$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a433dbb-788d-3603-95e2-cf744fc2c750.roa File: 8a433dbb-788d-3603-95e2-cf744fc2c750.roa (raw, json) Hash identifier: suep9nzVS0LqrN3VDUIEpp7SWogy7LV9CUY+ARYuBWY= Subject key identifier: D4:3C:29:5E:C6:11:A4:60:68:21:F5:E2:B7:7C:8C:97:D9:0B:3F:DD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F03A7FCC44B06C51933AFD380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a433dbb-788d-3603-95e2-cf744fc2c750.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 7725 IP address blocks: 24.98.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:fc:c4:4b:06:c5:19:33:af:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=80343df1-92b3-48a3-a759-fa7fb530c785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a1:55:7f:76:af:14:e2:4f:16:63:00:06:72: db:7e:92:cd:dc:b2:31:2b:c6:b2:7f:e4:cc:f1:f9: 1d:64:33:d7:a3:43:09:0d:77:1d:e6:1d:68:ff:be: 8c:08:05:d3:84:01:9c:ad:42:ec:62:06:98:e0:a8: cb:c7:fb:28:8d:d6:9d:c5:4b:84:c4:3e:b3:58:2b: 5f:5f:53:a3:63:59:29:b3:e5:b4:bf:b0:fc:58:85: ba:b4:fc:0e:69:46:d1:a0:21:8b:f8:4b:2b:68:8c: 33:d8:49:62:cd:c6:43:45:c3:81:b4:29:0b:66:de: e0:3f:69:e3:1e:5c:e9:57:b8:b4:65:8f:60:fe:79: 21:22:cb:23:dd:a5:39:0a:7a:81:39:71:b0:05:c3: e1:9a:56:e9:93:ee:33:7d:1c:86:40:8c:b3:f9:2f: 81:92:5b:a5:f4:55:8e:a2:84:68:bb:a1:1d:a2:a9: fd:56:cd:ea:d0:5e:06:e4:95:42:d4:9a:89:96:c5: a7:10:c2:13:46:c2:70:26:12:d0:32:9b:a4:56:b0: 2c:82:2a:d4:33:c9:44:36:d8:10:1e:55:da:ee:42: a8:aa:af:1b:78:e0:c7:6f:78:a5:0c:70:50:eb:ed: 93:a4:d4:3a:3c:30:87:d0:74:f0:1f:ae:4d:d6:ea: fe:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:3C:29:5E:C6:11:A4:60:68:21:F5:E2:B7:7C:8C:97:D9:0B:3F:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a433dbb-788d-3603-95e2-cf744fc2c750.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.98.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:fa:a4:ce:0f:5d:a9:6a:8a:d1:15:ca:39:b0:03:74:8a:3d: 6f:64:9a:ce:9b:e7:2b:5f:48:d8:d1:f0:16:46:ad:db:91:c6: 96:49:67:12:9f:8d:3d:ea:d6:1e:6f:57:36:3c:b9:97:e8:f9: 6f:cd:2c:5f:6a:f0:85:c4:9b:75:51:15:69:5f:fd:56:8a:5a: 98:7a:38:3e:4f:45:ed:77:c6:e2:38:79:6b:48:9c:67:cf:d0: a0:3e:ed:8e:4c:76:7a:45:67:38:be:7a:59:99:76:17:dc:bd: 23:9a:83:f3:a9:e6:25:e3:e2:aa:fe:c5:b0:57:89:7e:ef:05: ef:16:33:40:ac:aa:b4:0c:fe:bf:cd:9b:07:d0:ed:eb:0b:00: 64:f0:4a:66:c4:d8:98:ed:d9:64:dd:23:60:05:88:09:0a:c7: 99:bc:9e:6e:47:9d:ea:3d:4e:ca:ab:ec:e6:87:c3:46:a4:88: 51:a2:b0:74:3c:09:38:54:98:a6:6d:9b:2a:53:58:0a:58:85: 86:f9:2a:b0:f7:86:23:7b:06:70:03:b9:a4:5e:11:b7:a8:51: bd:79:ab:f6:83:59:f2:9d:70:48:5b:a9:f5:a0:ec:c3:cd:50: ed:d6:80:bc:72:74:8d:e9:4e:ac:24:73:ea:4d:cd:8c:1e:89: 63:0f:0f:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Dp/zESwbFGTOv04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk ODAzNDNkZjEtOTJiMy00OGEzLWE3NTktZmE3ZmI1MzBjNzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6FVf3avFOJPFmMABnLbfpLN3LIxK8ayf+TM 8fkdZDPXo0MJDXcd5h1o/76MCAXThAGcrULsYgaY4KjLx/sojdadxUuExD6zWCtf X1OjY1kps+W0v7D8WIW6tPwOaUbRoCGL+EsraIwz2ElizcZDRcOBtCkLZt7gP2nj HlzpV7i0ZY9g/nkhIssj3aU5CnqBOXGwBcPhmlbpk+4zfRyGQIyz+S+Bklul9FWO ooRou6Edoqn9Vs3q0F4G5JVC1JqJlsWnEMITRsJwJhLQMpukVrAsgirUM8lENtgQ HlXa7kKoqq8beODHb3ilDHBQ6+2TpNQ6PDCH0HTwH65N1ur+PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNQ8KV7GEaRgaCH14rd8jJfZCz/dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGE0MzNkYmItNzg4ZC0z NjAzLTk1ZTItY2Y3NDRmYzJjNzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGGLQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADX6pM4PXalqitEVyjmwA3SKPW9kms6b5ytfSNjR8BZGrduRxpZJZxKf jT3q1h5vVzY8uZfo+W/NLF9q8IXEm3VRFWlf/VaKWph6OD5PRe13xuI4eWtInGfP 0KA+7Y5MdnpFZzi+elmZdhfcvSOag/Op5iXj4qr+xbBXiX7vBe8WM0CsqrQM/r/N mwfQ7esLAGTwSmbE2Jjt2WTdI2AFiAkKx5m8nm5Hneo9Tsqr7OaHw0akiFGisHQ8 CThUmKZtmypTWApYhYb5KrD3hiN7BnADuaReEbeoUb15q/aDWfKdcEhbqfWg7MPN UO3WgLxydI3pTqwkc+pNzYweiWMPDy8= -----END CERTIFICATE-----Generated at Thu Sep 24 15:14:00 2026 by rpki-client