$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c73f0541-3e9c-3688-8b9e-818456ac6585.roa File: c73f0541-3e9c-3688-8b9e-818456ac6585.roa (raw, json) Hash identifier: v8SKNRS2bKkczLFAOtH2B+P3Ibc2p0IfkugtmD97VvQ= Subject key identifier: FE:F7:0A:EC:C9:86:DA:ED:3A:AC:AA:95:1D:CC:01:82:AC:B4:F3:A6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A89DE8309FB4D59E0ACE00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c73f0541-3e9c-3688-8b9e-818456ac6585.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 24.128.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:9d:e8:30:9f:b4:d5:9e:0a:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=441b5649-59cb-4a91-b793-11df149b29af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:df:2a:c6:11:5d:7e:99:b3:de:ab:da:77:69: a4:8a:43:74:66:31:2a:49:cc:03:d2:af:7c:d3:0b: 22:35:1c:50:82:c2:be:8c:01:83:33:b0:77:c8:23: b7:c6:a3:bd:f7:33:f9:05:86:74:dd:54:ba:c7:e2: 13:1c:e4:25:a6:3c:67:f2:68:bb:81:0f:d9:05:88: 97:aa:60:dc:ff:14:7f:cc:98:a0:b7:9f:89:11:29: fd:b0:d2:18:da:a2:29:da:0f:df:88:ca:e9:82:80: 3e:63:d6:e7:ee:af:90:d3:de:da:82:95:59:ac:f8: 01:1e:db:e3:c0:22:77:f8:06:b0:e0:f5:3d:84:1a: ef:bb:29:97:a1:92:9e:07:50:b4:4b:63:9b:e4:ee: 10:84:11:6f:c1:71:1a:d2:ed:36:ad:3f:2f:46:de: cd:b4:00:b5:e6:70:42:67:b2:46:97:2c:de:7b:b2: 18:e5:1a:29:cf:56:db:ec:b1:b1:af:7d:92:33:c2: a9:d0:12:e0:42:d1:d9:0c:57:b2:32:d7:52:ec:4e: c4:c3:1f:8a:61:13:6a:be:68:21:5e:54:b2:35:a5: b2:2a:aa:b5:6f:48:2e:82:45:09:64:91:1f:e8:80: 66:90:fa:6e:ff:c9:5e:3e:11:88:6c:1b:80:5a:4e: c6:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F7:0A:EC:C9:86:DA:ED:3A:AC:AA:95:1D:CC:01:82:AC:B4:F3:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c73f0541-3e9c-3688-8b9e-818456ac6585.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.128.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:5a:bb:c2:27:2a:04:70:c0:89:2d:00:b3:86:2e:31:1e:f9: a6:24:ca:2c:a8:eb:d1:4e:ba:6e:79:49:c5:ff:9b:8d:a4:93: c1:54:03:6e:bc:d2:31:33:da:d9:20:72:ea:51:60:5e:df:35: 01:01:7d:1e:da:56:4f:35:9b:0b:c7:f2:aa:3d:23:7b:24:e4: a5:d2:77:10:e4:6e:01:18:3f:c4:13:a2:e8:73:1b:85:75:ca: 2d:5c:09:d0:8e:87:2f:a9:a8:85:98:2a:a8:e8:13:65:38:16: e4:96:75:9f:29:b6:31:ef:bf:ff:36:bf:c9:90:c9:7c:2c:43: 16:02:d5:66:8b:47:0a:3d:11:88:c4:81:af:42:5a:9c:f3:2e: 1e:b6:4e:0d:32:6f:65:a0:f3:63:af:89:4b:e6:e2:9a:19:2b: e8:17:53:69:28:11:5b:34:f3:9e:02:cc:35:e2:8e:62:79:c8: ce:01:3d:41:7a:bd:4a:bf:1a:26:c8:ea:65:d2:df:4d:40:ec: a9:ca:e4:11:09:04:d0:70:17:bd:92:30:c4:77:80:5a:02:dd: 22:d6:a6:5a:02:80:30:16:aa:b7:43:b7:3c:94:e9:d7:3b:2a: c4:64:35:db:38:9c:1a:7d:27:ac:31:7c:58:59:c1:11:1e:3b: 8a:2b:ae:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqJ3oMJ+01Z4KzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NDQxYjU2NDktNTljYi00YTkxLWI3OTMtMTFkZjE0OWIyOWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAod8qxhFdfpmz3qvad2mkikN0ZjEqScwD0q98 0wsiNRxQgsK+jAGDM7B3yCO3xqO99zP5BYZ03VS6x+ITHOQlpjxn8mi7gQ/ZBYiX qmDc/xR/zJigt5+JESn9sNIY2qIp2g/fiMrpgoA+Y9bn7q+Q097agpVZrPgBHtvj wCJ3+Aaw4PU9hBrvuymXoZKeB1C0S2Ob5O4QhBFvwXEa0u02rT8vRt7NtAC15nBC Z7JGlyzee7IY5Ropz1bb7LGxr32SM8Kp0BLgQtHZDFeyMtdS7E7Ewx+KYRNqvmgh XlSyNaWyKqq1b0gugkUJZJEf6IBmkPpu/8lePhGIbBuAWk7G8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP73CuzJhtrtOqyqlR3MAYKstPOmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzczZjA1NDEtM2U5Yy0z Njg4LThiOWUtODE4NDU2YWM2NTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGICoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVau8InKgRwwIktALOGLjEe+aYkyiyo69FOum55ScX/m42kk8FUA268 0jEz2tkgcupRYF7fNQEBfR7aVk81mwvH8qo9I3sk5KXSdxDkbgEYP8QTouhzG4V1 yi1cCdCOhy+pqIWYKqjoE2U4FuSWdZ8ptjHvv/82v8mQyXwsQxYC1WaLRwo9EYjE ga9CWpzzLh62Tg0yb2Wg82OviUvm4poZK+gXU2koEVs0854CzDXijmJ5yM4BPUF6 vUq/GibI6mXS301A7KnK5BEJBNBwF72SMMR3gFoC3SLWploCgDAWqrdDtzyU6dc7 KsRkNds4nBp9J6wxfFhZwREeO4orrnY= -----END CERTIFICATE-----Generated at Tue Oct 21 22:03:50 2025 by rpki-client