$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e5ef868-772d-3870-8aff-7f683d75e5aa.roa File: 3e5ef868-772d-3870-8aff-7f683d75e5aa.roa (raw, json) Hash identifier: 6TKymR/qI0Mip51oO/myCawpB8Ak0UoJsOMDR60OkQ4= Subject key identifier: 8D:EC:AE:04:D8:78:25:55:05:59:83:00:CE:DB:32:D3:64:10:21:72 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584EA788DBD1E8360FDF2B10AECE Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e5ef868-772d-3870-8aff-7f683d75e5aa.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 22909 IP address blocks: 24.11.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:db:d1:e8:36:0f:df:2b:10:ae:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=3f729af0-01a7-480a-9f35-14c93b1ef85d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3a:d1:85:e0:d9:51:33:07:e4:fd:f2:83:24: 13:bb:24:5c:b5:26:30:3a:e8:f5:1c:61:28:49:8b: 5c:8e:6b:f3:c6:d4:28:6b:1f:72:b7:8f:57:96:48: dd:f9:95:e2:80:39:89:bf:64:c8:0a:66:ef:ec:56: 3d:7f:9b:4d:c3:33:a3:7b:00:62:21:96:18:a4:a2: 48:2f:a4:63:e8:f1:11:c1:1a:4f:71:5d:cd:56:86: b0:2f:4f:bc:ce:09:be:75:73:5c:17:e7:a5:77:20: a3:e2:d2:59:38:de:11:79:1d:c7:d8:60:18:df:9d: 42:54:8a:8c:d6:39:d9:f7:cf:e9:c7:8f:53:c9:8d: e3:83:49:27:8a:eb:c6:67:72:bc:42:80:0f:e9:1c: d9:3d:72:70:52:e6:30:f1:86:b1:60:c7:77:3e:ca: 3f:cc:44:4d:c0:ea:38:8e:bc:1e:cb:13:fe:73:cd: 17:43:08:30:a5:a1:7e:89:89:85:45:c7:d8:ec:0a: 60:26:5e:de:30:12:6e:0a:ff:34:39:68:d7:7f:62: a4:8c:4b:ed:66:21:c0:9e:d3:8e:07:d4:65:92:cf: 3d:44:dd:a5:c0:df:64:38:70:c7:c5:98:ed:6f:e8: ea:ee:d3:b2:53:0f:e1:08:03:8f:93:20:57:94:d6: d5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:EC:AE:04:D8:78:25:55:05:59:83:00:CE:DB:32:D3:64:10:21:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e5ef868-772d-3870-8aff-7f683d75e5aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.11.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:f2:aa:48:01:d3:de:76:27:14:d6:92:8f:a3:1d:a6:7d:72: 4c:cd:c3:14:dc:73:14:48:37:d5:01:c7:0b:50:b3:39:fd:d4: d9:2e:87:b3:d2:00:37:8f:80:ea:6c:88:91:ff:25:88:e3:51: 13:f8:08:6d:17:dd:0a:3b:80:e1:d6:b9:93:fd:1e:54:67:3b: 46:a7:6d:fd:59:04:58:d4:4c:ec:13:ca:f9:c4:d3:62:ab:ab: 74:10:3c:c1:1f:af:d3:aa:90:f7:0a:32:40:6d:a9:54:a4:7d: 2c:f5:60:90:70:50:b6:6c:7e:80:88:41:38:d4:6e:93:a7:dc: 01:0a:56:4e:d5:c3:34:0b:f0:9e:47:f2:fc:65:82:70:b1:fe: e9:42:8a:f8:cf:b8:89:29:ea:e0:3f:e0:ac:78:be:4b:83:85: c3:87:00:12:a6:64:ac:05:73:a0:c6:1d:d6:b5:33:af:60:cc: 4d:60:b1:e7:b3:82:63:f0:d6:19:fa:ff:7c:76:39:93:8e:ef: 38:18:a4:d5:74:be:da:20:f4:e8:65:7e:b4:07:b7:2b:ad:a5: a2:53:09:e8:9a:fb:ca:62:0d:94:9d:b6:4e:5c:26:4d:92:a3: 3b:ca:f5:fc:ec:fc:68:37:6d:be:cc:79:4c:63:59:14:9d:16: 9b:3d:4c:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niNvR6DYP3ysQrs4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk M2Y3MjlhZjAtMDFhNy00ODBhLTlmMzUtMTRjOTNiMWVmODVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjrRheDZUTMH5P3ygyQTuyRctSYwOuj1HGEo SYtcjmvzxtQoax9yt49Xlkjd+ZXigDmJv2TICmbv7FY9f5tNwzOjewBiIZYYpKJI L6Rj6PERwRpPcV3NVoawL0+8zgm+dXNcF+eldyCj4tJZON4ReR3H2GAY351CVIqM 1jnZ98/px49TyY3jg0kniuvGZ3K8QoAP6RzZPXJwUuYw8YaxYMd3Pso/zERNwOo4 jrweyxP+c80XQwgwpaF+iYmFRcfY7ApgJl7eMBJuCv80OWjXf2KkjEvtZiHAntOO B9Rlks89RN2lwN9kOHDHxZjtb+jq7tOyUw/hCAOPkyBXlNbVDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI3srgTYeCVVBVmDAM7bMtNkECFyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2U1ZWY4NjgtNzcyZC0z ODcwLThhZmYtN2Y2ODNkNzVlNWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGAv4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPyqkgB0952JxTWko+jHaZ9ckzNwxTccxRIN9UBxwtQszn91Nkuh7PS ADePgOpsiJH/JYjjURP4CG0X3Qo7gOHWuZP9HlRnO0anbf1ZBFjUTOwTyvnE02Kr q3QQPMEfr9OqkPcKMkBtqVSkfSz1YJBwULZsfoCIQTjUbpOn3AEKVk7VwzQL8J5H 8vxlgnCx/ulCivjPuIkp6uA/4Kx4vkuDhcOHABKmZKwFc6DGHda1M69gzE1gseez gmPw1hn6/3x2OZOO7zgYpNV0vtog9OhlfrQHtyutpaJTCeia+8piDZSdtk5cJk2S ozvK9fzs/Gg3bb7MeUxjWRSdFps9TCA= -----END CERTIFICATE-----Generated at Wed Jul 29 03:30:27 2026 by rpki-client