$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa3b6995-9785-3575-bff7-b5cdbab92144.roa File: aa3b6995-9785-3575-bff7-b5cdbab92144.roa (raw, json) Hash identifier: Twt9IEO+bdly2chv+qZ8Q2XtMgWXg+14RZVpCU8hlZ4= Subject key identifier: F4:10:F4:A5:9F:15:B1:E9:89:A1:4A:CD:11:0B:52:E5:8E:8E:A8:58 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584E35FF5D6A277A5A9CF1888780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa3b6995-9785-3575-bff7-b5cdbab92144.roa Signing time: Thu 18 Jun 2026 09:00:12 +0000 ROA not before: Thu 18 Jun 2026 09:00:12 +0000 ROA not after: Wed 16 Sep 2026 09:00:12 +0000 asID: 7015 IP address blocks: 24.61.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:35:ff:5d:6a:27:7a:5a:9c:f1:88:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 18 09:00:12 2026 GMT Not After : Sep 16 09:00:12 2026 GMT Subject: CN=9b819bd5-e44a-485e-b888-6502c84209b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:86:42:ae:e4:2c:b2:df:44:1a:60:15:10:6d: 17:22:a1:78:b8:dc:0b:57:c2:99:30:ed:6e:f4:f5: 70:45:43:5f:3b:70:4d:14:bf:60:cf:4f:0c:db:d3: fa:1e:21:13:2b:5f:5e:7f:01:8b:81:5f:c5:5a:d9: ba:ec:7a:79:38:ca:0a:2b:7e:80:7e:fd:fe:05:ef: 43:1a:18:8b:ff:af:90:20:ab:29:6e:27:c2:38:3d: ac:09:e5:ac:92:4d:6f:b1:82:24:fa:81:f6:d0:e7: d7:c8:2e:4a:60:84:bc:a7:91:9b:6a:ae:55:45:98: 98:a5:b8:66:4f:d3:7a:f5:b2:c5:56:ba:4d:95:eb: 2b:15:85:96:26:44:e5:74:20:02:0f:1c:15:08:dc: 9c:fe:6a:cf:45:f9:be:00:48:28:20:4b:9b:e5:a6: 26:a4:c0:77:fe:52:d1:2c:2b:f7:23:9f:0c:45:04: 1e:c4:7c:b7:2b:3b:20:78:bb:e0:04:39:67:99:02: 66:48:2d:b6:17:41:80:dd:9d:5d:20:49:48:3e:14: 9c:c6:54:fa:ef:fd:b3:11:de:7d:05:08:6a:1a:a7: cc:bc:e3:ec:cc:df:87:86:44:d0:b4:05:b5:db:ce: 23:6c:0f:e7:d8:34:23:ec:7c:2f:9d:65:0a:cd:2b: 09:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:10:F4:A5:9F:15:B1:E9:89:A1:4A:CD:11:0B:52:E5:8E:8E:A8:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa3b6995-9785-3575-bff7-b5cdbab92144.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.61.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:12:1c:5a:1f:f3:62:b6:03:f0:bf:02:41:66:14:9d:84:b1: 0b:51:4d:31:69:8f:43:50:b2:32:f0:50:f2:45:b8:ca:3d:09: b9:d6:a5:9d:50:1f:9d:ff:8e:44:55:12:7f:db:22:04:51:20: 39:eb:e4:ba:e9:13:9d:07:6a:80:2d:48:31:d4:5b:24:e1:ac: 7d:6d:87:40:10:3c:86:0f:84:1e:71:d9:bc:73:e8:4c:d3:07: 7e:dc:bb:7b:93:fc:39:28:a2:78:d8:6d:56:f2:e1:50:a6:e8: ae:fd:8a:4f:10:c2:5c:5c:2e:a7:0c:d0:5c:f4:42:b2:2b:0b: ec:ee:b1:84:08:f3:77:96:b5:9b:bb:88:0e:5f:df:5b:52:6f: 44:ad:ca:82:fb:24:33:11:da:6d:d2:91:89:20:53:28:bb:df: df:5b:b4:01:d5:9e:a9:50:ed:bb:10:b9:d2:47:88:58:7b:5e: 50:18:f9:1f:86:3f:85:14:61:5d:78:ab:20:f9:1b:0d:e4:1b: e2:ec:02:ba:27:91:4f:7a:2e:25:34:35:72:42:5e:71:ec:c2: a2:2c:50:12:e2:c5:41:4d:fa:e8:c1:35:12:38:8b:38:d0:80: ea:0e:3e:ea:35:9e:74:7d:2c:6c:a4:fe:60:89:20:c8:54:02: 86:99:d3:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE41/11qJ3panPGIh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDYxODA5MDAxMloXDTI2MDkxNjA5MDAxMlowLzEtMCsGA1UEAxMk OWI4MTliZDUtZTQ0YS00ODVlLWI4ODgtNjUwMmM4NDIwOWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoZCruQsst9EGmAVEG0XIqF4uNwLV8KZMO1u 9PVwRUNfO3BNFL9gz08M29P6HiETK19efwGLgV/FWtm67Hp5OMoKK36Afv3+Be9D GhiL/6+QIKspbifCOD2sCeWskk1vsYIk+oH20OfXyC5KYIS8p5Gbaq5VRZiYpbhm T9N69bLFVrpNlesrFYWWJkTldCACDxwVCNyc/mrPRfm+AEgoIEub5aYmpMB3/lLR LCv3I58MRQQexHy3KzsgeLvgBDlnmQJmSC22F0GA3Z1dIElIPhScxlT67/2zEd59 BQhqGqfMvOPszN+HhkTQtAW1284jbA/n2DQj7HwvnWUKzSsJ/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQQ9KWfFbHpiaFKzRELUuWOjqhYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWEzYjY5OTUtOTc4NS0z NTc1LWJmZjctYjVjZGJhYjkyMTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGD0UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEASHFof82K2A/C/AkFmFJ2EsQtRTTFpj0NQsjLwUPJFuMo9CbnWpZ1Q H53/jkRVEn/bIgRRIDnr5LrpE50HaoAtSDHUWyThrH1th0AQPIYPhB5x2bxz6EzT B37cu3uT/DkoonjYbVby4VCm6K79ik8QwlxcLqcM0Fz0QrIrC+zusYQI83eWtZu7 iA5f31tSb0StyoL7JDMR2m3SkYkgUyi7399btAHVnqlQ7bsQudJHiFh7XlAY+R+G P4UUYV14qyD5Gw3kG+LsAronkU96LiU0NXJCXnHswqIsUBLixUFN+ujBNRI4izjQ gOoOPuo1nnR9LGyk/mCJIMhUAoaZ0yQ= -----END CERTIFICATE-----Generated at Fri Jul 24 12:51:02 2026 by rpki-client