$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ec2a8244-9462-3bf8-815c-3ffdc3e528c4.roa File: ec2a8244-9462-3bf8-815c-3ffdc3e528c4.roa (raw, json) Hash identifier: i/aflz1I9/dEQU9xdF8Y6FnBanZFVUMPcQXNlO/oU3U= Subject key identifier: D2:3D:2E:38:E9:C1:D5:3F:EA:2A:7B:41:C5:40:B7:76:30:86:F7:FE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119E2C2912E3EE94CC901180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ec2a8244-9462-3bf8-815c-3ffdc3e528c4.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33651 IP address blocks: 24.6.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9e:2c:29:12:e3:ee:94:cc:90:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=b4e0fafd-575a-4705-acce-03a7cd1c0fb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fc:8e:d4:e3:99:75:70:16:b2:ed:61:ac:3c: e6:15:ae:26:1c:c7:98:79:4e:e8:38:8b:9b:41:3e: bd:aa:d1:f8:bf:c6:63:f4:d6:78:3b:8e:cd:61:5f: ac:db:6f:36:dc:65:d2:0b:07:0c:c3:87:63:ce:44: 47:a8:f5:d3:2a:77:28:9d:b1:ac:7b:78:82:03:16: 12:56:82:90:59:09:30:1d:bb:38:85:44:8d:6b:dd: b8:43:59:20:19:7f:09:2c:ca:29:03:48:36:9d:c9: aa:33:11:29:86:e5:f2:e8:5f:9d:d0:0d:42:9b:1b: 68:0b:d8:18:be:1e:46:04:15:0c:0c:4d:62:62:78: 5d:9f:b0:15:d3:ad:d0:2d:a6:24:76:df:d0:f3:24: 60:91:04:74:74:10:67:51:e8:55:c2:13:15:af:09: ad:0c:ad:2f:3d:de:a8:4d:6f:1a:79:9d:49:46:4f: 7c:b8:a9:42:87:65:c0:43:d6:62:63:18:43:0f:9b: ef:4d:ed:25:59:59:02:d3:53:67:43:29:db:c1:a6: 27:ba:3c:52:47:8b:5a:53:76:05:8f:69:6d:d2:68: 7f:14:aa:e4:01:05:13:8d:a9:1c:1e:bf:76:fe:8b: e4:39:6c:34:2f:c5:f1:8c:0a:e6:69:60:41:2d:f5: 6f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:3D:2E:38:E9:C1:D5:3F:EA:2A:7B:41:C5:40:B7:76:30:86:F7:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ec2a8244-9462-3bf8-815c-3ffdc3e528c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.6.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:91:d8:93:0e:98:e3:24:63:87:d7:58:21:f1:70:f1:88:80: 87:f0:0d:f8:23:b5:79:18:de:b9:77:34:48:74:11:bd:e6:52: 36:c5:15:12:a2:21:33:b8:65:3f:64:c0:88:7d:a7:dd:5a:5b: bb:05:d6:26:db:32:15:ad:a1:36:af:1a:e9:1d:cb:c5:f3:7c: 7f:96:44:84:9c:b9:87:f3:e8:fd:a0:3c:66:3e:04:59:52:16: 34:45:7e:20:58:aa:0e:d7:dc:f3:5e:3d:e8:29:93:2a:0d:82: cc:9d:b2:c8:1f:b8:c8:97:d0:29:23:c1:92:39:b0:d9:7d:32: 45:ee:81:5c:b9:75:0f:db:e7:33:c1:21:a0:97:94:d7:35:4c: 12:02:23:10:68:19:a8:0d:31:fa:e1:a4:00:1e:77:42:31:1e: 1b:25:db:0f:2a:ee:c6:e7:a3:72:1a:ab:93:cc:14:e9:55:b4: 72:46:c2:98:60:47:1d:6f:53:03:1f:60:bc:e6:44:60:bb:91: 0f:c0:77:27:7e:d9:36:96:49:e8:f7:d8:49:2d:7e:78:ec:a5: 24:47:b2:df:f6:d8:35:dc:a6:78:c4:c7:e8:40:a7:76:bd:06: 0b:08:1c:72:d3:4d:20:f3:3a:91:1d:3e:e5:6b:f5:07:7b:e6: 78:4e:ba:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RniwpEuPulMyQEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk YjRlMGZhZmQtNTc1YS00NzA1LWFjY2UtMDNhN2NkMWMwZmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPyO1OOZdXAWsu1hrDzmFa4mHMeYeU7oOIub QT69qtH4v8Zj9NZ4O47NYV+s22823GXSCwcMw4djzkRHqPXTKnconbGse3iCAxYS VoKQWQkwHbs4hUSNa924Q1kgGX8JLMopA0g2ncmqMxEphuXy6F+d0A1CmxtoC9gY vh5GBBUMDE1iYnhdn7AV063QLaYkdt/Q8yRgkQR0dBBnUehVwhMVrwmtDK0vPd6o TW8aeZ1JRk98uKlCh2XAQ9ZiYxhDD5vvTe0lWVkC01NnQynbwaYnujxSR4taU3YF j2lt0mh/FKrkAQUTjakcHr92/ovkOWw0L8XxjArmaWBBLfVv+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNI9LjjpwdU/6ip7QcVAt3Ywhvf+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZWMyYTgyNDQtOTQ2Mi0z YmY4LTgxNWMtM2ZmZGMzZTUyOGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGAYwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6R2JMOmOMkY4fXWCHxcPGIgIfwDfgjtXkY3rl3NEh0Eb3mUjbFFRKi ITO4ZT9kwIh9p91aW7sF1ibbMhWtoTavGukdy8XzfH+WRIScuYfz6P2gPGY+BFlS FjRFfiBYqg7X3PNePegpkyoNgsydssgfuMiX0CkjwZI5sNl9MkXugVy5dQ/b5zPB IaCXlNc1TBICIxBoGagNMfrhpAAed0IxHhsl2w8q7sbno3Iaq5PMFOlVtHJGwphg Rx1vUwMfYLzmRGC7kQ/Adyd+2TaWSej32EktfnjspSRHst/22DXcpnjEx+hAp3a9 BgsIHHLTTSDzOpEdPuVr9Qd75nhOul0= -----END CERTIFICATE-----Generated at Sun Sep 20 17:23:10 2026 by rpki-client