$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f1ea270-166b-3a89-a2f8-221007201ca8.roa File: 1f1ea270-166b-3a89-a2f8-221007201ca8.roa (raw, json) Hash identifier: neXYzdBtaI1aqRPT+bBoiBmnYt0PZ6TSKLq7l6okwYQ= Subject key identifier: 2F:60:51:44:55:CF:B4:6E:57:AE:36:F2:89:B3:E6:DC:B8:16:B3:20 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A7F18D7F4AB20C40AF3300 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f1ea270-166b-3a89-a2f8-221007201ca8.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 24.218.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:f1:8d:7f:4a:b2:0c:40:af:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=96f758f9-0e84-4880-9f86-6937e0917c59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:58:d6:72:c4:46:4e:a6:e7:e7:d9:2b:65:34: 1e:99:7c:95:ae:ae:02:6f:40:b3:e9:ce:69:a3:13: b5:0b:6d:0b:39:97:d2:ae:11:f5:f2:c5:dc:58:b0: 96:69:40:0f:48:91:ea:3a:db:f9:01:ad:fa:b9:c1: 30:e5:cd:e9:70:f2:af:55:d8:35:1b:ad:88:b6:28: 2f:95:83:1e:ba:77:af:ed:35:29:ae:7a:36:de:6c: 23:5d:6f:68:b8:85:79:79:8e:45:9a:ad:9e:ce:b4: be:95:43:46:1c:15:64:84:24:4c:12:ce:7c:42:14: 01:96:f2:54:fa:52:31:2a:f4:e5:99:f5:69:4e:9d: 88:25:72:dd:fd:c9:b2:44:ce:62:b3:b3:3e:da:93: 0a:75:da:53:37:9e:f9:1a:12:30:49:b9:32:56:58: 6e:2c:8a:57:2d:20:62:59:1c:c3:af:6a:82:74:3e: db:29:15:8e:44:15:ef:74:55:b8:f9:c0:a6:fb:27: 01:98:3f:e0:d6:f3:6f:56:fc:3c:48:af:53:8d:db: 1a:17:69:ca:d9:c6:f3:18:ba:d4:3b:b6:2e:ae:25: 8a:9f:70:8f:f7:f1:9a:b6:50:17:fc:6f:7b:96:fc: b4:0b:ca:04:f9:2f:f8:a5:71:c2:c7:5a:36:27:8d: da:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:60:51:44:55:CF:B4:6E:57:AE:36:F2:89:B3:E6:DC:B8:16:B3:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f1ea270-166b-3a89-a2f8-221007201ca8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.218.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d9:0e:41:ea:c1:a6:17:2b:17:af:9d:c7:2c:3b:61:57:89:36: 57:ed:d0:f2:eb:bc:27:7a:33:17:0f:84:b8:6d:30:89:3c:d1: b0:59:38:52:f5:2e:ab:d5:db:00:43:fc:a9:0f:f7:d1:8c:f0: 07:56:d7:bb:62:e4:ac:6b:41:54:41:f6:f2:72:78:fb:0e:97: 1f:28:0d:f5:b0:06:7c:50:e2:b4:a1:dc:a7:69:3d:08:fc:bf: e9:b0:d0:b6:1c:14:3a:52:60:83:91:6c:6e:2f:74:db:fd:82: 4f:79:e3:41:ac:0d:5e:67:95:fa:cf:58:e3:ef:a7:4a:c4:c5: 75:65:b0:70:18:d7:eb:eb:5f:0a:8f:22:c4:ce:26:b9:f7:dd: 96:62:5a:0b:73:5e:8c:7d:d7:0f:f8:5e:8d:bf:82:fb:bc:be: b3:32:21:82:46:9e:09:20:2b:5a:d0:17:91:42:e3:2b:69:1b: 41:33:29:cb:04:b2:cf:a2:d4:69:c1:e6:2e:4c:23:e6:d4:ba: f5:8d:dc:0f:57:94:f2:db:78:ec:88:2c:8c:37:01:5d:05:0a: 48:07:76:14:42:88:2c:4d:b6:4b:b4:d3:e9:2a:04:de:d9:06: 36:b8:91:57:d6:d4:0f:5a:0c:6f:6f:03:25:5f:c3:a7:b6:02: 6e:01:d0:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp/GNf0qyDECvMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk OTZmNzU4ZjktMGU4NC00ODgwLTlmODYtNjkzN2UwOTE3YzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiljWcsRGTqbn59krZTQemXyVrq4Cb0Cz6c5p oxO1C20LOZfSrhH18sXcWLCWaUAPSJHqOtv5Aa36ucEw5c3pcPKvVdg1G62Itigv lYMeunev7TUprno23mwjXW9ouIV5eY5Fmq2ezrS+lUNGHBVkhCRMEs58QhQBlvJU +lIxKvTlmfVpTp2IJXLd/cmyRM5is7M+2pMKddpTN575GhIwSbkyVlhuLIpXLSBi WRzDr2qCdD7bKRWORBXvdFW4+cCm+ycBmD/g1vNvVvw8SK9TjdsaF2nK2cbzGLrU O7YuriWKn3CP9/GatlAX/G97lvy0C8oE+S/4pXHCx1o2J43aIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC9gUURVz7RuV6428omz5ty4FrMgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWYxZWEyNzAtMTY2Yi0z YTg5LWEyZjgtMjIxMDA3MjAxY2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGNogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANkOQerBphcrF6+dxyw7YVeJNlft0PLrvCd6MxcPhLhtMIk80bBZOFL1 LqvV2wBD/KkP99GM8AdW17ti5KxrQVRB9vJyePsOlx8oDfWwBnxQ4rSh3KdpPQj8 v+mw0LYcFDpSYIORbG4vdNv9gk9540GsDV5nlfrPWOPvp0rExXVlsHAY1+vrXwqP IsTOJrn33ZZiWgtzXox91w/4Xo2/gvu8vrMyIYJGngkgK1rQF5FC4ytpG0EzKcsE ss+i1GnB5i5MI+bUuvWN3A9XlPLbeOyILIw3AV0FCkgHdhRCiCxNtku00+kqBN7Z Bja4kVfW1A9aDG9vAyVfw6e2Am4B0GQ= -----END CERTIFICATE-----Generated at Tue Oct 21 19:28:52 2025 by rpki-client