$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a0eac3e-ca03-3445-9560-502b81935ea9.roa File: 5a0eac3e-ca03-3445-9560-502b81935ea9.roa (raw, json) Hash identifier: p0NaYvG4mwVxxntkGpPNXDf1Z1g2GShUYcGw2fH9zXY= Subject key identifier: 09:12:E1:C7:1C:D6:D5:8E:8B:6A:F1:06:5E:59:7D:22:FE:2E:AE:C8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A7F8399BA9174D988AC0F8 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a0eac3e-ca03-3445-9560-502b81935ea9.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 24.60.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:f8:39:9b:a9:17:4d:98:8a:c0:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=fe2f82a5-7cc1-4ddf-b8b7-0b6e7c12d210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:3d:00:be:f8:e0:db:38:93:90:17:d2:4a:ec: 90:d7:9b:98:12:d0:ee:54:62:ee:1f:cf:a6:b2:b5: ee:b7:6d:29:9f:c0:d3:93:cf:ee:5b:f2:4c:4e:52: 70:c3:cc:cf:51:45:1f:6b:e5:98:cc:1d:30:d7:d2: 8d:6a:9d:85:20:f1:68:39:d2:13:66:95:f9:be:4c: 60:96:59:dd:70:96:f0:8c:61:df:02:52:d0:53:b0: 70:e9:f7:18:a9:90:c5:b9:67:a1:48:6e:c8:40:bd: 8a:ef:19:f2:cc:6c:de:b4:cb:2b:8f:90:d8:67:3c: 20:4c:8e:43:68:7c:f5:ce:8d:d8:ef:10:f4:83:ca: 88:7d:4b:47:c0:05:80:4c:5e:4d:0a:1f:15:51:02: 0d:a3:c0:c4:dc:52:df:ea:a0:87:5c:43:b8:d7:07: 0f:dc:bc:ef:59:ff:42:4d:11:d9:d2:4d:ff:43:91: ca:8b:b8:f5:1b:c8:58:f7:6c:5f:64:a8:a5:d4:ad: 84:4a:b5:6a:da:56:52:1a:a7:c1:22:5a:de:6b:41: b3:a0:d5:6c:68:3b:ee:cf:0c:eb:39:7b:f7:b3:d6: 86:ff:2c:c5:bc:87:72:30:a3:03:1e:7e:65:a7:a1: d3:f0:28:eb:d5:dd:30:cf:42:3b:61:1a:23:42:6f: 1b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:12:E1:C7:1C:D6:D5:8E:8B:6A:F1:06:5E:59:7D:22:FE:2E:AE:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a0eac3e-ca03-3445-9560-502b81935ea9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.60.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:66:3a:17:3e:fa:9b:27:06:04:ab:6e:24:8c:11:41:a6:9d: 71:19:e8:e3:36:90:53:1d:99:0b:29:69:a4:07:92:3b:dc:84: d5:c8:b6:4a:54:7e:a2:70:d3:11:80:78:1c:7b:7e:01:45:07: 63:4e:ae:a5:3a:b0:f7:0a:84:15:c7:69:d8:ff:3c:80:1f:2e: 1d:54:dc:e1:33:48:66:43:df:fa:be:d0:3b:cd:c5:13:d5:73: 15:5f:24:03:43:fa:e4:f8:25:bc:25:db:68:95:c0:2f:0a:f4: cb:01:9c:2a:6f:9c:40:3b:ea:f1:b9:57:99:5a:94:c1:0d:c0: 5c:7d:d2:39:74:6b:70:c2:60:9f:37:fb:9d:03:07:84:8a:15: 85:4d:ed:6b:1d:9a:d2:d6:64:f9:ef:85:a2:c7:ac:2e:77:f9: 42:f5:3a:34:fa:d2:c5:5c:73:9d:0c:62:ff:bc:d6:4c:c0:1e: 4c:21:0e:b0:bb:60:b2:1d:36:66:3d:4c:bb:46:79:9e:02:28: 36:cc:fe:48:06:71:36:ba:93:dc:72:fc:3f:ac:09:e9:f0:29: 8a:74:8d:8b:c3:98:47:9d:19:8c:a1:36:ca:9f:40:d4:eb:11: 3c:4f:a9:29:01:4b:9d:e0:18:c2:d2:bd:51:67:dd:c6:d1:8f: 6d:96:41:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp/g5m6kXTZiKwPgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZmUyZjgyYTUtN2NjMS00ZGRmLWI4YjctMGI2ZTdjMTJkMjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjD0Avvjg2ziTkBfSSuyQ15uYEtDuVGLuH8+m srXut20pn8DTk8/uW/JMTlJww8zPUUUfa+WYzB0w19KNap2FIPFoOdITZpX5vkxg llndcJbwjGHfAlLQU7Bw6fcYqZDFuWehSG7IQL2K7xnyzGzetMsrj5DYZzwgTI5D aHz1zo3Y7xD0g8qIfUtHwAWATF5NCh8VUQINo8DE3FLf6qCHXEO41wcP3LzvWf9C TRHZ0k3/Q5HKi7j1G8hY92xfZKil1K2ESrVq2lZSGqfBIlrea0GzoNVsaDvuzwzr OXv3s9aG/yzFvIdyMKMDHn5lp6HT8Cjr1d0wz0I7YRojQm8bMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkS4ccc1tWOi2rxBl5ZfSL+Lq7IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWEwZWFjM2UtY2EwMy0z NDQ1LTk1NjAtNTAyYjgxOTM1ZWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGDwIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ5mOhc++psnBgSrbiSMEUGmnXEZ6OM2kFMdmQspaaQHkjvchNXItkpU fqJw0xGAeBx7fgFFB2NOrqU6sPcKhBXHadj/PIAfLh1U3OEzSGZD3/q+0DvNxRPV cxVfJAND+uT4Jbwl22iVwC8K9MsBnCpvnEA76vG5V5lalMENwFx90jl0a3DCYJ83 +50DB4SKFYVN7WsdmtLWZPnvhaLHrC53+UL1OjT60sVcc50MYv+81kzAHkwhDrC7 YLIdNmY9TLtGeZ4CKDbM/kgGcTa6k9xy/D+sCenwKYp0jYvDmEedGYyhNsqfQNTr ETxPqSkBS53gGMLSvVFn3cbRj22WQeE= -----END CERTIFICATE-----Generated at Tue Oct 21 19:48:37 2025 by rpki-client