$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db4d7d9b-d72d-4484-a2e5-e6ef1f44dab4/67cdff41-fc01-3d79-b730-5cd50c46a5ec.roa File: 67cdff41-fc01-3d79-b730-5cd50c46a5ec.roa (raw, json) Hash identifier: 5R/QmHn/pWtyH7m1chqRyKog6gNQDCj5DZq39XylG7I= Subject key identifier: 4A:B0:B4:2D:8B:F0:AC:A2:32:98:7C:D6:32:BA:E1:D4:EB:27:0B:CE Certificate issuer: /CN=db4d7d9b-d72d-4484-a2e5-e6ef1f44dab4 Certificate serial: 010D0C9F4328584F49732F89C0BEF3B5262CCE00 Authority key identifier: 6E:3B:85:52:29:A3:ED:24:2C:27:6C:71:CF:7C:3D:E5:2A:93:EE:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db4d7d9b-d72d-4484-a2e5-e6ef1f44dab4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db4d7d9b-d72d-4484-a2e5-e6ef1f44dab4/67cdff41-fc01-3d79-b730-5cd50c46a5ec.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 23224 IP address blocks: 24.235.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db4d7d9b-d72d-4484-a2e5-e6ef1f44dab4/db4d7d9b-d72d-4484-a2e5-e6ef1f44dab4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db4d7d9b-d72d-4484-a2e5-e6ef1f44dab4/db4d7d9b-d72d-4484-a2e5-e6ef1f44dab4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db4d7d9b-d72d-4484-a2e5-e6ef1f44dab4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:2f:89:c0:be:f3:b5:26:2c:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d7d9b-d72d-4484-a2e5-e6ef1f44dab4 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b17cd20f-56d1-478b-a0de-38cdf28112c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:1d:2b:7e:e2:9c:5f:74:fd:e1:1e:6a:a3:26: c9:ed:39:df:0d:01:fe:78:a4:a5:56:59:2a:78:a2: 79:7c:f9:eb:d2:c1:91:a5:0a:4f:b3:80:4d:9c:6e: fc:89:b1:bc:9a:e4:f9:69:55:a7:4d:18:4b:c6:22: 14:fa:41:65:25:26:da:04:08:5b:68:ef:1e:03:0b: 43:31:3e:c2:cb:1d:a5:ed:d4:2f:51:81:a7:05:e8: 98:f7:cd:08:a0:01:e1:3b:7f:fe:26:83:fb:07:ea: 82:65:f0:d8:74:e0:e5:34:52:93:d3:18:5b:9e:2f: 4d:30:24:e0:9f:2e:24:e6:36:16:71:d9:66:6d:83: ad:b7:f2:af:f9:0a:97:c5:c5:f0:01:f6:b0:d5:78: 94:54:66:fa:8d:57:5d:c0:70:83:26:35:3c:3b:7b: b3:d5:5d:5c:65:05:63:ff:c2:11:45:2b:ab:a4:50: c5:ff:24:76:ec:cc:15:75:93:1d:fc:55:9e:1c:26: 60:b8:24:41:b6:25:f4:92:61:4f:c2:73:4b:62:39: c1:d6:4d:e9:7e:28:ce:0c:f8:e1:e2:2e:50:f6:19: 7d:35:7d:21:e1:28:10:fb:28:86:b9:e9:39:e8:3e: 9e:73:ec:22:59:1d:da:02:1c:04:78:26:c7:a2:f9: 3d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B0:B4:2D:8B:F0:AC:A2:32:98:7C:D6:32:BA:E1:D4:EB:27:0B:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db4d7d9b-d72d-4484-a2e5-e6ef1f44dab4/67cdff41-fc01-3d79-b730-5cd50c46a5ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db4d7d9b-d72d-4484-a2e5-e6ef1f44dab4/db4d7d9b-d72d-4484-a2e5-e6ef1f44dab4.crl X509v3 Authority Key Identifier: keyid:6E:3B:85:52:29:A3:ED:24:2C:27:6C:71:CF:7C:3D:E5:2A:93:EE:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db4d7d9b-d72d-4484-a2e5-e6ef1f44dab4.cer sbgp-ipAddrBlock: critical IPv4: 24.235.