$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db4d7d9b-d72d-4484-a2e5-e6ef1f44dab4/67cdff41-fc01-3d79-b730-5cd50c46a5ec.roa File: 67cdff41-fc01-3d79-b730-5cd50c46a5ec.roa (raw, json) Hash identifier: m7h9w+J4xK8QsgMVGe7zrvh8nDl/VPGa/QQD34j+y7A= Subject key identifier: FA:2D:C1:D5:AB:A1:2E:E6:55:2A:4E:83:2C:BD:98:F7:3F:8C:2B:07 Certificate issuer: /CN=db4d7d9b-d72d-4484-a2e5-e6ef1f44dab4 Certificate serial: 010D0C9F4328584EA78FE92F1BD9FBF504057900 Authority key identifier: 6E:3B:85:52:29:A3:ED:24:2C:27:6C:71:CF:7C:3D:E5:2A:93:EE:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db4d7d9b-d72d-4484-a2e5-e6ef1f44dab4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db4d7d9b-d72d-4484-a2e5-e6ef1f44dab4/67cdff41-fc01-3d79-b730-5cd50c46a5ec.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 23224 IP address blocks: 24.235.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db4d7d9b-d72d-4484-a2e5-e6ef1f44dab4/db4d7d9b-d72d-4484-a2e5-e6ef1f44dab4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db4d7d9b-d72d-4484-a2e5-e6ef1f44dab4/db4d7d9b-d72d-4484-a2e5-e6ef1f44dab4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db4d7d9b-d72d-4484-a2e5-e6ef1f44dab4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:e9:2f:1b:d9:fb:f5:04:05:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d7d9b-d72d-4484-a2e5-e6ef1f44dab4 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=9ea0e154-1dda-4873-9176-b22dc0f9c866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:34:62:0e:63:c2:31:84:73:76:2d:4c:cc:f7: df:4a:a8:a4:1b:d9:bd:96:8b:df:8d:ba:44:6f:c5: bb:f1:ae:30:37:ed:94:78:a7:1b:0f:03:83:19:ac: 39:f0:ee:6b:12:b2:aa:f2:ea:d3:57:27:44:28:a7: 07:37:c8:80:1b:4f:67:3d:75:a0:eb:b1:d0:3d:a7: 37:0e:32:51:f4:71:63:bc:96:f4:4b:65:73:a8:90: 64:fd:91:cb:e7:b4:3e:1d:db:df:95:4b:3d:84:b8: 26:cd:b8:cd:2b:4e:c6:a2:ec:b0:5e:6b:78:39:4e: 89:67:3c:ba:a5:e1:5e:23:45:62:65:61:e8:9e:e2: b9:d4:8b:38:b3:5e:04:6d:99:01:ca:4a:ae:16:81: 7e:d0:1e:84:03:79:c6:48:ec:e2:9c:aa:69:72:30: a5:c4:fa:52:65:83:d4:12:e7:81:80:65:bd:76:46: 06:e6:c1:5b:db:c7:ac:59:14:9f:cb:82:36:42:e9: e4:f1:9e:b6:d4:32:cb:25:85:f9:ab:c1:5c:9c:53: c8:20:97:25:53:e4:92:34:9f:aa:07:48:92:cd:95: 21:a2:65:19:eb:87:fd:9b:22:4e:f7:43:42:42:46: 12:e3:70:cf:d2:4c:3f:42:99:c9:5e:49:e3:2b:bb: 2a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:2D:C1:D5:AB:A1:2E:E6:55:2A:4E:83:2C:BD:98:F7:3F:8C:2B:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db4d7d9b-d72d-4484-a2e5-e6ef1f44dab4/67cdff41-fc01-3d79-b730-5cd50c46a5ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db4d7d9b-d72d-4484-a2e5-e6ef1f44dab4/db4d7d9b-d72d-4484-a2e5-e6ef1f44dab4.crl X509v3 Authority Key Identifier: keyid:6E:3B:85:52:29:A3:ED:24:2C:27:6C:71:CF:7C:3D:E5:2A:93:EE:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db4d7d9b-d72d-4484-a2e5-e6ef1f44dab4.cer sbgp-ipAddrBlock: critical IPv4: 24.235.