2197ExGr8RNNpItC5OnLGKvWze8TGrs= Subject key identifier: 45:7D:C2:4C:4E:8A:6F:60:98:CD:86:86:67:75:37:C2:94:59:2B:FA Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F4328584EC371CACF2CFC06D7D8338CC0 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/5a7572ff-0c1a-36e1-a553-3bbd80d6ecd7.roa Signing time: Sat 08 Aug 2026 01:00:11 +0000 ROA not before: Sat 08 Aug 2026 01:00:11 +0000 ROA not after: Fri 06 Nov 2026 02:00:11 +0000 asID: 46687 IP address blocks: 24.233.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Aug 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c3:71:ca:cf:2c:fc:06:d7:d8:33:8c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: Aug 8 01:00:11 2026 GMT Not After : Nov 6 02:00:11 2026 GMT Subject: CN=1320eabd-7231-48eb-a213-c938fce200f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f6:7f:e0:5f:2e:65:11:fb:5d:bf:ad:69:9d: cf:1d:92:d7:37:d5:4d:f7:1a:ef:2d:7b:cb:b7:af: 69:bf:8e:71:57:c5:0c:e6:40:7b:31:0d:56:dd:16: a4:b4:d1:d5:52:ba:59:fc:39:f5:b9:04:1f:48:7b: ac:b7:eb:d3:a0:d4:0c:13:a5:fe:59:ed:86:92:5c: 6b:f4:85:20:9d:2b:7b:38:b1:f0:21:7f:3f:74:77: 5c:cd:1c:03:65:09:f2:36:a1:b8:94:f2:81:01:bd: 1e:a5:55:13:4f:7a:2c:dc:68:1e:9e:5c:a4:a9:4a: e9:9d:06:5d:64:96:c8:7d:36:aa:be:66:9c:fa:f1: d8:3f:6a:d4:44:70:3b:70:84:0a:44:10:93:44:f4: 34:07:bb:5d:57:29:bc:aa:e4:9c:77:1d:e3:79:cb: ec:b1:db:17:94:35:2d:b2:9d:bf:27:83:a2:06:0f: 81:17:c4:a0:ff:73:d4:d4:49:05:1d:a8:4e:e0:4f: f0:42:23:1e:4b:c3:da:23:82:a0:51:70:94:b4:bd: ad:4b:b3:b5:a8:f4:9b:24:2f:90:27:13:c8:97:3c: ef:4e:1e:f0:86:32:c4:ea:6a:fd:00:c1:2e:1b:d6: d8:c6:52:df:27:3e:55:4f:0a:24:aa:e8:a4:22:a4: 55:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:7D:C2:4C:4E:8A:6F:60:98:CD:86:86:67:75:37:C2:94:59:2B:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/5a7572ff-0c1a-36e1-a553-3bbd80d6ecd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv4: 24.233.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:9a:a4:0e:96:54:86:ab:a7:a4:a3:3a:1b:6e:63:0b:44:b5: 27:ee:94:1d:0f:e1:77:2e:96:73:74:f4:0b:ec:6b:6a:75:73: f9:60:cb:59:77:6f:f9:26:63:54:43:21:f5:7b:33:3c:c3:c5: e2:a2:f4:89:14:a0:8d:c8:8b:9c:24:c3:b8:ea:1f:c1:1c:f2: a6:2c:47:bc:cd:c8:3a:35:6c:a1:88:95:12:88:99:f6:d3:9c: b1:3a:94:82:2c:35:00:0b:f7:0e:27:fd:cd:3d:f0:51:24:80: b8:88:b2:91:f9:de:dc:89:83:bb:a9:b7:bf:6d:a7:18:44:29: d8:e7:09:69:2f:de:ba:b0:09:74:c5:73:3a:cd:51:70:1f:4b: 24:df:51:2a:d9:01:d7:e7:bb:fc:f8:a9:74:a0:bf:55:69:61: 21:84:00:4e:e6:9d:47:0d:ed:df:5c:70:d1:54:21:f0:13:e5: dc:45:9a:5b:f8:f3:06:85:f2:7c:05:65:cc:22:cd:a5:df:86: d8:57:ad:24:0e:d5:b9:83:21:5f:99:a2:5b:1c:14:3b:fb:98: c5:cf:11:3a:cd:90:41:88:3e:a0:1c:4e:af:b6:64:e6:e8:60: 43:22:03:21:2d:b3:3c:91:73:70:bd:b6:d2:54:60:8c:32:4b: 80:e5:f1:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7DccrPLPwG19gzjMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk MTMyMGVhYmQtNzIzMS00OGViLWEyMTMtYzkzOGZjZTIwMGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/Z/4F8uZRH7Xb+taZ3PHZLXN9VN9xrvLXvL t69pv45xV8UM5kB7MQ1W3RaktNHVUrpZ/Dn1uQQfSHust+vToNQME6X+We2Gklxr 9IUgnSt7OLHwIX8/dHdczRwDZQnyNqG4lPKBAb0epVUTT3os3GgenlykqUrpnQZd ZJbIfTaqvmac+vHYP2rURHA7cIQKRBCTRPQ0B7tdVym8quScdx3jecvssdsXlDUt sp2/J4OiBg+BF8Sg/3PU1EkFHahO4E/wQiMeS8PaI4KgUXCUtL2tS7O1qPSbJC+Q JxPIlzzvTh7whjLE6mr9AMEuG9bYxlLfJz5VTwokquikIqRVAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEV9wkxOim9gmM2Ghmd1N8KUWSv6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvNWE3NTcyZmYtMGMxYS0z NmUxLWE1NTMtM2JiZDgwZDZlY2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGOngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGapA6WVIarp6SjOhtuYwtEtSfulB0P4XculnN09Avsa2p1c/lgy1l3 b/kmY1RDIfV7MzzDxeKi9IkUoI3Ii5wkw7jqH8Ec8qYsR7zNyDo1bKGIlRKImfbT nLE6lIIsNQAL9w4n/c098FEkgLiIspH53tyJg7upt79tpxhEKdjnCWkv3rqwCXTF czrNUXAfSyTfUSrZAdfnu/z4qXSgv1VpYSGEAE7mnUcN7d9ccNFUIfAT5dxFmlv4 8waF8nwFZcwizaXfhthXrSQO1bmDIV+ZolscFDv7mMXPETrNkEGIPqAcTq+2ZObo YEMiAyEtszyRc3C9ttJUYIwyS4Dl8Ts= -----END CERTIFICATE-----Generated at Tue Aug 25 10:18:20 2026 by rpki-client