$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/c5b83281-348b-3fc8-96fa-075bc59381ad.roa File: c5b83281-348b-3fc8-96fa-075bc59381ad.roa (raw, json) Hash identifier: 5DxRcCFrxYH0yEwNJsoMr+IlhsJ+TKd3YgJBEPfRvJk= Subject key identifier: 96:4D:1F:1A:50:BC:08:09:90:C2:E3:84:82:AC:30:93:3E:6A:8E:E9 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584F1BDB82A0862C05016B9F3E80 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/c5b83281-348b-3fc8-96fa-075bc59381ad.roa Signing time: Tue 08 Sep 2026 17:04:34 +0000 ROA not before: Tue 08 Sep 2026 17:04:34 +0000 ROA not after: Mon 07 Dec 2026 18:04:34 +0000 asID: 9009 IP address blocks: 24.235.20.0/24 maxlen: 24 24.235.21.0/24 maxlen: 24 158.115.240.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:db:82:a0:86:2c:05:01:6b:9f:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Sep 8 17:04:34 2026 GMT Not After : Dec 7 18:04:34 2026 GMT Subject: CN=7ec5b9e3-01ce-41a7-9697-dba954ee3064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cd:dc:cc:02:25:bb:1f:25:ca:d1:11:33:f7: 40:0f:67:54:fc:21:fd:c4:2d:05:eb:cd:5f:63:75: 74:3d:17:a3:91:89:de:39:bf:1d:3a:d3:b2:6c:b7: 19:22:ce:5e:f6:76:24:22:fb:a9:37:0f:97:bf:1e: 83:01:e0:91:80:ff:8e:a6:1b:44:c6:84:4f:3b:d1: c0:c5:01:f0:a6:7d:65:55:38:aa:78:6b:cf:3c:7b: fc:6b:23:61:5e:73:0f:45:14:04:63:bf:1c:dd:52: af:50:0d:bf:cd:ed:67:fe:74:bb:d4:f8:d0:4b:a3: c7:cd:25:6a:08:76:d6:a4:bb:24:cf:76:82:37:0b: 40:60:22:4d:28:c5:a5:18:ca:6a:2b:79:dc:ee:63: 42:41:85:89:fc:71:cb:7e:c0:62:2b:4d:94:4a:7e: 11:15:53:c7:a7:9c:81:70:a5:6c:c0:4f:95:6d:2f: 4c:5e:93:54:d0:1a:4c:26:14:f2:c8:31:af:b7:ef: a1:f6:7d:3e:94:c4:62:13:a7:01:24:89:bd:36:b6: 6d:38:ba:18:a1:f7:da:ca:53:fb:a9:53:f3:8e:10: 4e:fc:11:b7:25:73:32:f8:34:09:b6:f1:94:6a:68: f4:71:44:7d:78:7c:d1:5c:76:de:e4:6b:fd:4b:aa: 60:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:4D:1F:1A:50:BC:08:09:90:C2:E3:84:82:AC:30:93:3E:6A:8E:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/c5b83281-348b-3fc8-96fa-075bc59381ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 24.235.20.0/23 158.115.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:08:a5:64:e0:93:c2:da:a4:af:36:6c:61:56:3e:fd:c1:35: b8:73:ec:0c:98:16:9b:8b:4a:c1:da:68:8e:9a:92:d6:d1:e6: 34:fa:4a:23:0f:43:62:79:31:a9:32:15:3c:4d:7a:8e:0c:0d: 66:02:96:42:11:73:f8:da:21:f1:f0:c3:99:28:3c:ab:62:c0: 09:29:70:9c:9a:12:89:54:18:ff:50:72:97:5f:c8:a9:6c:16: c8:ed:b4:43:f7:42:5c:ce:9b:3d:e8:b7:98:a4:2a:1d:61:1f: c3:9e:9e:6b:2b:bf:dd:2b:53:75:b6:5b:e8:ee:54:26:5a:c4: cf:b8:d6:1c:94:5f:9b:06:0e:04:e0:2c:e1:ed:7d:c7:c5:34: 90:a5:7e:9d:c3:7c:56:13:96:9a:1b:36:87:e3:da:05:4b:c2: 82:8f:10:df:53:44:93:80:4e:2d:7a:7e:7c:11:eb:9d:96:f3: 69:80:4f:7d:a1:e6:9f:3c:fe:d8:aa:a9:8e:77:70:24:b5:5b: 76:48:31:64:35:58:e9:84:82:98:5e:87:5f:5f:e7:80:74:6a: 12:c5:78:b2:a3:70:45:82:7c:88:95:da:36:79:75:a1:aa:99: 0f:50:c0:a6:1a:cf:e0:e0:99:e7:cb:57:2c:97:af:b2:26:42: a1:7c:c0:d7 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8b24KghiwFAWufPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDkwODE3MDQzNFoXDTI2MTIwNzE4MDQzNFowLzEtMCsGA1UEAxMk N2VjNWI5ZTMtMDFjZS00MWE3LTk2OTctZGJhOTU0ZWUzMDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApc3czAIlux8lytERM/dAD2dU/CH9xC0F681f Y3V0PRejkYneOb8dOtOybLcZIs5e9nYkIvupNw+Xvx6DAeCRgP+OphtExoRPO9HA xQHwpn1lVTiqeGvPPHv8ayNhXnMPRRQEY78c3VKvUA2/ze1n/nS71PjQS6PHzSVq CHbWpLskz3aCNwtAYCJNKMWlGMpqK3nc7mNCQYWJ/HHLfsBiK02USn4RFVPHp5yB cKVswE+VbS9MXpNU0BpMJhTyyDGvt++h9n0+lMRiE6cBJIm9NrZtOLoYoffaylP7 qVPzjhBO/BG3JXMy+DQJtvGUamj0cUR9eHzRXHbe5Gv9S6pgbwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFJZNHxpQvAgJkMLjhIKsMJM+ao7pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvYzViODMyODEtMzQ4Yi0z ZmM4LTk2ZmEtMDc1YmM1OTM4MWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBGOsUAwQB nnPwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHwIpWTgk8LapK82bGFWPv3BNbhz7AyYFpuLSsHaaI6aktbR 5jT6SiMPQ2J5MakyFTxNeo4MDWYClkIRc/jaIfHww5koPKtiwAkpcJyaEolUGP9Q cpdfyKlsFsjttEP3QlzOmz3ot5ikKh1hH8Oenmsrv90rU3W2W+juVCZaxM+41hyU X5sGDgTgLOHtfcfFNJClfp3DfFYTlpobNofj2gVLwoKPEN9TRJOATi16fnwR652W 82mAT32h5p88/tiqqY53cCS1W3ZIMWQ1WOmEgpheh19f54B0ahLFeLKjcEWCfIiV 2jZ5daGqmQ9QwKYaz+DgmefLVyyXr7ImQqF8wNc= -----END CERTIFICATE-----Generated at Mon Sep 21 14:48:13 2026 by rpki-client