$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38025ef0-be86-3680-8cd0-1475f16a4c50.roa File: 38025ef0-be86-3680-8cd0-1475f16a4c50.roa (raw, json) Hash identifier: kl5fPG1L74CLcLisr20e7ARAar7JpgRVi29+ML9t1Dw= Subject key identifier: 3C:2B:3C:6B:DC:B7:70:52:C9:4B:73:B3:8C:51:15:6F:0B:14:34:87 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F03A7A2B17B136CCB21EA2D00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38025ef0-be86-3680-8cd0-1475f16a4c50.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 7725 IP address blocks: 24.98.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:a2:b1:7b:13:6c:cb:21:ea:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=3072942a-c4c8-483f-b28a-22e37709afff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:1a:85:db:24:75:f6:32:03:67:ba:65:70:bd: 3b:84:58:f7:e0:95:fb:c5:bb:6d:b4:c9:a2:94:bc: af:5b:ea:6e:6e:b0:62:5a:71:05:c1:2d:59:ef:78: ce:b8:94:9b:24:4c:5a:4f:79:d2:91:23:49:62:20: b4:dd:3b:11:06:80:db:83:0f:45:63:82:72:4e:92: 16:b5:29:3c:ff:d8:4c:70:c3:f8:2c:97:97:e6:53: d7:b8:78:2f:b1:88:d6:6a:42:92:02:38:2b:77:f1: a6:94:40:c9:2a:d1:e1:c4:8c:36:cd:d9:7a:25:84: 66:b1:fe:0f:ea:fe:35:11:54:bc:27:fa:3d:65:72: f3:cc:5c:31:f1:3a:da:5d:64:a5:1a:f2:10:d6:0e: 21:77:5d:a0:9c:a9:a3:a3:84:7f:ce:5b:6a:ac:dc: 69:f9:e9:cb:ad:06:9f:9c:90:75:84:69:c1:a9:77: a2:ee:f1:72:b2:8c:52:4a:32:62:35:ea:50:88:15: f5:7d:6d:c5:44:39:f3:c7:a5:09:0e:3c:23:ed:27: 3f:8f:6a:28:06:cc:db:be:74:26:72:57:59:f4:61: 42:35:14:9d:03:5f:32:aa:b5:c4:5d:2f:dd:e9:d5: b5:99:ed:fd:30:d9:d7:ca:1c:2d:6e:e2:27:57:19: 01:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:2B:3C:6B:DC:B7:70:52:C9:4B:73:B3:8C:51:15:6F:0B:14:34:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38025ef0-be86-3680-8cd0-1475f16a4c50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.98.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:b3:ae:19:24:e2:cd:f9:d4:8c:96:45:1a:2e:cd:c1:ad:69: 3e:5f:fb:8d:fb:c5:84:94:01:56:a9:5c:a2:3a:24:70:52:ab: d2:87:b2:e7:c1:74:5b:77:75:8f:b2:34:f4:b4:26:36:d8:11: 4c:59:f5:02:ec:3a:04:27:c7:28:a9:df:2d:5d:70:09:13:89: 0b:1d:6d:4f:d9:29:42:22:74:a9:82:57:4e:48:6c:6d:6c:c4: bd:7b:9f:11:fb:a2:f5:94:94:5a:0b:22:a6:04:07:f3:3b:b8: 64:6b:f3:e6:5b:b9:2f:9c:1d:8d:72:ec:a7:28:52:bf:00:5c: 2e:84:2d:bf:5c:5a:bd:21:fa:4b:c3:09:e4:46:f8:4e:2b:1b: 6b:78:3d:78:3d:a0:41:56:c8:ba:ba:07:45:8b:fc:81:b8:62: 7e:a0:45:27:50:58:12:2b:65:c3:91:8e:54:a7:7a:2f:38:7a: 55:b8:3b:8b:b7:10:cd:d1:e9:76:0a:6c:d9:33:54:36:59:49: b7:cf:b4:92:a2:be:bf:01:27:53:08:80:5f:e0:de:64:7a:3b: e5:3e:63:88:f3:f4:a9:f3:ee:1e:db:2f:be:d4:1a:20:2a:24: e8:7f:d6:5e:e2:12:ac:79:50:74:43:ea:12:18:b0:0c:4a:e7: 11:2b:ab:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Dp6KxexNsyyHqLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk MzA3Mjk0MmEtYzRjOC00ODNmLWIyOGEtMjJlMzc3MDlhZmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghqF2yR19jIDZ7plcL07hFj34JX7xbtttMmi lLyvW+pubrBiWnEFwS1Z73jOuJSbJExaT3nSkSNJYiC03TsRBoDbgw9FY4JyTpIW tSk8/9hMcMP4LJeX5lPXuHgvsYjWakKSAjgrd/GmlEDJKtHhxIw2zdl6JYRmsf4P 6v41EVS8J/o9ZXLzzFwx8TraXWSlGvIQ1g4hd12gnKmjo4R/zltqrNxp+enLrQaf nJB1hGnBqXei7vFysoxSSjJiNepQiBX1fW3FRDnzx6UJDjwj7Sc/j2ooBszbvnQm cldZ9GFCNRSdA18yqrXEXS/d6dW1me39MNnXyhwtbuInVxkBawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwrPGvct3BSyUtzs4xRFW8LFDSHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzgwMjVlZjAtYmU4Ni0z NjgwLThjZDAtMTQ3NWYxNmE0YzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGGKIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAezrhkk4s351IyWRRouzcGtaT5f+437xYSUAVapXKI6JHBSq9KHsufB dFt3dY+yNPS0JjbYEUxZ9QLsOgQnxyip3y1dcAkTiQsdbU/ZKUIidKmCV05IbG1s xL17nxH7ovWUlFoLIqYEB/M7uGRr8+ZbuS+cHY1y7KcoUr8AXC6ELb9cWr0h+kvD CeRG+E4rG2t4PXg9oEFWyLq6B0WL/IG4Yn6gRSdQWBIrZcORjlSnei84elW4O4u3 EM3R6XYKbNkzVDZZSbfPtJKivr8BJ1MIgF/g3mR6O+U+Y4jz9Knz7h7bL77UGiAq JOh/1l7iEqx5UHRD6hIYsAxK5xErq/w= -----END CERTIFICATE-----Generated at Sat Sep 26 04:30:42 2026 by rpki-client