$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/859d8dda-b562-306f-ab8f-f043ea7b398b.roa File: 859d8dda-b562-306f-ab8f-f043ea7b398b.roa (raw, json) Hash identifier: q+L7euR9GIzBqEAGQaKq9J620s3Op8RLJGBSyacIqiU= Subject key identifier: 7F:15:29:C1:C4:CD:D1:4E:87:5B:65:69:9A:CE:BB:31:B7:5B:1C:9A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119EC45C9A29811D1E60F780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/859d8dda-b562-306f-ab8f-f043ea7b398b.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33287 IP address blocks: 24.0.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9e:c4:5c:9a:29:81:1d:1e:60:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=e7330b2d-65d7-4a2d-8cd7-5973d9c422d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:83:f2:6d:29:dc:92:90:09:8b:79:43:69:79: 9c:01:d6:bf:ae:1d:c3:92:cf:0d:d5:58:62:96:1a: f6:49:a8:0e:76:41:11:69:ab:fa:f6:27:ca:86:e0: 37:14:e6:86:68:09:27:6e:57:a7:04:45:84:eb:68: 83:69:fd:cc:0c:46:a9:a3:06:4d:27:2b:f3:7a:a7: e2:67:35:d2:68:0f:c6:b1:bf:44:35:bd:c9:62:92: 08:55:f2:79:8a:4d:a4:49:c6:7e:f6:c2:11:47:b6: 7e:b6:2d:6f:da:4d:30:bc:89:03:38:cf:06:0b:71: e6:42:7c:e9:e2:e0:91:ec:30:de:40:47:3a:c7:03: 9f:fe:5e:c6:21:75:37:de:38:08:f3:06:6a:5a:f3: a0:d9:a0:10:7f:67:19:24:80:03:8a:ca:fe:88:e7: 5d:0a:9c:8b:11:24:ee:58:6d:ac:ad:c6:78:11:87: bb:99:8e:fe:86:0c:5b:1b:78:8b:ff:52:1a:c4:dd: 5b:a4:38:88:62:97:59:94:e1:89:bc:38:48:ab:f8: 70:4d:16:f8:00:9a:6f:50:9c:f8:a2:a4:fd:0a:3c: 41:d7:d2:3e:95:16:9b:ae:b0:82:49:43:f6:41:d1: 00:0c:20:3b:70:4c:64:5c:75:75:a0:1e:e9:d2:df: 5e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:15:29:C1:C4:CD:D1:4E:87:5B:65:69:9A:CE:BB:31:B7:5B:1C:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/859d8dda-b562-306f-ab8f-f043ea7b398b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.0.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:d1:bb:bf:0d:16:d5:b6:4f:57:12:75:43:5e:cc:95:5d:7a: 0b:b8:d4:b5:cf:fe:6d:b2:b3:74:77:10:db:30:ad:ae:2a:50: e7:82:1a:b1:4b:f9:8f:79:bb:7b:be:62:c4:57:7a:5e:49:80: 8b:f2:b0:7e:74:02:63:39:eb:f9:81:84:bc:a3:69:4f:7c:b6: fa:7a:71:06:b7:a8:42:b1:ec:96:a9:c6:7a:32:5a:7c:9f:df: a7:1b:2a:86:57:11:44:af:35:83:7f:f0:e5:ec:95:81:17:bd: 3b:5d:e4:7c:58:bb:63:76:e6:09:cf:50:af:d6:e7:e9:bc:b9: 80:5f:94:33:1b:1c:60:cc:9e:01:b6:05:d2:3b:5d:60:07:47: 86:9c:32:fb:30:23:62:d1:80:02:76:58:b1:53:5f:15:19:a2: 35:54:2d:00:20:a8:f8:d7:a8:03:88:12:8b:b9:d1:f6:b3:39: 01:03:57:b6:30:f4:0c:ab:84:16:7b:84:2a:f3:b7:75:09:c7: d3:38:b8:de:ea:57:6f:87:57:40:7c:71:2c:68:16:28:87:5c: 2a:84:60:9e:59:91:92:0f:a7:3b:80:1a:13:fe:2f:7e:07:1a: 6c:73:6b:bc:0e:ed:de:da:f0:fb:ca:da:6d:0d:c4:4a:3d:bc: ce:ab:ea:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnsRcmimBHR5g94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTczMzBiMmQtNjVkNy00YTJkLThjZDctNTk3M2Q5YzQyMmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoPybSnckpAJi3lDaXmcAda/rh3Dks8N1Vhi lhr2SagOdkERaav69ifKhuA3FOaGaAknblenBEWE62iDaf3MDEapowZNJyvzeqfi ZzXSaA/Gsb9ENb3JYpIIVfJ5ik2kScZ+9sIRR7Z+ti1v2k0wvIkDOM8GC3HmQnzp 4uCR7DDeQEc6xwOf/l7GIXU33jgI8wZqWvOg2aAQf2cZJIADisr+iOddCpyLESTu WG2srcZ4EYe7mY7+hgxbG3iL/1IaxN1bpDiIYpdZlOGJvDhIq/hwTRb4AJpvUJz4 oqT9CjxB19I+lRabrrCCSUP2QdEADCA7cExkXHV1oB7p0t9eBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH8VKcHEzdFOh1tlaZrOuzG3WxyaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODU5ZDhkZGEtYjU2Mi0z MDZmLWFiOGYtZjA0M2VhN2IzOThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGABYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJrRu78NFtW2T1cSdUNezJVdegu41LXP/m2ys3R3ENswra4qUOeCGrFL +Y95u3u+YsRXel5JgIvysH50AmM56/mBhLyjaU98tvp6cQa3qEKx7JapxnoyWnyf 36cbKoZXEUSvNYN/8OXslYEXvTtd5HxYu2N25gnPUK/W5+m8uYBflDMbHGDMngG2 BdI7XWAHR4acMvswI2LRgAJ2WLFTXxUZojVULQAgqPjXqAOIEou50fazOQEDV7Yw 9AyrhBZ7hCrzt3UJx9M4uN7qV2+HV0B8cSxoFiiHXCqEYJ5ZkZIPpzuAGhP+L34H Gmxza7wO7d7a8PvK2m0NxEo9vM6r6kI= -----END CERTIFICATE-----Generated at Sat Oct 3 14:29:27 2026 by rpki-client