$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/940c7241-c4e6-387a-9d11-af66850f56da.roa File: 940c7241-c4e6-387a-9d11-af66850f56da.roa (raw, json) Hash identifier: 2Vwfp4+6u8fyrf0m7bn4amF3sOGWIufN2iNweIJIYSA= Subject key identifier: E9:3D:D2:97:0D:A6:70:5F:A8:70:7D:B6:C0:95:2A:08:8F:CE:9A:28 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F497946F40559DD11ED366B40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/940c7241-c4e6-387a-9d11-af66850f56da.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 13367 IP address blocks: 24.118.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:79:46:f4:05:59:dd:11:ed:36:6b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=083a939c-490c-4c3d-a9ae-b7d1333a9ef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d5:a0:ae:b3:e0:42:1b:a9:a5:cd:f5:ae:5b: d1:c3:f9:d1:54:6e:24:32:fd:7e:8f:29:57:18:15: e9:81:78:0d:dc:e1:06:ec:39:f1:c3:c6:3b:4f:05: dd:73:11:0a:1b:e1:d0:fb:9d:6b:63:de:b6:34:7c: 6e:a1:86:33:c0:a1:6a:b1:c5:27:6a:e7:ed:90:36: 00:52:bd:9a:80:98:24:e3:b8:df:1d:0c:13:bb:c4: 60:c3:49:d5:42:44:8b:f5:73:cc:b0:a2:2b:5f:0e: db:7c:6c:e3:dd:3f:8e:48:2e:57:e0:2b:d0:4a:59: 19:71:77:86:6d:2f:b0:ab:90:53:55:95:03:3a:db: f2:f5:36:74:69:bb:a8:07:5f:ae:5c:5b:20:22:e7: 1d:f3:39:5e:31:94:5f:6e:3b:f2:79:30:64:75:63: 66:ef:ad:03:4d:09:f2:91:3a:c7:29:87:9a:f6:13: c4:b3:c5:9b:04:12:55:f3:7d:28:68:91:a8:07:74: d7:53:e5:ff:2e:4b:f4:08:a8:88:fb:ac:b6:34:7f: 8f:20:40:3c:37:cd:39:4f:43:c1:f7:b0:3f:09:5b: d7:49:4e:40:04:c8:10:69:8a:87:14:80:b8:a2:20: 23:d9:f3:da:c4:1a:20:1d:67:04:ee:60:cb:80:8f: 60:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:3D:D2:97:0D:A6:70:5F:A8:70:7D:B6:C0:95:2A:08:8F:CE:9A:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/940c7241-c4e6-387a-9d11-af66850f56da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.118.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:27:ca:b1:3b:00:b6:12:18:04:3a:ea:03:2d:dd:e3:5b:10: 20:3e:1d:da:c4:67:63:9e:1f:41:b7:62:0a:16:94:92:ea:8c: 24:ee:fb:c7:27:f0:eb:13:e2:4b:7c:46:a5:8b:6b:2a:35:12: 74:14:76:e2:1d:ff:6d:f7:d3:98:4a:1e:ee:39:67:ea:1d:39: 2c:89:84:2e:e8:35:71:a4:e0:94:5d:b5:8b:3c:37:a4:48:3e: d9:8f:8d:89:2f:b0:59:0c:27:30:11:bb:4a:90:09:9a:71:d2: 65:a3:2d:26:e5:7c:5a:17:8e:9c:b2:88:2d:58:54:1e:e4:9d: 9b:d5:e0:8d:70:55:f6:e8:4b:96:e2:20:00:da:15:bb:81:42: 41:6a:19:77:64:3c:50:81:1c:c4:ac:01:a0:51:61:ea:05:72: ac:cb:17:28:63:14:1e:7c:b8:8b:0d:0a:bb:22:b5:be:cf:32: d4:1d:f2:46:a1:30:99:67:e2:09:9e:7c:8a:c1:01:ee:fc:c7: ee:b3:19:3d:79:fc:52:7d:f3:ba:fc:c5:53:6c:f8:ed:52:53: 32:f1:1c:44:d0:58:c0:2b:ac:e9:b8:86:97:b4:76:40:70:24: e3:d1:1d:e7:2b:6b:2a:e0:b4:65:0a:22:56:b6:d2:9c:20:d9: 13:a4:5f:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JeUb0BVndEe02a0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDgzYTkzOWMtNDkwYy00YzNkLWE5YWUtYjdkMTMzM2E5ZWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdWgrrPgQhuppc31rlvRw/nRVG4kMv1+jylX GBXpgXgN3OEG7Dnxw8Y7TwXdcxEKG+HQ+51rY962NHxuoYYzwKFqscUnauftkDYA Ur2agJgk47jfHQwTu8Rgw0nVQkSL9XPMsKIrXw7bfGzj3T+OSC5X4CvQSlkZcXeG bS+wq5BTVZUDOtvy9TZ0abuoB1+uXFsgIucd8zleMZRfbjvyeTBkdWNm760DTQny kTrHKYea9hPEs8WbBBJV830oaJGoB3TXU+X/Lkv0CKiI+6y2NH+PIEA8N805T0PB 97A/CVvXSU5ABMgQaYqHFIC4oiAj2fPaxBogHWcE7mDLgI9g2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOk90pcNpnBfqHB9tsCVKgiPzpooMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTQwYzcyNDEtYzRlNi0z ODdhLTlkMTEtYWY2Njg1MGY1NmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGHaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAConyrE7ALYSGAQ66gMt3eNbECA+HdrEZ2OeH0G3YgoWlJLqjCTu+8cn 8OsT4kt8RqWLayo1EnQUduId/23305hKHu45Z+odOSyJhC7oNXGk4JRdtYs8N6RI PtmPjYkvsFkMJzARu0qQCZpx0mWjLSblfFoXjpyyiC1YVB7knZvV4I1wVfboS5bi IADaFbuBQkFqGXdkPFCBHMSsAaBRYeoFcqzLFyhjFB58uIsNCrsitb7PMtQd8kah MJln4gmefIrBAe78x+6zGT15/FJ987r8xVNs+O1SUzLxHETQWMArrOm4hpe0dkBw JOPRHecrayrgtGUKIla20pwg2ROkXyo= -----END CERTIFICATE-----Generated at Sat Sep 26 00:24:11 2026 by rpki-client