$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/d40a7535-e168-3116-acad-26158f7c0cce.roa File: d40a7535-e168-3116-acad-26158f7c0cce.roa (raw, json) Hash identifier: JFoIGHI+qURxEhMYqEbSbbg45VBje6ea7g6mZeMAsmM= Subject key identifier: 59:46:F7:5E:8B:7B:7E:45:A3:E6:1F:43:09:23:A9:17:ED:BE:E3:A6 Certificate issuer: /CN=02df9026-5ea2-4718-a55c-d46da7505348 Certificate serial: 010D0C9F4328584F49893E476E5E63C6624B0100 Authority key identifier: C8:1B:76:3A:5E:A5:33:7E:00:1A:D8:D9:F9:90:DA:F6:CD:64:5E:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/d40a7535-e168-3116-acad-26158f7c0cce.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14291 IP address blocks: 24.153.112.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:3e:47:6e:5e:63:c6:62:4b:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02df9026-5ea2-4718-a55c-d46da7505348 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=df672f9c-0a52-42fc-891b-cc2d2555e0fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:01:79:b2:f7:7e:4e:b5:19:19:f2:3d:d1:6e: 62:0b:b1:24:d6:38:2f:62:14:52:a7:9e:b6:9e:0c: c3:d4:5c:0d:5e:e2:0c:1c:e1:a1:7b:b4:26:43:9c: 8d:bc:e6:01:11:74:aa:f2:20:1a:67:41:ef:ba:a2: 92:ab:ff:56:6d:f3:2f:07:35:40:2b:f6:50:d8:d4: 6b:ae:26:17:ae:f4:39:7e:55:9a:1d:6b:32:20:18: ff:c3:aa:52:e1:cf:6e:12:32:71:d0:b6:93:80:a9: 7a:d0:16:9e:57:5a:69:4b:3c:da:7e:62:78:d6:ee: ee:92:72:d2:df:a8:44:bd:3e:99:0b:4d:e1:00:b9: b2:11:b6:83:63:bf:17:1c:ff:29:2e:31:af:a3:82: a4:9c:bd:10:8f:ff:46:e5:9e:35:16:7f:97:55:f4: 97:ec:a7:94:1f:11:d8:79:a2:aa:c9:f0:03:ed:98: 51:93:c4:2f:2d:86:a5:74:05:01:57:87:f8:dd:13: 9d:70:cd:d9:f7:6d:61:b0:c3:90:aa:dd:d6:9f:b6: e4:17:c0:f1:e5:e9:35:d9:8b:30:e9:12:28:bd:94: fe:1c:b4:5a:cf:c8:0e:39:23:10:b5:09:0f:2e:d0: ce:d4:a3:8c:12:4c:d5:2f:41:0a:fd:9d:5e:d0:d1: 0d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:46:F7:5E:8B:7B:7E:45:A3:E6:1F:43:09:23:A9:17:ED:BE:E3:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/d40a7535-e168-3116-acad-26158f7c0cce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.crl X509v3 Authority Key Identifier: keyid:C8:1B:76:3A:5E:A5:33:7E:00:1A:D8:D9:F9:90:DA:F6:CD:64:5E:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer sbgp-ipAddrBlock: critical IPv4: 24.153.