$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/212f694a-1f69-3613-b565-b5ac3f1a7389.roa File: 212f694a-1f69-3613-b565-b5ac3f1a7389.roa (raw, json) Hash identifier: iDoymgp0hAskzexxLzQ2595yi+cPv6W6Y3CfXxAP8WI= Subject key identifier: 14:20:05:62:51:45:56:E8:F4:FF:B4:9E:DD:F8:28:5F:C5:FF:6D:A4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F4978B13D7F0DD5587AB9FA00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/212f694a-1f69-3613-b565-b5ac3f1a7389.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33660 IP address blocks: 24.10.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:78:b1:3d:7f:0d:d5:58:7a:b9:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6ed2a47a-fb8b-44c9-a180-5feb0dc536eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d2:9c:c5:a0:2f:c0:84:36:03:a6:38:d0:7e: d5:e4:9a:a7:0f:dc:32:2c:5c:9a:11:60:49:63:68: 39:4f:a3:6a:48:19:a0:0f:f1:56:60:92:47:5a:7f: 59:06:c3:aa:35:b1:b9:b4:85:61:7f:e9:83:93:bd: 3e:01:03:85:a2:f4:e4:76:db:d3:4b:59:0d:c3:d3: 3c:9e:a6:95:a4:d1:e0:2b:44:85:ed:d9:20:c4:6d: a2:e5:e5:b9:f7:ca:6d:21:85:01:00:6c:b9:f3:ee: 46:98:ef:9d:c1:6d:c1:f9:bd:e6:f6:44:65:75:2c: 0a:ce:98:7a:2a:31:cc:b7:9d:46:7c:4d:a7:37:27: 66:c9:8f:da:3b:f2:76:ac:e0:5e:af:e7:48:75:e2: 47:34:bc:a2:82:63:b7:d9:69:2f:60:f2:bd:eb:22: 08:59:df:48:95:0a:e8:87:7a:af:16:8f:93:80:74: ad:bf:69:ae:4d:63:ae:8b:58:b3:13:84:e9:d3:7b: 92:fc:f0:2d:06:0f:78:bb:fa:b8:49:a8:5b:bb:da: fb:54:2b:92:ca:4d:37:d4:b8:aa:74:e3:16:10:35: 68:90:72:10:fc:66:6a:04:d1:13:36:6d:56:23:bb: 4f:49:a7:08:85:6d:b8:40:b0:24:85:a4:23:c5:5d: f2:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:20:05:62:51:45:56:E8:F4:FF:B4:9E:DD:F8:28:5F:C5:FF:6D:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/212f694a-1f69-3613-b565-b5ac3f1a7389.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.10.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:a4:e4:95:fa:cd:cd:27:5c:fc:65:c5:0b:11:fe:2d:9a:43: f8:f3:aa:46:88:99:3e:d2:46:53:7d:3d:ad:f0:c9:79:c1:4c: 10:bb:4b:fc:87:1b:83:47:b8:fe:60:0f:f4:0f:c3:05:38:2e: e1:70:16:3b:32:ce:59:69:21:ae:66:e5:d4:a7:03:af:fc:3b: 0b:3d:5a:51:7e:c6:da:33:6f:c4:5d:13:40:e6:27:01:65:20: af:e8:50:fa:b2:23:7d:9f:0c:12:38:d2:18:a9:ab:65:70:d3: c5:45:2f:49:fc:b4:9b:bc:78:70:24:1e:ae:e2:2a:df:f7:0f: d4:a3:c1:95:c0:71:98:84:7a:aa:fd:81:10:6d:f9:f8:64:1c: 1f:dc:af:4b:f8:cd:6a:e1:a4:22:1d:a9:30:3c:e1:14:46:99: b6:c9:8e:28:db:84:15:02:76:4b:49:c3:a1:ff:77:5c:3b:0d: 44:cd:25:53:8b:16:d2:67:e8:fd:5e:c4:42:aa:6b:ab:72:c6: b2:86:4e:0f:4b:30:a7:89:43:36:1d:10:30:c9:49:6b:d6:93: b7:b6:93:fe:0e:d5:13:12:e3:84:45:bc:83:50:d8:73:f0:b5: 89:33:23:e2:d3:6d:ff:58:b9:c3:11:81:d8:b0:18:c8:ba:4b: b9:79:d2:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JeLE9fw3VWHq5+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmVkMmE0N2EtZmI4Yi00NGM5LWExODAtNWZlYjBkYzUzNmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9KcxaAvwIQ2A6Y40H7V5JqnD9wyLFyaEWBJ Y2g5T6NqSBmgD/FWYJJHWn9ZBsOqNbG5tIVhf+mDk70+AQOFovTkdtvTS1kNw9M8 nqaVpNHgK0SF7dkgxG2i5eW598ptIYUBAGy58+5GmO+dwW3B+b3m9kRldSwKzph6 KjHMt51GfE2nNydmyY/aO/J2rOBer+dIdeJHNLyigmO32WkvYPK96yIIWd9IlQro h3qvFo+TgHStv2muTWOui1izE4Tp03uS/PAtBg94u/q4Sahbu9r7VCuSyk031Liq dOMWEDVokHIQ/GZqBNETNm1WI7tPSacIhW24QLAkhaQjxV3yZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQgBWJRRVbo9P+0nt34KF/F/22kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjEyZjY5NGEtMWY2OS0z NjEzLWI1NjUtYjVhYzNmMWE3Mzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHGAqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyk5JX6zc0nXPxlxQsR/i2aQ/jzqkaImT7SRlN9Pa3wyXnBTBC7S/yH G4NHuP5gD/QPwwU4LuFwFjsyzllpIa5m5dSnA6/8Ows9WlF+xtozb8RdE0DmJwFl IK/oUPqyI32fDBI40hipq2Vw08VFL0n8tJu8eHAkHq7iKt/3D9SjwZXAcZiEeqr9 gRBt+fhkHB/cr0v4zWrhpCIdqTA84RRGmbbJjijbhBUCdktJw6H/d1w7DUTNJVOL FtJn6P1exEKqa6tyxrKGTg9LMKeJQzYdEDDJSWvWk7e2k/4O1RMS44RFvINQ2HPw tYkzI+LTbf9YucMRgdiwGMi6S7l50vY= -----END CERTIFICATE-----Generated at Sun Sep 27 04:52:54 2026 by rpki-client