$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfea9706-f904-38e7-9501-09b390ad971b.roa File: cfea9706-f904-38e7-9501-09b390ad971b.roa (raw, json) Hash identifier: PtYGyBK86ZGm9T/IGzebrhpZTBHqXW6hWE+/RHXoclc= Subject key identifier: B5:E9:63:03:F5:92:9B:1C:71:B4:36:05:8E:91:E3:71:7E:10:C5:23 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584EA78DB9861F1EAC0C6AF4F480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfea9706-f904-38e7-9501-09b390ad971b.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 13367 IP address blocks: 24.118.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8d:b9:86:1f:1e:ac:0c:6a:f4:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=85755c8c-671b-448c-8b0c-96507bfb66bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2d:19:1b:2d:fc:a7:6a:68:38:45:08:75:7c: b9:40:e1:ec:25:0c:a2:5b:4c:84:41:a7:5b:ea:a0: e2:95:64:72:0d:22:71:42:fa:5b:75:a6:eb:8a:24: e7:40:a9:91:18:40:51:3f:b5:70:e6:24:6e:7d:af: 0f:ce:d0:30:12:2c:d3:b3:66:22:a4:6b:f9:c6:8f: 95:ad:55:d0:e7:12:3a:23:fe:f2:05:88:25:46:f9: f5:19:40:13:13:25:ef:ca:04:82:63:ec:36:80:5c: 71:35:cf:ee:cb:9c:09:de:ac:c3:62:23:03:92:62: 8a:9b:ba:54:62:e2:b6:7a:a4:80:06:ab:6e:11:69: d1:f7:58:c2:61:0b:00:73:34:44:ea:ae:52:ea:4a: 5c:d1:20:80:2c:ed:a9:c4:ac:65:53:91:f2:28:5e: f4:75:c1:01:cc:e6:fd:89:91:bf:61:6e:b5:87:c9: 8c:11:f4:e0:f4:3f:4f:c3:f7:4f:71:ca:da:68:0c: 09:0d:96:ce:cf:3a:08:e9:72:c2:1b:d1:1b:33:73: 6c:b3:e0:cd:2d:06:25:b4:49:41:18:a7:bb:e4:60: d3:42:9a:2d:e1:63:3b:70:f6:79:fb:5f:f5:da:e0: fd:a0:6e:1b:b1:c8:f7:8a:0e:e0:c2:30:74:35:15: b3:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:E9:63:03:F5:92:9B:1C:71:B4:36:05:8E:91:E3:71:7E:10:C5:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfea9706-f904-38e7-9501-09b390ad971b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.118.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:d9:e4:df:35:d1:ba:a5:2e:24:a6:10:f0:47:98:d0:d4:e4: cb:3b:9e:74:4c:84:23:25:55:c9:78:05:ad:66:ec:13:11:24: 68:02:ac:6e:50:ac:8f:1e:00:af:0b:8a:5e:a3:6a:60:7e:17: 72:80:6c:4d:86:be:bd:2e:f0:97:44:53:a5:60:b0:c3:da:54: 97:cc:91:4e:42:40:da:99:83:c4:46:61:ad:b4:b2:bb:92:4a: e2:fb:79:0f:4a:61:ac:56:73:72:60:a5:80:90:ee:1c:61:71: 86:38:58:88:65:9e:2d:ae:58:73:14:41:b0:3d:58:ac:3a:06: e8:26:68:9c:fa:e0:6b:69:91:21:4a:67:6a:90:a4:ee:88:37: 08:5c:2d:20:eb:0c:81:42:31:16:f3:d7:59:1f:ff:50:49:a6: 26:4e:7a:78:a3:3e:a6:a0:3b:d7:d1:d9:46:e3:cc:b2:5d:a5: f6:64:67:b8:bd:6c:3e:e2:94:64:41:c1:66:b8:42:f2:68:e1: 9e:33:9a:e9:fd:a5:a9:5b:cb:d3:ed:98:d6:82:e4:e5:bc:81: 98:10:de:6e:d0:f4:ae:06:a9:cb:a9:c7:0b:cc:28:e0:03:af: 38:ab:a4:25:3a:42:de:28:99:b7:ad:ba:32:0b:13:aa:c5:06: d8:ed:04:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6njbmGHx6sDGr09IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODU3NTVjOGMtNjcxYi00NDhjLThiMGMtOTY1MDdiZmI2NmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmC0ZGy38p2poOEUIdXy5QOHsJQyiW0yEQadb 6qDilWRyDSJxQvpbdabriiTnQKmRGEBRP7Vw5iRufa8PztAwEizTs2YipGv5xo+V rVXQ5xI6I/7yBYglRvn1GUATEyXvygSCY+w2gFxxNc/uy5wJ3qzDYiMDkmKKm7pU YuK2eqSABqtuEWnR91jCYQsAczRE6q5S6kpc0SCALO2pxKxlU5HyKF70dcEBzOb9 iZG/YW61h8mMEfTg9D9Pw/dPccraaAwJDZbOzzoI6XLCG9EbM3Nss+DNLQYltElB GKe75GDTQpot4WM7cPZ5+1/12uD9oG4bscj3ig7gwjB0NRWzBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLXpYwP1kpsccbQ2BY6R43F+EMUjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2ZlYTk3MDYtZjkwNC0z OGU3LTk1MDEtMDliMzkwYWQ5NzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGHY4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMvZ5N810bqlLiSmEPBHmNDU5Ms7nnRMhCMlVcl4Ba1m7BMRJGgCrG5Q rI8eAK8Lil6jamB+F3KAbE2Gvr0u8JdEU6VgsMPaVJfMkU5CQNqZg8RGYa20sruS SuL7eQ9KYaxWc3JgpYCQ7hxhcYY4WIhlni2uWHMUQbA9WKw6BugmaJz64GtpkSFK Z2qQpO6INwhcLSDrDIFCMRbz11kf/1BJpiZOenijPqagO9fR2UbjzLJdpfZkZ7i9 bD7ilGRBwWa4QvJo4Z4zmun9palby9PtmNaC5OW8gZgQ3m7Q9K4GqcupxwvMKOAD rzirpCU6Qt4ombetujILE6rFBtjtBL0= -----END CERTIFICATE-----Generated at Wed Jul 29 08:51:14 2026 by rpki-client