$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/ca7a5fe9-608d-3970-8ae9-c116ae955da7.roa File: ca7a5fe9-608d-3970-8ae9-c116ae955da7.roa (raw, json) Hash identifier: 9egKJQhk6liLoUr7uVVSrP0XhBdIoR5xGpYiT4eyygI= Subject key identifier: 74:C8:50:87:02:FB:26:03:65:BC:90:D6:BD:19:03:0E:35:CB:39:6C Certificate issuer: /CN=4be3aeb5-b99c-47c1-984f-7f6b2621da46 Certificate serial: 010D0C9F4328584F093CDE0B235E390FDFB96D80 Authority key identifier: C5:82:C3:C0:D3:9F:A5:3A:EF:63:32:1D:DF:27:B1:F9:D8:5A:3A:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/ca7a5fe9-608d-3970-8ae9-c116ae955da7.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 397287 IP address blocks: 72.21.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/4be3aeb5-b99c-47c1-984f-7f6b2621da46.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/4be3aeb5-b99c-47c1-984f-7f6b2621da46.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:de:0b:23:5e:39:0f:df:b9:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4be3aeb5-b99c-47c1-984f-7f6b2621da46 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=990ea3c8-fa1e-4539-bf01-f8f0ef4b75f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:9a:97:67:5c:da:39:96:2c:ac:77:c9:bd:62: a8:f7:7c:ef:33:58:42:17:56:b6:21:0b:e3:c3:75: 30:1b:12:4a:b1:50:5b:4c:6d:4e:0a:b1:7e:37:13: e3:0b:1c:34:ce:b4:4d:b0:9a:9d:c1:af:fc:69:e5: 45:cd:cb:79:fe:54:8d:65:dd:7b:0e:1d:1e:47:5d: 9a:4d:5b:22:1c:1c:bf:e0:64:64:75:74:cf:65:14: 20:7e:4d:08:dc:a0:06:56:bd:8f:0e:b7:71:c5:02: 1b:2d:fe:51:29:6a:5b:00:ac:ce:3f:4c:f8:f4:8a: 15:cd:b3:95:86:68:2f:a5:a1:6f:4b:d1:d1:b1:3c: 16:0c:90:66:43:58:03:10:04:46:89:f4:3f:f0:3c: 4e:ef:26:a6:e6:36:87:78:fe:60:02:16:c9:6c:69: 86:ae:62:37:42:db:db:78:c6:1a:5a:c1:19:5d:03: 84:a2:10:99:f5:91:9c:4d:4c:57:cb:d6:12:09:c2: 39:e6:27:f9:3f:fe:d0:c3:34:af:ac:8e:32:57:e1: 44:fe:1f:63:b8:b3:92:82:78:4f:c5:53:78:65:ab: f1:47:1a:d6:cf:95:22:ca:d2:e6:d2:90:d9:d8:c8: 05:17:0b:27:5b:1b:db:8a:4d:be:62:13:a1:17:75: 45:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C8:50:87:02:FB:26:03:65:BC:90:D6:BD:19:03:0E:35:CB:39:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/ca7a5fe9-608d-3970-8ae9-c116ae955da7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/4be3aeb5-b99c-47c1-984f-7f6b2621da46.crl X509v3 Authority Key Identifier: keyid:C5:82:C3:C0:D3:9F:A5:3A:EF:63:32:1D:DF:27:B1:F9:D8:5A:3A:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46.cer sbgp-ipAddrBlock: critical IPv4: 72.21.