$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/674cdfe7-aeea-35d5-bc73-a751ad15e564.roa File: 674cdfe7-aeea-35d5-bc73-a751ad15e564.roa (raw, json) Hash identifier: eX+JbnnJcFlb3TM0DqD+Nf/tbWZnOfb17tjfYfURqr8= Subject key identifier: E4:A1:82:13:4B:04:2A:50:57:FF:C4:13:93:6C:DF:71:6F:A3:77:66 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB9247A37F90A2259C5FA00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/674cdfe7-aeea-35d5-bc73-a751ad15e564.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33490 IP address blocks: 23.24.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:24:7a:37:f9:0a:22:59:c5:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=dacb94e6-f522-48b6-a609-3beca23bb353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:62:d3:5f:77:d2:26:9c:b5:1e:05:91:ba:c0: 15:c6:75:a3:33:75:3a:a1:e3:fa:8f:ff:2a:4d:5a: fa:5e:69:12:83:2c:82:3b:90:e1:8b:c7:66:e0:23: c0:95:4a:cb:44:98:94:4d:3c:0e:96:07:4f:ac:7e: 9d:83:7d:bc:b8:95:e0:81:49:4e:89:dd:15:94:6c: 71:87:e4:90:65:80:70:f0:2e:5d:ba:31:90:af:fc: c8:ec:1c:6c:5c:8b:86:ec:f9:5c:d8:e9:8e:89:e2: 62:13:40:5a:f7:88:65:e3:28:d6:14:e2:f9:69:73: 86:a9:a3:26:aa:f8:ad:29:f5:89:71:d6:52:49:75: 0c:c0:7d:ed:cf:ff:fb:77:97:75:07:b9:6f:34:32: 0f:c3:b6:46:29:70:9d:82:f1:00:99:57:0f:14:34: 2b:a9:ea:3e:48:6b:90:f1:94:a7:5c:b3:82:9d:08: 5c:03:b9:5b:40:44:1b:cc:3e:44:6e:d2:d5:46:bd: ab:82:fd:81:5e:69:32:fb:40:73:5d:a6:37:ae:29: 84:10:15:a6:58:d8:e7:0d:44:1c:14:58:00:81:d5: e7:f6:ad:6b:47:30:2b:d5:16:b1:fa:ab:3d:88:89: 10:28:58:6a:0a:a2:fc:eb:dc:ed:4a:b5:d5:3c:2f: 83:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:A1:82:13:4B:04:2A:50:57:FF:C4:13:93:6C:DF:71:6F:A3:77:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/674cdfe7-aeea-35d5-bc73-a751ad15e564.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 23.24.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:27:7f:3d:15:d9:f0:38:03:fa:0f:fc:c4:6d:87:68:b2:b8: 1a:cf:e3:74:fb:bb:7e:3e:ef:a4:85:76:cc:59:8c:e3:27:4a: 61:be:40:ff:8f:ce:6f:77:3b:4a:6b:4b:58:10:80:96:54:6f: 2d:ad:a3:4b:ff:de:be:59:fc:5c:53:d0:1d:83:ff:59:45:13: 69:f4:b2:52:69:32:08:1e:94:11:de:a9:d9:5a:b1:fe:af:43: e0:45:27:eb:07:94:db:71:68:70:d6:f7:de:f4:c4:95:26:23: be:8c:a2:b4:20:fa:0f:1b:5c:b9:de:73:e8:91:83:29:eb:f7: 86:82:b2:f0:53:d2:d5:e5:8a:95:68:c3:9a:f8:82:cf:f7:c6: 44:fb:a9:6a:00:31:97:36:3c:dd:a7:c3:92:34:c5:ad:cc:d3: 62:de:c3:10:c1:e2:a6:7f:86:04:b1:3f:7d:4e:51:d3:a6:fe: b5:88:41:16:b5:f2:bc:36:65:d0:6c:51:fa:5f:e4:8b:50:a0: e4:00:68:14:b4:db:fa:06:ef:52:43:e5:a3:8d:dc:8f:3b:b2: ad:cf:07:ba:72:8f:08:3f:c6:68:e5:7a:eb:46:b3:a9:8e:36: 05:31:9c:4b:c1:ce:12:ae:e5:01:cb:fe:6d:55:2c:88:07:92: fe:dd:f7:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uSR6N/kKIlnF+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ZGFjYjk0ZTYtZjUyMi00OGI2LWE2MDktM2JlY2EyM2JiMzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWLTX3fSJpy1HgWRusAVxnWjM3U6oeP6j/8q TVr6XmkSgyyCO5Dhi8dm4CPAlUrLRJiUTTwOlgdPrH6dg328uJXggUlOid0VlGxx h+SQZYBw8C5dujGQr/zI7BxsXIuG7Plc2OmOieJiE0Ba94hl4yjWFOL5aXOGqaMm qvitKfWJcdZSSXUMwH3tz//7d5d1B7lvNDIPw7ZGKXCdgvEAmVcPFDQrqeo+SGuQ 8ZSnXLOCnQhcA7lbQEQbzD5EbtLVRr2rgv2BXmky+0BzXaY3rimEEBWmWNjnDUQc FFgAgdXn9q1rRzAr1Rax+qs9iIkQKFhqCqL869ztSrXVPC+DzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOShghNLBCpQV//EE5Ns33Fvo3dmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjc0Y2RmZTctYWVlYS0z NWQ1LWJjNzMtYTc1MWFkMTVlNTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFxjwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4nfz0V2fA4A/oP/MRth2iyuBrP43T7u34+76SFdsxZjOMnSmG+QP+P zm93O0prS1gQgJZUby2to0v/3r5Z/FxT0B2D/1lFE2n0slJpMggelBHeqdlasf6v Q+BFJ+sHlNtxaHDW9970xJUmI76MorQg+g8bXLnec+iRgynr94aCsvBT0tXlipVo w5r4gs/3xkT7qWoAMZc2PN2nw5I0xa3M02LewxDB4qZ/hgSxP31OUdOm/rWIQRa1 8rw2ZdBsUfpf5ItQoOQAaBS02/oG71JD5aON3I87sq3PB7pyjwg/xmjleutGs6mO NgUxnEvBzhKu5QHL/m1VLIgHkv7d9/s= -----END CERTIFICATE-----Generated at Mon Oct 20 09:22:37 2025 by rpki-client