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:78:61:57:9b:a9:5f:91:f7:52:7c:ff:2d:ea:b0:6c:bb:de: 6c:0e:e8:68:19:10:81:2f:1e:b2:b1:2e:af:6b:7a:fa:2a:8b: b4:e4:b6:d7:d2:69:55:49:25:b8:7b:92:bd:77:f9:b4:11:ee: 69:01:e5:ce:e5:8b:06:3b:1d:d7:14:62:43:de:a3:bc:e8:38: 41:52:3b:e4:a9:50:99:58:da:7f:0e:a3:fc:d3:63:44:9f:44: 80:57:8f:fc:fa:1c:ab:68:ed:d9:9b:01:27:3c:52:35:42:ab: 9d:f6:e3:24:77:cb:21:41:92:ee:e1:d2:d6:5a:b2:26:ff:49: 84:eb:2d:3f:7e:ef:96:ca:10:b1:61:3a:27:f7:08:18:d1:27: 12:bc:8e:1f:93:b1:b4:9f:9d:94:04:3d:1c:19:a3:e0:8c:43: a7:e3:ce:a3:a3:b1:fe:c3:9f:ca:b0:02:93:50:e9:2c:45:c7: cc:c8:d5:11:cb:db:30:a6:46:a7:e2:16:7d:c8:ba:94:ce:ad: 4e:92:c4:fb:9f:c5:c7:d6:78:e7:01:be:ef:d3:32:77:66:47: 9a:29:cd:d0:62:f9:6f:e1:13:84:54:f2:2e:37:1e:46:18:84: b9:52:5c:d3:5e:c6:43:77:65:19:53:f5:fc:18:84:a4:92:f7: cc:1e:2f:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiT5Hbl5jxmJLAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDJkZjkwMjYtNWVhMi00NzE4LWE1NWMtZDQ2ZGE3NTA1 MzQ4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGY2NzJmOWMtMGE1Mi00MmZjLTg5MWItY2MyZDI1NTVlMGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQF5svd+TrUZGfI90W5iC7Ek1jgvYhRSp562 ngzD1FwNXuIMHOGhe7QmQ5yNvOYBEXSq8iAaZ0HvuqKSq/9WbfMvBzVAK/ZQ2NRr riYXrvQ5flWaHWsyIBj/w6pS4c9uEjJx0LaTgKl60BaeV1ppSzzafmJ41u7uknLS 36hEvT6ZC03hALmyEbaDY78XHP8pLjGvo4KknL0Qj/9G5Z41Fn+XVfSX7KeUHxHY eaKqyfAD7ZhRk8QvLYaldAUBV4f43ROdcM3Z921hsMOQqt3Wn7bkF8Dx5ek12Ysw 6RIovZT+HLRaz8gOOSMQtQkPLtDO1KOMEkzVL0EK/Z1e0NENeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFlG916Le35Fo+YfQwkjqRftvuOmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wMmRm OTAyNi01ZWEyLTQ3MTgtYTU1Yy1kNDZkYTc1MDUzNDgvZDQwYTc1MzUtZTE2OC0z MTE2LWFjYWQtMjYxNThmN2MwY2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMDJkZjkwMjYtNWVhMi00NzE4LWE1 NWMtZDQ2ZGE3NTA1MzQ4LzAyZGY5MDI2LTVlYTItNDcxOC1hNTVjLWQ0NmRhNzUw NTM0OC5jcmwwHwYDVR0jBBgwFoAUyBt2Ol6lM34AGtjZ+ZDa9s1kXqUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8wMmRmOTAyNi01ZWEyLTQ3MTgtYTU1Yy1kNDZk YTc1MDUzNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGJlwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJN4YVebqV+R91J8/y3qsGy73mwO6GgZEIEvHrKxLq9revoqi7TkttfS aVVJJbh7kr13+bQR7mkB5c7liwY7HdcUYkPeo7zoOEFSO+SpUJlY2n8Oo/zTY0Sf RIBXj/z6HKto7dmbASc8UjVCq5324yR3yyFBku7h0tZasib/SYTrLT9+75bKELFh Oif3CBjRJxK8jh+TsbSfnZQEPRwZo+CMQ6fjzqOjsf7Dn8qwApNQ6SxFx8zI1RHL 2zCmRqfiFn3IupTOrU6SxPufxcfWeOcBvu/TMndmR5opzdBi+W/hE4RU8i43HkYY hLlSXNNexkN3ZRlT9fwYhKSS98weL1w= -----END CERTIFICATE-----Generated at Sat Sep 26 14:24:20 2026 by rpki-client