$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ac309c5-28aa-3c13-b92d-85cbb8360c9f.roa File: 2ac309c5-28aa-3c13-b92d-85cbb8360c9f.roa (raw, json) Hash identifier: hp2olmgh5TX9lTRlGDV8k4GxJl07nfY2oHPVsCWsiFY= Subject key identifier: 12:57:23:D4:7B:65:ED:CA:F2:EA:E4:DE:15:A2:87:A2:42:6C:67:11 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F11A02298DB3DF0E4337FAFC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ac309c5-28aa-3c13-b92d-85cbb8360c9f.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33651 IP address blocks: 24.7.112.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a0:22:98:db:3d:f0:e4:33:7f:af:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=1f650908-c1a8-4402-bc24-a830a3a1ce2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:76:2f:18:bd:09:02:93:48:b4:01:98:6f:c1: 2b:87:30:2b:71:4c:38:cf:ed:cd:12:c0:fd:02:41: 93:36:b6:ef:2e:c2:df:ac:fb:7d:f0:7d:1d:6d:06: a5:cb:b0:d6:b2:84:1f:bb:56:06:30:01:d4:99:49: ab:39:db:55:7d:7a:55:b2:66:da:04:86:b7:c3:31: ae:b4:64:b6:0a:c0:0a:46:de:10:d0:20:3c:71:6c: 6c:b0:b6:ef:6f:35:22:1a:a4:cc:5e:df:fd:af:5b: 31:b3:a6:ad:66:cd:c0:cc:ba:b0:89:ba:56:63:00: 07:d9:46:73:d8:74:53:1b:d3:a0:d2:15:92:ad:bd: bc:6d:5f:87:7c:c5:e0:56:2e:97:28:74:76:4f:51: cf:81:f7:f1:7e:57:c9:0b:23:d6:e0:ab:57:08:5e: d5:6b:4a:e3:2f:f4:11:5e:06:28:cd:d3:55:47:25: 08:81:fc:75:a2:0d:da:74:a5:de:9f:78:0b:55:ca: 80:55:2f:9c:14:1c:7c:cc:44:c5:41:25:c3:f4:2f: 87:af:28:29:b7:60:c1:63:97:7e:19:42:6f:98:c1: f0:15:da:3d:4d:94:f1:d4:13:fd:fb:05:4f:80:43: 78:61:bd:f3:8e:ff:28:8b:66:3c:80:87:6e:4f:74: e6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:57:23:D4:7B:65:ED:CA:F2:EA:E4:DE:15:A2:87:A2:42:6C:67:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ac309c5-28aa-3c13-b92d-85cbb8360c9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.7.112.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:6c:64:db:7a:94:4f:32:8b:a1:83:52:e5:6e:65:14:ed:38: 14:97:8f:1a:f6:9b:31:e8:68:99:50:98:9f:02:6a:e5:ee:ed: 13:b8:e9:9d:45:57:59:04:01:c0:b7:a8:07:dc:03:c7:21:6c: 6a:13:e1:80:c9:9e:32:1e:85:4b:e7:53:85:c1:fd:e0:81:1e: a5:68:98:42:96:ca:fd:59:87:34:a2:50:2b:8e:5e:36:bb:cb: b0:a3:d2:3c:48:d2:56:df:01:83:b8:f2:54:19:ee:96:80:63: f0:6e:dd:dc:20:3a:1d:6c:be:61:2b:ea:72:5e:76:35:1e:47: d2:11:e1:9b:3e:dc:b8:f5:24:24:e8:e8:73:1a:0a:a7:c9:9d: 05:d8:50:20:c0:69:25:05:6f:d3:51:23:a8:68:33:28:32:97: 8d:d8:79:4b:20:68:f8:0d:f6:99:ba:1e:ae:92:4e:8b:e3:8b: 60:ec:2d:e1:9d:0f:26:5a:72:0e:25:2b:a5:2b:2a:97:6b:78: 69:20:48:cb:b8:6f:18:4b:83:c9:65:63:53:e8:b4:02:fb:62: b0:c2:41:69:3e:cf:1a:3b:60:46:77:47:85:3a:f2:c9:b6:be: f0:58:95:08:bc:6b:5e:06:2f:4f:0a:5a:6e:76:f6:03:09:84: 65:ed:fd:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoCKY2z3w5DN/r8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MWY2NTA5MDgtYzFhOC00NDAyLWJjMjQtYTgzMGEzYTFjZTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHYvGL0JApNItAGYb8ErhzArcUw4z+3NEsD9 AkGTNrbvLsLfrPt98H0dbQaly7DWsoQfu1YGMAHUmUmrOdtVfXpVsmbaBIa3wzGu tGS2CsAKRt4Q0CA8cWxssLbvbzUiGqTMXt/9r1sxs6atZs3AzLqwibpWYwAH2UZz 2HRTG9Og0hWSrb28bV+HfMXgVi6XKHR2T1HPgffxflfJCyPW4KtXCF7Va0rjL/QR XgYozdNVRyUIgfx1og3adKXen3gLVcqAVS+cFBx8zETFQSXD9C+Hrygpt2DBY5d+ GUJvmMHwFdo9TZTx1BP9+wVPgEN4Yb3zjv8oi2Y8gIduT3TmswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJXI9R7Ze3K8urk3hWih6JCbGcRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmFjMzA5YzUtMjhhYS0z YzEzLWI5MmQtODVjYmI4MzYwYzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGAdwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5sZNt6lE8yi6GDUuVuZRTtOBSXjxr2mzHoaJlQmJ8CauXu7RO46Z1F V1kEAcC3qAfcA8chbGoT4YDJnjIehUvnU4XB/eCBHqVomEKWyv1ZhzSiUCuOXja7 y7Cj0jxI0lbfAYO48lQZ7paAY/Bu3dwgOh1svmEr6nJedjUeR9IR4Zs+3Lj1JCTo 6HMaCqfJnQXYUCDAaSUFb9NRI6hoMygyl43YeUsgaPgN9pm6Hq6STovji2DsLeGd DyZacg4lK6UrKpdreGkgSMu4bxhLg8llY1PotAL7YrDCQWk+zxo7YEZ3R4U68sm2 vvBYlQi8a14GL08KWm529gMJhGXt/To= -----END CERTIFICATE-----Generated at Tue Sep 22 16:46:36 2026 by rpki-client