$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf305378-59a2-3053-b86b-38313e225134.roa File: bf305378-59a2-3053-b86b-38313e225134.roa (raw, json) Hash identifier: v2zJSKRvWvunbS4H8KNi3XKYFZRH1+vfXvHs9ThzkjY= Subject key identifier: AA:E2:53:F0:40:F4:40:79:11:C6:C1:5C:9E:3A:FE:FC:B0:76:D9:21 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F49794E6720BDE5C4BB91D500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf305378-59a2-3053-b86b-38313e225134.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 13367 IP address blocks: 24.245.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:79:4e:67:20:bd:e5:c4:bb:91:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ee21a2cd-d171-48e8-8e82-4bb55e60a401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:aa:86:80:32:d9:79:ff:b1:64:bc:1a:c2:54: 07:5c:25:59:13:66:ab:07:d4:8e:1b:78:a6:9b:09: 10:e6:c6:dc:86:ff:93:3d:ba:4d:e5:96:ff:fe:c7: 6a:e4:84:8e:37:6b:fc:30:1b:c5:88:d9:4f:5f:45: e4:cb:d5:74:48:c0:1d:25:67:78:03:43:98:79:24: e7:f5:41:b2:54:05:21:d2:2e:8f:f7:b3:b7:43:f5: 35:4c:7f:b6:f9:0b:67:d6:7d:fa:76:2a:95:1c:b4: bd:be:1b:49:17:cb:60:c1:8a:3d:c6:b3:35:08:43: 0d:e5:f2:7b:cd:07:46:ad:16:18:41:f8:ec:c1:9b: 96:cf:a3:46:2b:2d:62:f8:a7:d7:88:1d:aa:94:92: bd:82:b6:37:e2:f8:94:1a:f2:c8:6e:fd:51:d7:60: 92:10:1a:0a:42:3d:ad:b6:0c:da:01:69:86:38:91: df:5d:56:f8:50:91:55:9f:0a:52:e0:d3:c6:79:b2: 26:1a:81:37:f8:07:22:e8:00:f4:b5:cc:a6:6b:8f: 98:cc:34:36:8d:34:b2:08:38:ca:8f:4a:a3:8a:c5: 9f:ab:72:04:48:05:63:93:c1:23:bc:f5:8e:dc:8e: 3f:a0:80:3d:f1:eb:c9:62:dd:79:c8:47:3d:6c:d1: 50:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E2:53:F0:40:F4:40:79:11:C6:C1:5C:9E:3A:FE:FC:B0:76:D9:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf305378-59a2-3053-b86b-38313e225134.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.245.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:ff:91:24:81:21:33:e4:87:32:d7:d8:69:42:94:95:d6:fe: 43:14:1e:4d:3a:54:91:72:94:3d:ad:28:c9:42:66:83:67:85: 00:20:dd:a6:13:17:c9:29:39:75:f6:d7:25:26:81:0a:61:ef: 00:83:07:26:92:e2:7c:8e:06:6e:5f:e6:29:70:ca:34:aa:8a: a8:fb:a9:5c:ad:39:fe:81:ed:13:c6:48:e3:89:a0:0e:c3:43: 0c:84:20:d9:be:11:6c:d8:b1:29:bb:b6:fb:13:a6:c0:f8:c6: 02:d1:74:10:42:69:aa:83:f0:a9:76:06:1c:c3:ef:e3:1d:ce: 65:ef:a6:1f:8c:db:c4:f4:2c:7e:43:a5:69:96:84:0c:09:6f: d3:cf:4c:b9:53:3c:f4:ac:13:44:e3:53:9a:88:a9:3f:05:83: de:27:eb:48:81:e7:26:b7:71:00:4d:42:40:2a:57:66:69:8f: 65:2b:8c:d9:51:12:d1:5d:5a:b2:fc:5c:cd:42:47:78:79:74: 85:8a:0e:96:da:35:63:5c:65:01:89:e2:1f:74:9f:cc:c1:1b: 82:12:5c:e7:c2:1e:cc:37:3c:1e:dd:28:1d:26:de:0f:34:39: 9d:b3:1a:21:ed:c1:35:6d:69:c9:e4:ae:a5:2b:41:71:40:9f: 13:25:f0:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JeU5nIL3lxLuR1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWUyMWEyY2QtZDE3MS00OGU4LThlODItNGJiNTVlNjBhNDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6qGgDLZef+xZLwawlQHXCVZE2arB9SOG3im mwkQ5sbchv+TPbpN5Zb//sdq5ISON2v8MBvFiNlPX0Xky9V0SMAdJWd4A0OYeSTn 9UGyVAUh0i6P97O3Q/U1TH+2+Qtn1n36diqVHLS9vhtJF8tgwYo9xrM1CEMN5fJ7 zQdGrRYYQfjswZuWz6NGKy1i+KfXiB2qlJK9grY34viUGvLIbv1R12CSEBoKQj2t tgzaAWmGOJHfXVb4UJFVnwpS4NPGebImGoE3+Aci6AD0tcyma4+YzDQ2jTSyCDjK j0qjisWfq3IESAVjk8EjvPWO3I4/oIA98evJYt15yEc9bNFQEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKriU/BA9EB5EcbBXJ46/vywdtkhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmYzMDUzNzgtNTlhMi0z MDUzLWI4NmItMzgzMTNlMjI1MTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGPUoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAED/kSSBITPkhzLX2GlClJXW/kMUHk06VJFylD2tKMlCZoNnhQAg3aYT F8kpOXX21yUmgQph7wCDByaS4nyOBm5f5ilwyjSqiqj7qVytOf6B7RPGSOOJoA7D QwyEINm+EWzYsSm7tvsTpsD4xgLRdBBCaaqD8Kl2BhzD7+MdzmXvph+M28T0LH5D pWmWhAwJb9PPTLlTPPSsE0TjU5qIqT8Fg94n60iB5ya3cQBNQkAqV2Zpj2UrjNlR EtFdWrL8XM1CR3h5dIWKDpbaNWNcZQGJ4h90n8zBG4ISXOfCHsw3PB7dKB0m3g80 OZ2zGiHtwTVtacnkrqUrQXFAnxMl8BA= -----END CERTIFICATE-----Generated at Sun Sep 27 11:37:21 2026 by rpki-client