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:62:89:98:5c:fe:87:df:1e:9d:e1:59:18:34:de:5d:2b:cb: 0a:e5:f1:67:f3:89:f9:b6:72:2d:f5:88:fa:39:8a:cf:21:1d: 9e:d3:f6:b3:8a:0a:b2:9f:34:f5:80:58:82:c8:38:be:fa:0b: 11:2d:d7:30:23:5a:f6:f4:b2:29:b5:dd:dc:ed:bc:5b:95:fc: 51:3e:9b:9f:d5:d3:46:84:cb:ee:18:34:08:60:50:fa:fb:7b: 2b:e6:d8:78:34:38:dc:9d:72:4a:7b:70:d7:aa:6a:56:d6:d7: 99:1e:f2:2c:82:38:9a:07:f9:73:a8:a0:ae:63:82:3c:32:2b: e0:b0:e8:d4:e7:85:f4:a6:77:e4:dd:db:b7:8a:6a:af:df:15: cc:6f:38:da:4e:64:07:9a:74:e3:50:cd:e4:14:aa:6c:92:0d: 4a:bf:d7:60:fc:35:5d:de:6b:d5:f7:e3:6e:13:e8:8b:75:e0: e7:25:3e:e0:d6:58:46:76:8e:93:35:67:d5:24:33:f0:f8:a5: 82:a7:67:e6:b8:bb:19:bd:88:66:8a:d7:3c:20:04:b0:0b:8f: 09:7b:17:f2:4d:91:52:08:20:99:bb:76:0b:85:97:0f:28:e3: 4b:76:11:84:92:e1:46:84:fa:2f:12:4b:6d:4d:d5:39:f3:13: b8:b0:ad:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPN4LI145D9+5bYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJlM2FlYjUtYjk5Yy00N2MxLTk4NGYtN2Y2YjI2MjFk YTQ2MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk OTkwZWEzYzgtZmExZS00NTM5LWJmMDEtZjhmMGVmNGI3NWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35qXZ1zaOZYsrHfJvWKo93zvM1hCF1a2IQvj w3UwGxJKsVBbTG1OCrF+NxPjCxw0zrRNsJqdwa/8aeVFzct5/lSNZd17Dh0eR12a TVsiHBy/4GRkdXTPZRQgfk0I3KAGVr2PDrdxxQIbLf5RKWpbAKzOP0z49IoVzbOV hmgvpaFvS9HRsTwWDJBmQ1gDEARGifQ/8DxO7yam5jaHeP5gAhbJbGmGrmI3Qtvb eMYaWsEZXQOEohCZ9ZGcTUxXy9YSCcI55if5P/7QwzSvrI4yV+FE/h9juLOSgnhP xVN4ZavxRxrWz5UiytLm0pDZ2MgFFwsnWxvbik2+YhOhF3VFsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTIUIcC+yYDZbyQ1r0ZAw41yzlsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80YmUz YWViNS1iOTljLTQ3YzEtOTg0Zi03ZjZiMjYyMWRhNDYvY2E3YTVmZTktNjA4ZC0z OTcwLThhZTktYzExNmFlOTU1ZGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGJlM2FlYjUtYjk5Yy00N2MxLTk4 NGYtN2Y2YjI2MjFkYTQ2LzRiZTNhZWI1LWI5OWMtNDdjMS05ODRmLTdmNmIyNjIx ZGE0Ni5jcmwwHwYDVR0jBBgwFoAUxYLDwNOfpTrvYzId3yex+dhaOgQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YmUzYWViNS1iOTljLTQ3YzEtOTg0Zi03ZjZi MjYyMWRhNDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBUXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtiiZhc/offHp3hWRg03l0rywrl8Wfzifm2ci31iPo5is8hHZ7T9rOK CrKfNPWAWILIOL76CxEt1zAjWvb0sim13dztvFuV/FE+m5/V00aEy+4YNAhgUPr7 eyvm2Hg0ONydckp7cNeqalbW15ke8iyCOJoH+XOooK5jgjwyK+Cw6NTnhfSmd+Td 27eKaq/fFcxvONpOZAeadONQzeQUqmySDUq/12D8NV3ea9X3424T6It14OclPuDW WEZ2jpM1Z9UkM/D4pYKnZ+a4uxm9iGaK1zwgBLALjwl7F/JNkVIIIJm7dguFlw8o 40t2EYSS4UaE+i8SS21N1TnzE7iwrTI= -----END CERTIFICATE-----Generated at Mon Sep 28 19:49:06 2026 by rpki-client