$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3af2abb0-9d77-3263-be22-f80dca65df33.roa File: 3af2abb0-9d77-3263-be22-f80dca65df33.roa (raw, json) Hash identifier: tpxFj8ThuDAsnkMZMi4l85kNtsFzeM0jv9O0Ma8xJ7k= Subject key identifier: 3A:7B:E5:C1:09:A9:E0:DB:BC:70:30:3B:44:B3:79:4F:DD:84:DE:69 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A7F1829FAE2B089CD05140 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3af2abb0-9d77-3263-be22-f80dca65df33.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 24.218.30.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:f1:82:9f:ae:2b:08:9c:d0:51:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=b18da561-8012-4ce3-8d92-127c0d76725c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e9:b9:bb:ac:da:a7:b1:87:18:49:cf:97:6a: aa:39:a2:c2:bc:51:2a:6d:5c:b4:f3:7c:a5:7d:e9: dc:7e:bc:7f:aa:84:45:b9:e9:a7:cf:9c:13:fc:30: 64:e8:8f:0e:e8:97:b0:7a:6a:39:fa:b9:f0:79:5c: 1e:07:e2:04:86:bf:09:50:b6:24:06:ba:8b:17:04: ca:ca:ee:cb:b6:07:8c:db:6f:90:48:28:02:49:8c: 53:2b:ec:32:60:3b:7a:93:29:86:6d:54:08:ae:71: c8:77:d9:f3:b1:f9:75:11:00:70:59:40:5a:87:39: 94:5f:02:dd:6d:01:27:1d:89:ee:f5:ff:5f:db:25: bd:2a:2e:20:9c:8f:f4:9a:05:a4:19:67:4a:43:b3: c2:68:5f:24:ae:8c:a0:bb:c5:93:5c:e0:36:5e:d2: 98:cf:cb:92:a3:66:69:d5:b6:aa:f9:1a:d4:c8:09: 23:e0:23:72:a3:99:47:d0:6c:bc:ff:90:57:ca:17: a8:61:00:67:5e:45:0f:79:59:48:77:c4:46:4e:55: fa:f1:b0:26:94:74:ce:45:1e:f8:90:61:c3:6a:de: 08:82:10:7f:7a:97:a0:4e:94:be:ca:de:7c:85:2e: d9:79:ae:8a:40:48:cd:01:f8:c0:71:69:0a:85:d4: 93:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:7B:E5:C1:09:A9:E0:DB:BC:70:30:3B:44:B3:79:4F:DD:84:DE:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3af2abb0-9d77-3263-be22-f80dca65df33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.218.30.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:3d:6b:f9:10:2f:c6:a8:70:93:39:90:8a:fd:c8:55:ee:43: dc:1d:54:08:e0:d5:fe:a8:5d:15:4d:dd:52:22:72:5d:4e:97: fa:c9:48:42:52:13:b1:49:87:78:80:ad:ac:e1:2a:e4:04:06: 91:9c:00:9f:4f:a6:41:0c:ff:97:1f:68:12:5b:69:e5:a8:05: 68:57:4d:12:00:9f:72:9f:0f:f1:af:d7:32:bc:01:c1:17:15: a0:55:bc:f6:af:e1:ac:7c:bc:f2:03:1c:6d:a7:f8:40:59:2f: 65:9d:a4:f6:b5:8b:de:f0:66:5d:c2:ed:f1:dd:1d:a7:e9:f0: 06:39:7e:97:e3:fc:b6:2b:28:66:e3:51:0b:58:5d:f7:b1:75: f2:99:e5:ee:f7:8f:12:01:ab:43:b8:d8:9d:10:5a:c8:ed:e9: 99:90:17:c6:c4:de:d7:53:ff:95:85:5b:5d:d1:46:12:35:05: 00:01:51:1c:5b:7b:78:21:b7:d5:ea:ca:28:86:2c:35:69:47: a6:fb:60:52:a6:b1:29:02:ee:d8:00:91:61:55:74:5b:f3:b5: 79:6d:26:fc:8e:67:14:29:14:0f:a4:ad:2a:8d:bf:26:03:24: c8:52:62:7d:f1:39:4e:7d:15:2d:d4:d1:29:8b:32:5d:f6:a1: ae:06:76:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp/GCn64rCJzQUUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YjE4ZGE1NjEtODAxMi00Y2UzLThkOTItMTI3YzBkNzY3MjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkem5u6zap7GHGEnPl2qqOaLCvFEqbVy083yl fencfrx/qoRFuemnz5wT/DBk6I8O6Jewemo5+rnweVweB+IEhr8JULYkBrqLFwTK yu7LtgeM22+QSCgCSYxTK+wyYDt6kymGbVQIrnHId9nzsfl1EQBwWUBahzmUXwLd bQEnHYnu9f9f2yW9Ki4gnI/0mgWkGWdKQ7PCaF8kroygu8WTXOA2XtKYz8uSo2Zp 1baq+RrUyAkj4CNyo5lH0Gy8/5BXyheoYQBnXkUPeVlId8RGTlX68bAmlHTORR74 kGHDat4IghB/epegTpS+yt58hS7Zea6KQEjNAfjAcWkKhdSTpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDp75cEJqeDbvHAwO0SzeU/dhN5pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2FmMmFiYjAtOWQ3Ny0z MjYzLWJlMjItZjgwZGNhNjVkZjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGNoeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFM9a/kQL8aocJM5kIr9yFXuQ9wdVAjg1f6oXRVN3VIicl1Ol/rJSEJS E7FJh3iArazhKuQEBpGcAJ9PpkEM/5cfaBJbaeWoBWhXTRIAn3KfD/Gv1zK8AcEX FaBVvPav4ax8vPIDHG2n+EBZL2WdpPa1i97wZl3C7fHdHafp8AY5fpfj/LYrKGbj UQtYXfexdfKZ5e73jxIBq0O42J0QWsjt6ZmQF8bE3tdT/5WFW13RRhI1BQABURxb e3ght9XqyiiGLDVpR6b7YFKmsSkC7tgAkWFVdFvztXltJvyOZxQpFA+krSqNvyYD JMhSYn3xOU59FS3U0SmLMl32oa4GdiQ= -----END CERTIFICATE-----Generated at Tue Oct 21 19:27:34 2025 by rpki-client