$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/504362dd-232b-3c91-b609-ac7a68c2387c.roa File: 504362dd-232b-3c91-b609-ac7a68c2387c.roa (raw, json) Hash identifier: FRIwy4l4ExKVmA1Epl0uGYWboc5L7tO5IOrYn4HrLhw= Subject key identifier: AD:87:A0:94:97:5B:EE:A7:8A:B5:3D:88:48:DA:59:CF:FF:26:D1:29 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F11A01C7549AB0A06AE897AA0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/504362dd-232b-3c91-b609-ac7a68c2387c.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33651 IP address blocks: 24.5.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a0:1c:75:49:ab:0a:06:ae:89:7a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=b316573b-a316-4c08-af62-a6fcffc39be7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:da:34:e2:57:23:68:af:c5:e1:df:41:3e:6d: f6:17:a4:33:3b:a9:b1:84:c5:50:74:0f:7f:24:fc: d7:9c:a5:71:4d:2d:0c:eb:17:0e:7d:7c:98:04:f6: 35:35:47:91:78:44:e2:63:e5:b3:a9:17:31:c1:54: 91:a1:d9:e5:35:77:41:db:1c:50:10:75:f2:c7:35: 8b:2c:2f:59:ca:9c:1c:81:09:d1:82:e4:6f:7b:23: 0e:37:0c:66:b7:9c:24:03:4c:89:0c:92:07:d8:fa: 76:7e:bd:6e:a7:23:3f:45:65:59:de:93:57:77:22: 61:75:7a:d7:94:a4:8f:83:47:e8:c2:99:7c:8b:be: 8b:bb:e8:24:f0:bb:7d:79:34:cf:79:0c:c0:9e:7b: da:ef:55:93:69:5a:9e:4f:d5:50:af:ef:9a:76:1b: b6:fc:1b:96:8a:b9:9f:a7:58:6f:d8:f7:c6:11:37: b4:3b:79:8b:0f:08:f6:ec:9e:bb:5a:0c:13:67:4a: 93:72:9e:cd:62:84:ea:2c:80:2b:c3:c4:63:1a:71: d3:c5:46:fd:dd:62:c6:9a:9f:4a:5c:d2:24:69:d6: 67:b8:e9:b5:97:17:f1:46:36:e4:f7:9b:c8:56:51: 4c:b3:9f:09:a2:8b:a9:16:d9:99:14:a0:25:cd:a8: bd:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:87:A0:94:97:5B:EE:A7:8A:B5:3D:88:48:DA:59:CF:FF:26:D1:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/504362dd-232b-3c91-b609-ac7a68c2387c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.5.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:cf:b4:09:c6:e9:a8:27:42:ae:28:19:6e:ee:f1:42:61:f8: 99:d9:0e:62:27:63:a1:b4:81:12:e8:8f:9a:4c:b7:78:93:a1: b7:40:06:5c:44:32:0e:97:0c:17:75:e8:c6:24:c5:38:02:32: c2:da:f2:06:55:14:4e:36:6c:a5:5c:e6:da:6f:bf:e7:1d:8d: 51:e1:0e:67:61:d4:55:78:b6:b7:23:5d:57:b4:a0:08:f6:83: 4b:e9:a8:df:3b:11:c1:88:a9:ab:5f:d7:e5:4f:97:c1:ec:2b: 63:ce:67:9e:b9:a2:a9:bd:90:b8:6b:cc:0c:68:c7:e8:40:10: 1f:3c:45:09:c3:fb:f7:04:ea:2e:1a:a4:b4:82:eb:97:28:02: 1f:16:34:d0:b4:ac:1d:3a:8f:22:0e:4a:fb:1e:64:1d:7b:66: 73:36:05:7f:ce:02:7b:cc:05:cd:ef:82:fa:34:47:3c:c5:31: 48:a0:d5:21:b0:1e:6e:93:cb:d7:b9:3b:0b:95:1e:25:84:71: fd:ad:d1:2a:42:d0:65:ed:f0:61:3e:f9:70:c6:e1:c9:2d:f5: 48:96:d8:d8:a7:84:f4:d2:6e:74:ba:09:3d:67:f7:96:78:f9: b5:42:ce:1f:72:e7:97:d4:a4:e1:94:5a:60:3e:7a:49:cf:2b: 88:e5:4d:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoBx1SasKBq6JeqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk YjMxNjU3M2ItYTMxNi00YzA4LWFmNjItYTZmY2ZmYzM5YmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19o04lcjaK/F4d9BPm32F6QzO6mxhMVQdA9/ JPzXnKVxTS0M6xcOfXyYBPY1NUeReETiY+WzqRcxwVSRodnlNXdB2xxQEHXyxzWL LC9ZypwcgQnRguRveyMONwxmt5wkA0yJDJIH2Pp2fr1upyM/RWVZ3pNXdyJhdXrX lKSPg0fowpl8i76Lu+gk8Lt9eTTPeQzAnnva71WTaVqeT9VQr++adhu2/BuWirmf p1hv2PfGETe0O3mLDwj27J67WgwTZ0qTcp7NYoTqLIArw8RjGnHTxUb93WLGmp9K XNIkadZnuOm1lxfxRjbk95vIVlFMs58JooupFtmZFKAlzai9sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK2HoJSXW+6nirU9iEjaWc//JtEpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTA0MzYyZGQtMjMyYi0z YzkxLWI2MDktYWM3YTY4YzIzODdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGAUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALnPtAnG6agnQq4oGW7u8UJh+JnZDmInY6G0gRLoj5pMt3iTobdABlxE Mg6XDBd16MYkxTgCMsLa8gZVFE42bKVc5tpvv+cdjVHhDmdh1FV4trcjXVe0oAj2 g0vpqN87EcGIqatf1+VPl8HsK2POZ565oqm9kLhrzAxox+hAEB88RQnD+/cE6i4a pLSC65coAh8WNNC0rB06jyIOSvseZB17ZnM2BX/OAnvMBc3vgvo0RzzFMUig1SGw Hm6Ty9e5OwuVHiWEcf2t0SpC0GXt8GE++XDG4ckt9UiW2NinhPTSbnS6CT1n95Z4 +bVCzh9y55fUpOGUWmA+eknPK4jlTQE= -----END CERTIFICATE-----Generated at Mon Sep 28 23:09:46 2026 by rpki-client