$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/4aef7736-3b31-3a62-8371-09c23f6f791d.roa File: 4aef7736-3b31-3a62-8371-09c23f6f791d.roa (raw, json) Hash identifier: gDEUsU72PxMaH1gkJb/CJ2xnCLJVxLPGNNlJ8xGCvA4= Subject key identifier: 76:91:54:D1:0E:CD:5D:90:FD:32:12:81:85:F6:19:17:E4:DB:FF:25 Certificate issuer: /CN=02df9026-5ea2-4718-a55c-d46da7505348 Certificate serial: 010D0C9F4328584F4974727117CB1D91E97A8F20 Authority key identifier: C8:1B:76:3A:5E:A5:33:7E:00:1A:D8:D9:F9:90:DA:F6:CD:64:5E:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/4aef7736-3b31-3a62-8371-09c23f6f791d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14291 IP address blocks: 24.235.80.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:72:71:17:cb:1d:91:e9:7a:8f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02df9026-5ea2-4718-a55c-d46da7505348 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=69b24063-6780-40cf-9726-3d7e008be9f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:2a:13:2e:ef:51:70:6e:66:8e:28:ab:04:ca: 07:c4:5a:23:c5:b5:1e:fb:15:97:33:53:23:3f:c7: d8:26:0d:49:52:aa:94:63:57:92:50:0c:b7:8d:28: 7e:20:7c:ee:b2:25:e5:79:81:26:1d:7a:9f:e1:c5: 94:90:e0:55:b2:b8:a7:a3:90:b0:3e:35:96:d5:d0: f9:e1:43:1e:1e:fb:21:6a:b3:bc:68:28:33:28:04: 18:30:ca:4b:67:21:9c:35:b3:61:56:f1:01:24:ba: cd:97:31:d4:65:dc:6c:19:5e:04:4e:7c:93:28:1f: 85:f8:a5:07:cd:d0:cc:c4:08:56:ce:e1:8e:97:80: c7:1f:f8:a2:d9:b9:5f:3e:10:54:9b:eb:a3:67:64: 13:fe:15:08:5d:b1:1a:09:16:a9:41:a4:0b:0a:8d: 8a:5a:e6:a6:68:44:6e:0e:84:f4:2c:16:87:ed:09: d3:d9:8f:05:62:83:7b:af:4f:34:ca:f8:6d:f4:06: 0f:7f:da:da:6f:1b:e1:57:9d:f9:64:59:af:32:58: 59:24:c0:cd:1b:cc:9e:7e:06:3e:66:bb:41:16:a8: ba:1b:97:e9:b6:eb:6f:2e:42:c4:70:f7:b9:99:46: 01:6d:0b:d0:e0:d5:08:c5:1e:a5:30:2a:a6:f1:4f: 24:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:91:54:D1:0E:CD:5D:90:FD:32:12:81:85:F6:19:17:E4:DB:FF:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/4aef7736-3b31-3a62-8371-09c23f6f791d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.crl X509v3 Authority Key Identifier: keyid:C8:1B:76:3A:5E:A5:33:7E:00:1A:D8:D9:F9:90:DA:F6:CD:64:5E:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer sbgp-ipAddrBlock: critical IPv4: 24.235.