$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33333e7f-f6cd-3cf9-9be5-41c7894614a7.roa File: 33333e7f-f6cd-3cf9-9be5-41c7894614a7.roa (raw, json) Hash identifier: AFyWSFRCOm4e4PYhXSqaW+FhKkJCXigvyRoXBDCqOXU= Subject key identifier: 9D:DA:76:5C:10:A9:84:1B:2E:99:AD:4C:51:49:28:38:51:78:BF:C9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A7F4987358312139CCCB90 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33333e7f-f6cd-3cf9-9be5-41c7894614a7.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 24.34.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:f4:98:73:58:31:21:39:cc:cb:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=e0a4eea1-df09-439a-a422-d49ea55ee8dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9e:d5:91:73:13:46:18:28:a0:f3:d7:1e:0a: 64:b1:bf:2c:28:0d:0b:29:90:59:da:d6:45:40:a8: ea:83:94:b5:a4:39:7e:57:b6:2b:48:f7:f8:a0:4d: 45:b4:e5:78:07:e5:fd:d4:7d:29:16:9a:8f:ce:80: 92:be:7c:5f:f7:17:3c:12:f6:ac:7c:ce:f5:b9:76: b1:da:9a:a5:d8:f1:cc:da:30:6e:d5:7a:d7:40:4a: 13:26:4a:fe:d6:95:e7:2f:85:7b:27:8c:e2:aa:43: 1e:31:9e:35:4a:25:30:b6:82:e2:35:ab:89:79:66: 35:99:ac:78:13:d3:63:c6:e0:8b:28:a1:33:e0:50: f8:9e:89:82:dc:dd:75:66:a8:77:e5:5d:ae:eb:d7: 91:03:c7:59:ea:ab:08:92:79:bb:13:0e:22:e6:12: 8e:de:87:06:dc:5a:cc:fd:f2:4a:fd:48:b4:42:14: 2f:2f:b6:9d:8f:e0:5d:33:ec:41:6c:81:5c:88:18: c7:56:70:14:63:4c:8f:ae:44:d3:75:1e:6c:33:46: 66:24:f2:5d:19:13:ae:d8:45:64:6b:0d:e3:5c:d9: 3e:aa:8d:ae:e1:4b:f2:d8:ca:76:2f:84:d5:d9:86: 23:a8:ec:3c:b6:65:29:52:02:b9:32:b0:a5:02:f4: f8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:DA:76:5C:10:A9:84:1B:2E:99:AD:4C:51:49:28:38:51:78:BF:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33333e7f-f6cd-3cf9-9be5-41c7894614a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.34.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:35:81:ce:9c:93:6f:dd:f9:de:63:93:3d:60:d8:e5:ba:ad: cf:8c:48:8e:d6:48:6a:1c:91:74:ed:0b:8c:22:e7:7d:77:d6: 88:84:c8:10:95:2e:5b:28:10:38:1c:a8:b4:9d:c0:df:bd:bd: 0e:92:1a:3d:6e:fc:08:18:57:25:a6:9a:0e:4f:89:e6:71:20: 0d:42:d5:0a:1b:4d:7f:ec:27:c4:03:96:ae:70:09:12:7c:3a: f6:44:48:59:dc:da:36:eb:31:42:d9:80:5b:77:39:b6:e0:d6: 6b:1d:8b:ab:62:2e:5a:9f:fc:b1:c2:b6:38:29:8b:54:5f:3b: a2:d7:ec:80:8f:95:9e:c7:de:9f:51:48:b5:d0:52:48:84:9a: f1:17:97:86:90:8e:30:d8:e2:9e:bf:03:24:7d:c4:5a:bf:d9: 8b:47:29:a4:f6:fb:ff:e9:0e:fd:86:57:ab:06:65:b9:f0:91: 60:7a:01:4b:38:dc:80:d6:47:07:f8:92:30:bf:6c:29:1f:46: 42:12:00:63:bb:bd:6e:fe:dd:29:ec:2d:6e:95:d9:6f:38:c7: 6b:e7:25:5f:9a:69:96:56:2a:56:8b:dd:c6:23:04:f4:af:a6: 65:47:4c:01:f5:85:e7:d3:b7:f4:6d:9c:27:c3:88:ed:8a:a6: 68:44:d5:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp/SYc1gxITnMy5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZTBhNGVlYTEtZGYwOS00MzlhLWE0MjItZDQ5ZWE1NWVlOGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj57VkXMTRhgooPPXHgpksb8sKA0LKZBZ2tZF QKjqg5S1pDl+V7YrSPf4oE1FtOV4B+X91H0pFpqPzoCSvnxf9xc8EvasfM71uXax 2pql2PHM2jBu1XrXQEoTJkr+1pXnL4V7J4ziqkMeMZ41SiUwtoLiNauJeWY1max4 E9NjxuCLKKEz4FD4nomC3N11Zqh35V2u69eRA8dZ6qsIknm7Ew4i5hKO3ocG3FrM /fJK/Ui0QhQvL7adj+BdM+xBbIFciBjHVnAUY0yPrkTTdR5sM0ZmJPJdGROu2EVk aw3jXNk+qo2u4Uvy2Mp2L4TV2YYjqOw8tmUpUgK5MrClAvT4lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3adlwQqYQbLpmtTFFJKDhReL/JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzMzMzNlN2YtZjZjZC0z Y2Y5LTliZTUtNDFjNzg5NDYxNGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGCLQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHA1gc6ck2/d+d5jkz1g2OW6rc+MSI7WSGockXTtC4wi53131oiEyBCV LlsoEDgcqLSdwN+9vQ6SGj1u/AgYVyWmmg5PieZxIA1C1QobTX/sJ8QDlq5wCRJ8 OvZESFnc2jbrMULZgFt3Obbg1msdi6tiLlqf/LHCtjgpi1RfO6LX7ICPlZ7H3p9R SLXQUkiEmvEXl4aQjjDY4p6/AyR9xFq/2YtHKaT2+//pDv2GV6sGZbnwkWB6AUs4 3IDWRwf4kjC/bCkfRkISAGO7vW7+3SnsLW6V2W84x2vnJV+aaZZWKlaL3cYjBPSv pmVHTAH1hefTt/RtnCfDiO2KpmhE1ZQ= -----END CERTIFICATE-----Generated at Mon Oct 20 23:20:02 2025 by rpki-client