$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/33a3b984-a77f-3d78-88ae-30ae68813e02.roa File: 33a3b984-a77f-3d78-88ae-30ae68813e02.roa (raw, json) Hash identifier: UfFEgkQNDANjFb41s8AENK/ZlrYG74Oq9O9qGwpu7QA= Subject key identifier: 0D:8E:F3:12:F5:17:C0:93:D3:DC:AA:8D:20:CE:C9:0B:C7:B8:13:D4 Certificate issuer: /CN=a7001425-6965-4c1f-8e35-f578d112295c Certificate serial: 010D0C9F4328584B3126F15886264E8AC0AE5980 Authority key identifier: F4:6C:4D:F0:5E:17:96:E6:79:88:21:0F:C0:BA:29:70:32:D6:2B:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/33a3b984-a77f-3d78-88ae-30ae68813e02.roa Signing time: Sun 14 Sep 2025 13:00:42 +0000 ROA not before: Sun 14 Sep 2025 13:00:42 +0000 ROA not after: Sat 13 Dec 2025 14:00:42 +0000 asID: 16920 IP address blocks: 128.224.254.0/24 maxlen: 24 128.224.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/a7001425-6965-4c1f-8e35-f578d112295c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/a7001425-6965-4c1f-8e35-f578d112295c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:31:26:f1:58:86:26:4e:8a:c0:ae:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7001425-6965-4c1f-8e35-f578d112295c Validity Not Before: Sep 14 13:00:42 2025 GMT Not After : Dec 13 14:00:42 2025 GMT Subject: CN=8409a8a9-2993-4826-8de9-d19222a1f664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:57:ba:86:d4:07:d2:88:88:a9:3b:d3:0c:08: 8b:06:5f:a7:e9:0a:e9:04:76:c5:71:17:6f:66:c7: 7a:cd:bd:2e:57:3a:cb:74:62:7d:8e:03:69:90:05: 91:93:3b:0e:6d:55:86:d3:10:0c:fb:eb:7a:83:e6: 68:35:15:e9:1b:ca:c3:25:56:03:d9:06:87:32:09: ce:68:ef:62:42:ec:a6:85:e3:0b:d6:72:78:47:fe: fc:3e:21:fb:b3:f1:3b:cc:f6:44:69:a4:07:a6:83: b9:a6:d0:39:85:7c:d2:a6:4c:56:e4:ee:dc:d6:f3: 46:e0:52:6f:4c:fd:15:82:9d:8b:cf:b4:6b:25:fb: 65:53:2e:3f:d4:71:ec:03:6e:3f:9a:5a:68:18:22: 1a:6b:79:e0:0f:9c:cd:6b:d0:c4:1e:41:a2:da:ab: f6:6a:4a:f1:07:1d:ca:14:b9:86:0b:c7:4a:bb:0a: b7:f1:79:50:d9:23:3a:a3:0e:af:e8:33:20:ce:c5: 95:81:b5:c0:26:58:12:8f:5e:c6:8a:bb:44:1b:a1: f7:17:76:68:bc:40:4f:f9:0d:59:32:05:2c:5d:4f: 99:58:01:9f:2f:84:8f:09:d6:d6:ba:07:a3:a2:6f: 34:c9:ec:98:76:9f:e2:e8:8a:0f:36:ab:66:b2:9b: 83:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:8E:F3:12:F5:17:C0:93:D3:DC:AA:8D:20:CE:C9:0B:C7:B8:13:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/33a3b984-a77f-3d78-88ae-30ae68813e02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/a7001425-6965-4c1f-8e35-f578d112295c.crl X509v3 Authority Key Identifier: keyid:F4:6C:4D:F0:5E:17:96:E6:79:88:21:0F:C0:BA:29:70:32:D6:2B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c.cer sbgp-ipAddrBlock: critical IPv4: 128.224.