$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f5cff194-f129-3b20-8da7-54fa51f0758d.roa File: f5cff194-f129-3b20-8da7-54fa51f0758d.roa (raw, json) Hash identifier: sZcPml9ShcTRI01/YZViMEM4yaRFwGlDFIRW7aS4KOE= Subject key identifier: 8C:BE:B8:2B:71:41:D6:4B:C9:5F:13:67:F0:54:71:C2:A9:BF:11:93 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A99A051A103285D1C15880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f5cff194-f129-3b20-8da7-54fa51f0758d.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 24.147.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:9a:05:1a:10:32:85:d1:c1:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=d246a764-86d7-4f33-9afb-7ca00c562394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2c:31:6b:f5:83:56:5f:90:54:86:96:82:28: 7a:e4:49:4d:14:7a:c7:51:66:af:1c:47:0a:17:1a: 85:0b:69:b4:4f:8c:4c:98:ef:92:cd:9f:ba:cc:f0: c6:7d:0b:24:bb:36:6b:08:2b:9c:db:9f:aa:eb:00: 28:23:73:92:c9:5b:f5:20:6e:42:3a:5f:f7:7b:b3: d8:b0:49:d4:af:24:96:96:b9:ff:9d:d2:ca:44:3e: 68:12:ce:c3:a3:a0:34:d8:f7:9f:2c:f6:82:68:e0: f5:d3:96:5e:be:1a:9c:3f:6c:65:03:e4:9a:a4:fa: 04:31:d0:66:16:c0:8b:58:a2:9f:c1:61:18:3f:01: 6e:77:47:69:1d:20:da:5d:0b:5e:aa:80:f3:91:31: 55:d4:88:ca:de:ee:b4:e4:7a:2f:29:00:37:22:cd: 00:3d:11:b9:b2:25:b3:74:39:42:a9:27:08:74:23: a2:ba:9e:48:34:a0:1d:58:a6:12:e4:0b:7c:45:df: cc:94:48:f3:54:e6:b2:7d:33:71:c3:1a:b8:ab:e4: 6f:11:c3:c2:c4:78:4f:6b:06:45:71:ce:ce:ee:c6: 25:10:a6:17:34:9b:a6:20:fa:6f:27:de:ba:81:79: 65:38:d3:28:8e:ac:6b:d2:9d:48:db:dc:7f:2a:4b: 54:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:BE:B8:2B:71:41:D6:4B:C9:5F:13:67:F0:54:71:C2:A9:BF:11:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f5cff194-f129-3b20-8da7-54fa51f0758d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.147.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:f8:13:97:37:3d:34:a1:22:e3:b3:d7:43:b8:b3:07:b8:41: 18:84:a5:4c:7f:c6:d5:38:9e:6f:a8:27:97:8f:2d:38:a8:6d: ad:16:5c:81:07:e0:18:19:0a:2a:5b:2d:be:6b:01:5d:99:92: d3:64:be:f4:2a:ea:c3:fb:bb:0e:01:45:93:b7:d4:15:cd:b2: d7:02:8f:5a:ac:12:c3:44:85:ef:17:c3:48:2f:67:cc:ee:17: 27:e2:28:5a:de:7a:3a:11:bb:a8:76:9b:34:ec:57:8e:98:fc: 53:c1:d2:67:3b:be:d1:d7:f5:9f:f0:2c:e0:19:bc:0a:65:1e: bc:ac:d6:cd:38:5d:6f:b7:61:78:39:7f:8b:f7:2d:16:e3:b3: 2e:be:55:57:30:e3:10:cf:1c:52:d4:a4:95:72:3b:c6:c7:f9: af:4c:f8:17:87:a1:eb:61:18:28:a1:66:37:68:a9:eb:cb:20: 82:e6:37:6e:20:fe:20:fc:28:4b:cb:04:6b:51:64:99:70:13: 04:9f:3b:a1:1f:33:e9:cb:17:19:97:b6:d6:f8:b0:91:b6:81: 8c:c6:6f:41:d3:65:0e:45:c0:1b:be:5f:14:26:75:d8:ea:51: 82:8d:1c:73:8c:db:cc:23:be:fa:70:13:48:40:f3:da:e5:dc: 3f:36:c2:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqZoFGhAyhdHBWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZDI0NmE3NjQtODZkNy00ZjMzLTlhZmItN2NhMDBjNTYyMzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iwxa/WDVl+QVIaWgih65ElNFHrHUWavHEcK FxqFC2m0T4xMmO+SzZ+6zPDGfQskuzZrCCuc25+q6wAoI3OSyVv1IG5COl/3e7PY sEnUrySWlrn/ndLKRD5oEs7Do6A02PefLPaCaOD105ZevhqcP2xlA+SapPoEMdBm FsCLWKKfwWEYPwFud0dpHSDaXQteqoDzkTFV1IjK3u605HovKQA3Is0APRG5siWz dDlCqScIdCOiup5INKAdWKYS5At8Rd/MlEjzVOayfTNxwxq4q+RvEcPCxHhPawZF cc7O7sYlEKYXNJumIPpvJ966gXllONMojqxr0p1I29x/KktU0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIy+uCtxQdZLyV8TZ/BUccKpvxGTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjVjZmYxOTQtZjEyOS0z YjIwLThkYTctNTRmYTUxZjA3NThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGJOYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEL4E5c3PTShIuOz10O4swe4QRiEpUx/xtU4nm+oJ5ePLTioba0WXIEH 4BgZCipbLb5rAV2ZktNkvvQq6sP7uw4BRZO31BXNstcCj1qsEsNEhe8Xw0gvZ8zu FyfiKFreejoRu6h2mzTsV46Y/FPB0mc7vtHX9Z/wLOAZvAplHrys1s04XW+3YXg5 f4v3LRbjsy6+VVcw4xDPHFLUpJVyO8bH+a9M+BeHoethGCihZjdoqevLIILmN24g /iD8KEvLBGtRZJlwEwSfO6EfM+nLFxmXttb4sJG2gYzGb0HTZQ5FwBu+XxQmddjq UYKNHHOM28wjvvpwE0hA89rl3D82wnM= -----END CERTIFICATE-----Generated at Tue Oct 21 19:42:09 2025 by rpki-client