$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3737eb25-8da9-3aad-8d92-e0bfdcb7c6bd.roa File: 3737eb25-8da9-3aad-8d92-e0bfdcb7c6bd.roa (raw, json) Hash identifier: Ps7ujCC1n0pcvjcrqhTWhum9JH90gBGukHvEYQ6yFmg= Subject key identifier: 0C:C8:52:7F:A2:57:A0:5D:BE:06:DD:0B:6C:62:69:EB:3C:A7:00:0C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584FB3A9AC6E0499F6AB2AC31780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3737eb25-8da9-3aad-8d92-e0bfdcb7c6bd.roa Signing time: Mon 02 Nov 2026 02:00:13 +0000 ROA not before: Mon 02 Nov 2026 02:00:13 +0000 ROA not after: Sun 31 Jan 2027 02:00:13 +0000 asID: 33651 IP address blocks: 24.130.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b3:a9:ac:6e:04:99:f6:ab:2a:c3:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 2 02:00:13 2026 GMT Not After : Jan 31 02:00:13 2027 GMT Subject: CN=a21fe366-1900-4987-87a9-afa5ae9e0d89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:72:8c:ab:62:27:d3:1c:40:ab:61:82:e6:92: 58:de:24:b3:77:f0:76:5e:99:af:8f:e4:45:39:1c: db:6d:e8:ea:24:2e:82:55:32:88:26:13:b9:86:fb: 6b:3b:68:1a:4c:e7:c4:e1:8a:0b:ad:0b:dd:35:bb: 10:c3:20:be:38:71:05:1c:d3:f3:39:7e:94:c2:9e: 89:80:e9:24:dd:52:4a:ed:a4:e0:9f:76:fd:0c:c1: 53:a0:6f:f5:90:d4:a7:17:82:f9:09:ea:3f:d9:73: 54:cf:1c:6a:59:22:d8:df:3d:fe:e3:ca:cb:00:eb: 55:24:b3:b0:ee:90:a3:3e:1e:07:53:06:c8:06:a7: 09:e4:1c:8f:1e:07:38:2b:10:dc:f3:b1:fa:1d:bf: 39:49:66:e1:97:ee:e2:9e:79:b6:f6:98:74:19:af: f4:58:e1:83:43:89:0e:7e:e6:b3:e1:ef:48:72:94: 51:e7:ea:2a:cc:ca:51:42:32:9b:4d:db:aa:b1:01: fa:5c:84:59:40:fa:8e:cf:52:30:04:e3:02:32:f7: fe:a5:30:09:07:74:ca:d1:87:57:a6:d1:c5:1f:7c: e7:3b:61:b6:9e:c9:ec:64:9f:f6:6d:7b:d7:e1:22: 8d:e9:4a:6d:40:1e:cb:d6:96:36:a2:8e:d3:e0:f7: a3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C8:52:7F:A2:57:A0:5D:BE:06:DD:0B:6C:62:69:EB:3C:A7:00:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3737eb25-8da9-3aad-8d92-e0bfdcb7c6bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.130.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:f0:68:07:c0:4e:bd:56:a5:eb:c5:45:c5:17:9b:c4:52:ef: 97:75:11:7c:a9:08:9e:09:5d:6b:b0:d3:9d:22:b0:1c:fe:58: 3c:de:bb:be:b2:68:93:76:b8:a0:fe:02:53:8d:26:b5:3d:19: 69:7a:6f:c4:d1:ce:61:ad:49:ca:e7:a5:5a:56:6c:e4:83:bf: b2:b1:15:0d:4b:af:48:97:60:a0:69:58:12:d7:9f:0e:80:b8: fb:2c:6e:e1:b6:ff:d3:e6:16:93:67:16:5d:1a:4e:b9:47:a1: ee:f2:9d:80:c0:aa:d0:a9:da:7f:99:46:37:9e:d0:49:2d:47: 1e:cc:9b:6b:88:83:25:bd:6e:8d:ce:ef:f8:e0:68:56:1a:42: 79:90:ed:a6:d5:c7:42:fd:70:ef:ce:7c:be:e4:b1:85:6c:ed: c3:72:49:f6:34:75:b6:e5:2e:74:0b:f2:5f:af:6c:ea:48:d8: 2a:50:24:f4:e7:f8:d4:19:e0:93:ac:0d:5a:bb:22:be:95:a0: e2:f6:0c:c7:bc:5f:be:c8:54:76:46:5e:d0:a0:5b:ee:e8:19: a7:09:08:fb:66:c1:2e:31:96:b6:15:d3:ba:77:56:6b:ef:2a: 8e:4f:eb:fe:d6:43:3b:1e:da:4b:ba:77:fa:91:67:8e:52:91: 5c:4a:2a:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+zqaxuBJn2qyrDF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTEwMjAyMDAxM1oXDTI3MDEzMTAyMDAxM1owLzEtMCsGA1UEAxMk YTIxZmUzNjYtMTkwMC00OTg3LTg3YTktYWZhNWFlOWUwZDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHKMq2In0xxAq2GC5pJY3iSzd/B2Xpmvj+RF ORzbbejqJC6CVTKIJhO5hvtrO2gaTOfE4YoLrQvdNbsQwyC+OHEFHNPzOX6Uwp6J gOkk3VJK7aTgn3b9DMFToG/1kNSnF4L5Ceo/2XNUzxxqWSLY3z3+48rLAOtVJLOw 7pCjPh4HUwbIBqcJ5ByPHgc4KxDc87H6Hb85SWbhl+7innm29ph0Ga/0WOGDQ4kO fuaz4e9IcpRR5+oqzMpRQjKbTduqsQH6XIRZQPqOz1IwBOMCMvf+pTAJB3TK0YdX ptHFH3znO2G2nsnsZJ/2bXvX4SKN6UptQB7L1pY2oo7T4Pej6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzIUn+iV6BdvgbdC2xiaes8pwAMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzczN2ViMjUtOGRhOS0z YWFkLThkOTItZTBiZmRjYjdjNmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGIKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7waAfATr1WpevFRcUXm8RS75d1EXypCJ4JXWuw050isBz+WDzeu76y aJN2uKD+AlONJrU9GWl6b8TRzmGtScrnpVpWbOSDv7KxFQ1Lr0iXYKBpWBLXnw6A uPssbuG2/9PmFpNnFl0aTrlHoe7ynYDAqtCp2n+ZRjee0EktRx7Mm2uIgyW9bo3O 7/jgaFYaQnmQ7abVx0L9cO/OfL7ksYVs7cNySfY0dbblLnQL8l+vbOpI2CpQJPTn +NQZ4JOsDVq7Ir6VoOL2DMe8X77IVHZGXtCgW+7oGacJCPtmwS4xlrYV07p3Vmvv Ko5P6/7WQzse2ku6d/qRZ45SkVxKKm4= -----END CERTIFICATE-----Generated at Sun Nov 15 15:23:40 2026 by rpki-client