$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4373144f-71fa-3885-9f33-99ecc6ed8ac8.roa File: 4373144f-71fa-3885-9f33-99ecc6ed8ac8.roa (raw, json) Hash identifier: UjbgBhgZ5aT0b5T0n4pUBgtYAYexLtaHgD6TegMb4M4= Subject key identifier: 1A:37:4B:2D:47:07:C8:30:F4:87:1F:E5:13:2C:B5:66:0C:AF:9E:52 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB7F3E62DB5713F638D0900 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4373144f-71fa-3885-9f33-99ecc6ed8ac8.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 13367 IP address blocks: 24.118.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:f3:e6:2d:b5:71:3f:63:8d:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=a4de95f6-9e07-431f-8f78-e4b20e3e0c48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f8:19:78:7b:c8:f6:73:f5:e3:9a:28:34:de: ed:eb:87:36:50:b7:42:09:3e:ef:47:27:9b:c9:3e: 5b:cc:0b:3d:89:c0:7f:a5:af:10:58:e3:9c:13:6b: 91:a3:34:10:19:e0:68:c7:53:63:ca:fc:1b:a8:29: 1c:7a:b3:c4:87:63:64:7e:f6:1e:a5:ce:8a:9f:d3: 56:ac:3d:d8:83:74:45:7c:a2:5a:c0:6c:bf:ba:58: 30:08:98:fb:89:d6:e4:28:ba:db:8c:12:9f:a2:db: 85:dc:7d:5e:8f:b0:e9:38:b1:2e:e4:a7:02:bb:9d: c6:7a:c5:29:4e:64:70:8c:88:a3:a7:66:ac:ac:a7: 41:b5:84:96:50:c4:10:4d:be:58:17:0c:cc:c7:b0: 8c:39:58:3a:be:4e:91:3f:68:6c:87:0e:29:e9:90: 82:9f:ae:03:ed:01:69:79:fc:b0:a9:19:12:c5:0b: 23:66:ca:89:a3:58:7d:ff:34:f2:d0:0a:14:db:6e: e9:a2:c0:55:a6:78:11:0e:e9:31:03:5b:e1:f3:ca: 71:ee:3a:00:40:7a:7a:02:d4:8e:ae:71:0c:20:bc: b2:01:c8:d0:86:69:bb:a6:7e:ac:e4:91:07:a8:30: 73:b6:e3:08:29:b9:b2:4e:b7:94:ac:22:30:ac:57: fd:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:37:4B:2D:47:07:C8:30:F4:87:1F:E5:13:2C:B5:66:0C:AF:9E:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4373144f-71fa-3885-9f33-99ecc6ed8ac8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.118.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:e4:79:c9:fe:0a:a5:0e:70:55:1c:03:16:af:a8:4b:29:ea: 1c:60:cc:96:a8:ff:69:85:d7:de:03:37:c5:7b:42:f9:4a:b5: 1b:34:69:42:ba:8f:09:1f:b9:ed:74:ff:0f:d5:30:d0:5a:f0: 3c:c9:67:ae:32:59:f2:d4:0a:f4:c2:15:1c:c5:2f:3c:7b:09: 18:3f:1d:8a:97:01:a5:55:3f:98:40:0b:35:3e:21:42:a9:31: 30:fb:06:fc:d5:b6:e4:b2:44:ba:96:48:64:a9:96:e2:b8:47: 5a:e6:b5:a5:dc:1a:fa:3d:7e:78:3b:f9:f6:b7:25:3e:cc:d3: 3f:15:b6:51:e2:ad:d0:2a:d3:b2:ee:50:4d:58:1a:a9:99:c6: 57:94:e6:4d:55:9c:e5:7f:be:21:12:05:91:66:82:1f:b6:b5: c1:32:37:87:ae:a4:02:e9:af:b3:2d:4c:38:26:20:90:83:25: f5:df:d3:50:e8:4d:a9:b3:e1:20:b2:ea:b9:6a:85:14:b8:75: 46:53:15:c2:f1:39:73:64:6c:d9:31:d7:23:37:d7:b1:9e:da: 9f:73:7c:a3:9e:eb:a3:4d:8d:35:06:1c:d2:67:0e:3c:f3:06: 0a:8c:21:df:ab:a8:3b:74:de:e9:14:0c:27:99:ba:92:10:7e: 3d:87:9c:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9t/PmLbVxP2ONCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk YTRkZTk1ZjYtOWUwNy00MzFmLThmNzgtZTRiMjBlM2UwYzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPgZeHvI9nP145ooNN7t64c2ULdCCT7vRyeb yT5bzAs9icB/pa8QWOOcE2uRozQQGeBox1NjyvwbqCkcerPEh2NkfvYepc6Kn9NW rD3Yg3RFfKJawGy/ulgwCJj7idbkKLrbjBKfotuF3H1ej7DpOLEu5KcCu53GesUp TmRwjIijp2asrKdBtYSWUMQQTb5YFwzMx7CMOVg6vk6RP2hshw4p6ZCCn64D7QFp efywqRkSxQsjZsqJo1h9/zTy0AoU227posBVpngRDukxA1vh88px7joAQHp6AtSO rnEMILyyAcjQhmm7pn6s5JEHqDBztuMIKbmyTreUrCIwrFf9+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBo3Sy1HB8gw9Icf5RMstWYMr55SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDM3MzE0NGYtNzFmYS0z ODg1LTlmMzMtOTllY2M2ZWQ4YWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGHbMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK/kecn+CqUOcFUcAxavqEsp6hxgzJao/2mF194DN8V7QvlKtRs0aUK6 jwkfue10/w/VMNBa8DzJZ64yWfLUCvTCFRzFLzx7CRg/HYqXAaVVP5hACzU+IUKp MTD7BvzVtuSyRLqWSGSpluK4R1rmtaXcGvo9fng7+fa3JT7M0z8VtlHirdAq07Lu UE1YGqmZxleU5k1VnOV/viESBZFmgh+2tcEyN4eupALpr7MtTDgmIJCDJfXf01Do Tamz4SCy6rlqhRS4dUZTFcLxOXNkbNkx1yM317Ge2p9zfKOe66NNjTUGHNJnDjzz BgqMId+rqDt03ukUDCeZupIQfj2HnP0= -----END CERTIFICATE-----Generated at Mon Oct 20 08:05:28 2025 by rpki-client