$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a43452a7-0144-38b5-bee8-e5c013b6653b.roa File: a43452a7-0144-38b5-bee8-e5c013b6653b.roa (raw, json) Hash identifier: fq5hUMHIaazWAhEyP/0iXSOj7RuhI9YEoNde1Xuwm2Q= Subject key identifier: 5B:F5:CC:54:0A:9C:74:31:FC:C8:DA:50:7E:E2:94:45:E5:B7:42:CB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119E29E47EA0487310B87780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a43452a7-0144-38b5-bee8-e5c013b6653b.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33651 IP address blocks: 24.5.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9e:29:e4:7e:a0:48:73:10:b8:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=4f67193e-9a9f-4de7-ad7a-8d06ab7b451c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b1:ed:76:08:73:7a:7b:78:79:08:60:e8:02: ff:01:8b:62:bd:f4:6d:35:89:36:d8:2a:43:a1:db: 51:fd:54:00:13:a5:e8:cd:64:03:ff:8d:c5:4e:de: 9a:c8:30:36:df:2d:cd:8a:ae:54:80:66:08:2f:15: 31:96:5a:45:29:24:ba:58:6f:f0:bc:03:da:63:dd: d8:15:73:04:6b:86:3c:b2:2e:3f:4d:d4:89:ce:e1: bc:75:c7:56:32:17:70:73:78:37:5d:37:7b:c3:9d: 2f:a4:49:88:bb:9c:81:5a:7d:ef:1c:03:f0:98:f5: a7:49:5b:81:2c:51:e8:f1:64:5b:ce:70:90:4c:7c: d2:3a:e5:31:ab:1b:aa:43:72:8e:70:0a:2e:49:55: 86:95:fd:cd:b8:97:54:9c:e5:ec:21:ac:7c:27:7e: 5e:4e:31:d7:aa:96:86:f5:ad:83:39:ed:4d:f1:83: 9a:da:bf:64:dc:e3:b2:3d:fe:8f:0f:d7:5c:13:f0: 14:5b:58:72:3f:a2:6d:c7:02:9c:bc:bc:32:2d:c7: 73:cf:f8:b7:b1:47:9e:34:ae:d6:50:e4:20:f1:58: 3a:3c:6a:6f:32:3a:9e:50:cc:c1:ad:17:48:2f:25: bc:9a:79:93:85:2d:8c:92:a5:1d:92:eb:96:1d:24: ec:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F5:CC:54:0A:9C:74:31:FC:C8:DA:50:7E:E2:94:45:E5:B7:42:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a43452a7-0144-38b5-bee8-e5c013b6653b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.5.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:f9:a7:e0:00:c7:39:63:30:07:27:6a:cd:b9:f0:02:c5:02: 24:f6:6c:7d:5e:a5:08:64:3b:76:d9:f2:cf:7d:61:f6:64:b6: a7:01:94:79:0f:b6:a0:e2:60:f1:6e:14:65:16:80:7c:36:6a: 65:d4:bc:2d:ca:25:67:b6:a1:82:30:e9:78:74:9b:3b:c3:60: de:9e:98:76:a1:88:7c:03:6d:53:2f:a1:82:23:44:78:1c:71: 1c:c9:b3:bb:4b:39:8e:58:fc:e2:82:d8:47:04:0a:28:13:9f: c4:11:bb:e4:5e:1c:c2:5a:0c:db:35:48:82:6c:53:a3:98:6d: 92:41:da:92:df:8d:2c:a9:7d:14:57:d1:ee:b1:02:b0:50:c3: 16:1b:ca:8b:5c:9e:fd:f3:33:12:30:89:b6:0f:90:5f:4d:89: 8e:8a:5c:51:7f:f9:8f:60:11:a7:b2:87:71:f7:a7:9a:e3:67: 79:2a:0d:9a:57:64:47:4c:52:ec:6d:94:6e:04:a3:52:e4:ee: 8f:de:01:f7:24:3a:da:1b:ef:17:9c:04:a1:cb:07:4c:32:08: 3e:39:ab:d8:fd:08:a9:e5:ea:f0:f3:ca:b2:6b:98:d4:be:96: c5:b7:13:05:3c:a6:e0:64:f5:99:3d:28:cc:a2:5f:03:92:af: 6a:e3:25:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RninkfqBIcxC4d4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk NGY2NzE5M2UtOWE5Zi00ZGU3LWFkN2EtOGQwNmFiN2I0NTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrHtdghzent4eQhg6AL/AYtivfRtNYk22CpD odtR/VQAE6XozWQD/43FTt6ayDA23y3Niq5UgGYILxUxllpFKSS6WG/wvAPaY93Y FXMEa4Y8si4/TdSJzuG8dcdWMhdwc3g3XTd7w50vpEmIu5yBWn3vHAPwmPWnSVuB LFHo8WRbznCQTHzSOuUxqxuqQ3KOcAouSVWGlf3NuJdUnOXsIax8J35eTjHXqpaG 9a2DOe1N8YOa2r9k3OOyPf6PD9dcE/AUW1hyP6JtxwKcvLwyLcdzz/i3sUeeNK7W UOQg8Vg6PGpvMjqeUMzBrRdILyW8mnmThS2MkqUdkuuWHSTsRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFv1zFQKnHQx/MjaUH7ilEXlt0LLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTQzNDUyYTctMDE0NC0z OGI1LWJlZTgtZTVjMDEzYjY2NTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGAWZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIT5p+AAxzljMAcnas258ALFAiT2bH1epQhkO3bZ8s99YfZktqcBlHkP tqDiYPFuFGUWgHw2amXUvC3KJWe2oYIw6Xh0mzvDYN6emHahiHwDbVMvoYIjRHgc cRzJs7tLOY5Y/OKC2EcECigTn8QRu+ReHMJaDNs1SIJsU6OYbZJB2pLfjSypfRRX 0e6xArBQwxYbyotcnv3zMxIwibYPkF9NiY6KXFF/+Y9gEaeyh3H3p5rjZ3kqDZpX ZEdMUuxtlG4Eo1Lk7o/eAfckOtob7xecBKHLB0wyCD45q9j9CKnl6vDzyrJrmNS+ lsW3EwU8puBk9Zk9KMyiXwOSr2rjJQk= -----END CERTIFICATE-----Generated at Tue Sep 22 17:28:32 2026 by rpki-client