$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1fcd2b23-95a6-395c-9484-ed6b3fa2e810.roa File: 1fcd2b23-95a6-395c-9484-ed6b3fa2e810.roa (raw, json) Hash identifier: 9M3PGWrXCof2Si7Xsv/p2jiGxfaRvaT2KKM8dV3i95Q= Subject key identifier: AC:4D:3D:BF:43:A6:EE:14:77:FD:9A:8D:B8:7A:B2:F8:03:EA:E6:D8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB8FD92BF8F54F56E19FC80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1fcd2b23-95a6-395c-9484-ed6b3fa2e810.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 7725 IP address blocks: 24.125.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:fd:92:bf:8f:54:f5:6e:19:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=d96ee88c-6b09-4250-9eda-ff8bb080095f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a6:d4:2d:c6:07:95:4f:a1:67:d8:3e:3c:c9: 7a:1a:e9:f2:0e:7a:60:74:dd:7f:4e:64:80:4d:32: df:b7:61:3e:ff:a7:b4:e9:6a:37:c1:0f:2f:f7:e3: b0:d4:40:a2:ad:6f:0e:d0:0c:f0:1f:22:53:45:81: 1a:0a:8e:6a:05:fe:b2:cc:c5:7a:fc:46:ae:ca:75: 9b:6d:d9:4f:4e:c7:85:51:bb:f4:10:ca:45:c6:67: 78:2a:8c:d8:cc:eb:c1:25:46:8f:f1:a0:d9:c8:86: bc:27:f6:5e:17:ee:4d:0e:75:4d:b6:8c:5d:08:5e: 31:73:8b:0d:3b:db:1a:8d:19:89:14:49:a4:18:97: 12:bc:b0:aa:93:da:41:19:36:be:33:78:3f:94:e3: c6:7e:04:8e:46:d4:74:16:c4:36:99:e2:c7:51:f4: 49:1c:a6:c9:7f:ea:74:8f:0f:06:e9:3d:89:06:3b: 7d:31:cf:58:f5:a0:7f:83:4e:2a:80:1e:d0:51:f6: 62:e4:71:02:ac:a2:cf:eb:a3:87:29:43:92:e0:46: a5:88:98:86:b0:90:13:f4:45:38:65:ff:40:55:54: 39:cc:82:e0:b1:09:70:19:76:39:05:e6:f8:f9:61: 87:6c:86:c2:f8:61:9a:0d:18:9d:0f:2d:dc:7c:3f: 7a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:4D:3D:BF:43:A6:EE:14:77:FD:9A:8D:B8:7A:B2:F8:03:EA:E6:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1fcd2b23-95a6-395c-9484-ed6b3fa2e810.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.125.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:2b:77:9a:d5:c8:42:56:a9:a8:ac:ab:dd:31:1b:64:53:e8: 05:00:1c:df:1a:c3:ba:c4:3f:be:a1:e1:c3:b2:0a:ca:98:de: 84:40:d6:7e:63:9b:3a:28:f6:6e:88:c7:76:17:01:69:3e:6d: 3e:ff:8d:4a:67:17:2d:36:ac:e7:85:58:49:a0:ca:3d:64:b9: bf:b5:2f:79:83:70:2e:ea:3e:5c:bb:cf:b9:e3:5d:2e:0a:d6: 05:77:8e:00:ba:cc:25:ce:92:7b:10:88:15:3d:90:63:c2:2c: 05:3a:2c:c1:56:cf:65:ca:ef:21:ca:48:90:c0:b7:89:0e:60: b2:a3:3c:ac:e8:66:26:c9:8e:0a:b1:a3:30:1d:fc:8a:58:a4: a7:f8:61:22:23:24:df:5b:f9:35:87:27:60:f3:69:6e:25:39: 69:46:86:ec:82:83:a1:9e:e5:6e:a2:3d:5f:c7:16:25:bc:66: 5d:7f:a0:d5:db:0f:38:fc:18:4d:4a:16:03:18:f1:2e:49:01: f1:89:4a:8c:f7:e9:db:d3:a1:3e:a0:9f:b7:3d:db:1a:8a:45: 59:4c:63:69:8f:97:eb:24:0c:8c:c3:39:8f:7e:7d:22:78:9e: 19:ac:dd:8a:e7:a5:c9:2c:6f:56:db:5d:1e:4b:43:b5:47:0e: d3:a0:f5:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uP2Sv49U9W4Z/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ZDk2ZWU4OGMtNmIwOS00MjUwLTllZGEtZmY4YmIwODAwOTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgabULcYHlU+hZ9g+PMl6GunyDnpgdN1/TmSA TTLft2E+/6e06Wo3wQ8v9+Ow1ECirW8O0AzwHyJTRYEaCo5qBf6yzMV6/EauynWb bdlPTseFUbv0EMpFxmd4KozYzOvBJUaP8aDZyIa8J/ZeF+5NDnVNtoxdCF4xc4sN O9sajRmJFEmkGJcSvLCqk9pBGTa+M3g/lOPGfgSORtR0FsQ2meLHUfRJHKbJf+p0 jw8G6T2JBjt9Mc9Y9aB/g04qgB7QUfZi5HECrKLP66OHKUOS4EaliJiGsJAT9EU4 Zf9AVVQ5zILgsQlwGXY5Beb4+WGHbIbC+GGaDRidDy3cfD96xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKxNPb9Dpu4Ud/2ajbh6svgD6ubYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWZjZDJiMjMtOTVhNi0z OTVjLTk0ODQtZWQ2YjNmYTJlODEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHGH2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYrd5rVyEJWqaisq90xG2RT6AUAHN8aw7rEP76h4cOyCsqY3oRA1n5j mzoo9m6Ix3YXAWk+bT7/jUpnFy02rOeFWEmgyj1kub+1L3mDcC7qPly7z7njXS4K 1gV3jgC6zCXOknsQiBU9kGPCLAU6LMFWz2XK7yHKSJDAt4kOYLKjPKzoZibJjgqx ozAd/IpYpKf4YSIjJN9b+TWHJ2DzaW4lOWlGhuyCg6Ge5W6iPV/HFiW8Zl1/oNXb Dzj8GE1KFgMY8S5JAfGJSoz36dvToT6gn7c92xqKRVlMY2mPl+skDIzDOY9+fSJ4 nhms3Yrnpcksb1bbXR5LQ7VHDtOg9f8= -----END CERTIFICATE-----Generated at Mon Oct 20 03:44:34 2025 by rpki-client