$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/533cab4f-5dda-36ca-a9a7-b1d94cbfe278.roa File: 533cab4f-5dda-36ca-a9a7-b1d94cbfe278.roa (raw, json) Hash identifier: Mv0XH8l1yznxl07p+RJDnCV39TQaHjiOlNBE8qAIHp4= Subject key identifier: 9C:C3:C9:0D:0D:E8:C4:68:01:98:7B:31:E9:9A:FA:9F:16:D2:4D:31 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA4804FBA297CF3D248E60 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/533cab4f-5dda-36ca-a9a7-b1d94cbfe278.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 24.128.246.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:48:04:fb:a2:97:cf:3d:24:8e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=1a888cd8-ff30-41e4-a746-d41697bc958c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:3c:42:61:aa:dc:81:74:1a:24:c8:e1:e6:61: 39:23:95:f2:2c:c7:73:5c:5e:1a:2e:64:4d:53:95: 74:5b:42:8a:87:7e:1e:89:ab:e4:e7:2e:95:eb:d9: 3f:eb:83:1f:e5:3f:6e:13:0c:15:8e:0a:27:e6:29: c2:fc:cb:60:3c:bf:d2:1e:38:c6:36:e1:be:0c:b6: 18:e5:de:22:df:30:f7:6c:6c:23:71:79:50:31:35: fd:76:82:b9:f8:ec:ae:3c:71:60:85:57:c0:84:b6: d4:f9:f6:5b:bd:a2:e6:2b:f0:52:91:a7:f8:bd:e4: 61:8f:d4:ee:a9:cc:b8:7e:1b:2a:92:5c:3b:7f:41: ba:3c:ea:42:28:c1:d0:83:db:74:98:03:7d:0c:6c: 01:86:c3:ed:ec:7e:9f:df:40:ac:a8:2b:88:fe:63: dc:f6:97:12:09:6e:46:d3:f8:e9:7c:9a:4e:c9:7a: 8a:2d:df:4a:97:ca:c4:da:08:dc:66:d0:7c:cf:ba: 41:62:95:e7:5b:5a:a6:1e:07:9e:c6:fb:97:3c:c2: 44:83:39:c7:8e:5a:01:4e:0a:64:32:af:42:1d:a3: fc:94:a2:17:7a:e7:20:84:7e:9a:2e:db:2a:e1:39: b6:50:66:3c:9b:bd:79:13:79:f7:e8:03:f0:c1:72: e6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C3:C9:0D:0D:E8:C4:68:01:98:7B:31:E9:9A:FA:9F:16:D2:4D:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/533cab4f-5dda-36ca-a9a7-b1d94cbfe278.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.128.246.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:d8:d5:60:24:f6:77:a6:90:8d:7f:f9:53:fc:0f:55:46:d4: 43:88:6d:9e:51:0c:34:36:3c:cd:44:28:76:48:98:69:ee:f2: 3f:d5:eb:84:7f:87:9d:14:5d:53:65:85:4b:b6:1a:8c:d9:03: aa:87:fb:7b:9a:fb:69:7a:54:92:b5:1c:9f:fd:af:09:0a:c9: dd:12:ed:52:d6:5e:0b:c4:33:be:43:89:b2:2c:da:76:6a:e2: 0a:11:1b:cc:f9:86:c0:4e:59:2d:d3:97:b3:fa:c7:03:44:e3: 20:29:65:53:a4:16:f8:40:be:0c:8d:b6:1f:b5:66:56:30:60: 71:ad:db:cd:41:07:40:96:00:e5:2d:78:32:86:cc:5d:02:ee: 04:06:82:38:24:dc:6e:f7:98:24:a7:84:57:61:73:86:ca:be: e8:bd:c5:04:25:ff:12:c8:2b:b3:61:84:96:42:c4:ff:23:a8: ff:e7:da:2d:03:0a:6b:50:df:52:f1:36:4c:a5:c5:23:b5:b3: 1a:7d:5f:ed:f7:f0:8e:d8:97:fb:13:f6:81:e1:82:54:08:0d: 06:bf:86:77:4a:eb:cc:88:8e:36:d0:08:c8:77:db:d4:3b:67: a4:30:47:2a:28:e1:d8:45:f8:d6:75:d1:e3:37:6a:1a:a6:ec: cc:db:16:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqkgE+6KXzz0kjmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MWE4ODhjZDgtZmYzMC00MWU0LWE3NDYtZDQxNjk3YmM5NThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDxCYarcgXQaJMjh5mE5I5XyLMdzXF4aLmRN U5V0W0KKh34eiavk5y6V69k/64Mf5T9uEwwVjgon5inC/MtgPL/SHjjGNuG+DLYY 5d4i3zD3bGwjcXlQMTX9doK5+OyuPHFghVfAhLbU+fZbvaLmK/BSkaf4veRhj9Tu qcy4fhsqklw7f0G6POpCKMHQg9t0mAN9DGwBhsPt7H6f30CsqCuI/mPc9pcSCW5G 0/jpfJpOyXqKLd9Kl8rE2gjcZtB8z7pBYpXnW1qmHgeexvuXPMJEgznHjloBTgpk Mq9CHaP8lKIXeucghH6aLtsq4Tm2UGY8m715E3n36APwwXLmtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJzDyQ0N6MRoAZh7Mema+p8W0k0xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTMzY2FiNGYtNWRkYS0z NmNhLWE5YTctYjFkOTRjYmZlMjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGID2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHY1WAk9nemkI1/+VP8D1VG1EOIbZ5RDDQ2PM1EKHZImGnu8j/V64R/ h50UXVNlhUu2GozZA6qH+3ua+2l6VJK1HJ/9rwkKyd0S7VLWXgvEM75DibIs2nZq 4goRG8z5hsBOWS3Tl7P6xwNE4yApZVOkFvhAvgyNth+1ZlYwYHGt281BB0CWAOUt eDKGzF0C7gQGgjgk3G73mCSnhFdhc4bKvui9xQQl/xLIK7NhhJZCxP8jqP/n2i0D CmtQ31LxNkylxSO1sxp9X+338I7Yl/sT9oHhglQIDQa/hndK68yIjjbQCMh329Q7 Z6QwRyoo4dhF+NZ10eM3ahqm7MzbFg4= -----END CERTIFICATE-----Generated at Wed Oct 22 05:43:13 2025 by rpki-client