$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/042f9625-fe81-306c-92cd-25c107455d69.roa File: 042f9625-fe81-306c-92cd-25c107455d69.roa (raw, json) Hash identifier: 6qwc7ng2J8mlGmhHzS0xdpVK1MjuNbc9cZkc2eaL73o= Subject key identifier: 5E:CC:02:14:75:64:83:D4:4F:1A:69:F3:AC:36:95:29:27:52:0A:C8 Certificate issuer: /CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862 Certificate serial: 010D0C9F4328584ECBD1D18CD6E41DB3B2A31300 Authority key identifier: DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/042f9625-fe81-306c-92cd-25c107455d69.roa Signing time: Tue 11 Aug 2026 01:00:11 +0000 ROA not before: Tue 11 Aug 2026 01:00:11 +0000 ROA not after: Mon 09 Nov 2026 02:00:11 +0000 asID: 14618 IP address blocks: 216.24.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cb:d1:d1:8c:d6:e4:1d:b3:b2:a3:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862 Validity Not Before: Aug 11 01:00:11 2026 GMT Not After : Nov 9 02:00:11 2026 GMT Subject: CN=e4a9cab4-8924-4fd2-9c86-3ebc427760d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:cb:88:36:63:3f:12:45:06:39:72:f1:6f:11: ee:96:ff:ff:3c:b7:8f:15:2b:4b:80:77:0f:66:d1: 2e:f9:69:a0:15:da:5f:43:c4:da:55:68:4c:a1:85: 54:28:59:db:79:0a:40:18:35:d6:02:aa:94:ef:4e: 14:e8:f7:3f:8b:b1:a4:92:ea:7c:3a:bc:f6:59:a8: cc:f2:62:e7:4b:49:40:cf:dc:32:d8:ae:04:f4:04: e7:98:75:c7:ed:3c:5a:5f:fd:3a:65:2e:b1:b0:f2: a8:da:51:63:1f:e3:53:be:ad:23:be:b5:0b:06:49: ab:cb:61:b7:6f:ed:34:20:68:00:be:5b:38:9a:81: 35:10:16:33:e2:75:5c:7b:f5:3c:9a:5f:d7:f9:4d: 3f:2f:bc:9e:8f:fd:9f:e7:91:c3:ec:a2:59:64:2d: c1:73:99:c0:6d:8e:1d:68:02:68:3c:16:91:bc:95: 86:96:93:37:a7:ec:a3:05:ca:98:db:12:a8:4d:dc: 7c:75:bc:c1:62:bf:59:0d:c5:3d:50:93:76:07:8d: 92:31:c5:30:a0:93:2d:6a:42:13:4b:d0:03:5d:21: 07:32:d6:86:4e:7a:fc:f6:1b:6e:5f:d8:af:f3:63: a7:a1:f9:aa:1d:1a:2a:79:a9:b6:71:7e:42:c0:f7: a5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:CC:02:14:75:64:83:D4:4F:1A:69:F3:AC:36:95:29:27:52:0A:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/042f9625-fe81-306c-92cd-25c107455d69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl X509v3 Authority Key Identifier: keyid:DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer sbgp-ipAddrBlock: critical IPv4: 216.24.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:d5:20:cc:20:dc:23:55:f9:0a:49:5e:35:b5:4c:ba:15:42: e6:c8:a9:b4:a4:95:cd:0f:f4:e6:2c:82:2d:ae:9d:c9:10:e4: 69:6a:b0:07:92:e4:2f:2f:d5:79:62:e8:3e:49:03:40:26:11: a3:f6:92:f7:c7:70:cf:e4:78:76:eb:2d:13:43:8d:a4:07:b6: d4:44:4d:18:05:14:56:c4:b5:f3:cd:c5:6b:f2:5d:8f:97:b6: 6e:9c:92:0f:4f:29:11:aa:88:cd:5d:f0:87:c7:2a:a6:42:f7: f1:b4:57:bd:4c:03:f9:8b:6f:81:d8:a4:a9:d1:56:d2:a3:33: 00:96:49:a5:bb:02:c4:40:2b:06:65:37:6c:36:43:42:a7:d9: f4:3e:1e:7f:a3:cb:71:c6:b6:d6:29:6d:1c:87:0c:67:3c:cb: d4:ff:3e:32:20:46:b4:73:0c:f6:c7:95:97:63:73:28:fe:26: c1:07:4e:4e:95:de:cb:5c:df:5f:c9:15:dd:1a:42:b2:7a:cb: 81:a7:fb:ac:c2:58:90:23:e9:72:42:72:28:4d:2a:55:42:3d: 53:81:c6:f7:7d:eb:55:4c:0c:ad:09:9a:9c:11:ee:d4:13:d4: 82:92:60:64:5d:f0:c0:83:45:39:5a:4e:86:77:d1:c4:14:88: 44:84:1d:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7L0dGM1uQds7KjEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmMjlhMTYtZTdiMS00MGM4LTg3YmMtMzRlMmM1NjI0 ODYyMB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk ZTRhOWNhYjQtODkyNC00ZmQyLTljODYtM2ViYzQyNzc2MGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisuINmM/EkUGOXLxbxHulv//PLePFStLgHcP ZtEu+WmgFdpfQ8TaVWhMoYVUKFnbeQpAGDXWAqqU704U6Pc/i7Gkkup8Orz2WajM 8mLnS0lAz9wy2K4E9ATnmHXH7TxaX/06ZS6xsPKo2lFjH+NTvq0jvrULBkmry2G3 b+00IGgAvls4moE1EBYz4nVce/U8ml/X+U0/L7yej/2f55HD7KJZZC3Bc5nAbY4d aAJoPBaRvJWGlpM3p+yjBcqY2xKoTdx8dbzBYr9ZDcU9UJN2B42SMcUwoJMtakIT S9ADXSEHMtaGTnr89htuX9iv82OnofmqHRoqeam2cX5CwPelpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF7MAhR1ZIPUTxpp86w2lSknUgrIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWYy OWExNi1lN2IxLTQwYzgtODdiYy0zNGUyYzU2MjQ4NjIvMDQyZjk2MjUtZmU4MS0z MDZjLTkyY2QtMjVjMTA3NDU1ZDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmMjlhMTYtZTdiMS00MGM4LTg3 YmMtMzRlMmM1NjI0ODYyL2Q5ZjI5YTE2LWU3YjEtNDBjOC04N2JjLTM0ZTJjNTYy NDg2Mi5jcmwwHwYDVR0jBBgwFoAU2/qD/m2Wzcxs3joVtCCYnWPXtjMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWYyOWExNi1lN2IxLTQwYzgtODdiYy0zNGUy YzU2MjQ4NjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2BgtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbVIMwg3CNV+QpJXjW1TLoVQubIqbSklc0P9OYsgi2unckQ5GlqsAeS 5C8v1Xli6D5JA0AmEaP2kvfHcM/keHbrLRNDjaQHttRETRgFFFbEtfPNxWvyXY+X tm6ckg9PKRGqiM1d8IfHKqZC9/G0V71MA/mLb4HYpKnRVtKjMwCWSaW7AsRAKwZl N2w2Q0Kn2fQ+Hn+jy3HGttYpbRyHDGc8y9T/PjIgRrRzDPbHlZdjcyj+JsEHTk6V 3stc31/JFd0aQrJ6y4Gn+6zCWJAj6XJCcihNKlVCPVOBxvd961VMDK0JmpwR7tQT 1IKSYGRd8MCDRTlaToZ30cQUiESEHRQ= -----END CERTIFICATE-----Generated at Wed Sep 23 11:00:27 2026 by rpki-client