$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b28e48d-3336-30de-8e1a-0b04465cd6f2.roa File: 5b28e48d-3336-30de-8e1a-0b04465cd6f2.roa (raw, json) Hash identifier: W3jbRhc/gZB5KnmUaXX4w0c0NfgyFf4DlF9P+IYq3og= Subject key identifier: 96:98:CA:F7:B2:C6:4F:B9:BC:80:9A:04:50:9A:F3:F6:40:2B:B7:FA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119E27CB411CE16B13D55480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b28e48d-3336-30de-8e1a-0b04465cd6f2.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33651 IP address blocks: 24.4.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9e:27:cb:41:1c:e1:6b:13:d5:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=d0ef4b98-d423-49f5-9488-3b6ef8e8ab12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:e6:9f:08:15:b6:f0:27:7f:e4:49:96:94:2a: 69:13:1f:eb:f0:05:94:26:18:5f:03:01:2e:3f:43: f0:74:48:d3:63:a8:20:9e:36:c6:c4:9e:73:46:e5: cc:2a:b4:ef:be:f4:fa:b8:29:33:a9:22:55:1f:c0: 85:85:ba:ee:c6:96:bc:c2:77:0b:82:98:1e:43:11: 5c:ae:09:49:c7:c0:26:92:ad:5d:62:fa:bd:14:e5: 13:cf:70:7e:f4:34:9b:f7:29:77:f8:5e:33:b1:a4: 62:11:58:d6:27:34:63:a1:47:c8:75:01:4c:e3:37: 84:24:6c:0d:cd:18:c6:7b:c8:9b:a5:6c:9f:6d:b7: 27:e1:93:0e:f2:e8:97:41:4a:91:c6:f2:19:23:11: af:43:8d:3a:90:d6:ec:ad:b4:0e:b6:80:2f:ad:55: e0:db:92:34:54:8e:c8:ca:28:49:d6:31:3e:b5:fe: c2:63:19:ee:ae:10:c2:ba:0b:5c:a9:8a:89:0e:e3: 38:d4:46:5b:ad:bf:8f:b4:49:ad:ba:25:0f:dd:dd: c5:73:f8:c4:8d:3c:0e:2b:81:45:7f:ed:52:54:7f: 83:b6:18:7f:30:0a:22:38:bf:1b:82:d9:7c:85:95: 6e:aa:0b:bc:21:d8:a2:9b:cd:53:c0:f8:87:7a:54: 18:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:98:CA:F7:B2:C6:4F:B9:BC:80:9A:04:50:9A:F3:F6:40:2B:B7:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b28e48d-3336-30de-8e1a-0b04465cd6f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.4.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:42:2e:ee:bd:99:37:1d:f7:20:8d:97:ef:66:99:43:0b:43: 84:39:11:b9:cf:e9:4b:78:50:df:dd:93:8c:e1:0d:ea:6c:ab: af:80:3a:c8:22:39:2d:b6:eb:08:d7:49:1b:84:1e:0f:3a:d1: e2:5d:85:aa:d7:83:93:51:42:65:b5:97:ed:83:ca:4a:62:bc: 52:e5:c9:8b:86:17:06:5e:88:1a:3d:d9:49:ab:8f:ca:9c:1c: d7:23:0d:bf:9e:a8:b8:ad:b4:cb:81:b3:bc:6b:30:f8:b8:9c: 5c:33:da:a5:72:aa:7b:f4:7d:c7:8d:13:96:22:8a:6c:45:e0: b8:ea:16:9b:dd:e5:f9:25:8d:e2:b5:8c:32:94:50:9f:5f:fe: 60:12:ab:35:5b:f4:fc:d4:1d:d3:c9:88:b4:a1:0e:90:47:f5: 1d:b1:e6:ae:7e:d7:d5:e6:26:40:11:9d:1a:13:ab:b3:80:2c: d5:59:15:0e:2a:48:67:16:b1:f1:01:a1:79:b1:37:95:c4:a1: 24:1e:62:5a:5e:52:e0:ca:19:f6:31:2f:43:ed:8c:f8:96:38: db:b8:42:17:0b:07:f0:f7:55:a8:81:6d:2d:15:87:26:7d:03: 7b:d5:ff:84:22:b7:8e:8c:a6:8e:c3:58:b3:fa:91:54:3f:e2: 74:2d:8b:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnifLQRzhaxPVVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDBlZjRiOTgtZDQyMy00OWY1LTk0ODgtM2I2ZWY4ZThhYjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7eafCBW28Cd/5EmWlCppEx/r8AWUJhhfAwEu P0PwdEjTY6ggnjbGxJ5zRuXMKrTvvvT6uCkzqSJVH8CFhbruxpa8wncLgpgeQxFc rglJx8Amkq1dYvq9FOUTz3B+9DSb9yl3+F4zsaRiEVjWJzRjoUfIdQFM4zeEJGwN zRjGe8ibpWyfbbcn4ZMO8uiXQUqRxvIZIxGvQ406kNbsrbQOtoAvrVXg25I0VI7I yihJ1jE+tf7CYxnurhDCugtcqYqJDuM41EZbrb+PtEmtuiUP3d3Fc/jEjTwOK4FF f+1SVH+Dthh/MAoiOL8bgtl8hZVuqgu8Idiim81TwPiHelQYlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJaYyveyxk+5vICaBFCa8/ZAK7f6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWIyOGU0OGQtMzMzNi0z MGRlLThlMWEtMGIwNDQ2NWNkNmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGARlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZCLu69mTcd9yCNl+9mmUMLQ4Q5EbnP6Ut4UN/dk4zhDepsq6+AOsgi OS226wjXSRuEHg860eJdharXg5NRQmW1l+2DykpivFLlyYuGFwZeiBo92Umrj8qc HNcjDb+eqLittMuBs7xrMPi4nFwz2qVyqnv0fceNE5YiimxF4LjqFpvd5fkljeK1 jDKUUJ9f/mASqzVb9PzUHdPJiLShDpBH9R2x5q5+19XmJkARnRoTq7OALNVZFQ4q SGcWsfEBoXmxN5XEoSQeYlpeUuDKGfYxL0PtjPiWONu4QhcLB/D3VaiBbS0VhyZ9 A3vV/4Qit46Mpo7DWLP6kVQ/4nQti1o= -----END CERTIFICATE-----Generated at Mon Sep 21 03:40:44 2026 by rpki-client