$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a40f2ed1-37cd-30e4-9a7d-65bae2bb28b3.roa File: a40f2ed1-37cd-30e4-9a7d-65bae2bb28b3.roa (raw, json) Hash identifier: 5gWgmkcUnkWRhO8xlQQxfUN0X6xn7GBAW7POOvtdREw= Subject key identifier: B8:02:F0:C0:35:01:A8:8D:D0:3F:CD:2C:50:D1:B8:2E:A1:41:EE:05 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A7EF896A1AE84D44D1F500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a40f2ed1-37cd-30e4-9a7d-65bae2bb28b3.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 24.2.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:ef:89:6a:1a:e8:4d:44:d1:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=a9028a49-45e7-408c-84b3-6a7070d198ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ed:1b:56:4d:6e:39:7e:71:81:8e:51:3d:17: 97:54:dc:48:7e:95:83:5e:90:59:c3:6f:33:30:b6: 13:5e:dd:56:84:db:8e:f7:8f:ff:10:87:d7:97:29: 18:a0:09:42:73:e8:3f:23:97:0d:81:33:a3:d0:8c: df:fe:f4:b8:54:dd:81:f7:f4:cb:5c:d6:6b:da:bd: 31:a6:43:c3:10:21:d0:ea:a4:73:73:64:27:26:ee: 0f:ea:5e:00:4e:86:30:9e:88:0d:57:51:a4:04:04: e2:d5:62:a9:47:47:1a:26:e9:22:6a:76:ab:1d:bd: bf:54:a4:1e:90:1b:7f:4b:b6:0c:2c:7f:01:94:4f: 18:13:d0:d1:ba:a6:a1:1e:6b:d7:85:6f:0e:36:b0: d6:ea:cf:0c:01:8e:ee:5e:7e:87:a5:d9:0d:fe:3e: e8:32:29:86:66:66:68:2c:79:4c:af:52:d7:c4:71: 09:61:7c:18:a2:e2:30:25:a0:cc:89:ae:12:04:53: e7:a2:5f:1d:5f:db:2d:ca:08:31:67:62:ca:f2:f2: 6c:b0:16:8e:8f:f0:a5:78:dc:2f:72:40:30:08:20: 57:9a:20:1c:4e:07:49:58:ca:25:86:b4:fd:ee:b3: a0:8e:9f:46:1e:77:ec:9f:69:55:8d:ba:4d:cd:81: e8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:02:F0:C0:35:01:A8:8D:D0:3F:CD:2C:50:D1:B8:2E:A1:41:EE:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a40f2ed1-37cd-30e4-9a7d-65bae2bb28b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.2.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:dd:26:fc:78:48:b4:cb:24:37:1f:93:13:35:c5:82:2d:db: 82:33:78:a8:c7:0e:a7:dd:0c:1a:24:60:6e:64:ae:52:e5:a2: 9e:97:3d:bc:8a:75:cb:b4:5e:10:83:87:47:59:4f:26:54:ec: d8:92:85:f8:24:a6:cd:9d:65:eb:a6:a2:ef:f9:b4:c5:52:cf: f7:1f:4b:9e:e5:4b:b4:2f:a5:f4:ea:5e:0f:bc:fa:a9:72:6b: ed:cf:9b:97:52:d8:6a:31:c8:a1:4f:9c:f8:aa:7f:73:c1:15: 07:1a:63:a6:cd:52:af:e2:0f:b7:49:48:40:81:4c:fc:23:f0: e3:84:8f:74:2c:87:99:7e:f1:3b:26:e9:88:13:1a:3b:a9:43: 65:3b:e8:ec:6d:37:59:8f:7f:90:66:a0:7f:8d:2e:3a:3b:69: 22:b3:cc:9a:0c:bd:8f:21:77:28:e7:ca:57:7c:bd:27:82:79: 1b:a9:14:4e:f9:d1:6a:4e:fd:eb:fe:14:23:02:1a:ef:ed:95: f5:60:94:81:66:19:64:91:3c:f2:ae:f1:bc:9f:ec:9c:bb:8a: 84:2e:18:aa:27:81:57:bc:5a:c0:c0:fe:59:8e:4c:af:76:66: 8c:0c:45:7c:89:cf:a0:13:ef:55:0b:1d:e7:8b:fb:09:78:82: d8:de:44:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp++JahroTUTR9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YTkwMjhhNDktNDVlNy00MDhjLTg0YjMtNmE3MDcwZDE5OGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqu0bVk1uOX5xgY5RPReXVNxIfpWDXpBZw28z MLYTXt1WhNuO94//EIfXlykYoAlCc+g/I5cNgTOj0Izf/vS4VN2B9/TLXNZr2r0x pkPDECHQ6qRzc2QnJu4P6l4AToYwnogNV1GkBATi1WKpR0caJukianarHb2/VKQe kBt/S7YMLH8BlE8YE9DRuqahHmvXhW8ONrDW6s8MAY7uXn6HpdkN/j7oMimGZmZo LHlMr1LXxHEJYXwYouIwJaDMia4SBFPnol8dX9styggxZ2LK8vJssBaOj/CleNwv ckAwCCBXmiAcTgdJWMolhrT97rOgjp9GHnfsn2lVjbpNzYHojQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLgC8MA1AaiN0D/NLFDRuC6hQe4FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTQwZjJlZDEtMzdjZC0z MGU0LTlhN2QtNjViYWUyYmIyOGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGAKEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHdJvx4SLTLJDcfkxM1xYIt24IzeKjHDqfdDBokYG5krlLlop6XPbyK dcu0XhCDh0dZTyZU7NiShfgkps2dZeumou/5tMVSz/cfS57lS7QvpfTqXg+8+qly a+3Pm5dS2GoxyKFPnPiqf3PBFQcaY6bNUq/iD7dJSECBTPwj8OOEj3Qsh5l+8Tsm 6YgTGjupQ2U76OxtN1mPf5BmoH+NLjo7aSKzzJoMvY8hdyjnyld8vSeCeRupFE75 0WpO/ev+FCMCGu/tlfVglIFmGWSRPPKu8byf7Jy7ioQuGKongVe8WsDA/lmOTK92 ZowMRXyJz6AT71ULHeeL+wl4gtjeRMg= -----END CERTIFICATE-----Generated at Wed Oct 22 00:20:02 2025 by rpki-client