$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/cf326abc-d15b-3239-975e-23598674000e.roa File: cf326abc-d15b-3239-975e-23598674000e.roa (raw, json) Hash identifier: ulZ/H7FMDjW4e5I53siwlI91MsfdfoTHimfiVrbz0rQ= Subject key identifier: A4:2C:0E:2A:0E:FA:F7:D6:BC:B2:B2:02:8D:CA:77:4E:2F:E4:F5:B2 Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F4328584F3CE2A54D2C7AF5F38DA40380 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/cf326abc-d15b-3239-975e-23598674000e.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 11232 IP address blocks: 24.52.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:a5:4d:2c:7a:f5:f3:8d:a4:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=0aafb7ca-97bf-45c2-a6d7-5f94c524a06e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:55:50:43:e0:3c:3b:5f:d4:61:e6:d9:ee:54: 22:d4:85:a2:a5:7a:97:58:46:a3:56:c5:b2:37:23: 49:97:05:20:ec:91:14:ff:e8:2b:1f:9a:8e:2e:dd: bb:a0:3a:e9:66:54:18:75:e9:ac:05:c5:d6:e1:b7: 8b:5e:96:41:fb:cd:b8:b1:be:dc:5b:39:ff:d6:76: 00:b6:23:fe:5e:62:ce:25:83:d5:11:e6:cb:3d:32: ca:21:00:80:f5:99:ca:78:a0:23:26:e6:fb:5d:fd: 5c:65:58:59:5a:c4:7a:6a:9c:92:01:11:71:4b:5b: f4:d1:a1:01:d0:2c:a3:e3:ac:04:90:db:f4:26:5a: ce:2e:b4:29:33:0d:b0:b3:34:30:d9:bb:23:03:43: b6:5c:30:c7:c6:b7:26:1e:1a:09:b1:4d:f1:7e:b8: 3d:3b:2a:e9:bf:ab:f8:0f:6a:8c:70:0e:0b:cc:ef: f7:6d:56:43:61:c1:8d:fc:99:77:5b:d2:5b:87:29: dd:38:b7:15:58:c4:73:87:94:c5:60:4a:4d:bb:6d: 7e:9c:9e:d3:0e:80:7c:70:aa:03:88:b6:05:98:56: 73:ba:ca:03:56:73:4d:39:98:54:b0:cf:6c:34:7c: 26:c2:e0:d0:f0:94:fc:c8:eb:ff:cc:42:be:d5:83: ba:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:2C:0E:2A:0E:FA:F7:D6:BC:B2:B2:02:8D:CA:77:4E:2F:E4:F5:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/cf326abc-d15b-3239-975e-23598674000e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 24.52.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:01:46:e9:63:2b:bf:f2:ad:15:16:a6:e7:59:ff:4a:d1:17: c8:cc:4a:42:44:9b:24:20:49:b1:b4:55:1a:57:b8:d6:c5:16: 77:bc:0b:70:23:fd:3c:7e:6b:4d:ee:2d:fd:c1:33:77:ad:72: 91:5a:e9:cb:c2:70:da:60:4f:7e:c4:48:32:d1:d0:46:93:09: 59:53:1c:18:85:d5:40:f1:5a:67:76:77:31:d6:8d:b2:c4:94: e2:31:6f:38:7c:a2:13:f1:f5:4d:8e:e1:c0:c2:3a:f1:8b:0d: 43:57:ad:4d:eb:30:90:4a:60:06:03:9a:00:59:2e:5e:c4:61: 96:03:40:ef:4a:e4:27:62:00:b4:23:42:f0:24:b0:c8:3c:fa: 37:6d:b9:c1:1f:12:10:fa:d3:6c:39:50:25:ce:a2:1b:c2:91: f1:f0:42:e7:72:41:14:f8:e8:2d:99:6e:5c:0c:2c:41:7e:4f: 3e:0c:0a:6f:8d:07:cd:e4:a2:ba:d9:04:8f:70:3f:8f:f2:7b: 75:7e:d7:ce:87:3e:63:98:05:b0:a4:3e:fe:7a:3b:d0:38:3a: da:81:67:21:30:a4:16:8e:f9:fd:49:3d:0e:88:73:0d:09:5b: 59:57:c7:20:75:fc:fc:84:be:6a:2d:24:bc:4d:4f:db:0d:85: 48:11:ef:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884qVNLHr1842kA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk MGFhZmI3Y2EtOTdiZi00NWMyLWE2ZDctNWY5NGM1MjRhMDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1VQQ+A8O1/UYebZ7lQi1IWipXqXWEajVsWy NyNJlwUg7JEU/+grH5qOLt27oDrpZlQYdemsBcXW4beLXpZB+824sb7cWzn/1nYA tiP+XmLOJYPVEebLPTLKIQCA9ZnKeKAjJub7Xf1cZVhZWsR6apySARFxS1v00aEB 0Cyj46wEkNv0JlrOLrQpMw2wszQw2bsjA0O2XDDHxrcmHhoJsU3xfrg9Oyrpv6v4 D2qMcA4LzO/3bVZDYcGN/Jl3W9JbhyndOLcVWMRzh5TFYEpNu21+nJ7TDoB8cKoD iLYFmFZzusoDVnNNOZhUsM9sNHwmwuDQ8JT8yOv/zEK+1YO6sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQsDioO+vfWvLKyAo3Kd04v5PWyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvY2YzMjZhYmMtZDE1Yi0z MjM5LTk3NWUtMjM1OTg2NzQwMDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGDQkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYBRuljK7/yrRUWpudZ/0rRF8jMSkJEmyQgSbG0VRpXuNbFFne8C3Aj /Tx+a03uLf3BM3etcpFa6cvCcNpgT37ESDLR0EaTCVlTHBiF1UDxWmd2dzHWjbLE lOIxbzh8ohPx9U2O4cDCOvGLDUNXrU3rMJBKYAYDmgBZLl7EYZYDQO9K5CdiALQj QvAksMg8+jdtucEfEhD602w5UCXOohvCkfHwQudyQRT46C2ZblwMLEF+Tz4MCm+N B83korrZBI9wP4/ye3V+186HPmOYBbCkPv56O9A4OtqBZyEwpBaO+f1JPQ6Icw0J W1lXxyB1/PyEvmotJLxNT9sNhUgR72Y= -----END CERTIFICATE-----Generated at Sat Sep 26 06:35:00 2026 by rpki-client