$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8365ee84-0a37-372b-b906-8e9583044f8e.roa File: 8365ee84-0a37-372b-b906-8e9583044f8e.roa (raw, json) Hash identifier: 3rw7L4/QmQtOyxmkKZKZDJKS6hssV1+iL7kBkiKpdZU= Subject key identifier: E7:1E:2E:28:B9:B8:CE:39:84:8E:90:E1:06:7E:C3:D6:E4:80:8A:74 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA47CDB4CC638AD7D03B80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8365ee84-0a37-372b-b906-8e9583044f8e.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 24.128.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:47:cd:b4:cc:63:8a:d7:d0:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=8d6c828e-0ed8-44ea-b42d-e90263ac3300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ce:28:e6:7a:00:c5:50:4e:7d:26:ea:ad:c9: 8f:22:9f:e1:1f:58:f0:41:3f:37:a9:ee:85:fd:e8: 01:ab:65:b1:6c:b9:df:25:08:7a:59:5b:8c:58:a7: 45:e0:26:a9:53:a9:4e:8c:aa:39:39:bc:46:cb:e9: 76:5b:6e:a2:f2:6c:b9:f1:16:22:55:38:07:f3:39: 72:f8:f0:89:f8:b3:14:50:e3:4b:a2:f1:5b:df:d6: 50:dd:00:ee:18:26:78:83:44:fc:83:7d:39:0a:23: 04:ae:49:ba:21:ac:b2:0e:6a:2c:b8:9c:84:90:bb: 06:6a:12:f5:09:1f:14:2a:3d:5e:bc:4d:30:ca:1e: 61:e0:e2:a7:8e:39:10:e8:58:a0:6d:c9:20:a1:87: c9:ab:a1:14:c1:0f:fc:57:89:b0:db:8c:d4:8c:5b: fb:ac:c3:01:4d:bb:1d:b5:f7:d8:53:ad:3b:e1:16: af:a7:a6:f0:40:d3:29:fd:45:62:c1:07:a5:e0:81: b2:33:17:cc:a5:af:53:7a:75:b4:2b:7d:2c:c8:c2: fa:0c:d7:0a:17:ee:ef:50:09:ef:78:9b:17:b5:9a: 6e:7c:15:91:f3:c0:11:47:a4:53:4b:8e:64:a4:7f: 25:e5:42:e3:88:e1:61:09:7e:e8:b4:a9:29:40:97: 33:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:1E:2E:28:B9:B8:CE:39:84:8E:90:E1:06:7E:C3:D6:E4:80:8A:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8365ee84-0a37-372b-b906-8e9583044f8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.128.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:74:9e:a2:e9:fe:8c:32:f5:5f:78:99:f5:ec:c6:5a:ab:a6: a8:2a:b0:a8:f5:31:5a:dd:9a:6a:83:4f:51:52:72:46:eb:00: ce:2a:1e:ff:17:fe:f8:f0:c1:60:36:d6:69:8b:4b:0d:39:ef: 15:9c:27:b3:1b:d7:95:fc:94:70:a6:b8:7c:43:5b:7e:5e:11: 29:6b:9f:19:01:48:ab:ef:2d:5a:19:3b:25:5d:06:bc:46:fa: 2e:7b:fe:e0:ec:08:11:8b:df:ec:a1:01:d3:5a:f8:1d:b0:1e: ea:42:0b:a5:a2:37:cd:4e:5c:66:6e:47:10:fd:49:ca:59:ac: 8e:2e:cd:b5:9a:58:65:07:3f:2f:89:53:f0:2b:f9:4f:92:a2: 09:22:aa:48:a7:b5:ae:32:fc:d7:e0:a2:94:7e:f9:6f:af:4f: 6a:4a:2c:d6:ae:fc:46:f4:88:39:88:17:a3:c1:8d:c4:75:e4: ac:c9:39:6e:ae:e6:24:40:04:fc:62:be:25:2d:fb:88:b1:23: 42:6a:ba:6e:b2:be:ac:79:15:f8:02:5f:2b:55:23:5e:a3:5c: 3a:2c:5c:62:2c:ab:87:d2:03:e8:3d:93:da:a1:d1:87:84:4e: 54:37:c7:ad:04:be:4a:0f:e4:5f:53:75:a9:8a:6d:0d:ab:48: f1:65:9c:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqkfNtMxjitfQO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk OGQ2YzgyOGUtMGVkOC00NGVhLWI0MmQtZTkwMjYzYWMzMzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAls4o5noAxVBOfSbqrcmPIp/hH1jwQT83qe6F /egBq2WxbLnfJQh6WVuMWKdF4CapU6lOjKo5ObxGy+l2W26i8my58RYiVTgH8zly +PCJ+LMUUONLovFb39ZQ3QDuGCZ4g0T8g305CiMErkm6IayyDmosuJyEkLsGahL1 CR8UKj1evE0wyh5h4OKnjjkQ6FigbckgoYfJq6EUwQ/8V4mw24zUjFv7rMMBTbsd tffYU6074Ravp6bwQNMp/UViwQel4IGyMxfMpa9TenW0K30syML6DNcKF+7vUAnv eJsXtZpufBWR88ARR6RTS45kpH8l5ULjiOFhCX7otKkpQJczQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOceLii5uM45hI6Q4QZ+w9bkgIp0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODM2NWVlODQtMGEzNy0z NzJiLWI5MDYtOGU5NTgzMDQ0ZjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGIDSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIx0nqLp/owy9V94mfXsxlqrpqgqsKj1MVrdmmqDT1FSckbrAM4qHv8X /vjwwWA21mmLSw057xWcJ7Mb15X8lHCmuHxDW35eESlrnxkBSKvvLVoZOyVdBrxG +i57/uDsCBGL3+yhAdNa+B2wHupCC6WiN81OXGZuRxD9ScpZrI4uzbWaWGUHPy+J U/Ar+U+Sogkiqkinta4y/NfgopR++W+vT2pKLNau/Eb0iDmIF6PBjcR15KzJOW6u 5iRABPxiviUt+4ixI0Jqum6yvqx5FfgCXytVI16jXDosXGIsq4fSA+g9k9qh0YeE TlQ3x60EvkoP5F9TdamKbQ2rSPFlnFA= -----END CERTIFICATE-----Generated at Tue Oct 21 21:58:37 2025 by rpki-client