$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/2ca242cf-cd66-3ae4-ab5f-3b4a3c3fdbd0.roa File: 2ca242cf-cd66-3ae4-ab5f-3b4a3c3fdbd0.roa (raw, json) Hash identifier: jgw8sFN3ve9BS/Ma7HCh2/x7s98MKzFWW709Vy7jwJ8= Subject key identifier: 75:16:43:5F:7E:77:01:6D:35:DF:5D:81:D6:F7:3D:F1:0D:EC:20:E8 Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F4328584F3CE2A611F5FE44CB3110F780 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/2ca242cf-cd66-3ae4-ab5f-3b4a3c3fdbd0.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 11232 IP address blocks: 24.230.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:a6:11:f5:fe:44:cb:31:10:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=2770fb26-7b98-46de-a8f4-fc398613aa39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f8:4a:39:40:10:d0:c1:dd:67:e7:a1:de:e3: 50:5d:b0:74:2b:14:26:99:0c:52:ff:6b:f1:a6:ce: 41:4c:46:cc:66:2a:f3:28:70:a0:5a:31:54:24:be: 12:94:52:6b:f0:c4:ef:4a:bc:46:7e:96:51:60:15: e6:53:72:c8:5c:fd:c2:d6:c1:7c:88:da:6f:7f:6f: 63:d0:68:a2:f5:c5:37:45:5f:df:21:02:da:6c:91: 23:ed:e4:9e:94:d2:8c:60:29:60:02:0a:a7:0e:ae: 11:74:f5:17:91:42:b3:4d:8b:be:70:d2:9f:7e:64: 6b:44:ea:06:bd:4d:8d:ad:23:1c:28:ed:58:61:f0: 5d:85:cc:49:14:ee:f2:17:e2:9d:a9:1f:54:8d:07: 97:b6:78:20:67:9f:21:18:da:e3:48:85:ac:a4:cf: 82:ab:62:1c:e9:92:c6:52:63:11:31:a1:92:75:48: 84:77:f9:d2:98:52:db:42:70:12:4c:2c:7d:c7:d0: 8a:37:7c:13:7e:78:b0:dd:b0:61:57:0a:8b:10:86: 9c:7b:9c:7a:85:f0:a7:90:8f:a9:2d:b8:57:c4:bd: 4c:d2:5f:86:04:7a:9d:e7:3c:cd:7c:35:6c:f0:1b: 53:5e:50:f3:47:56:00:8d:36:96:d3:6c:53:f6:12: 34:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:16:43:5F:7E:77:01:6D:35:DF:5D:81:D6:F7:3D:F1:0D:EC:20:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/2ca242cf-cd66-3ae4-ab5f-3b4a3c3fdbd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 24.230.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:80:9d:84:21:a4:87:16:62:fc:bd:f7:a2:fb:84:1e:1f:82: 75:95:43:56:79:fe:03:8a:75:29:30:b1:0a:c7:95:ce:b3:bc: 77:15:dd:93:fa:eb:89:66:d9:c1:7f:74:0d:c2:02:5f:a8:5f: 83:5a:07:e8:78:15:f7:fd:25:1f:45:23:9d:ef:bb:19:83:03: 6a:ca:cf:60:74:88:52:9c:0d:a1:5b:53:ce:80:1a:cc:1c:ea: ec:95:77:78:d2:bc:3f:5b:5c:e7:f2:e7:a1:eb:e0:28:c7:26: 9d:97:4c:10:65:95:99:d0:71:15:2a:69:2e:df:f2:84:72:8b: 4a:a5:91:b8:c6:61:56:95:a7:95:23:cd:c5:da:89:81:26:0d: 00:0f:25:8f:e0:ff:01:ea:ff:b0:eb:6c:4e:48:b7:35:b2:67: ab:df:83:ec:66:dc:ae:de:84:01:ef:19:54:89:c6:03:45:8f: b6:f5:d4:43:8e:66:b1:fd:83:66:9b:a6:2b:5c:a9:83:27:31: 3c:ab:db:bb:15:4a:95:b6:f9:f8:93:dd:06:03:89:df:cf:c5: d3:d8:70:98:e4:83:54:f1:41:92:3a:c1:0d:64:67:0e:eb:54: 8c:71:bb:8c:1f:95:07:19:a0:ad:e4:2f:1a:9d:7a:04:a2:fb: 9e:ea:30:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884qYR9f5EyzEQ94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk Mjc3MGZiMjYtN2I5OC00NmRlLWE4ZjQtZmMzOTg2MTNhYTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPhKOUAQ0MHdZ+eh3uNQXbB0KxQmmQxS/2vx ps5BTEbMZirzKHCgWjFUJL4SlFJr8MTvSrxGfpZRYBXmU3LIXP3C1sF8iNpvf29j 0Gii9cU3RV/fIQLabJEj7eSelNKMYClgAgqnDq4RdPUXkUKzTYu+cNKffmRrROoG vU2NrSMcKO1YYfBdhcxJFO7yF+KdqR9UjQeXtnggZ58hGNrjSIWspM+Cq2Ic6ZLG UmMRMaGSdUiEd/nSmFLbQnASTCx9x9CKN3wTfniw3bBhVwqLEIace5x6hfCnkI+p LbhXxL1M0l+GBHqd5zzNfDVs8BtTXlDzR1YAjTaW02xT9hI0gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHUWQ19+dwFtNd9dgdb3PfEN7CDoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvMmNhMjQyY2YtY2Q2Ni0z YWU0LWFiNWYtM2I0YTNjM2ZkYmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGGOZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOAnYQhpIcWYvy996L7hB4fgnWVQ1Z5/gOKdSkwsQrHlc6zvHcV3ZP6 64lm2cF/dA3CAl+oX4NaB+h4Fff9JR9FI53vuxmDA2rKz2B0iFKcDaFbU86AGswc 6uyVd3jSvD9bXOfy56Hr4CjHJp2XTBBllZnQcRUqaS7f8oRyi0qlkbjGYVaVp5Uj zcXaiYEmDQAPJY/g/wHq/7DrbE5ItzWyZ6vfg+xm3K7ehAHvGVSJxgNFj7b11EOO ZrH9g2abpitcqYMnMTyr27sVSpW2+fiT3QYDid/PxdPYcJjkg1TxQZI6wQ1kZw7r VIxxu4wflQcZoK3kLxqdegSi+57qMOM= -----END CERTIFICATE-----Generated at Tue Sep 22 08:51:53 2026 by rpki-client