$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/ab1044a8-9b01-3c1f-837b-39cbd2d6b914.roa File: ab1044a8-9b01-3c1f-837b-39cbd2d6b914.roa (raw, json) Hash identifier: 39i/HFe+QG4k0J8ygWWU66/MON6ma/wOFFSKl+z0xYk= Subject key identifier: FC:D4:B7:DF:87:1A:49:24:5A:4D:39:B6:B1:39:F6:74:19:F0:C2:67 Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F4328584EC371CADA8EC9D69F59BDB040 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/ab1044a8-9b01-3c1f-837b-39cbd2d6b914.roa Signing time: Sat 08 Aug 2026 01:00:11 +0000 ROA not before: Sat 08 Aug 2026 01:00:11 +0000 ROA not after: Fri 06 Nov 2026 02:00:11 +0000 asID: 46687 IP address blocks: 24.245.112.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c3:71:ca:da:8e:c9:d6:9f:59:bd:b0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: Aug 8 01:00:11 2026 GMT Not After : Nov 6 02:00:11 2026 GMT Subject: CN=14e49f65-8a37-441f-a807-950bd4937562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:cf:59:24:82:ac:c6:9b:52:de:3b:a5:d7:cf: b4:3d:56:d0:80:b8:5d:ee:12:90:28:9f:49:75:0b: b8:ea:5d:68:d2:50:02:f0:3e:18:eb:c5:fb:10:2f: 26:b9:21:52:83:fb:e1:40:c3:20:9e:38:93:70:10: 8c:fe:52:af:eb:35:a9:77:cc:7a:bd:fb:0d:26:fd: 95:df:32:20:01:0d:6f:10:d6:d8:b9:35:17:d0:f5: d5:6a:40:35:2d:86:a7:0b:d8:2f:2d:79:28:3b:f5: 13:55:cc:4f:6b:ca:67:21:fa:0e:f0:d9:fd:14:b7: c3:49:e6:db:e4:18:5c:2d:4c:66:10:0c:ae:8f:12: a8:8f:40:2a:9e:75:56:60:b3:44:d2:f8:55:19:18: 2b:7a:d4:bf:a1:e8:9a:64:d9:70:9e:4e:df:ea:d7: c7:1b:d1:65:97:47:4f:c3:40:69:6e:ab:6c:42:34: dd:f7:4b:83:28:06:76:5b:1b:7e:f3:ad:83:bb:da: c5:e8:14:93:9b:1b:0c:6f:01:cf:c7:72:79:74:3b: 89:a5:c6:39:aa:cc:65:af:70:59:c3:63:99:a4:0c: 77:e4:22:82:a7:ed:69:9f:42:76:ba:e1:66:20:05: 69:d5:78:58:80:f1:3c:24:9f:8f:1c:11:dd:46:60: bf:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:D4:B7:DF:87:1A:49:24:5A:4D:39:B6:B1:39:F6:74:19:F0:C2:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/ab1044a8-9b01-3c1f-837b-39cbd2d6b914.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv4: 24.245.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:65:45:01:ee:61:1e:ae:1c:e1:2e:5d:cc:2c:eb:14:3f:8f: de:af:dc:d0:9d:f6:f3:a4:3f:e0:45:f3:46:c2:2f:f7:3c:36: 4e:12:db:2f:1f:46:66:bd:56:ae:ed:f1:74:7d:e9:a4:88:f0: cb:0e:a6:f8:9f:bc:16:71:3f:6a:54:2f:fb:09:7c:39:87:24: 8e:96:c2:e4:58:eb:62:c6:6a:61:66:2b:95:14:ba:e1:6e:bb: 7e:f3:73:67:e7:d9:55:1e:3e:e0:f8:a7:64:7f:e5:f0:d8:07: 0b:e9:9a:17:81:a7:0d:68:ad:30:3c:a2:48:db:a1:aa:2e:74: 20:e4:54:b0:76:e6:79:cd:fe:4d:ae:7a:4f:94:60:8c:8a:86: 58:d8:cb:45:f7:a3:8a:b5:98:e7:5d:56:36:f8:45:ed:62:9b: 84:09:01:6f:9e:08:bf:51:7e:45:bd:af:15:3c:83:07:b0:24: e5:b4:c1:22:f2:36:2c:5c:6f:da:c9:8b:c1:b2:f1:75:81:ec: df:4f:a2:f4:5e:12:28:3c:16:27:da:6c:d9:88:b0:00:a6:e2: 96:4d:b5:ea:55:f4:f9:c8:d5:cb:57:67:31:82:91:ef:2c:2f: de:4c:b5:f5:0f:17:25:e5:29:2b:8d:da:4c:ac:56:06:80:60: 56:b6:f2:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7DccrajsnWn1m9sEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk MTRlNDlmNjUtOGEzNy00NDFmLWE4MDctOTUwYmQ0OTM3NTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhc9ZJIKsxptS3jul18+0PVbQgLhd7hKQKJ9J dQu46l1o0lAC8D4Y68X7EC8muSFSg/vhQMMgnjiTcBCM/lKv6zWpd8x6vfsNJv2V 3zIgAQ1vENbYuTUX0PXVakA1LYanC9gvLXkoO/UTVcxPa8pnIfoO8Nn9FLfDSebb 5BhcLUxmEAyujxKoj0AqnnVWYLNE0vhVGRgretS/oeiaZNlwnk7f6tfHG9Fll0dP w0BpbqtsQjTd90uDKAZ2Wxt+862Du9rF6BSTmxsMbwHPx3J5dDuJpcY5qsxlr3BZ w2OZpAx35CKCp+1pn0J2uuFmIAVp1XhYgPE8JJ+PHBHdRmC/6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPzUt9+HGkkkWk05trE59nQZ8MJnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvYWIxMDQ0YTgtOWIwMS0z YzFmLTgzN2ItMzljYmQyZDZiOTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGPVwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdlRQHuYR6uHOEuXcws6xQ/j96v3NCd9vOkP+BF80bCL/c8Nk4S2y8f Rma9Vq7t8XR96aSI8MsOpvifvBZxP2pUL/sJfDmHJI6WwuRY62LGamFmK5UUuuFu u37zc2fn2VUePuD4p2R/5fDYBwvpmheBpw1orTA8okjboaoudCDkVLB25nnN/k2u ek+UYIyKhljYy0X3o4q1mOddVjb4Re1im4QJAW+eCL9RfkW9rxU8gwewJOW0wSLy Nixcb9rJi8Gy8XWB7N9PovReEig8FifabNmIsACm4pZNtepV9PnI1ctXZzGCke8s L95MtfUPFyXlKSuN2kysVgaAYFa28tE= -----END CERTIFICATE-----Generated at Tue Aug 25 15:38:54 2026 by rpki-client