$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4176e689-b40d-34c7-b8da-bb6d59b84e0b.roa File: 4176e689-b40d-34c7-b8da-bb6d59b84e0b.roa (raw, json) Hash identifier: P/6xA5Ok+LU+GX0Pur7GH6tYrTjTc3s8yFh5SftKnvs= Subject key identifier: B1:B9:CC:C1:8D:4E:D0:0E:07:52:A1:04:0A:55:3E:3E:BB:5B:3C:01 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119E2817B2379F4F5DB4B900 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4176e689-b40d-34c7-b8da-bb6d59b84e0b.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33651 IP address blocks: 24.4.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9e:28:17:b2:37:9f:4f:5d:b4:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=3ee7a2d9-0fa3-47c1-a27a-310dfda50db4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:66:86:10:6f:89:c0:6f:24:38:26:e2:86:87: 5f:42:81:6a:38:8c:94:5d:7f:4d:a1:34:00:07:29: 10:75:34:f7:99:07:69:5f:04:4d:c9:4c:eb:52:32: 75:a0:11:ab:80:0b:45:d6:df:32:ee:e1:25:65:3b: ee:9a:cd:fc:1b:51:0e:38:16:81:18:11:54:bb:dc: 5e:20:25:d0:a0:b8:62:e6:b6:bb:11:a6:5d:5e:0a: f3:93:37:c2:92:e6:b8:19:b0:a5:77:42:e3:eb:d6: 3d:76:14:8b:5f:9f:37:06:f7:04:a7:cc:0b:30:d2: cc:22:b1:9a:45:ec:62:f0:f3:80:64:eb:14:43:ab: ca:3c:79:12:38:15:a0:a6:cc:40:32:d8:4b:2f:90: c5:9d:83:82:af:06:74:9e:e3:6a:23:d9:2e:ca:5c: 7f:28:25:f0:80:d7:2a:d1:76:80:88:f1:9e:35:d1: 11:46:b8:5c:ed:23:3f:dc:25:44:dc:19:23:83:c0: 92:c0:3e:0d:3c:a0:b5:69:e9:99:3e:11:bf:ea:02: f5:f2:74:c0:5e:e6:31:6f:5d:16:cc:68:e3:b5:3e: 3f:e2:33:8e:7e:9d:6e:0f:44:d3:13:37:22:87:74: 69:ef:47:bb:8f:02:83:48:a4:28:f0:02:c9:c5:0c: 32:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:B9:CC:C1:8D:4E:D0:0E:07:52:A1:04:0A:55:3E:3E:BB:5B:3C:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4176e689-b40d-34c7-b8da-bb6d59b84e0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.4.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:89:70:3b:6a:8f:04:a8:30:b8:5e:ba:39:d1:08:fe:08:0f: 49:99:62:9f:c8:e6:51:0a:ea:ff:81:6e:3e:61:73:15:bd:a9: 17:83:66:ed:75:dc:c0:47:7a:52:71:8c:2c:ab:4d:ea:c2:4c: b8:10:c3:2f:d1:6f:bd:31:9e:f1:8c:0b:10:6b:ca:d3:41:1e: ac:0b:64:b5:2b:a2:88:7c:b4:34:7b:b9:e2:59:a5:7a:6d:96: 2f:13:93:35:f5:1a:5f:1a:46:ee:1f:b3:71:50:3d:c9:a9:fa: 8d:79:84:d5:35:b2:00:5c:f2:81:cd:68:82:0a:4a:3c:e3:c5: a8:ea:79:f4:42:85:d9:dc:f2:e9:47:c5:5a:93:3b:bd:ef:cd: ac:64:f3:68:d1:14:11:e8:f2:ae:58:8a:53:ba:e7:54:00:5e: fe:f4:94:a0:23:42:bc:7a:09:e3:ca:f2:95:e4:cc:c9:bc:d7: 15:40:28:92:14:46:7c:83:5d:1c:cf:e3:f4:67:d2:d8:0e:0c: f2:be:c0:16:c7:ff:98:df:24:22:f3:c8:1e:e9:c0:c6:7b:09: 92:3c:2f:9a:9e:34:4b:d3:a8:8d:a9:23:21:1f:86:60:49:eb: ac:3f:19:19:ab:7f:af:75:25:64:74:75:85:73:0d:26:71:a2: b9:4d:0e:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnigXsjefT120uQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk M2VlN2EyZDktMGZhMy00N2MxLWEyN2EtMzEwZGZkYTUwZGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWaGEG+JwG8kOCbihodfQoFqOIyUXX9NoTQA BykQdTT3mQdpXwRNyUzrUjJ1oBGrgAtF1t8y7uElZTvums38G1EOOBaBGBFUu9xe ICXQoLhi5ra7EaZdXgrzkzfCkua4GbCld0Lj69Y9dhSLX583BvcEp8wLMNLMIrGa Rexi8POAZOsUQ6vKPHkSOBWgpsxAMthLL5DFnYOCrwZ0nuNqI9kuylx/KCXwgNcq 0XaAiPGeNdERRrhc7SM/3CVE3Bkjg8CSwD4NPKC1aemZPhG/6gL18nTAXuYxb10W zGjjtT4/4jOOfp1uD0TTEzcih3Rp70e7jwKDSKQo8ALJxQwykQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLG5zMGNTtAOB1KhBApVPj67WzwBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDE3NmU2ODktYjQwZC0z NGM3LWI4ZGEtYmI2ZDU5Yjg0ZTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGASFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGJcDtqjwSoMLheujnRCP4ID0mZYp/I5lEK6v+Bbj5hcxW9qReDZu11 3MBHelJxjCyrTerCTLgQwy/Rb70xnvGMCxBrytNBHqwLZLUrooh8tDR7ueJZpXpt li8TkzX1Gl8aRu4fs3FQPcmp+o15hNU1sgBc8oHNaIIKSjzjxajqefRChdnc8ulH xVqTO73vzaxk82jRFBHo8q5YilO651QAXv70lKAjQrx6CePK8pXkzMm81xVAKJIU RnyDXRzP4/Rn0tgODPK+wBbH/5jfJCLzyB7pwMZ7CZI8L5qeNEvTqI2pIyEfhmBJ 66w/GRmrf691JWR0dYVzDSZxorlNDmU= -----END CERTIFICATE-----Generated at Sun Sep 20 17:23:16 2026 by rpki-client