$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/284ce500-1b73-3333-af88-da58c48554b8.roa File: 284ce500-1b73-3333-af88-da58c48554b8.roa (raw, json) Hash identifier: /vmnACAs6zE7iolaC9w5fOSS+5ehDucryp9TwKDd+TE= Subject key identifier: D7:F8:C0:0E:8C:52:16:D2:37:29:71:4C:E8:CF:7D:38:8B:CB:31:52 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F49794DDE8D08C052B894A280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/284ce500-1b73-3333-af88-da58c48554b8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 13367 IP address blocks: 24.245.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:79:4d:de:8d:08:c0:52:b8:94:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7a66fe74-42c5-499c-922d-375f17efaaae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:d5:6d:65:3d:85:20:9e:83:a1:f2:f3:d4:24: ed:9e:dd:29:e8:be:3b:a3:e9:58:cd:cc:86:8c:3a: de:93:dd:4a:71:43:47:81:da:d1:51:5b:85:28:43: 32:e5:a4:08:2a:f0:a4:2c:df:57:95:b4:47:02:bd: 5e:ae:80:e8:f3:e1:97:2f:d6:6f:da:6b:15:a7:4f: 8a:0d:cf:4a:7d:c9:31:75:69:03:cf:02:b9:d7:de: ea:0f:ae:67:0e:ac:81:19:b0:b4:f0:d5:b5:b3:b6: d4:09:05:45:25:f9:1b:21:28:ba:85:6b:80:26:1f: 11:39:58:d6:a4:02:e0:61:9d:b0:51:ca:fa:e3:73: b5:ef:9e:19:af:26:b1:96:c0:ab:80:76:10:71:12: a1:9b:ab:50:1f:30:0e:93:b5:04:bd:a3:2e:0b:bf: 8e:36:6e:7c:d8:ba:86:b9:80:d5:32:86:d9:b0:1a: 7f:d8:0c:dd:bb:ba:f2:e2:54:53:2a:3f:b0:b0:df: 47:74:8a:04:f0:11:00:5a:5c:6f:99:4e:11:a6:94: b4:42:9d:a5:35:43:b3:74:12:f2:12:aa:d0:de:38: 9c:01:f0:47:1d:41:e4:33:be:6b:9e:74:7e:f2:2a: ca:1e:b0:d5:af:37:5b:bf:b5:9e:13:02:bc:98:7d: da:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F8:C0:0E:8C:52:16:D2:37:29:71:4C:E8:CF:7D:38:8B:CB:31:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/284ce500-1b73-3333-af88-da58c48554b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.245.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption da:2c:0f:78:02:44:56:b4:09:6e:49:e6:02:3c:ad:ca:23:91: 08:8d:29:35:cb:c8:da:86:1c:87:76:16:ef:3d:df:34:72:af: e7:c4:87:e6:fa:bc:f9:12:ba:7e:66:a2:9e:98:20:03:96:58: 83:1e:03:9e:ed:ab:dc:60:9f:dd:50:8a:ea:77:e4:d2:ab:a4: 77:37:f8:e0:cf:dd:63:39:45:ae:27:60:c7:f8:94:81:67:de: 95:5c:d9:e8:8b:c8:94:25:2e:0f:99:f9:30:e3:57:07:9d:70: e6:9d:4d:76:09:2c:b4:ad:a5:98:74:fe:fe:71:b8:0a:5a:99: 82:ab:15:bb:77:75:19:c3:05:b7:6e:86:b4:fd:e4:ca:17:47: 01:09:e1:a4:36:38:70:7f:18:21:3b:ef:66:63:44:ff:b9:54: fb:ba:25:89:60:07:5e:7a:72:3a:34:ae:6f:1a:93:ed:3d:64: fe:2f:21:f4:ec:51:65:e1:2c:37:55:db:46:ef:a0:0f:cc:f5: e4:9a:17:0f:0d:78:1c:68:11:ff:71:70:58:96:0d:23:2a:fe: ca:df:3d:aa:f1:36:13:a0:c8:81:7d:97:6c:87:06:ed:a1:8d: 24:7f:ec:b8:b5:64:f6:a7:f7:8c:6b:79:3e:41:48:06:8b:4d: 26:73:20:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JeU3ejQjAUriUooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2E2NmZlNzQtNDJjNS00OTljLTkyMmQtMzc1ZjE3ZWZhYWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8tVtZT2FIJ6DofLz1CTtnt0p6L47o+lYzcyG jDrek91KcUNHgdrRUVuFKEMy5aQIKvCkLN9XlbRHAr1eroDo8+GXL9Zv2msVp0+K Dc9KfckxdWkDzwK5197qD65nDqyBGbC08NW1s7bUCQVFJfkbISi6hWuAJh8ROVjW pALgYZ2wUcr643O1754ZryaxlsCrgHYQcRKhm6tQHzAOk7UEvaMuC7+ONm582LqG uYDVMobZsBp/2Azdu7ry4lRTKj+wsN9HdIoE8BEAWlxvmU4RppS0Qp2lNUOzdBLy EqrQ3jicAfBHHUHkM75rnnR+8irKHrDVrzdbv7WeEwK8mH3axwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNf4wA6MUhbSNylxTOjPfTiLyzFSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjg0Y2U1MDAtMWI3My0z MzMzLWFmODgtZGE1OGM0ODU1NGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGPUUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANosD3gCRFa0CW5J5gI8rcojkQiNKTXLyNqGHId2Fu893zRyr+fEh+b6 vPkSun5mop6YIAOWWIMeA57tq9xgn91Qiup35NKrpHc3+ODP3WM5Ra4nYMf4lIFn 3pVc2eiLyJQlLg+Z+TDjVwedcOadTXYJLLStpZh0/v5xuApamYKrFbt3dRnDBbdu hrT95MoXRwEJ4aQ2OHB/GCE772ZjRP+5VPu6JYlgB156cjo0rm8ak+09ZP4vIfTs UWXhLDdV20bvoA/M9eSaFw8NeBxoEf9xcFiWDSMq/srfParxNhOgyIF9l2yHBu2h jSR/7Li1ZPan94xreT5BSAaLTSZzIEk= -----END CERTIFICATE-----Generated at Mon Sep 28 11:09:56 2026 by rpki-client