$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d739302a-345e-3fe8-9777-9a05f9de87df.roa File: d739302a-345e-3fe8-9777-9a05f9de87df.roa (raw, json) Hash identifier: 5REfKIxevnC18s6LUsuyqoGavsZdOy58O7zt8rbabMo= Subject key identifier: B7:9F:40:9D:BD:17:A0:7A:45:43:65:06:2B:13:B8:5E:DB:25:25:17 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A959F93A69F7B6CD48EB60 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d739302a-345e-3fe8-9777-9a05f9de87df.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33490 IP address blocks: 24.20.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:59:f9:3a:69:f7:b6:cd:48:eb:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=150e3016-2398-4cec-9b4e-1527b5970599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1f:d9:97:db:72:b7:b5:9b:df:7b:56:18:b4: 7c:7b:82:45:83:cd:99:67:c8:1d:65:d4:be:5e:d1: 93:42:0b:09:3f:18:5b:6d:95:24:26:a5:76:cf:cd: b3:70:c7:c2:16:02:66:73:f6:1f:f8:cd:ca:c3:44: fc:e0:fe:ac:33:a9:20:d7:73:b4:f8:c3:d3:37:e7: 0a:7d:20:ae:11:14:28:3a:4f:fb:53:8e:32:4d:81: ed:11:8a:71:39:18:02:f5:72:82:d1:b7:17:fa:cd: c0:55:41:fd:98:5c:68:c6:ef:0b:71:5a:98:ca:be: 9c:70:74:a2:97:cd:fe:9e:cf:d5:b1:97:79:0e:e7: c3:a5:14:14:bd:b6:18:8f:60:f1:5b:4f:cb:d8:af: 1c:d1:d0:99:78:63:87:25:b8:c0:4b:fa:d9:d8:3d: 82:88:65:c1:b1:d6:1d:32:95:24:1e:77:c4:13:cc: 70:d8:85:a3:e8:2d:d9:f8:66:60:84:ad:cb:06:90: 4c:d9:f7:11:b7:ba:ee:ed:d8:04:73:77:49:7b:c8: 4c:67:79:42:8a:5a:e1:9a:eb:ef:77:8d:75:ff:bf: 15:33:f5:7c:1d:73:48:6b:2e:9e:99:ed:6b:93:3e: 3d:05:5d:36:42:86:ed:0c:94:6b:76:45:c0:11:f3: d8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:9F:40:9D:BD:17:A0:7A:45:43:65:06:2B:13:B8:5E:DB:25:25:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d739302a-345e-3fe8-9777-9a05f9de87df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.20.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:12:ae:fd:46:7b:9e:7b:91:01:81:d5:2a:d7:e6:00:8c:5d: ce:9b:21:12:2d:7b:4a:ee:e9:05:fc:8d:97:c6:59:e0:84:70: 2a:d6:7f:3b:d7:bd:3d:bb:f4:6d:16:6f:02:aa:61:22:f9:4a: fc:56:6a:a2:2d:14:58:d7:35:70:92:ff:d1:13:d3:ec:b6:48: 69:ad:6b:9c:02:cd:5a:ad:5f:2f:1e:02:86:ae:6a:e1:b5:4c: e5:f7:f4:99:79:dd:54:bd:26:5e:0b:2b:8a:10:58:15:78:c8: 4c:ba:62:81:eb:65:45:56:76:41:42:1b:e3:c0:2d:9b:3f:b5: 2d:74:4e:bb:4c:e4:4a:07:c8:3e:d4:57:3f:04:35:1d:18:80: f7:c8:f9:5d:10:53:99:ee:bd:dc:92:e1:ea:7d:ec:4e:ab:ee: d9:1b:21:4a:57:37:ff:d8:30:a7:07:cc:8a:3a:1e:42:c6:7e: 83:67:35:21:bf:3d:07:4e:dd:82:44:e6:e7:e6:58:96:b1:92: b1:54:35:56:8d:3b:52:a6:a7:8b:17:21:0c:03:c6:fe:ff:4f: ae:9a:db:10:50:86:17:87:9c:b8:4b:7c:b7:90:96:61:70:a2: 24:0f:54:1f:31:34:4d:81:05:70:c5:d1:6d:1b:d6:ce:82:07: b7:df:3b:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqVn5Omn3ts1I62AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MTUwZTMwMTYtMjM5OC00Y2VjLTliNGUtMTUyN2I1OTcwNTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlB/Zl9tyt7Wb33tWGLR8e4JFg82ZZ8gdZdS+ XtGTQgsJPxhbbZUkJqV2z82zcMfCFgJmc/Yf+M3Kw0T84P6sM6kg13O0+MPTN+cK fSCuERQoOk/7U44yTYHtEYpxORgC9XKC0bcX+s3AVUH9mFxoxu8LcVqYyr6ccHSi l83+ns/VsZd5DufDpRQUvbYYj2DxW0/L2K8c0dCZeGOHJbjAS/rZ2D2CiGXBsdYd MpUkHnfEE8xw2IWj6C3Z+GZghK3LBpBM2fcRt7ru7dgEc3dJe8hMZ3lCilrhmuvv d411/78VM/V8HXNIay6eme1rkz49BV02QobtDJRrdkXAEfPYxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLefQJ29F6B6RUNlBisTuF7bJSUXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDczOTMwMmEtMzQ1ZS0z ZmU4LTk3NzctOWEwNWY5ZGU4N2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGBQoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgSrv1Ge557kQGB1SrX5gCMXc6bIRIte0ru6QX8jZfGWeCEcCrWfzvX vT279G0WbwKqYSL5SvxWaqItFFjXNXCS/9ET0+y2SGmta5wCzVqtXy8eAoauauG1 TOX39Jl53VS9Jl4LK4oQWBV4yEy6YoHrZUVWdkFCG+PALZs/tS10TrtM5EoHyD7U Vz8ENR0YgPfI+V0QU5nuvdyS4ep97E6r7tkbIUpXN//YMKcHzIo6HkLGfoNnNSG/ PQdO3YJE5ufmWJaxkrFUNVaNO1Kmp4sXIQwDxv7/T66a2xBQhheHnLhLfLeQlmFw oiQPVB8xNE2BBXDF0W0b1s6CB7ffO0A= -----END CERTIFICATE-----Generated at Tue Oct 21 21:58:50 2025 by rpki-client