$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/05fdde11-5fff-3b2a-8202-a9580c48c62e.roa File: 05fdde11-5fff-3b2a-8202-a9580c48c62e.roa (raw, json) Hash identifier: +Z62m5ibkDNTmv6n4SiIYIB5hJxLmljOoVOdmWeEDko= Subject key identifier: 1C:9C:C7:6B:6F:B3:39:0A:C1:72:3A:7E:67:57:84:78:F0:B5:11:98 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A7F8BCD76A6DE784AA4080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/05fdde11-5fff-3b2a-8202-a9580c48c62e.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 24.61.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:f8:bc:d7:6a:6d:e7:84:aa:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=8023934a-7178-456d-9a8c-3b1c2a9509e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:85:59:1c:6a:50:47:c5:4d:a0:c6:3d:31:72: 27:44:84:ff:ff:0f:5b:c5:1a:54:f6:a5:78:b6:71: f1:1b:cb:3a:74:9a:bf:60:cd:80:26:a2:16:49:98: 8a:da:fa:97:5c:47:b2:ea:4d:dd:b6:0f:4f:1c:bf: 87:da:40:9a:41:41:7d:a4:fa:73:64:1a:85:d7:af: 97:37:d8:c2:6d:11:9c:a2:ff:1a:44:77:46:15:a7: 63:03:07:a4:f0:89:96:ac:96:1d:d4:34:cd:5b:56: 91:46:e6:42:e1:d3:f0:cf:6e:d0:17:c1:15:a5:3e: 46:53:3c:03:2c:6a:9b:22:4b:a5:d7:c1:1f:23:7d: 21:bc:11:7c:51:a8:66:12:c2:b9:2f:32:4a:d0:12: b9:c9:68:44:42:18:e4:0d:dd:ff:0d:36:c8:cd:5a: 3c:6c:9f:a8:96:f1:18:a4:48:a2:fa:9a:b3:4e:5f: c6:da:e1:4b:60:ba:ee:2d:cb:87:43:0c:4d:c8:94: 8d:92:d1:f1:f1:9c:e2:b2:1b:54:e9:37:c7:0c:14: c1:47:b8:37:0a:29:a9:70:43:eb:06:39:9d:f5:fd: b5:3c:49:1e:a2:4e:15:b3:ee:65:76:55:bd:ee:5e: c1:50:2b:39:df:12:1e:eb:a3:2c:39:69:bb:b3:30: 50:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:9C:C7:6B:6F:B3:39:0A:C1:72:3A:7E:67:57:84:78:F0:B5:11:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/05fdde11-5fff-3b2a-8202-a9580c48c62e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.61.130.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:f7:eb:b5:0c:b4:8d:f0:53:4d:44:c3:26:5a:77:03:90:2f: b2:65:25:c9:40:be:4f:5b:4e:1a:c2:35:f9:39:e3:9f:b7:13: cd:f2:41:70:4f:4f:e1:65:22:c9:34:b6:aa:49:b9:e3:22:7b: cc:78:63:91:73:4f:b5:14:74:a1:c2:60:e5:9c:3e:03:50:a5: 66:c2:d0:4a:39:0b:0e:01:92:45:e8:03:f4:14:0f:3a:d8:b0: 8d:8c:36:1f:80:79:64:e7:47:39:53:fe:04:51:1d:74:1d:5c: 57:8b:a9:8e:42:0e:66:32:33:90:20:ac:0e:29:18:0a:26:fd: d9:ef:79:54:c0:0a:e6:99:ce:17:79:c0:1b:5d:74:13:af:a3: 2e:b7:61:15:7a:87:7b:fa:c6:de:88:a5:7c:6a:f6:ce:6b:e7: e6:6d:b9:43:05:dc:6b:85:42:bd:0c:de:f8:25:2d:33:34:73: 33:8f:25:9a:7b:3e:ff:e2:7a:c8:14:5b:bd:70:ca:6e:91:17: 0c:24:28:b8:65:88:f9:54:63:3d:d0:e7:be:cd:07:5b:26:fd: d6:56:60:af:e2:56:8f:2d:8b:66:a6:db:3e:56:f1:df:5a:ce: 6b:93:b0:98:06:05:26:c5:12:76:93:1f:66:bf:73:f8:f0:b4: 0d:3c:6b:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp/i812pt54SqQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ODAyMzkzNGEtNzE3OC00NTZkLTlhOGMtM2IxYzJhOTUwOWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoVZHGpQR8VNoMY9MXInRIT//w9bxRpU9qV4 tnHxG8s6dJq/YM2AJqIWSZiK2vqXXEey6k3dtg9PHL+H2kCaQUF9pPpzZBqF16+X N9jCbRGcov8aRHdGFadjAwek8ImWrJYd1DTNW1aRRuZC4dPwz27QF8EVpT5GUzwD LGqbIkul18EfI30hvBF8UahmEsK5LzJK0BK5yWhEQhjkDd3/DTbIzVo8bJ+olvEY pEii+pqzTl/G2uFLYLruLcuHQwxNyJSNktHx8ZzishtU6TfHDBTBR7g3CimpcEPr Bjmd9f21PEkeok4Vs+5ldlW97l7BUCs53xIe66MsOWm7szBQSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBycx2tvszkKwXI6fmdXhHjwtRGYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDVmZGRlMTEtNWZmZi0z YjJhLTgyMDItYTk1ODBjNDhjNjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGD2CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEv367UMtI3wU01EwyZadwOQL7JlJclAvk9bThrCNfk545+3E83yQXBP T+FlIsk0tqpJueMie8x4Y5FzT7UUdKHCYOWcPgNQpWbC0Eo5Cw4BkkXoA/QUDzrY sI2MNh+AeWTnRzlT/gRRHXQdXFeLqY5CDmYyM5AgrA4pGAom/dnveVTACuaZzhd5 wBtddBOvoy63YRV6h3v6xt6IpXxq9s5r5+ZtuUMF3GuFQr0M3vglLTM0czOPJZp7 Pv/iesgUW71wym6RFwwkKLhliPlUYz3Q577NB1sm/dZWYK/iVo8ti2am2z5W8d9a zmuTsJgGBSbFEnaTH2a/c/jwtA08a9I= -----END CERTIFICATE-----Generated at Tue Oct 21 21:38:53 2025 by rpki-client