$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/24c78a7d-3fc4-3ee2-a77f-02d8ffa1901e.roa File: 24c78a7d-3fc4-3ee2-a77f-02d8ffa1901e.roa (raw, json) Hash identifier: sep7NxVG2iFWflA+NVLEue5d7/U7xslgCBPjY2MNRgQ= Subject key identifier: D2:76:76:AC:24:A7:14:98:86:EB:95:B7:45:BB:0B:8E:34:89:F3:BE Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F4328584F4F080A575F6E639CF7BD13C0 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/24c78a7d-3fc4-3ee2-a77f-02d8ffa1901e.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 16433 IP address blocks: 147.92.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:0a:57:5f:6e:63:9c:f7:bd:13:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=c2122a37-3c19-43a8-bb98-801c6c4e3489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e8:1b:07:f0:19:af:58:9d:cf:1b:83:f1:4e: ae:7f:f8:2c:49:9e:1c:87:6b:27:fb:89:73:fc:82: 34:60:ff:18:e9:1c:82:90:fb:89:08:88:25:7f:fc: f0:a6:9d:0a:54:49:c4:0c:f7:c8:4f:5f:92:9a:01: 44:67:4d:95:f0:51:f7:8b:14:0c:85:d7:4b:ea:ec: 54:90:29:c7:39:5c:80:94:4f:0b:5d:5e:e8:5e:64: 91:d7:d6:15:39:10:e6:c7:04:a8:96:25:81:cd:03: 04:b8:b0:a4:1d:11:e7:00:6b:5c:00:1f:29:94:cd: 72:41:2b:07:0c:92:22:4f:3d:36:bb:04:aa:46:bc: 5a:7d:46:9c:83:79:8f:12:2a:b5:2c:4a:1c:43:5f: fb:22:83:ab:68:1f:5c:11:20:98:a9:76:82:bb:f9: ef:ca:bf:04:59:26:4b:ca:51:da:c2:a7:90:68:69: 9f:1b:69:24:eb:a8:b3:ca:62:f9:ce:c5:d1:a8:49: 1e:7a:6b:c8:b8:f4:d8:9a:64:c7:7e:f0:0f:9b:0b: dc:e8:bb:fb:3b:95:ff:3f:e2:93:c9:cf:d3:bd:56: 44:1c:c0:d6:b3:63:37:78:b2:85:ee:5c:c1:4d:80: 05:2c:9b:21:c8:76:2d:4a:8e:bc:68:40:4d:8c:70: e7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:76:76:AC:24:A7:14:98:86:EB:95:B7:45:BB:0B:8E:34:89:F3:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/24c78a7d-3fc4-3ee2-a77f-02d8ffa1901e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 147.92.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:40:ca:3d:27:a7:92:9b:8f:d9:bf:12:8d:c8:3d:7b:d4:d8: 6b:6b:8e:fb:82:b9:00:1f:1c:bf:7c:c6:75:01:32:40:97:e8: e1:12:5c:70:85:da:df:29:60:b6:7c:52:0e:59:5d:c7:c2:d8: 20:43:e1:6d:3e:e4:31:64:6d:1d:95:96:04:e4:ef:66:7f:52: cf:82:9f:00:75:4c:56:4b:08:59:ba:c3:42:a4:ec:45:53:b8: 01:47:0b:2d:62:88:2b:9a:08:3d:cd:28:39:a0:a4:0b:38:8a: 0c:48:55:48:8e:c5:bf:2c:d6:8d:5f:1c:46:76:e9:cb:a0:d1: b0:f4:ed:b1:0c:28:57:ed:63:79:77:a2:66:80:cc:5d:cd:be: 36:ca:b1:f0:76:3c:00:a7:f6:f9:7a:b6:ce:11:7b:61:e2:29: ad:47:e1:42:55:52:6b:8c:13:f0:16:59:75:dd:7c:b0:e2:96: 7f:82:fb:1e:8c:32:18:6f:92:40:5c:77:fc:4d:08:a9:db:fa: b7:f5:b5:90:1a:5d:ea:f6:9e:cb:e9:8a:f0:1a:4f:5d:08:6b: 3c:01:b0:e8:d5:22:55:1f:73:2c:8d:3e:52:ba:bb:1f:1c:f7: 72:b9:6d:5c:55:d8:fb:16:5f:02:e6:ca:73:e1:6a:eb:cb:f9: 5a:35:b3:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCApXX25jnPe9E8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk YzIxMjJhMzctM2MxOS00M2E4LWJiOTgtODAxYzZjNGUzNDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuugbB/AZr1idzxuD8U6uf/gsSZ4ch2sn+4lz /II0YP8Y6RyCkPuJCIglf/zwpp0KVEnEDPfIT1+SmgFEZ02V8FH3ixQMhddL6uxU kCnHOVyAlE8LXV7oXmSR19YVORDmxwSoliWBzQMEuLCkHRHnAGtcAB8plM1yQSsH DJIiTz02uwSqRrxafUacg3mPEiq1LEocQ1/7IoOraB9cESCYqXaCu/nvyr8EWSZL ylHawqeQaGmfG2kk66izymL5zsXRqEkeemvIuPTYmmTHfvAPmwvc6Lv7O5X/P+KT yc/TvVZEHMDWs2M3eLKF7lzBTYAFLJshyHYtSo68aEBNjHDn3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJ2dqwkpxSYhuuVt0W7C440ifO+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvMjRjNzhhN2QtM2ZjNC0z ZWUyLWE3N2YtMDJkOGZmYTE5MDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEk1wQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJAyj0np5Kbj9m/Eo3IPXvU2GtrjvuCuQAfHL98xnUBMkCX6OESXHCF 2t8pYLZ8Ug5ZXcfC2CBD4W0+5DFkbR2VlgTk72Z/Us+CnwB1TFZLCFm6w0Kk7EVT uAFHCy1iiCuaCD3NKDmgpAs4igxIVUiOxb8s1o1fHEZ26cug0bD07bEMKFftY3l3 omaAzF3NvjbKsfB2PACn9vl6ts4Re2HiKa1H4UJVUmuME/AWWXXdfLDiln+C+x6M MhhvkkBcd/xNCKnb+rf1tZAaXer2nsvpivAaT10IazwBsOjVIlUfcyyNPlK6ux8c 93K5bVxV2PsWXwLmynPhauvL+Vo1s+8= -----END CERTIFICATE-----Generated at Sun Sep 27 06:11:32 2026 by rpki-client