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:36:06:9d:bd:bc:eb:6b:08:b1:b8:a8:ec:13:3b:a9:67:38: 17:18:ce:52:0e:78:d7:2e:26:26:58:b5:2b:9f:c2:d6:d0:65: 59:b2:32:a5:32:08:bd:74:42:b6:25:d8:20:a5:dc:45:91:f0: b0:30:5a:3e:32:03:36:e0:57:8a:7c:05:64:7c:f5:34:6e:5b: b5:d8:e7:fb:01:cd:68:58:08:6a:5b:23:95:7e:a6:6d:5f:21: 17:62:a2:bf:e0:91:d6:99:ff:2c:63:cf:e1:3e:1c:fc:d5:cf: 16:8a:49:93:20:af:79:4b:bf:b5:95:5e:01:94:34:85:16:65: 92:26:e7:06:ab:5c:46:59:dd:23:77:7e:0b:0e:63:02:f3:a8: 39:43:ef:65:9a:50:b9:91:76:84:ca:5e:29:48:71:9a:56:fb: 4d:d4:93:df:9c:80:4b:52:7f:37:2f:ef:90:ed:57:13:e3:48: 8b:be:e4:9f:22:19:81:94:75:f2:d6:8e:a2:91:64:4f:bc:b9: 8e:e5:a9:04:8c:cb:de:e7:8d:09:ad:7a:84:f3:bd:da:6f:88: df:90:aa:97:11:c1:f6:7b:7f:6a:fa:f6:77:15:66:e7:d3:92: a2:ae:ef:13:e8:b2:ac:67:8f:76:75:f4:e3:68:e0:6f:3b:8b: ac:b3:c7:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nj+kvG9n79QQFeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDdkOWItZDcyZC00NDg0LWEyZTUtZTZlZjFmNDRk YWI0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OWVhMGUxNTQtMWRkYS00ODczLTkxNzYtYjIyZGMwZjljODY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjRiDmPCMYRzdi1MzPffSqikG9m9lovfjbpE b8W78a4wN+2UeKcbDwODGaw58O5rErKq8urTVydEKKcHN8iAG09nPXWg67HQPac3 DjJR9HFjvJb0S2VzqJBk/ZHL57Q+HdvflUs9hLgmzbjNK07GouywXmt4OU6JZzy6 peFeI0ViZWHonuK51Is4s14EbZkBykquFoF+0B6EA3nGSOzinKppcjClxPpSZYPU EueBgGW9dkYG5sFb28esWRSfy4I2Qunk8Z621DLLJYX5q8FcnFPIIJclU+SSNJ+q B0iSzZUhomUZ64f9myJO90NCQkYS43DP0kw/QpnJXknjK7sq3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPotwdWroS7mVSpOgyy9mPc/jCsHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kYjRk N2Q5Yi1kNzJkLTQ0ODQtYTJlNS1lNmVmMWY0NGRhYjQvNjdjZGZmNDEtZmMwMS0z ZDc5LWI3MzAtNWNkNTBjNDZhNWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZGI0ZDdkOWItZDcyZC00NDg0LWEy ZTUtZTZlZjFmNDRkYWI0L2RiNGQ3ZDliLWQ3MmQtNDQ4NC1hMmU1LWU2ZWYxZjQ0 ZGFiNC5jcmwwHwYDVR0jBBgwFoAUbjuFUimj7SQsJ2xxz3w95SqT7kkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kYjRkN2Q5Yi1kNzJkLTQ0ODQtYTJlNS1lNmVm MWY0NGRhYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGOsEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALA2Bp29vOtrCLG4qOwTO6lnOBcYzlIOeNcuJiZYtSufwtbQZVmyMqUy CL10QrYl2CCl3EWR8LAwWj4yAzbgV4p8BWR89TRuW7XY5/sBzWhYCGpbI5V+pm1f IRdior/gkdaZ/yxjz+E+HPzVzxaKSZMgr3lLv7WVXgGUNIUWZZIm5warXEZZ3SN3 fgsOYwLzqDlD72WaULmRdoTKXilIcZpW+03Uk9+cgEtSfzcv75DtVxPjSIu+5J8i GYGUdfLWjqKRZE+8uY7lqQSMy97njQmteoTzvdpviN+QqpcRwfZ7f2r69ncVZufT kqKu7xPosqxnj3Z19ONo4G87i6yzx88= -----END CERTIFICATE-----Generated at Sun Sep 20 10:59:20 2026 by rpki-client