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:68:2d:a8:2c:15:ec:2f:6b:38:b3:22:bf:24:e1:fe:75:0f: 4b:7c:ce:db:9f:30:04:34:20:fd:7b:63:38:67:49:20:48:6f: c6:f4:20:a1:68:6d:51:17:83:3f:37:96:83:fc:62:c1:e1:8e: 1e:71:48:40:99:8e:ef:95:8d:c8:30:25:83:8c:37:13:1c:b1: 81:cb:0b:8e:b6:09:3b:0a:f9:8f:95:59:b1:31:82:d1:3d:06: 22:54:d2:52:7a:05:36:bb:38:ba:c4:2b:cc:1b:4d:ef:5e:87: 08:ac:43:ce:2f:d3:96:ae:e3:2e:c0:4f:3a:4a:1f:4a:57:1c: da:e8:3d:f2:89:3f:25:8e:e5:f2:a2:5f:00:33:02:b2:6b:f9: 65:a0:73:f0:90:c4:4d:9c:bf:c4:cc:7b:03:f2:0c:e8:fd:81: bd:b1:95:b3:b7:92:d4:1a:fd:75:bf:95:e2:c9:92:35:2d:e7: ac:e8:c0:c1:86:31:c2:6a:c4:5c:02:f6:11:5a:83:7a:6f:4f: 5f:ba:4b:77:bc:76:02:bc:34:80:36:c9:30:16:2b:78:22:b5: e0:28:d3:44:f9:e4:ce:62:ef:1b:02:c0:16:44:f0:36:a7:98: 22:0b:f3:64:d8:1c:88:b9:78:c5:84:c3:f6:88:cf:87:65:83: e0:3d:3a:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsxJvFYhiZOisCuWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcwMDE0MjUtNjk2NS00YzFmLThlMzUtZjU3OGQxMTIy OTVjMB4XDTI1MDkxNDEzMDA0MloXDTI1MTIxMzE0MDA0MlowLzEtMCsGA1UEAxMk ODQwOWE4YTktMjk5My00ODI2LThkZTktZDE5MjIyYTFmNjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5le6htQH0oiIqTvTDAiLBl+n6QrpBHbFcRdv Zsd6zb0uVzrLdGJ9jgNpkAWRkzsObVWG0xAM++t6g+ZoNRXpG8rDJVYD2QaHMgnO aO9iQuymheML1nJ4R/78PiH7s/E7zPZEaaQHpoO5ptA5hXzSpkxW5O7c1vNG4FJv TP0Vgp2Lz7RrJftlUy4/1HHsA24/mlpoGCIaa3ngD5zNa9DEHkGi2qv2akrxBx3K FLmGC8dKuwq38XlQ2SM6ow6v6DMgzsWVgbXAJlgSj17GirtEG6H3F3ZovEBP+Q1Z MgUsXU+ZWAGfL4SPCdbWugejom80yeyYdp/i6IoPNqtmspuDJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA2O8xL1F8CT09yqjSDOyQvHuBPUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hNzAw MTQyNS02OTY1LTRjMWYtOGUzNS1mNTc4ZDExMjI5NWMvMzNhM2I5ODQtYTc3Zi0z ZDc4LTg4YWUtMzBhZTY4ODEzZTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTcwMDE0MjUtNjk2NS00YzFmLThl MzUtZjU3OGQxMTIyOTVjL2E3MDAxNDI1LTY5NjUtNGMxZi04ZTM1LWY1NzhkMTEy Mjk1Yy5jcmwwHwYDVR0jBBgwFoAU9GxN8F4XluZ5iCEPwLopcDLWK8swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hNzAwMTQyNS02OTY1LTRjMWYtOGUzNS1mNTc4 ZDExMjI5NWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgOD+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBoLagsFewvazizIr8k4f51D0t8ztufMAQ0IP17YzhnSSBIb8b0IKFo bVEXgz83loP8YsHhjh5xSECZju+VjcgwJYOMNxMcsYHLC462CTsK+Y+VWbExgtE9 BiJU0lJ6BTa7OLrEK8wbTe9ehwisQ84v05au4y7ATzpKH0pXHNroPfKJPyWO5fKi XwAzArJr+WWgc/CQxE2cv8TMewPyDOj9gb2xlbO3ktQa/XW/leLJkjUt56zowMGG McJqxFwC9hFag3pvT1+6S3e8dgK8NIA2yTAWK3giteAo00T55M5i7xsCwBZE8Dan mCIL82TYHIi5eMWEw/aIz4dlg+A9OqM= -----END CERTIFICATE-----Generated at Sat Oct 11 07:47:08 2025 by rpki-client