$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a8cec1ae-eb1f-3db3-a8b8-56e19404f6fb.roa File: a8cec1ae-eb1f-3db3-a8b8-56e19404f6fb.roa (raw, json) Hash identifier: gSSPXhYta7zGv827ksvwD0Jakk/tDVVkuyFVSSn5tl8= Subject key identifier: E9:C7:22:68:BF:E5:A4:87:38:8B:B1:6C:63:A2:CF:3C:A1:A3:42:4A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED8629E21FD9C697CA34F7800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a8cec1ae-eb1f-3db3-a8b8-56e19404f6fb.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33668 IP address blocks: 24.127.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:62:9e:21:fd:9c:69:7c:a3:4f:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=05ca8d89-38a7-41bf-a4cb-b7bdd9e64794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:fb:c8:25:00:1c:10:01:8a:73:9f:36:35:b7: 9c:b7:d3:1f:54:92:3f:67:01:c2:ec:53:f3:96:f2: bf:a7:ac:5d:07:04:39:76:0e:40:cb:3a:1a:c6:90: 27:2a:a1:d3:8a:7c:0d:87:a9:9f:dc:55:45:6e:4a: d2:1e:06:fe:03:ec:f7:47:5d:0c:04:3a:7f:2f:59: 4f:87:c1:ff:9f:99:6e:bf:a0:b8:9a:49:78:7c:b2: cc:b0:65:07:6c:ce:e2:78:f4:b9:a8:58:ee:df:1a: 9f:b1:f0:8e:33:26:e3:8d:08:90:10:26:b1:75:56: 77:90:63:74:34:aa:45:2f:2a:9d:2c:3b:02:0c:7b: 8e:11:77:a1:cf:94:bf:36:d3:36:97:af:bf:75:53: d7:11:cc:f4:2b:ad:4a:b1:12:65:ab:64:c4:70:cf: 9c:dc:f0:ce:7c:34:9a:1e:c1:be:6a:03:70:11:3d: a2:5c:c7:73:7d:1f:35:b6:60:96:5d:af:30:ce:96: 2b:96:4a:8b:0a:75:8a:d1:3f:9c:96:16:4b:98:59: 0f:60:fb:50:e1:d6:10:11:8e:cb:c6:90:2f:26:d0: 4d:cc:7b:89:d1:89:b0:10:ac:39:c8:71:84:98:ca: 99:98:21:22:b3:a1:a3:05:48:d5:e8:08:92:a3:df: 1d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:C7:22:68:BF:E5:A4:87:38:8B:B1:6C:63:A2:CF:3C:A1:A3:42:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a8cec1ae-eb1f-3db3-a8b8-56e19404f6fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.127.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:63:97:93:cd:57:a8:05:11:b5:e3:a4:82:69:8e:c4:64:53: 03:e1:69:53:13:dc:14:ed:0c:25:3a:ae:99:bc:7a:ae:ae:d4: 9d:68:95:57:d5:07:7b:a4:27:83:e1:a7:9b:0b:a1:26:23:6f: c6:eb:f0:c4:96:53:de:88:ec:a4:3c:f9:3f:4a:6b:59:33:1c: 29:84:36:5d:25:6f:10:ea:16:11:0b:a5:2b:e0:4f:af:71:5a: 8c:81:32:be:7d:1c:aa:23:45:e7:69:c7:7e:6b:5c:ca:bd:70: e7:af:c0:52:43:ad:68:9f:ce:59:c6:10:bf:25:a0:f9:e9:4c: 37:6e:a2:34:d8:ef:ee:3b:f1:b9:61:1f:e2:58:af:4a:27:9e: 21:78:b3:6a:6e:24:44:20:bb:c9:59:a9:8f:63:6e:34:20:7b: 00:67:43:0e:ee:2c:c4:ce:15:9e:27:61:4c:90:00:00:39:dd: bc:97:94:b4:4c:f3:13:7f:d4:5a:a5:6f:2d:8d:92:69:70:93: 1a:21:40:fb:d4:e4:d5:90:1c:a8:38:d3:d9:3a:46:65:1b:ff: 04:52:c0:7b:a4:2c:60:dd:2e:01:ac:b7:81:14:cd:02:47:a9: 71:88:66:65:e1:b8:2f:a3:a5:a3:a3:b0:ce:6d:08:74:7e:19: bf:05:5d:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYp4h/ZxpfKNPeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk MDVjYThkODktMzhhNy00MWJmLWE0Y2ItYjdiZGQ5ZTY0Nzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvvIJQAcEAGKc582Nbect9MfVJI/ZwHC7FPz lvK/p6xdBwQ5dg5AyzoaxpAnKqHTinwNh6mf3FVFbkrSHgb+A+z3R10MBDp/L1lP h8H/n5luv6C4mkl4fLLMsGUHbM7iePS5qFju3xqfsfCOMybjjQiQECaxdVZ3kGN0 NKpFLyqdLDsCDHuOEXehz5S/NtM2l6+/dVPXEcz0K61KsRJlq2TEcM+c3PDOfDSa HsG+agNwET2iXMdzfR81tmCWXa8wzpYrlkqLCnWK0T+clhZLmFkPYPtQ4dYQEY7L xpAvJtBNzHuJ0YmwEKw5yHGEmMqZmCEis6GjBUjV6AiSo98dOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOnHImi/5aSHOIuxbGOizzyho0JKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYThjZWMxYWUtZWIxZi0z ZGIzLWE4YjgtNTZlMTk0MDRmNmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGH9YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZjl5PNV6gFEbXjpIJpjsRkUwPhaVMT3BTtDCU6rpm8eq6u1J1olVfV B3ukJ4Php5sLoSYjb8br8MSWU96I7KQ8+T9Ka1kzHCmENl0lbxDqFhELpSvgT69x WoyBMr59HKojRedpx35rXMq9cOevwFJDrWifzlnGEL8loPnpTDduojTY7+478blh H+JYr0onniF4s2puJEQgu8lZqY9jbjQgewBnQw7uLMTOFZ4nYUyQAAA53byXlLRM 8xN/1Fqlby2NkmlwkxohQPvU5NWQHKg409k6RmUb/wRSwHukLGDdLgGst4EUzQJH qXGIZmXhuC+jpaOjsM5tCHR+Gb8FXYc= -----END CERTIFICATE-----Generated at Sat Sep 26 14:31:06 2026 by rpki-client