$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35a74e05-70dc-3082-b4d8-a2b77901141e.roa File: 35a74e05-70dc-3082-b4d8-a2b77901141e.roa (raw, json) Hash identifier: sM3vUoFdpA1x/VeQDoXjgy8hJTFgHdlXdN+qkI47Sow= Subject key identifier: 47:58:84:8C:8A:A9:41:B5:5C:BD:4D:94:E6:E0:31:F6:54:94:E7:BB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119E2A3AACC31CACE3D5CEC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35a74e05-70dc-3082-b4d8-a2b77901141e.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33651 IP address blocks: 24.5.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9e:2a:3a:ac:c3:1c:ac:e3:d5:ce:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=25430da2-df67-44ce-bda2-485824248718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:68:f4:6f:c9:91:6e:52:ec:75:71:f5:18:30: 21:fd:b4:e4:23:c1:c6:8b:61:8f:bb:c0:54:2a:4c: 01:6f:c3:36:93:33:07:b3:9b:cf:89:79:ff:2c:32: 81:fe:a6:39:2f:fe:70:d4:0f:79:a8:e3:bf:46:d5: 28:37:a1:34:ed:f3:4f:dc:2a:77:7b:c3:98:43:8b: 88:7e:67:8d:cd:59:93:42:1d:83:bb:79:87:e1:02: 13:10:13:aa:11:8f:67:1c:ea:0c:68:76:2c:05:15: 99:a4:af:e8:94:87:c9:ac:cb:59:3e:96:71:b1:e4: 27:c5:54:60:6c:35:34:f9:69:4e:b4:9b:29:d5:c8: fb:d4:16:07:d9:be:d9:2d:02:97:40:c4:10:43:52: 86:3c:52:22:fa:28:1c:ca:7a:d7:e5:66:bc:fa:2f: 19:ab:06:3a:59:28:62:00:b2:29:6e:74:e3:5e:72: 26:96:51:8d:44:b1:13:a5:5b:42:c4:90:61:1b:f7: 7f:e8:3e:93:ed:24:2a:34:a6:95:df:8a:9c:64:18: b9:f2:5d:e3:b8:8c:ed:bf:d9:a1:ad:f9:6c:62:f7: 0f:02:12:96:3f:00:54:03:46:16:e7:8f:d9:06:9b: 33:15:6f:87:92:4e:23:ea:ec:b1:25:05:22:09:ea: 4b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:58:84:8C:8A:A9:41:B5:5C:BD:4D:94:E6:E0:31:F6:54:94:E7:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35a74e05-70dc-3082-b4d8-a2b77901141e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.5.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:6f:76:61:69:c4:6b:9d:b3:94:8a:8f:f2:77:ea:c9:da:92: 84:0f:f5:b1:19:6f:ab:46:81:28:c8:57:9c:3c:b1:46:c5:a6: 39:b6:91:68:69:05:b9:ad:16:63:60:cc:01:78:df:d0:fc:a9: a7:f4:46:91:15:58:15:59:f3:4f:e3:7e:8c:2f:87:21:40:d1: 4a:95:7f:17:e3:15:72:2f:c7:77:b8:24:55:8d:7d:fa:76:06: 18:88:e7:0b:c2:bd:42:2d:61:42:0e:1a:36:68:05:6a:64:1b: 11:54:9b:d8:b0:d1:ce:bd:27:f5:6a:f3:36:70:7d:ef:9a:42: 51:5a:56:3d:47:e8:ee:02:26:1a:40:60:72:c8:7d:1c:d2:36: 1f:3f:dd:4e:8c:a7:fa:2b:c3:c7:6e:fd:bb:6a:2b:c4:86:76: 2e:cf:50:61:7c:79:e3:b8:12:2f:f8:24:a2:d8:c5:a4:e8:bf: 64:f2:72:f5:60:55:0f:62:13:c0:0f:51:6d:48:d5:10:b9:4d: cd:d3:70:c1:e0:84:d6:87:45:ed:ca:50:23:ad:95:dd:95:f2: c8:ff:87:96:d5:df:a4:23:f1:f6:96:c2:90:75:c7:f9:ca:08: a7:ec:4e:ea:40:12:ad:48:ad:62:6f:ec:fe:07:df:4f:fd:23: 1f:ec:08:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Rnio6rMMcrOPVzsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MjU0MzBkYTItZGY2Ny00NGNlLWJkYTItNDg1ODI0MjQ4NzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWj0b8mRblLsdXH1GDAh/bTkI8HGi2GPu8BU KkwBb8M2kzMHs5vPiXn/LDKB/qY5L/5w1A95qOO/RtUoN6E07fNP3Cp3e8OYQ4uI fmeNzVmTQh2Du3mH4QITEBOqEY9nHOoMaHYsBRWZpK/olIfJrMtZPpZxseQnxVRg bDU0+WlOtJsp1cj71BYH2b7ZLQKXQMQQQ1KGPFIi+igcynrX5Wa8+i8ZqwY6WShi ALIpbnTjXnImllGNRLETpVtCxJBhG/d/6D6T7SQqNKaV34qcZBi58l3juIztv9mh rflsYvcPAhKWPwBUA0YW54/ZBpszFW+Hkk4j6uyxJQUiCepLmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEdYhIyKqUG1XL1NlObgMfZUlOe7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzVhNzRlMDUtNzBkYy0z MDgyLWI0ZDgtYTJiNzc5MDExNDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGAWwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJvdmFpxGuds5SKj/J36snakoQP9bEZb6tGgSjIV5w8sUbFpjm2kWhp BbmtFmNgzAF439D8qaf0RpEVWBVZ80/jfowvhyFA0UqVfxfjFXIvx3e4JFWNffp2 BhiI5wvCvUItYUIOGjZoBWpkGxFUm9iw0c69J/Vq8zZwfe+aQlFaVj1H6O4CJhpA YHLIfRzSNh8/3U6Mp/orw8du/btqK8SGdi7PUGF8eeO4Ei/4JKLYxaTov2TycvVg VQ9iE8APUW1I1RC5Tc3TcMHghNaHRe3KUCOtld2V8sj/h5bV36Qj8faWwpB1x/nK CKfsTupAEq1IrWJv7P4H30/9Ix/sCAE= -----END CERTIFICATE-----Generated at Tue Sep 22 09:35:14 2026 by rpki-client