$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/00128f3c-bc09-3e04-8d37-8fab5a510106.roa File: 00128f3c-bc09-3e04-8d37-8fab5a510106.roa (raw, json) Hash identifier: txS1V2kqmhRx4E9Ep/Tu3T17FD2iqeVwgNxMqIPgoj8= Subject key identifier: DE:58:B2:0A:77:3D:CD:69:B5:9A:9C:8F:11:D0:AD:59:F4:00:C2:BE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB7EF4CC161ADA62FE4C680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/00128f3c-bc09-3e04-8d37-8fab5a510106.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 13367 IP address blocks: 24.7.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:ef:4c:c1:61:ad:a6:2f:e4:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=64c9e4cc-2ec9-4f82-bd53-a307dae0d844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1d:ff:ad:eb:2f:f4:3c:bc:2c:c3:c2:4f:a4: 98:89:d8:3a:f7:13:52:ca:7f:5b:80:a0:84:d1:3e: 1b:91:3e:9c:72:03:b2:92:ce:1e:2a:06:90:b5:6a: 66:49:90:1e:02:44:86:4d:b3:27:7f:0b:44:f9:41: d0:71:d5:7f:5c:7a:30:cd:c0:db:17:9f:88:dd:a1: 16:ae:c8:dd:51:8b:6e:ca:c1:9e:23:e2:08:ed:82: 0c:e7:dd:af:54:23:4a:ad:cf:e9:0d:7b:c6:3d:54: 4f:37:8b:f5:af:8b:5f:34:32:e5:de:dd:10:22:a1: 83:53:03:d6:09:bf:af:86:d0:cb:82:dd:63:f1:eb: 94:d3:0f:2c:19:dd:65:09:28:d5:86:80:94:86:6d: 15:cf:99:f7:9f:30:9e:09:ee:9a:46:8d:c1:c5:c6: 88:a5:66:80:90:3c:30:de:58:d4:b6:13:ab:47:2d: c0:07:e3:59:74:94:87:f7:d7:07:af:62:d9:6b:43: b1:ff:12:90:df:2d:4a:a9:26:42:86:02:a5:54:ad: 33:a6:97:26:d2:0f:46:f4:46:a7:30:b4:b3:f5:5d: 30:57:66:3c:b4:b1:6c:bc:ea:e3:1b:d9:fd:19:70: 95:a8:d6:76:65:a1:1e:b2:43:2b:37:f9:ae:a6:c6: 7a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:58:B2:0A:77:3D:CD:69:B5:9A:9C:8F:11:D0:AD:59:F4:00:C2:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/00128f3c-bc09-3e04-8d37-8fab5a510106.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.7.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:1a:31:ae:67:9f:5b:b5:dc:25:58:43:33:f8:38:0a:9b:1b: 47:b8:0d:71:ed:96:83:c9:ab:1f:3b:7e:5c:64:a8:60:15:ce: 06:4a:94:e7:32:f2:33:b6:67:e0:4b:d7:c3:83:0c:0c:93:d5: bd:7c:6a:34:79:94:49:38:ae:6b:ab:2d:ec:2d:4a:91:14:b8: e3:20:46:3e:ad:e9:13:b0:d0:42:97:67:6a:7f:5b:8c:1d:e7: 86:b0:df:77:27:9d:1d:64:ef:90:f5:0a:d4:c8:f5:4d:83:ec: ef:bc:3f:4d:0e:a3:93:a8:dc:62:52:a4:08:fe:c8:a8:50:df: ce:61:42:10:d3:58:69:4b:81:c0:d0:4c:45:5a:ea:e0:1b:15: 4f:80:0c:b8:0d:c5:8f:a2:ca:9c:22:db:1e:61:93:3b:06:f0: 84:3b:71:6e:35:7b:96:58:b1:ed:fa:0f:b3:7d:37:8a:1e:18: ae:21:48:51:8b:36:69:3c:47:86:ca:95:7a:1f:b4:51:45:ff: 14:8b:23:0e:f8:44:29:c8:7b:57:89:e4:0f:91:a3:7d:53:08: de:b1:f9:dd:c2:3e:4a:da:fe:32:a7:70:4b:3e:7f:33:1c:79: 42:62:10:a4:ef:96:09:4f:d9:24:85:40:ea:cd:09:81:ab:70: f1:75:c1:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9t+9MwWGtpi/kxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NjRjOWU0Y2MtMmVjOS00ZjgyLWJkNTMtYTMwN2RhZTBkODQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAph3/resv9Dy8LMPCT6SYidg69xNSyn9bgKCE 0T4bkT6ccgOyks4eKgaQtWpmSZAeAkSGTbMnfwtE+UHQcdV/XHowzcDbF5+I3aEW rsjdUYtuysGeI+II7YIM592vVCNKrc/pDXvGPVRPN4v1r4tfNDLl3t0QIqGDUwPW Cb+vhtDLgt1j8euU0w8sGd1lCSjVhoCUhm0Vz5n3nzCeCe6aRo3BxcaIpWaAkDww 3ljUthOrRy3AB+NZdJSH99cHr2LZa0Ox/xKQ3y1KqSZChgKlVK0zppcm0g9G9Ean MLSz9V0wV2Y8tLFsvOrjG9n9GXCVqNZ2ZaEeskMrN/mupsZ6kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5Ysgp3Pc1ptZqcjxHQrVn0AMK+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDAxMjhmM2MtYmMwOS0z ZTA0LThkMzctOGZhYjVhNTEwMTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGAfEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYaMa5nn1u13CVYQzP4OAqbG0e4DXHtloPJqx87flxkqGAVzgZKlOcy 8jO2Z+BL18ODDAyT1b18ajR5lEk4rmurLewtSpEUuOMgRj6t6ROw0EKXZ2p/W4wd 54aw33cnnR1k75D1CtTI9U2D7O+8P00Oo5Oo3GJSpAj+yKhQ385hQhDTWGlLgcDQ TEVa6uAbFU+ADLgNxY+iypwi2x5hkzsG8IQ7cW41e5ZYse36D7N9N4oeGK4hSFGL Nmk8R4bKlXoftFFF/xSLIw74RCnIe1eJ5A+Ro31TCN6x+d3CPkra/jKncEs+fzMc eUJiEKTvlglP2SSFQOrNCYGrcPF1wUc= -----END CERTIFICATE-----Generated at Mon Oct 20 06:44:11 2025 by rpki-client