$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/a04b1006-9564-3ccc-99b9-4cd1c222b0a6.roa File: a04b1006-9564-3ccc-99b9-4cd1c222b0a6.roa (raw, json) Hash identifier: BpEki53mJprmgjmkCPUrIdgBGGhE+jUWgWa8uWP3Xlc= Subject key identifier: 95:C6:5F:67:68:F0:C6:29:84:90:FC:42:F4:4D:53:41:30:1F:38:FE Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584F2957B06F4D2C15DA725B4C80 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/a04b1006-9564-3ccc-99b9-4cd1c222b0a6.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 14061 IP address blocks: 24.144.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:b0:6f:4d:2c:15:da:72:5b:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=af765c96-6d9d-4f3f-9dd9-4e8ba20d401f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:4f:67:fd:42:9d:a1:e9:0b:92:00:e8:76:dc: f9:84:cc:3b:fd:e3:10:0b:20:a2:42:13:4f:65:55: 74:75:16:b6:a2:46:22:15:ce:44:50:19:99:0d:55: b6:02:56:23:19:22:c0:fa:2d:56:96:23:14:ab:8a: 00:42:5b:17:96:60:88:c8:6d:e2:73:a4:8c:cb:75: 9f:be:f1:0a:71:d9:ae:ee:01:7f:32:21:34:ea:9a: 71:b2:88:03:1b:d6:aa:e4:40:de:49:ce:0b:8f:2a: 0d:1c:cd:ff:1d:f5:6c:38:5f:b5:9a:b5:05:ae:6a: 89:ee:2b:4f:5b:01:d2:78:68:d5:75:9a:b5:17:f5: 93:1d:30:fe:5a:fc:f2:33:64:0f:92:40:0f:5c:c3: 59:9e:bd:9c:30:ca:96:c5:1e:60:91:12:a6:f8:e0: a3:74:ca:d7:10:7b:f4:57:0b:07:7e:04:3d:c9:d1: f4:87:f0:50:f4:53:55:ad:4a:e0:1c:f6:85:42:74: 5c:37:71:7b:60:51:cf:dc:49:06:62:74:6a:fb:4f: 8a:05:68:cf:15:05:12:ae:a5:e0:94:d5:a2:00:9d: c7:fe:1e:2a:90:c9:1f:7a:36:4f:95:4f:f8:95:4c: 66:6d:33:6d:58:33:96:97:fc:41:b4:b9:1c:77:de: 21:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C6:5F:67:68:F0:C6:29:84:90:FC:42:F4:4D:53:41:30:1F:38:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/a04b1006-9564-3ccc-99b9-4cd1c222b0a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 24.144.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:1f:7f:40:17:2f:b7:f2:57:c4:e1:86:c9:4d:86:57:f3:67: 1e:7f:a2:4f:af:b3:53:12:c0:a7:ff:5e:94:a5:84:c5:2a:07: 4e:4d:cf:6b:79:a4:a8:51:cf:2e:58:73:85:49:9f:c8:bf:22: 6f:52:15:36:d1:cf:a1:83:f6:d5:d6:c4:08:9a:6b:9c:47:85: 99:2f:1d:e4:db:69:14:51:ff:72:2c:8d:63:a8:a8:b4:71:0a: 2c:ae:bf:55:1b:30:cb:4b:a9:6d:6d:77:81:73:00:01:85:25: 3d:04:3e:bb:46:02:1b:a8:61:a2:9c:99:de:ec:f6:97:86:8b: 3e:e6:fc:f8:0d:d6:11:6c:b0:fb:b0:b2:18:07:0c:a1:5a:db: e7:66:94:c9:12:15:f4:bb:32:6c:6a:e2:72:58:d4:1e:25:a8: ea:4f:39:88:17:26:d3:2b:18:d0:f9:34:18:28:58:56:f8:ae: d5:73:16:94:00:de:fd:52:c8:53:63:24:e7:0d:b9:3c:16:76: c1:a9:cd:d3:01:d8:59:6d:d6:f5:0c:c7:28:12:d8:19:28:82: cb:9d:7f:5d:db:73:03:32:d9:41:ef:bf:8d:93:23:42:69:e2: 01:c4:00:bb:d5:d8:01:9d:a0:84:19:35:89:96:ac:14:30:3e: 2e:a8:5a:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV7BvTSwV2nJbTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk YWY3NjVjOTYtNmQ5ZC00ZjNmLTlkZDktNGU4YmEyMGQ0MDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi09n/UKdoekLkgDodtz5hMw7/eMQCyCiQhNP ZVV0dRa2okYiFc5EUBmZDVW2AlYjGSLA+i1WliMUq4oAQlsXlmCIyG3ic6SMy3Wf vvEKcdmu7gF/MiE06ppxsogDG9aq5EDeSc4LjyoNHM3/HfVsOF+1mrUFrmqJ7itP WwHSeGjVdZq1F/WTHTD+WvzyM2QPkkAPXMNZnr2cMMqWxR5gkRKm+OCjdMrXEHv0 VwsHfgQ9ydH0h/BQ9FNVrUrgHPaFQnRcN3F7YFHP3EkGYnRq+0+KBWjPFQUSrqXg lNWiAJ3H/h4qkMkfejZPlU/4lUxmbTNtWDOWl/xBtLkcd94hAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJXGX2do8MYphJD8QvRNU0EwHzj+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvYTA0YjEwMDYtOTU2NC0z Y2NjLTk5YjktNGNkMWMyMjJiMGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGGJBAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK8ff0AXL7fyV8ThhslNhlfzZx5/ok+vs1MSwKf/XpSlhMUqB05Nz2t5 pKhRzy5Yc4VJn8i/Im9SFTbRz6GD9tXWxAiaa5xHhZkvHeTbaRRR/3IsjWOoqLRx Ciyuv1UbMMtLqW1td4FzAAGFJT0EPrtGAhuoYaKcmd7s9peGiz7m/PgN1hFssPuw shgHDKFa2+dmlMkSFfS7Mmxq4nJY1B4lqOpPOYgXJtMrGND5NBgoWFb4rtVzFpQA 3v1SyFNjJOcNuTwWdsGpzdMB2Flt1vUMxygS2Bkogsudf13bcwMy2UHvv42TI0Jp 4gHEALvV2AGdoIQZNYmWrBQwPi6oWlc= -----END CERTIFICATE-----Generated at Fri Sep 25 22:53:23 2026 by rpki-client