$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/cbd9f851-bfb9-3108-a03b-308ec49a3249.roa File: cbd9f851-bfb9-3108-a03b-308ec49a3249.roa (raw, json) Hash identifier: RGAZLVN7Mzo+qT9O8CGJ7G5g/ttmJsI+VYxA4DykZdY= Subject key identifier: 3D:76:09:F8:B4:7F:2F:75:60:BB:BD:4B:3E:F5:4C:59:35:37:F8:A7 Certificate issuer: /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15 Certificate serial: 010D0C9F4328584B48E1AFA1D014FDBA695AE080 Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/cbd9f851-bfb9-3108-a03b-308ec49a3249.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 400423 IP address blocks: 24.38.21.0/24 maxlen: 24 65.51.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:af:a1:d0:14:fd:ba:69:5a:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=87bc49fa-0f3c-4cc5-8973-1615ab0c1356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e8:09:fa:24:e3:3a:12:78:0a:82:2e:b2:35: 11:59:a8:46:97:54:7a:aa:39:21:7a:12:06:f3:e4: ec:bd:ef:6d:5e:2a:f3:b4:56:e1:48:47:02:95:22: ba:e3:39:2f:99:ec:18:40:09:7d:77:50:0c:ac:dd: 01:2a:e1:cb:69:5a:3b:58:45:4c:c3:f6:50:c0:d6: 9a:08:1f:7f:ae:1e:89:06:87:09:0d:f9:4b:1f:3e: 31:ef:04:d6:df:e5:d9:6b:c9:5d:9d:e9:8d:7a:81: a8:89:2d:76:13:06:40:73:b1:af:75:ed:17:07:22: 2d:86:87:d6:72:5e:01:0f:41:7f:2f:c8:52:d8:4a: 5a:17:04:9d:d3:cb:d3:22:4b:1f:a7:e0:7a:17:b3: 92:98:fd:de:e0:0d:22:25:94:10:a7:8d:3a:b3:a7: 76:7b:1d:d5:41:9c:18:79:44:3e:3d:95:5c:0a:3a: da:53:86:84:1a:59:5d:8a:9d:ca:ae:5f:8a:3f:74: e7:33:25:47:9a:63:40:52:b0:6f:3c:34:54:33:39: f5:b9:50:cb:d6:06:82:0e:41:cf:30:d3:fd:97:5b: b5:a6:e7:9f:f4:05:fa:9d:e8:52:24:90:ca:e8:7c: 49:8d:dd:1b:e7:a1:25:65:77:b3:eb:ef:8b:32:d7: d6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:76:09:F8:B4:7F:2F:75:60:BB:BD:4B:3E:F5:4C:59:35:37:F8:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/cbd9f851-bfb9-3108-a03b-308ec49a3249.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl X509v3 Authority Key Identifier: keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer sbgp-ipAddrBlock: critical IPv4: 24.38.21.0/24 65.51.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:4c:c2:66:dc:85:55:2d:86:41:28:e4:39:71:0b:3a:eb:22: 60:d4:4a:a7:c7:2e:af:19:94:31:2f:5e:f2:16:f2:5a:51:e6: 6e:03:74:3d:7a:09:1c:ab:ed:6b:ac:cb:20:1f:79:dd:7e:30: 11:ea:74:7c:06:96:55:f4:34:1a:42:48:8e:10:6b:2e:b4:ac: 0f:a2:a1:07:75:cd:26:a2:5d:e3:db:c6:1e:67:d7:fa:54:5e: 0a:75:6e:e0:49:5b:aa:d0:88:06:3d:8c:8f:2b:8b:89:ea:26: 70:ac:b1:45:93:ec:14:58:d5:3e:aa:7f:c6:f6:24:54:a1:e0: 9b:8d:21:36:9d:d6:b8:fd:f8:06:bd:2e:8d:d1:13:b2:fc:ae: 4c:cb:ca:d9:9b:ae:1c:02:f5:09:19:9b:da:d6:0b:b2:ff:12: 65:c0:f8:0c:45:93:64:05:70:2a:92:40:11:69:a1:60:10:dc: 17:b6:79:eb:3a:53:4b:8b:d0:6b:aa:73:67:99:c2:92:c7:86: 29:20:6e:9e:e8:e4:3b:22:35:54:b3:0c:be:e1:ff:ce:dc:26: 2b:8a:d3:39:c0:54:6a:69:ca:35:6d:57:09:1c:8c:2f:aa:60: 89:dc:5d:b9:7e:a1:06:da:85:c8:03:bf:d2:ef:bb:fd:70:ff: 6b:5a:97:00 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEtI4a+h0BT9umla4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZThmOGM0MTEtZmE1Yy00MjhjLThhYzEtZTA4ZThhMDBh ZDE1MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ODdiYzQ5ZmEtMGYzYy00Y2M1LTg5NzMtMTYxNWFiMGMxMzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOgJ+iTjOhJ4CoIusjURWahGl1R6qjkhehIG 8+Tsve9tXirztFbhSEcClSK64zkvmewYQAl9d1AMrN0BKuHLaVo7WEVMw/ZQwNaa CB9/rh6JBocJDflLHz4x7wTW3+XZa8ldnemNeoGoiS12EwZAc7Gvde0XByIthofW cl4BD0F/L8hS2EpaFwSd08vTIksfp+B6F7OSmP3e4A0iJZQQp406s6d2ex3VQZwY eUQ+PZVcCjraU4aEGlldip3Krl+KP3TnMyVHmmNAUrBvPDRUMzn1uVDL1gaCDkHP MNP9l1u1puef9AX6nehSJJDK6HxJjd0b56ElZXez6++LMtfW3QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFD12Cfi0fy91YLu9Sz71TFk1N/inMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4 YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhlOGEwMGFkMTUvY2JkOWY4NTEtYmZiOS0z MTA4LWEwM2ItMzA4ZWM0OWEzMjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZThmOGM0MTEtZmE1Yy00MjhjLThh YzEtZTA4ZThhMDBhZDE1L2U4ZjhjNDExLWZhNWMtNDI4Yy04YWMxLWUwOGU4YTAw YWQxNS5jcmwwHwYDVR0jBBgwFoAU2mOPS3cNceq6IgA5tQH/tSVxq18wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhl OGEwMGFkMTUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAGCYVAwQA QTNzMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAMdMwmbchVUthkEo5DlxCzrrImDUSqfHLq8ZlDEvXvIW8lpR 5m4DdD16CRyr7WusyyAfed1+MBHqdHwGllX0NBpCSI4Qay60rA+ioQd1zSaiXePb xh5n1/pUXgp1buBJW6rQiAY9jI8ri4nqJnCssUWT7BRY1T6qf8b2JFSh4JuNITad 1rj9+Aa9Lo3RE7L8rkzLytmbrhwC9QkZm9rWC7L/EmXA+AxFk2QFcCqSQBFpoWAQ 3Be2ees6U0uL0Guqc2eZwpLHhikgbp7o5DsiNVSzDL7h/87cJiuK0znAVGppyjVt VwkcjC+qYIncXbl+oQbahcgDv9Lvu/1w/2talwA= -----END CERTIFICATE-----Generated at Fri Oct 10 09:57:37 2025 by rpki-client