$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8fa9f72b-4593-3fc8-a749-782e90e2dc87.roa File: 8fa9f72b-4593-3fc8-a749-782e90e2dc87.roa (raw, json) Hash identifier: jtr9UMPi8yYzt1gM3dMY2nP2i94oZhjJyrTqK8IPJE0= Subject key identifier: 78:EF:AE:22:F5:8E:6D:9B:2A:FE:9F:AA:92:98:CF:A6:13:86:C0:1F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F03A7F82A42969AAE86FE5B78 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8fa9f72b-4593-3fc8-a749-782e90e2dc87.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 7725 IP address blocks: 24.125.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:f8:2a:42:96:9a:ae:86:fe:5b:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=fcf114a1-292a-4cfd-8701-708b360a7e99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:7d:67:0a:5d:ef:71:39:9b:85:c8:e3:5b:e1: d6:43:1b:91:8f:f3:24:87:3d:04:25:d5:98:ac:f6: 99:0f:c6:e1:c9:0d:1f:fb:d1:a4:ab:b2:34:cf:bb: af:82:91:ae:a3:17:91:4c:38:c1:ea:0b:a1:19:57: 7d:9b:46:bf:b7:63:cf:72:ad:cf:f6:3a:dd:65:ab: ea:09:1b:f0:a0:90:b5:3f:19:b2:7b:ac:7f:f2:41: b2:f1:8f:fa:0f:11:96:0d:c3:31:6b:c4:d9:a2:bf: 6d:1c:26:55:4a:23:94:4d:9c:18:8a:ef:14:28:6f: ea:94:f2:62:86:8c:33:c2:15:94:da:4c:7e:86:45: 0d:f9:75:8d:46:07:e7:82:60:44:c8:62:a6:a3:2f: 6b:02:6c:12:df:73:ac:e9:2f:3d:77:a3:15:da:2c: 86:d6:95:1e:7b:2f:5c:a1:33:5f:31:db:e0:ae:25: 18:1e:d8:ad:08:8c:e9:c7:c9:46:f4:ec:5c:16:99: d9:84:a2:c0:73:c1:2d:d8:99:a5:61:e6:6f:a4:f2: 88:dc:57:38:61:5c:19:3f:ca:ea:dc:87:8c:2f:96: d8:93:b0:13:ae:93:4c:2c:87:98:65:e2:14:96:76: c4:02:fb:a7:c0:9e:e2:03:bc:20:ea:72:96:e0:fe: 78:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:EF:AE:22:F5:8E:6D:9B:2A:FE:9F:AA:92:98:CF:A6:13:86:C0:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8fa9f72b-4593-3fc8-a749-782e90e2dc87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.125.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:f8:e8:55:b1:7d:2f:fb:bf:c6:02:c1:d3:3b:3d:60:b9:7b: 34:42:81:b8:91:b0:d9:56:85:82:fc:86:14:95:27:d9:19:42: 95:7b:b5:5c:d4:bc:ff:65:c6:5e:bd:9e:13:52:1b:a3:4f:44: 7e:d4:ac:07:7c:cb:77:a5:cb:51:3f:e1:bb:8a:84:df:35:89: 6c:63:67:2c:44:07:2f:2d:6a:4a:f2:53:82:d0:86:46:61:4a: 59:35:8f:3d:fe:0f:40:f6:bd:75:6e:6d:97:3e:38:6a:83:e1: e8:2e:07:3b:39:8f:e8:60:4f:41:ea:fc:71:31:d6:d6:93:8b: b8:dc:d4:d1:2f:10:38:3d:2a:d4:d3:3a:ac:61:99:45:31:60: 7e:5f:fe:4c:c8:9f:41:54:9e:c3:1a:be:d5:b8:74:57:77:59: 33:41:2c:d1:94:84:2a:a0:ce:1f:d3:26:ec:d2:9c:45:42:10: 75:4e:1d:48:5c:f1:d2:48:b2:40:97:5f:b3:7d:f5:9f:aa:1f: 07:e2:2e:6f:e2:fa:26:fd:1d:e5:01:50:4e:ef:5d:cc:6a:40: 03:88:74:de:a4:0d:a7:3b:64:3d:81:d8:ca:25:ba:76:a1:e8: d5:26:8e:99:fc:87:70:02:8c:f0:6a:3f:44:76:bc:84:c9:cd: 35:6d:d4:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Dp/gqQpaarob+W3gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk ZmNmMTE0YTEtMjkyYS00Y2ZkLTg3MDEtNzA4YjM2MGE3ZTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhn1nCl3vcTmbhcjjW+HWQxuRj/Mkhz0EJdWY rPaZD8bhyQ0f+9Gkq7I0z7uvgpGuoxeRTDjB6guhGVd9m0a/t2PPcq3P9jrdZavq CRvwoJC1Pxmye6x/8kGy8Y/6DxGWDcMxa8TZor9tHCZVSiOUTZwYiu8UKG/qlPJi howzwhWU2kx+hkUN+XWNRgfngmBEyGKmoy9rAmwS33Os6S89d6MV2iyG1pUeey9c oTNfMdvgriUYHtitCIzpx8lG9OxcFpnZhKLAc8Et2JmlYeZvpPKI3Fc4YVwZP8rq 3IeML5bYk7ATrpNMLIeYZeIUlnbEAvunwJ7iA7wg6nKW4P54+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHjvriL1jm2bKv6fqpKYz6YThsAfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGZhOWY3MmItNDU5My0z ZmM4LWE3NDktNzgyZTkwZTJkYzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGH38MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANH46FWxfS/7v8YCwdM7PWC5ezRCgbiRsNlWhYL8hhSVJ9kZQpV7tVzU vP9lxl69nhNSG6NPRH7UrAd8y3ely1E/4buKhN81iWxjZyxEBy8takryU4LQhkZh Slk1jz3+D0D2vXVubZc+OGqD4eguBzs5j+hgT0Hq/HEx1taTi7jc1NEvEDg9KtTT OqxhmUUxYH5f/kzIn0FUnsMavtW4dFd3WTNBLNGUhCqgzh/TJuzSnEVCEHVOHUhc 8dJIskCXX7N99Z+qHwfiLm/i+ib9HeUBUE7vXcxqQAOIdN6kDac7ZD2B2Molunah 6NUmjpn8h3ACjPBqP0R2vITJzTVt1L4= -----END CERTIFICATE-----Generated at Wed Sep 23 07:53:59 2026 by rpki-client