$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a3d5096-0b2a-3ef1-828a-7c5d38981645.roa File: 4a3d5096-0b2a-3ef1-828a-7c5d38981645.roa (raw, json) Hash identifier: 5OZaWdyfveyI50uxwfSfkyWqN4Xzo7Qj7VlKIc+5kMo= Subject key identifier: DE:31:89:6C:50:F7:6C:E1:60:6B:A0:95:10:C6:06:86:9A:77:3C:58 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F03A7FE533E9BC419E713CFC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a3d5096-0b2a-3ef1-828a-7c5d38981645.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 7725 IP address blocks: 24.99.110.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:fe:53:3e:9b:c4:19:e7:13:cf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=fb9090b6-267a-4fd1-90d6-f800730b3a69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:61:84:e8:f7:72:70:1a:48:59:d8:a5:64:f0: 64:04:fe:e8:21:b5:a0:1f:bf:55:a7:eb:e1:28:14: 79:b8:21:0f:fb:89:d7:44:be:83:9b:88:6c:ff:0c: fb:73:a3:f4:1c:42:1a:e9:9a:88:bb:f6:92:86:e2: 2d:e1:24:72:30:69:0c:f4:7e:91:0c:1c:ed:f7:23: ce:3e:67:f9:78:4c:16:96:84:f2:cc:6e:31:55:ab: 25:ca:af:96:26:7f:61:36:ed:ce:5c:8f:0c:d2:04: d8:55:cb:46:d2:66:0c:c2:0c:e7:00:5b:ed:c3:fd: 5e:fa:b4:93:f6:e8:2d:b3:08:e3:e1:1d:2a:2c:40: bf:18:34:c5:37:3a:c7:09:84:70:8e:8c:0e:b8:03: 51:dd:6e:7c:e3:32:00:70:88:c0:87:15:02:e8:13: 1a:cc:92:b4:57:08:5c:ba:4f:1e:1d:01:b2:60:26: d5:82:6e:03:7d:61:8d:3b:94:5a:0f:a6:22:14:fe: 4e:93:08:fc:27:97:33:4f:88:df:db:23:3a:0f:da: 7f:b3:66:10:44:60:e4:5a:59:af:10:b6:0c:11:f5: cf:04:ce:75:da:8b:b4:a1:a6:fe:85:0f:57:71:20: 44:85:ce:74:d4:bc:ff:a7:da:13:f3:71:42:0b:7c: 32:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:31:89:6C:50:F7:6C:E1:60:6B:A0:95:10:C6:06:86:9A:77:3C:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a3d5096-0b2a-3ef1-828a-7c5d38981645.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.99.110.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:01:f5:f0:27:7b:69:3c:8c:4b:ad:6b:fe:a9:6a:19:e9:f1: e1:ba:60:b5:40:cb:9f:a9:6f:52:55:c0:31:2d:52:9a:0c:0c: 44:fc:c9:2e:49:bf:81:65:cd:3e:6f:d5:e8:73:24:b1:6b:b8: c2:26:bf:89:f9:1e:27:62:2d:ca:c7:6e:dc:3e:ea:0c:d9:11: ed:a6:b3:b4:92:14:df:a1:cf:68:d2:05:f4:a7:32:da:50:36: b9:9b:da:9e:cf:9c:9f:1e:fc:c6:62:7b:04:1f:f6:d9:68:84: 18:de:56:27:00:b1:96:80:c5:dc:52:b1:4c:ea:45:68:36:d9: 02:34:2f:01:6c:ce:13:06:a5:83:0f:21:de:58:ea:c9:4c:f1: 0a:f2:74:ff:f3:fe:f9:09:0e:9c:91:4c:4a:c6:f9:34:57:d5: 0c:d2:20:0e:3a:9d:11:6b:43:81:a9:1f:d7:a6:f1:44:09:0b: 92:ad:d1:37:8e:26:5e:9a:c3:c6:a1:ee:43:a4:5c:49:47:1c: 9e:05:31:89:fd:fe:18:48:59:79:ca:3e:8e:d9:e6:91:9c:02: 0e:08:9c:21:86:01:97:d5:b4:47:0e:c1:df:f8:be:48:94:25: 0f:1e:36:5a:c7:7f:d4:4e:35:3c:1f:98:4f:8d:a1:41:d6:c2: ff:7f:00:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Dp/5TPpvEGecTz8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk ZmI5MDkwYjYtMjY3YS00ZmQxLTkwZDYtZjgwMDczMGIzYTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWGE6PdycBpIWdilZPBkBP7oIbWgH79Vp+vh KBR5uCEP+4nXRL6Dm4hs/wz7c6P0HEIa6ZqIu/aShuIt4SRyMGkM9H6RDBzt9yPO Pmf5eEwWloTyzG4xVaslyq+WJn9hNu3OXI8M0gTYVctG0mYMwgznAFvtw/1e+rST 9ugtswjj4R0qLEC/GDTFNzrHCYRwjowOuANR3W584zIAcIjAhxUC6BMazJK0Vwhc uk8eHQGyYCbVgm4DfWGNO5RaD6YiFP5Okwj8J5czT4jf2yM6D9p/s2YQRGDkWlmv ELYMEfXPBM512ou0oab+hQ9XcSBEhc501Lz/p9oT83FCC3wySQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN4xiWxQ92zhYGuglRDGBoaadzxYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGEzZDUwOTYtMGIyYS0z ZWYxLTgyOGEtN2M1ZDM4OTgxNjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGGNuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALIB9fAne2k8jEuta/6pahnp8eG6YLVAy5+pb1JVwDEtUpoMDET8yS5J v4FlzT5v1ehzJLFruMImv4n5HidiLcrHbtw+6gzZEe2ms7SSFN+hz2jSBfSnMtpQ Nrmb2p7PnJ8e/MZiewQf9tlohBjeVicAsZaAxdxSsUzqRWg22QI0LwFszhMGpYMP Id5Y6slM8QrydP/z/vkJDpyRTErG+TRX1QzSIA46nRFrQ4GpH9em8UQJC5Kt0TeO Jl6aw8ah7kOkXElHHJ4FMYn9/hhIWXnKPo7Z5pGcAg4InCGGAZfVtEcOwd/4vkiU JQ8eNlrHf9RONTwfmE+NoUHWwv9/ACQ= -----END CERTIFICATE-----Generated at Wed Sep 23 16:46:23 2026 by rpki-client