$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a082a566-1d9f-3b72-9db1-a2f5e5d1c9fa.roa File: a082a566-1d9f-3b72-9db1-a2f5e5d1c9fa.roa (raw, json) Hash identifier: Od1ubcuODyxOciQh+QEnIluDa8LnhyyBqWVq4fyt0Zg= Subject key identifier: D9:F3:5C:0C:E8:53:79:C6:20:A1:2B:3E:7E:90:73:E5:98:0A:73:5F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119D1E74EE481B8C3D99C680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a082a566-1d9f-3b72-9db1-a2f5e5d1c9fa.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33660 IP address blocks: 24.10.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:1e:74:ee:48:1b:8c:3d:99:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=93f4f845-39ce-4016-81b7-0e35eb3923dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:07:42:71:e2:36:b9:2a:b0:6c:b4:20:08:29: 05:20:4c:c8:c5:c0:79:1e:b7:52:a9:c6:c5:cd:e5: 2d:3d:84:b8:0a:81:97:a1:da:c7:95:54:60:cf:85: 3d:f6:77:78:f0:a3:14:d2:f2:90:e6:db:33:51:0d: 2e:28:ca:fc:85:1d:91:2c:c5:69:d1:2f:31:86:b1: 0a:a7:9a:9d:47:61:b6:e6:f7:96:f0:56:22:55:26: c3:e7:97:9f:b5:83:a0:b1:c5:1b:05:35:8b:a1:2d: 03:d6:f7:0b:77:77:57:81:88:9a:d1:95:63:10:28: 36:3d:21:6c:de:cd:5d:a2:52:74:62:00:c3:9c:40: 7d:39:cd:14:54:cc:e5:a2:1a:b6:a4:34:c3:a6:71: eb:4c:ff:9c:44:d4:c2:ae:b6:e9:50:49:fe:02:0e: e9:4a:7a:36:0f:2f:6c:c5:e8:07:df:1b:9d:fe:e0: 32:18:a5:61:24:c5:51:27:cc:db:7d:2d:a9:b2:9c: 0b:ef:ea:40:b9:c7:ae:d0:09:ea:f9:53:c3:27:c6: 5d:bc:66:38:7a:96:8c:ff:a2:50:2b:c7:85:71:a1: 2d:89:fe:f4:1d:eb:42:c7:3c:82:45:62:7a:ed:a4: d3:11:c7:04:d8:48:f2:71:38:f2:98:07:7e:0e:10: eb:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F3:5C:0C:E8:53:79:C6:20:A1:2B:3E:7E:90:73:E5:98:0A:73:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a082a566-1d9f-3b72-9db1-a2f5e5d1c9fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.10.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:18:9a:15:9a:9a:a0:ec:50:39:da:57:65:9a:26:db:d9:7d: 73:20:17:dd:06:6d:32:a6:7d:67:17:1c:a6:f5:aa:f4:04:8b: 88:0c:24:5b:19:45:67:5d:52:bc:00:83:2b:32:22:a4:1c:96: d8:c5:5a:d4:c3:00:71:48:86:1d:19:ea:c0:17:a9:2d:ea:52: ca:70:5a:3b:33:e5:5d:59:5b:9e:ef:de:62:fb:4e:df:ae:57: 70:54:ed:51:ef:c8:6b:0f:5d:a2:4b:ee:69:82:65:8a:bc:a3: 47:30:b4:52:e8:21:f4:93:c5:4f:50:51:ea:89:26:8c:1b:09: 71:55:61:da:27:44:86:35:a4:53:52:a3:f2:8d:eb:5e:ff:55: 36:8e:2d:f5:a0:d3:1f:6a:0a:29:43:f3:b1:25:3d:48:fb:b8: 0c:91:44:c2:05:11:18:ec:f6:2f:3a:f4:e3:d0:d4:a7:d9:66: 28:93:2c:e1:57:20:4a:ec:34:9f:7d:4a:e1:87:50:2f:24:64: 02:4d:52:d0:cf:51:c1:d8:a8:59:a4:74:64:66:7f:99:9c:07: 1e:9f:8a:7f:ca:42:77:36:fd:73:81:fe:6f:2b:a7:91:fb:de: 3c:40:a7:a0:ec:5f:d9:22:d9:0f:6d:4c:cd:7e:64:39:0d:01: 28:f5:6a:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnR507kgbjD2ZxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk OTNmNGY4NDUtMzljZS00MDE2LTgxYjctMGUzNWViMzkyM2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwdCceI2uSqwbLQgCCkFIEzIxcB5HrdSqcbF zeUtPYS4CoGXodrHlVRgz4U99nd48KMU0vKQ5tszUQ0uKMr8hR2RLMVp0S8xhrEK p5qdR2G25veW8FYiVSbD55eftYOgscUbBTWLoS0D1vcLd3dXgYia0ZVjECg2PSFs 3s1dolJ0YgDDnEB9Oc0UVMzlohq2pDTDpnHrTP+cRNTCrrbpUEn+Ag7pSno2Dy9s xegH3xud/uAyGKVhJMVRJ8zbfS2pspwL7+pAuceu0Anq+VPDJ8ZdvGY4epaM/6JQ K8eFcaEtif70HetCxzyCRWJ67aTTEccE2EjycTjymAd+DhDrPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNnzXAzoU3nGIKErPn6Qc+WYCnNfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTA4MmE1NjYtMWQ5Zi0z YjcyLTlkYjEtYTJmNWU1ZDFjOWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGArMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQYmhWamqDsUDnaV2WaJtvZfXMgF90GbTKmfWcXHKb1qvQEi4gMJFsZ RWddUrwAgysyIqQcltjFWtTDAHFIhh0Z6sAXqS3qUspwWjsz5V1ZW57v3mL7Tt+u V3BU7VHvyGsPXaJL7mmCZYq8o0cwtFLoIfSTxU9QUeqJJowbCXFVYdonRIY1pFNS o/KN617/VTaOLfWg0x9qCilD87ElPUj7uAyRRMIFERjs9i869OPQ1KfZZiiTLOFX IErsNJ99SuGHUC8kZAJNUtDPUcHYqFmkdGRmf5mcBx6fin/KQnc2/XOB/m8rp5H7 3jxAp6DsX9ki2Q9tTM1+ZDkNASj1aq4= -----END CERTIFICATE-----Generated at Wed Sep 23 22:23:27 2026 by rpki-client