$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/ece47fad-c167-3f35-b97e-d727f8919785.roa File: ece47fad-c167-3f35-b97e-d727f8919785.roa (raw, json) Hash identifier: UEkoU+6sMAdeIyqVSPj931k4LlTETf7KpZ1CzAE8WNE= Subject key identifier: DC:E5:25:06:F1:32:B6:CD:32:AD:17:21:C8:3F:85:AB:00:AC:C3:64 Certificate issuer: /CN=469597d0-a870-46e2-b0a1-04a71dad0b25 Certificate serial: 010D0C9F4328584F51D2A1418C7B47F976804650 Authority key identifier: D9:22:F4:C1:14:0A:7F:93:24:F6:09:53:39:5C:D7:15:FD:76:7A:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/ece47fad-c167-3f35-b97e-d727f8919785.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 400423 IP address blocks: 24.38.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:a1:41:8c:7b:47:f9:76:80:46:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=469597d0-a870-46e2-b0a1-04a71dad0b25 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=2fa34a8b-743e-46d0-8861-d377bed18833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e2:db:2a:28:34:b9:fc:aa:5d:ae:fd:5c:09: 28:68:d8:32:71:4d:50:81:2f:37:19:0a:21:27:3f: 6d:24:5c:54:35:6c:72:89:c1:71:22:2f:af:2d:17: d6:14:11:2c:89:d2:1c:07:8c:86:b5:61:df:a1:5c: ba:ea:e1:34:30:ea:87:c1:f3:5b:4b:18:4d:07:77: 2c:9d:d9:49:a1:82:d8:8e:44:38:82:d6:47:82:85: 84:77:83:e0:0a:a5:62:20:0d:5a:9b:3a:3c:14:dd: 11:a6:87:89:17:25:e3:c6:65:a0:d7:df:20:8c:be: e4:3e:90:fc:96:19:fc:10:28:97:6e:8e:52:c6:65: c2:48:60:32:02:e4:d6:2c:c2:9c:98:d9:9b:c1:02: a8:89:ed:62:2e:70:f3:54:01:ad:5f:25:3f:aa:a5: 04:f4:4d:dd:24:fa:e1:43:f8:cb:b2:8d:6f:cf:07: a4:77:f5:1e:35:19:15:4a:51:81:56:31:50:7f:c1: b2:84:6e:5d:3e:5b:6e:65:96:83:99:ac:9f:07:13: 27:70:4a:bc:20:62:cb:85:cb:59:e1:5f:a1:a9:de: d8:2d:4f:96:d6:12:b6:f3:19:63:7b:f3:f7:b3:cd: 04:a7:4a:e5:a5:8f:66:27:f3:20:b4:1b:61:ee:8b: f7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E5:25:06:F1:32:B6:CD:32:AD:17:21:C8:3F:85:AB:00:AC:C3:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/ece47fad-c167-3f35-b97e-d727f8919785.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.crl X509v3 Authority Key Identifier: keyid:D9:22:F4:C1:14:0A:7F:93:24:F6:09:53:39:5C:D7:15:FD:76:7A:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer sbgp-ipAddrBlock: critical IPv4: 24.38.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:75:a9:2c:9c:5b:18:14:52:d5:54:72:55:20:82:56:8b:d7: 03:46:15:1d:4c:20:17:fb:f0:8c:81:3d:df:36:fb:9d:8d:84: 46:27:46:f1:8f:1d:7c:57:7a:9c:1d:c6:0d:90:a6:95:21:eb: a7:9c:1d:30:63:72:8b:71:73:9d:ae:fc:c5:46:79:48:2a:2f: 63:4f:11:f8:cb:03:27:9d:b0:e6:ab:ab:a5:25:dd:bc:4e:5b: 74:c3:aa:8a:8e:81:29:c6:e2:bc:0b:f4:55:f0:75:86:d9:cf: e9:85:b2:6b:71:df:b9:3e:38:fe:d2:67:c8:d2:36:39:ad:94: 55:29:c1:11:4a:f6:ae:3d:8e:af:1a:81:57:c4:f6:6c:b4:d5: 0d:37:31:2f:26:4a:a0:be:cc:13:91:f7:62:37:0c:29:65:9f: 23:eb:c5:04:76:2d:fe:53:20:70:cf:e5:56:48:b1:f2:9e:02: 7a:cc:88:90:6f:c3:6f:94:af:a5:05:e3:73:71:fb:2c:6f:95: 2b:a2:7c:31:21:70:b4:91:c2:f5:a4:12:f6:b0:6a:0d:23:c6: d2:d7:4e:86:dc:dc:15:5e:d8:8c:9f:ac:f2:50:43:fb:d6:55: 94:fb:bf:de:7a:c5:cd:c6:47:3d:41:45:39:a3:8e:aa:be:5b: 8b:05:da:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0qFBjHtH+XaARlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY5NTk3ZDAtYTg3MC00NmUyLWIwYTEtMDRhNzFkYWQw YjI1MB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk MmZhMzRhOGItNzQzZS00NmQwLTg4NjEtZDM3N2JlZDE4ODMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeLbKig0ufyqXa79XAkoaNgycU1QgS83GQoh Jz9tJFxUNWxyicFxIi+vLRfWFBEsidIcB4yGtWHfoVy66uE0MOqHwfNbSxhNB3cs ndlJoYLYjkQ4gtZHgoWEd4PgCqViIA1amzo8FN0RpoeJFyXjxmWg198gjL7kPpD8 lhn8ECiXbo5SxmXCSGAyAuTWLMKcmNmbwQKoie1iLnDzVAGtXyU/qqUE9E3dJPrh Q/jLso1vzwekd/UeNRkVSlGBVjFQf8GyhG5dPltuZZaDmayfBxMncEq8IGLLhctZ 4V+hqd7YLU+W1hK28xlje/P3s80Ep0rlpY9mJ/MgtBth7ov3FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNzlJQbxMrbNMq0XIcg/hasArMNkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80Njk1 OTdkMC1hODcwLTQ2ZTItYjBhMS0wNGE3MWRhZDBiMjUvZWNlNDdmYWQtYzE2Ny0z ZjM1LWI5N2UtZDcyN2Y4OTE5Nzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNDY5NTk3ZDAtYTg3MC00NmUyLWIw YTEtMDRhNzFkYWQwYjI1LzQ2OTU5N2QwLWE4NzAtNDZlMi1iMGExLTA0YTcxZGFk MGIyNS5jcmwwHwYDVR0jBBgwFoAU2SL0wRQKf5Mk9glTOVzXFf12erQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS80Njk1OTdkMC1hODcwLTQ2ZTItYjBhMS0wNGE3 MWRhZDBiMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGCYVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJt1qSycWxgUUtVUclUgglaL1wNGFR1MIBf78IyBPd82+52NhEYnRvGP HXxXepwdxg2QppUh66ecHTBjcotxc52u/MVGeUgqL2NPEfjLAyedsOarq6Ul3bxO W3TDqoqOgSnG4rwL9FXwdYbZz+mFsmtx37k+OP7SZ8jSNjmtlFUpwRFK9q49jq8a gVfE9my01Q03MS8mSqC+zBOR92I3DCllnyPrxQR2Lf5TIHDP5VZIsfKeAnrMiJBv w2+Ur6UF43Nx+yxvlSuifDEhcLSRwvWkEvawag0jxtLXTobc3BVe2IyfrPJQQ/vW VZT7v956xc3GRz1BRTmjjqq+W4sF2mA= -----END CERTIFICATE-----Generated at Mon Sep 28 10:29:57 2026 by rpki-client