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:46:c6:50:3e:3a:21:9c:5e:d1:ce:d9:2f:01:d9:1f:96:75: 12:3d:f9:62:23:97:c3:a6:63:dc:a1:0f:07:90:93:23:dc:80: 54:87:b6:b3:18:cf:49:b5:14:23:4c:eb:f7:b2:6c:0b:d2:6b: 0a:c8:b3:8e:48:56:b6:cc:dc:95:a2:89:18:96:b8:12:26:dc: df:48:05:37:2e:28:dd:bd:e4:f8:cb:6a:23:17:4e:1f:81:5b: c0:b9:85:68:ce:c3:5e:33:fa:36:bc:ba:9f:81:b2:63:af:11: 78:90:2b:6a:42:92:a4:2b:b2:8f:fe:5d:fc:7b:4d:60:24:23: 1f:df:e1:8e:f9:4c:17:7a:f2:b2:d5:94:6f:6d:67:60:87:d4: 44:c8:e7:10:7d:df:bd:12:5e:90:03:6b:09:85:54:9f:dd:7b: d9:3c:f6:d0:1a:7d:18:4a:06:22:69:8f:53:3d:95:74:54:2b: e5:7d:ed:f8:74:b1:59:c3:4c:96:53:d7:4d:a2:a8:76:47:d1: 17:f5:d8:9f:1a:84:be:cc:b8:bf:41:38:96:5b:e8:1c:1c:0d: 9f:b5:92:6c:94:1d:87:9a:ca:d5:be:a3:84:8b:aa:aa:1b:51: f8:1f:92:35:d4:70:fc:b6:19:d2:9e:ff:d7:e4:79:a9:2d:0e: 1c:46:24:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdHJxF8sdkel6jyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDJkZjkwMjYtNWVhMi00NzE4LWE1NWMtZDQ2ZGE3NTA1 MzQ4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjliMjQwNjMtNjc4MC00MGNmLTk3MjYtM2Q3ZTAwOGJlOWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5SoTLu9RcG5mjiirBMoHxFojxbUe+xWXM1Mj P8fYJg1JUqqUY1eSUAy3jSh+IHzusiXleYEmHXqf4cWUkOBVsrino5CwPjWW1dD5 4UMeHvsharO8aCgzKAQYMMpLZyGcNbNhVvEBJLrNlzHUZdxsGV4ETnyTKB+F+KUH zdDMxAhWzuGOl4DHH/ii2blfPhBUm+ujZ2QT/hUIXbEaCRapQaQLCo2KWuamaERu DoT0LBaH7QnT2Y8FYoN7r080yvht9AYPf9rabxvhV535ZFmvMlhZJMDNG8yefgY+ ZrtBFqi6G5fptutvLkLEcPe5mUYBbQvQ4NUIxR6lMCqm8U8k3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHaRVNEOzV2Q/TISgYX2GRfk2/8lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wMmRm OTAyNi01ZWEyLTQ3MTgtYTU1Yy1kNDZkYTc1MDUzNDgvNGFlZjc3MzYtM2IzMS0z YTYyLTgzNzEtMDljMjNmNmY3OTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMDJkZjkwMjYtNWVhMi00NzE4LWE1 NWMtZDQ2ZGE3NTA1MzQ4LzAyZGY5MDI2LTVlYTItNDcxOC1hNTVjLWQ0NmRhNzUw NTM0OC5jcmwwHwYDVR0jBBgwFoAUyBt2Ol6lM34AGtjZ+ZDa9s1kXqUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8wMmRmOTAyNi01ZWEyLTQ3MTgtYTU1Yy1kNDZk YTc1MDUzNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGOtQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRGxlA+OiGcXtHO2S8B2R+WdRI9+WIjl8OmY9yhDweQkyPcgFSHtrMY z0m1FCNM6/eybAvSawrIs45IVrbM3JWiiRiWuBIm3N9IBTcuKN295PjLaiMXTh+B W8C5hWjOw14z+ja8up+BsmOvEXiQK2pCkqQrso/+Xfx7TWAkIx/f4Y75TBd68rLV lG9tZ2CH1ETI5xB9370SXpADawmFVJ/de9k89tAafRhKBiJpj1M9lXRUK+V97fh0 sVnDTJZT102iqHZH0Rf12J8ahL7MuL9BOJZb6BwcDZ+1kmyUHYeaytW+o4SLqqob UfgfkjXUcPy2GdKe/9fkeaktDhxGJGA= -----END CERTIFICATE-----Generated at Sat Sep 26 11:09:42 2026 by rpki-client