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:9b:3f:a2:a4:96:b4:94:82:af:cc:35:53:9a:36:8e:33:ed: 6f:48:cd:f6:11:ad:88:a3:4f:5c:d3:39:9f:ab:bc:21:9e:3d: e6:4c:56:49:d0:9c:df:b7:3c:07:3a:d4:cb:cd:7a:86:2d:bb: cb:46:a5:bf:85:64:ac:0a:a8:ac:b9:e2:1e:59:bc:b5:d5:83: 6f:63:69:e7:44:72:8c:e4:57:a8:d7:02:05:6d:54:42:9f:1a: 87:dc:a3:28:3d:96:76:d5:be:8b:7b:cd:5a:85:d9:9a:84:03: bf:6a:5f:52:b7:4b:eb:f2:0e:47:b6:73:85:28:7e:62:47:c5: 78:e2:00:d3:80:24:49:55:b6:1d:d0:3a:33:24:80:04:97:1e: 32:63:93:f0:53:35:a9:7e:ac:a8:b5:e8:ea:d4:f4:ea:5d:6d: 2f:5f:d2:8b:67:ad:42:e6:0e:21:45:f3:88:75:d6:a1:55:b7: c2:fd:e4:f6:32:73:9c:e9:62:89:3c:93:15:35:54:f2:07:b4: 05:2e:64:a8:9c:45:a6:9a:3d:ef:78:d3:84:c8:63:69:97:c4: 11:73:09:ef:7b:03:ed:f3:79:d4:f8:df:8a:8c:f9:5b:f3:da: 47:10:92:33:77:38:51:99:3b:c6:38:54:c2:02:c8:24:b2:22: e0:a8:56:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcy+JwL7ztSYszgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDdkOWItZDcyZC00NDg0LWEyZTUtZTZlZjFmNDRk YWI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjE3Y2QyMGYtNTZkMS00NzhiLWEwZGUtMzhjZGYyODExMmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2x0rfuKcX3T94R5qoybJ7TnfDQH+eKSlVlkq eKJ5fPnr0sGRpQpPs4BNnG78ibG8muT5aVWnTRhLxiIU+kFlJSbaBAhbaO8eAwtD MT7Cyx2l7dQvUYGnBeiY980IoAHhO3/+JoP7B+qCZfDYdODlNFKT0xhbni9NMCTg ny4k5jYWcdlmbYOtt/Kv+QqXxcXwAfaw1XiUVGb6jVddwHCDJjU8O3uz1V1cZQVj /8IRRSurpFDF/yR27MwVdZMd/FWeHCZguCRBtiX0kmFPwnNLYjnB1k3pfijODPjh 4i5Q9hl9NX0h4SgQ+yiGuek56D6ec+wiWR3aAhwEeCbHovk9DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEqwtC2L8KyiMph81jK64dTrJwvOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kYjRk N2Q5Yi1kNzJkLTQ0ODQtYTJlNS1lNmVmMWY0NGRhYjQvNjdjZGZmNDEtZmMwMS0z ZDc5LWI3MzAtNWNkNTBjNDZhNWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZGI0ZDdkOWItZDcyZC00NDg0LWEy ZTUtZTZlZjFmNDRkYWI0L2RiNGQ3ZDliLWQ3MmQtNDQ4NC1hMmU1LWU2ZWYxZjQ0 ZGFiNC5jcmwwHwYDVR0jBBgwFoAUbjuFUimj7SQsJ2xxz3w95SqT7kkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kYjRkN2Q5Yi1kNzJkLTQ0ODQtYTJlNS1lNmVm MWY0NGRhYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGOsEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHubP6KklrSUgq/MNVOaNo4z7W9IzfYRrYijT1zTOZ+rvCGePeZMVknQ nN+3PAc61MvNeoYtu8tGpb+FZKwKqKy54h5ZvLXVg29jaedEcozkV6jXAgVtVEKf Gofcoyg9lnbVvot7zVqF2ZqEA79qX1K3S+vyDke2c4UofmJHxXjiANOAJElVth3Q OjMkgASXHjJjk/BTNal+rKi16OrU9OpdbS9f0otnrULmDiFF84h11qFVt8L95PYy c5zpYok8kxU1VPIHtAUuZKicRaaaPe9404TIY2mXxBFzCe97A+3zedT434qM+Vvz 2kcQkjN3OFGZO8Y4VMICyCSyIuCoVjw= -----END CERTIFICATE-----Generated at Thu Nov 5 14:41:23 2026 by rpki-client