$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d04701f-7167-3ece-857a-2a0fb37c9680.roa File: 3d04701f-7167-3ece-857a-2a0fb37c9680.roa (raw, json) Hash identifier: +AA0JH7Xzax41BWVahT1Koe51rkJZrU6g/rmF3GRjHs= Subject key identifier: C3:C3:30:05:5D:74:AF:94:E9:95:66:81:D2:F1:35:89:5F:18:03:10 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB7F139807248C67DA82300 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d04701f-7167-3ece-857a-2a0fb37c9680.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 13367 IP address blocks: 24.118.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:f1:39:80:72:48:c6:7d:a8:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=127ce239-558d-425b-9798-51b24bf072c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ea:37:f6:e9:60:7d:66:59:55:75:83:49:18: ca:2a:ac:32:c7:85:74:16:75:bb:5e:8c:00:2e:14: b8:5c:31:cd:38:57:9f:3f:ab:db:42:16:95:a2:15: 84:9b:aa:34:75:3b:b0:22:68:4e:7b:56:e6:a0:34: 74:46:21:b3:ff:4d:29:26:3a:19:01:bb:57:2a:d4: 12:8c:2c:41:7d:52:62:69:84:5f:d6:de:bf:a7:0f: df:8d:5b:5a:17:9f:5c:2f:60:6b:7c:70:cf:0e:73: 01:bc:a8:b9:98:86:b3:1b:b8:c7:39:94:10:d9:4e: b8:fb:2f:44:ab:65:83:7d:7b:18:f3:1c:1c:8b:4c: 92:24:01:4f:b6:81:7f:39:e6:54:e5:a2:ee:a0:4d: 8b:33:ad:79:2a:6b:a8:de:a1:2b:39:ab:c6:f2:4a: db:68:57:0b:dc:2c:12:e1:89:04:85:50:6d:1b:a6: e6:b5:a7:36:c7:e7:83:da:5e:c6:3c:5a:12:87:74: c0:4f:26:ec:b1:cc:98:78:0f:72:76:c6:02:7c:a0: a1:df:a5:54:97:e4:89:b0:de:fb:ec:98:7e:7c:14: 35:a3:49:30:fe:f4:18:e0:72:55:ed:72:37:2a:24: 6e:c6:46:45:74:c6:6c:b4:b7:6c:0e:ca:98:11:8e: 77:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C3:30:05:5D:74:AF:94:E9:95:66:81:D2:F1:35:89:5F:18:03:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d04701f-7167-3ece-857a-2a0fb37c9680.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.118.16.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:68:4b:22:57:78:ea:2e:6a:62:ac:40:72:12:9a:9a:59:75: f5:1d:14:13:92:60:4b:66:a9:87:b3:4e:7d:64:59:cc:68:dc: 21:65:ea:4c:a2:79:86:1c:f1:6f:82:8c:68:80:4c:6e:c5:4e: 7e:f1:3b:e8:d1:37:89:f7:22:ba:63:10:11:76:f7:6e:34:3e: a9:3d:79:ea:d1:62:91:03:f6:2b:83:77:31:00:bd:8f:8b:e6: 1f:79:3e:15:c8:98:4b:68:62:a0:16:54:b5:87:34:4a:9e:4a: a1:d2:c8:57:ea:4c:a8:18:20:22:a4:4c:e7:3c:ed:96:71:6e: cc:ac:4f:15:47:1d:cf:f7:bd:d5:56:1a:8b:32:a9:60:68:c3: d1:01:d6:1e:b2:29:6f:5a:a1:81:13:34:06:bc:f5:cf:c8:70: ef:59:b2:30:9e:e3:8a:b5:ca:a7:e9:d2:73:d7:d7:7c:1c:db: 6d:e1:fb:09:39:98:7c:8d:98:54:4e:72:e4:a8:2f:af:c6:4a: 57:ae:cf:9c:57:de:c5:17:81:7b:37:8d:86:be:d1:10:8a:a7: 1a:a0:da:4b:b5:12:69:94:81:cd:64:1e:57:68:6d:9e:f3:e4: 35:ca:b4:f2:1c:10:e9:5c:46:c3:bd:25:a7:5c:d4:dc:c9:ae: 50:f4:4a:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9t/E5gHJIxn2oIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MTI3Y2UyMzktNTU4ZC00MjViLTk3OTgtNTFiMjRiZjA3MmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+o39ulgfWZZVXWDSRjKKqwyx4V0FnW7XowA LhS4XDHNOFefP6vbQhaVohWEm6o0dTuwImhOe1bmoDR0RiGz/00pJjoZAbtXKtQS jCxBfVJiaYRf1t6/pw/fjVtaF59cL2BrfHDPDnMBvKi5mIazG7jHOZQQ2U64+y9E q2WDfXsY8xwci0ySJAFPtoF/OeZU5aLuoE2LM615Kmuo3qErOavG8krbaFcL3CwS 4YkEhVBtG6bmtac2x+eD2l7GPFoSh3TATybsscyYeA9ydsYCfKCh36VUl+SJsN77 7Jh+fBQ1o0kw/vQY4HJV7XI3KiRuxkZFdMZstLdsDsqYEY53lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPDMAVddK+U6ZVmgdLxNYlfGAMQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2QwNDcwMWYtNzE2Ny0z ZWNlLTg1N2EtMmEwZmIzN2M5NjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGHYQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpoSyJXeOouamKsQHISmppZdfUdFBOSYEtmqYezTn1kWcxo3CFl6kyi eYYc8W+CjGiATG7FTn7xO+jRN4n3IrpjEBF29240Pqk9eerRYpED9iuDdzEAvY+L 5h95PhXImEtoYqAWVLWHNEqeSqHSyFfqTKgYICKkTOc87ZZxbsysTxVHHc/3vdVW GosyqWBow9EB1h6yKW9aoYETNAa89c/IcO9ZsjCe44q1yqfp0nPX13wc223h+wk5 mHyNmFROcuSoL6/GSleuz5xX3sUXgXs3jYa+0RCKpxqg2ku1EmmUgc1kHldobZ7z 5DXKtPIcEOlcRsO9Jadc1NzJrlD0Sm8= -----END CERTIFICATE-----Generated at Mon Oct 20 03:32:13 2025 by rpki-client