$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba4e9cd3-45ff-3017-8082-70a3b715cfa1.roa File: ba4e9cd3-45ff-3017-8082-70a3b715cfa1.roa (raw, json) Hash identifier: 8vvZMgeGlOmIo1mGGeEROaUumdjytOzKK3d+MHFFA90= Subject key identifier: F9:87:41:BB:82:45:6C:9C:B1:10:0E:47:F6:1C:A6:8B:EA:2E:A7:07 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119E2B1EEA9A74492C89A280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba4e9cd3-45ff-3017-8082-70a3b715cfa1.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33651 IP address blocks: 24.5.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9e:2b:1e:ea:9a:74:49:2c:89:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=7c1fe55b-18ae-4001-889a-0e3711601ba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b3:c8:16:2f:87:5d:23:12:17:1c:15:84:8f: 27:08:12:89:a1:d4:8e:93:c5:35:e0:ba:83:1a:24: ab:55:41:be:21:ef:a3:b9:7d:fb:46:27:d2:cb:8f: 27:ce:32:24:49:76:e6:fe:0a:bd:c7:91:be:45:31: a1:2b:86:25:55:93:ff:32:d5:fc:0e:fe:d4:06:42: d4:ce:c4:1a:6b:1e:34:8b:49:43:33:3a:4d:80:39: 67:63:93:0a:7b:93:82:de:f0:f1:62:1a:8a:4c:56: f0:23:68:ff:1a:da:15:9e:f5:d0:a8:08:f7:f4:82: 74:13:48:70:04:f9:e5:02:e7:d1:14:28:f8:8c:91: 0b:e7:e6:61:a5:4f:1d:20:30:71:1e:06:a3:ef:11: 92:0d:a2:70:67:7a:86:9c:b3:04:5b:2d:74:23:47: 6b:70:ab:7f:75:01:9d:dd:d9:12:39:cb:de:fb:f3: 63:8f:10:2d:57:fe:64:76:34:9a:c9:d7:1c:43:21: 10:ac:57:20:6c:e2:14:34:76:3f:13:cc:e1:16:c7: 7a:fd:d6:42:c0:5c:fb:46:47:43:84:0f:9a:44:a5: cd:e1:1d:9d:fd:5c:a2:ec:6c:63:20:3f:c0:a2:ce: 67:05:e4:56:0e:55:61:da:f4:8e:99:da:2a:6d:d5: d1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:87:41:BB:82:45:6C:9C:B1:10:0E:47:F6:1C:A6:8B:EA:2E:A7:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba4e9cd3-45ff-3017-8082-70a3b715cfa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.5.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:96:18:04:78:af:bb:e1:b8:de:78:cc:f6:38:d8:04:ea:36: a8:df:3b:85:64:6d:41:16:ec:ba:9d:d6:18:b9:b1:06:c6:17: 05:ba:74:f2:8f:c9:c9:cd:0d:16:bc:02:4b:23:d5:82:46:63: 4b:f8:fd:6f:b2:ec:86:59:fd:1d:7f:da:13:d7:37:97:ed:3d: 26:1c:ce:be:22:9b:3b:fa:a0:8e:68:45:a1:fa:03:d1:a8:e2: 7e:db:05:61:cf:42:05:52:6e:cd:33:0c:e8:90:a3:65:a8:bb: a5:cf:bd:b5:a1:7c:4f:f0:91:a1:b6:21:13:74:0b:61:b8:b9: 7f:17:9f:d2:91:55:89:7e:d4:e8:c1:39:1b:f8:e6:5f:1c:42: 26:54:b7:f6:b4:a8:17:98:a0:47:42:6f:68:4a:19:27:95:81: 96:b3:6f:48:8c:7a:e6:94:c4:62:fc:33:de:da:5f:8e:46:14: 65:b3:90:87:bd:72:d3:26:fb:93:2f:1b:b9:a1:4a:a9:dc:62: 55:60:4a:52:65:eb:a4:35:d4:61:a8:cd:d9:72:f1:5e:a0:15: 84:b7:c5:23:8d:2a:4e:b0:5f:6f:1a:cc:e2:f0:75:b0:4b:03: e8:f4:9a:71:a4:72:bf:c6:93:be:3b:5f:0c:b5:67:77:a5:fa: 4e:c0:e2:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Rnise6pp0SSyJooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk N2MxZmU1NWItMThhZS00MDAxLTg4OWEtMGUzNzExNjAxYmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLPIFi+HXSMSFxwVhI8nCBKJodSOk8U14LqD GiSrVUG+Ie+juX37RifSy48nzjIkSXbm/gq9x5G+RTGhK4YlVZP/MtX8Dv7UBkLU zsQaax40i0lDMzpNgDlnY5MKe5OC3vDxYhqKTFbwI2j/GtoVnvXQqAj39IJ0E0hw BPnlAufRFCj4jJEL5+ZhpU8dIDBxHgaj7xGSDaJwZ3qGnLMEWy10I0drcKt/dQGd 3dkSOcve+/NjjxAtV/5kdjSaydccQyEQrFcgbOIUNHY/E8zhFsd6/dZCwFz7RkdD hA+aRKXN4R2d/Vyi7GxjID/Aos5nBeRWDlVh2vSOmdoqbdXR1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPmHQbuCRWycsRAOR/YcpovqLqcHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmE0ZTljZDMtNDVmZi0z MDE3LTgwODItNzBhM2I3MTVjZmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGAVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGWGAR4r7vhuN54zPY42ATqNqjfO4VkbUEW7Lqd1hi5sQbGFwW6dPKP ycnNDRa8Aksj1YJGY0v4/W+y7IZZ/R1/2hPXN5ftPSYczr4imzv6oI5oRaH6A9Go 4n7bBWHPQgVSbs0zDOiQo2Wou6XPvbWhfE/wkaG2IRN0C2G4uX8Xn9KRVYl+1OjB ORv45l8cQiZUt/a0qBeYoEdCb2hKGSeVgZazb0iMeuaUxGL8M97aX45GFGWzkIe9 ctMm+5MvG7mhSqncYlVgSlJl66Q11GGozdly8V6gFYS3xSONKk6wX28azOLwdbBL A+j0mnGkcr/Gk747Xwy1Z3el+k7A4jE= -----END CERTIFICATE-----Generated at Mon Sep 21 09:37:37 2026 by rpki-client