$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3cbe9c8a-dd42-32ff-89cb-c282b1fc2be4.roa File: 3cbe9c8a-dd42-32ff-89cb-c282b1fc2be4.roa (raw, json) Hash identifier: +sBE+5AnJdasNZLlOEFunb8sNoUoEk3jMh2WUuGsQ90= Subject key identifier: C2:4E:1F:36:99:F8:A3:6B:6D:FE:E2:80:03:B9:1D:63:09:CB:C2:C2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB98FF0BD06F7F5CDF76060 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3cbe9c8a-dd42-32ff-89cb-c282b1fc2be4.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 13367 IP address blocks: 24.131.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:8f:f0:bd:06:f7:f5:cd:f7:60:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=c5da452b-ed70-4098-9fcf-124d96be273a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:39:72:43:f9:da:a8:86:bd:fd:a8:7b:7c:8a: 11:a3:64:a6:87:21:d5:2a:ee:d3:29:45:e8:72:c5: 07:77:d3:92:f2:c7:1a:07:5f:4d:60:37:2c:3e:67: 22:46:27:78:58:3a:61:a4:16:26:c1:d4:0d:68:8a: fc:9f:ee:77:9e:48:7c:48:39:cd:ed:2c:ce:2c:43: b1:c1:de:19:bd:8b:9c:4a:51:8b:06:22:7a:08:32: 57:0b:62:36:ef:f4:a0:f5:19:16:1a:eb:d5:5c:09: 18:a9:06:da:15:96:4d:60:11:1a:76:cb:06:d1:14: 82:2c:38:07:70:10:f7:8a:7f:9f:a7:17:8c:7a:6b: d9:26:25:92:21:af:9d:e7:37:8c:3d:0f:d1:95:aa: b3:7e:54:a1:48:58:84:4e:cc:22:1c:a1:bf:82:c7: db:24:87:2f:4e:ca:34:f9:72:79:bf:10:74:80:c8: 0c:4e:0d:52:95:3e:13:97:ae:c8:c2:73:9b:cd:28: c5:ce:b4:1b:7e:63:de:eb:d8:70:33:84:28:ab:e5: 9a:3e:52:12:97:2a:a5:83:aa:b3:56:c5:cd:92:96: b4:bf:7a:f5:cc:34:6d:6f:65:3c:86:60:73:2d:0b: 3e:59:da:2d:0f:1f:38:39:3c:fc:6d:36:3a:84:31: a8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:4E:1F:36:99:F8:A3:6B:6D:FE:E2:80:03:B9:1D:63:09:CB:C2:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3cbe9c8a-dd42-32ff-89cb-c282b1fc2be4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.131.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:1f:e7:74:31:08:da:64:14:57:a8:ad:61:db:0a:37:c5:2f: ca:ad:67:0e:d4:63:6f:a9:a5:96:28:40:92:4d:03:50:bf:6e: 23:fd:54:fd:8f:dd:19:b9:23:f2:ec:2a:cb:ec:4b:b9:57:7f: 03:e6:c2:bd:c7:ec:f8:70:6c:23:62:14:4b:bd:2c:79:0d:80: 23:5d:e0:47:71:c7:dd:a2:8c:96:0b:96:08:6c:0a:ac:78:c3: 16:83:2a:16:26:95:60:45:fd:46:bf:48:49:88:c4:c4:b3:a2: f7:e4:b1:ce:41:85:64:38:8f:27:93:f3:f5:1c:18:e3:9f:80: 23:fa:70:eb:2c:cb:cf:39:61:8d:18:2e:23:9a:1b:fc:33:f8: 14:6f:5a:14:2d:3d:11:f1:f7:b1:02:14:33:f2:e9:5d:74:bb: 57:15:dd:d7:41:1d:bd:65:0e:34:54:a6:8f:83:19:a5:09:a6: 3f:bc:eb:2b:de:7e:39:b5:eb:2d:07:fe:99:03:2b:20:88:e9: 20:0f:37:3e:d1:71:ee:38:2e:d5:25:8f:96:eb:42:04:4a:ae: 18:83:d3:64:07:8f:e1:b7:78:02:1b:75:29:f8:34:17:3d:54: 91:3f:cf:41:f8:7c:73:24:ea:d0:5f:b1:1b:a0:30:76:98:2e: e1:e2:ae:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uY/wvQb39c33YGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk YzVkYTQ1MmItZWQ3MC00MDk4LTlmY2YtMTI0ZDk2YmUyNzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTlyQ/naqIa9/ah7fIoRo2SmhyHVKu7TKUXo csUHd9OS8scaB19NYDcsPmciRid4WDphpBYmwdQNaIr8n+53nkh8SDnN7SzOLEOx wd4ZvYucSlGLBiJ6CDJXC2I27/Sg9RkWGuvVXAkYqQbaFZZNYBEadssG0RSCLDgH cBD3in+fpxeMemvZJiWSIa+d5zeMPQ/RlaqzflShSFiETswiHKG/gsfbJIcvTso0 +XJ5vxB0gMgMTg1SlT4Tl67IwnObzSjFzrQbfmPe69hwM4Qoq+WaPlISlyqlg6qz VsXNkpa0v3r1zDRtb2U8hmBzLQs+WdotDx84OTz8bTY6hDGonwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJOHzaZ+KNrbf7igAO5HWMJy8LCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2NiZTljOGEtZGQ0Mi0z MmZmLTg5Y2ItYzI4MmIxZmMyYmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGIOQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIf53QxCNpkFFeorWHbCjfFL8qtZw7UY2+ppZYoQJJNA1C/biP9VP2P 3Rm5I/LsKsvsS7lXfwPmwr3H7PhwbCNiFEu9LHkNgCNd4Edxx92ijJYLlghsCqx4 wxaDKhYmlWBF/Ua/SEmIxMSzovfksc5BhWQ4jyeT8/UcGOOfgCP6cOssy885YY0Y LiOaG/wz+BRvWhQtPRHx97ECFDPy6V10u1cV3ddBHb1lDjRUpo+DGaUJpj+86yve fjm16y0H/pkDKyCI6SAPNz7Rce44LtUlj5brQgRKrhiD02QHj+G3eAIbdSn4NBc9 VJE/z0H4fHMk6tBfsRugMHaYLuHirpA= -----END CERTIFICATE-----Generated at Mon Oct 20 03:45:50 2025 by rpki-client