$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/ab1044a8-9b01-3c1f-837b-39cbd2d6b914.roa File: ab1044a8-9b01-3c1f-837b-39cbd2d6b914.roa (raw, json) Hash identifier: Rz6a5eGxDL1S/99lr7PL4To7qaEd0luDxpshsPCnCrk= Subject key identifier: D6:7A:F9:7A:82:18:D3:A3:0C:63:8E:7B:2E:B7:F2:87:5A:A2:F8:17 Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F4328584F655D817A80992C91DA7093C0 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/ab1044a8-9b01-3c1f-837b-39cbd2d6b914.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 46687 IP address blocks: 24.245.112.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:81:7a:80:99:2c:91:da:70:93:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=1be9d448-591d-4c09-9e08-8c78dbae06fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a4:29:ea:a8:ff:8b:3e:8e:99:02:e2:f2:23: 04:ab:af:78:c6:d3:44:7b:a2:33:a0:1e:86:cb:1b: 4d:37:39:ff:e4:1c:de:92:b1:69:c9:d1:d8:2c:29: aa:c6:03:b2:7d:84:c2:bd:8e:d7:2a:28:1e:ef:c8: b2:d9:56:26:e6:a2:93:5b:0a:2b:ce:87:a3:a9:d3: 53:f9:13:75:93:c6:73:34:b4:98:27:16:15:81:a4: 42:12:e2:b2:17:f9:fc:ab:fe:90:13:7c:fa:0e:24: a1:e3:9d:b5:ef:c7:31:01:dd:d5:4c:15:99:88:23: 9d:36:7e:a0:84:aa:88:3d:98:3d:c8:72:60:5b:ea: 10:10:79:64:ba:83:fa:23:20:8d:d9:6d:f2:17:d0: 60:b2:df:bc:19:11:ef:7b:7e:a7:e9:f3:e9:b3:49: 69:8f:d6:96:41:8a:3a:a0:6d:51:dc:0a:23:d7:7d: c7:23:dd:4e:aa:56:e1:5e:f8:31:d6:db:f5:b1:fd: fa:d1:30:7e:7d:a4:15:2b:a1:09:c0:3d:69:03:97: b9:1c:30:84:1d:25:c8:05:74:31:81:a6:85:f3:b8: b3:5d:98:66:64:09:3c:52:cd:5c:e7:ea:cc:62:ac: 01:b8:75:4e:8d:35:e2:02:76:85:ca:70:89:28:fd: 4f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:7A:F9:7A:82:18:D3:A3:0C:63:8E:7B:2E:B7:F2:87:5A:A2:F8:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/ab1044a8-9b01-3c1f-837b-39cbd2d6b914.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv4: 24.245.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:52:a1:b5:46:ed:c1:88:04:f5:b6:80:ae:37:de:23:ba:cb: cb:b9:45:2e:a1:57:35:5d:d9:bb:21:4f:e5:ac:d6:0e:b4:c8: 97:81:67:7d:6b:6f:42:bb:45:1b:64:0b:60:79:00:b8:b2:d7: 43:c5:1b:8e:e2:3a:55:d4:81:48:29:76:5e:fc:4b:f4:56:53: 2c:7e:23:b0:d7:e7:7c:fc:f5:8a:a7:67:ba:13:d7:d7:c5:89: 46:81:27:f7:e5:79:b4:1d:f7:2d:0f:eb:1f:aa:52:11:fd:6c: 02:44:0d:e4:9d:c8:fc:cf:6d:04:f1:58:5c:d4:0a:1d:7a:3e: 2b:f9:de:45:30:e7:d1:37:36:18:ab:f8:45:d2:38:26:3f:2e: 93:2d:2a:36:ed:05:0f:0a:d9:74:a6:47:e2:8c:1f:02:82:75: b3:6e:31:3c:3d:50:44:72:df:8f:a8:4d:9a:9c:0e:13:0b:da: 7b:c5:9c:3c:4b:73:4a:28:a1:32:d7:b2:6d:78:e4:b3:b8:9f: 02:2f:43:60:6b:e0:8c:50:0b:21:bb:fd:3d:46:ea:5a:41:03: d6:c6:b3:51:72:02:16:8a:4f:e9:d2:85:07:8d:83:8d:d6:0e: 0a:bd:5f:44:e9:5a:c2:13:9f:63:8f:fb:b1:99:76:d3:ae:42: aa:56:fa:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXYF6gJkskdpwk8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk MWJlOWQ0NDgtNTkxZC00YzA5LTllMDgtOGM3OGRiYWUwNmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36Qp6qj/iz6OmQLi8iMEq694xtNEe6IzoB6G yxtNNzn/5BzekrFpydHYLCmqxgOyfYTCvY7XKige78iy2VYm5qKTWworzoejqdNT +RN1k8ZzNLSYJxYVgaRCEuKyF/n8q/6QE3z6DiSh452178cxAd3VTBWZiCOdNn6g hKqIPZg9yHJgW+oQEHlkuoP6IyCN2W3yF9Bgst+8GRHve36n6fPps0lpj9aWQYo6 oG1R3Aoj133HI91OqlbhXvgx1tv1sf360TB+faQVK6EJwD1pA5e5HDCEHSXIBXQx gaaF87izXZhmZAk8Us1c5+rMYqwBuHVOjTXiAnaFynCJKP1PcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZ6+XqCGNOjDGOOey638odaovgXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvYWIxMDQ0YTgtOWIwMS0z YzFmLTgzN2ItMzljYmQyZDZiOTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGPVwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFSobVG7cGIBPW2gK433iO6y8u5RS6hVzVd2bshT+Ws1g60yJeBZ31r b0K7RRtkC2B5ALiy10PFG47iOlXUgUgpdl78S/RWUyx+I7DX53z89YqnZ7oT19fF iUaBJ/flebQd9y0P6x+qUhH9bAJEDeSdyPzPbQTxWFzUCh16Piv53kUw59E3Nhir +EXSOCY/LpMtKjbtBQ8K2XSmR+KMHwKCdbNuMTw9UERy34+oTZqcDhML2nvFnDxL c0oooTLXsm145LO4nwIvQ2Br4IxQCyG7/T1G6lpBA9bGs1FyAhaKT+nShQeNg43W Dgq9X0TpWsITn2OP+7GZdtOuQqpW+kI= -----END CERTIFICATE-----Generated at Thu Oct 15 10:34:44 2026 by rpki-client