$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c9e4989-40a3-36e7-9ba7-9e911041c360.roa File: 8c9e4989-40a3-36e7-9ba7-9e911041c360.roa (raw, json) Hash identifier: 4LbstodfJHtolIaidFf4XphYd/1/cMQ+PVnDsinYmDI= Subject key identifier: 46:08:31:4B:61:6C:1B:8B:A3:63:DF:E3:6B:AA:F9:CF:86:15:82:73 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB91BB102DF12ACF8298BF0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c9e4989-40a3-36e7-9ba7-9e911041c360.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33489 IP address blocks: 24.124.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:1b:b1:02:df:12:ac:f8:29:8b:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=c112d0f6-950c-48ae-84e1-9b4856790126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c4:a3:cb:7c:ff:51:1b:48:a7:4e:80:ac:fb: 6e:6f:33:45:25:4c:2c:cf:d1:6c:fb:66:ec:cc:73: 0f:57:68:f4:dd:8e:24:4d:26:78:4c:3d:85:52:94: 31:39:63:c9:7b:c2:c7:8d:e1:49:b9:1b:ff:30:06: 36:ef:56:84:e6:de:16:af:4f:13:43:75:04:6b:fe: 54:a6:80:8a:1d:16:ff:b1:04:c3:4e:7d:cf:00:a6: 30:49:a3:7e:9a:40:cf:24:76:3b:ac:72:be:9c:99: 7a:ed:43:18:ab:7f:71:91:31:0c:4c:5d:08:0e:f9: de:e7:4a:38:f5:83:d2:d4:68:76:c0:13:21:bd:d9: 6d:2d:c8:dd:6e:49:27:9f:06:ec:d9:68:83:ef:ca: 11:ad:d7:71:95:0b:d9:07:15:49:04:76:17:0e:05: 15:b5:94:62:f1:32:b8:60:3d:56:0c:b4:e3:4f:41: f5:68:20:dd:e0:95:79:3f:20:7a:50:99:37:70:dd: 31:4e:c0:70:c8:0c:0a:d0:b9:4f:29:83:88:49:3f: 31:76:30:44:30:af:5a:a9:87:59:47:f6:2e:49:e3: 8f:4d:21:49:38:00:49:c3:80:3e:a4:3b:90:9f:60: ce:67:4c:12:dd:9a:5d:70:a6:b0:75:54:93:10:0d: 3d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:08:31:4B:61:6C:1B:8B:A3:63:DF:E3:6B:AA:F9:CF:86:15:82:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c9e4989-40a3-36e7-9ba7-9e911041c360.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.124.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:c5:91:dc:16:2c:23:2e:0e:26:40:9e:74:68:9b:1c:29:4b: cc:0d:4a:e1:db:17:71:21:17:3e:d0:a1:a6:46:9c:38:3c:55: d4:d9:12:e8:67:40:74:6d:d1:ac:ba:ea:e0:d6:45:ed:6b:c2: 2d:51:9b:d3:99:be:70:2f:4a:de:8c:9a:76:ff:98:cc:4d:d7: ee:7c:76:a1:f8:3a:0b:99:c8:cc:57:80:c9:1b:2f:32:4d:80: 53:c9:64:fc:19:7d:70:a7:d6:96:f4:46:41:48:53:08:35:96: 62:58:11:c6:6a:54:b0:07:d0:0c:47:2d:11:ba:48:45:25:23: 82:f5:0f:0c:1c:b7:77:f4:ef:39:62:e7:63:11:84:55:98:e6: 41:c0:93:8f:d1:d0:e8:7f:0e:74:2d:0d:39:43:bc:e4:87:b2: 14:38:25:f5:a2:03:10:d8:d3:2a:f1:e5:c4:7a:70:fd:58:0b: 06:45:c5:29:77:1b:cd:4a:c7:47:25:b8:ce:cf:5e:86:b9:75: 7b:f4:19:f7:35:a0:e7:11:ee:d3:6d:20:d5:cc:ba:d6:6b:f7: 10:7b:3e:08:5c:ba:77:b8:15:cb:ca:e5:05:83:bd:c4:58:8e: 25:0c:e3:6c:dc:d4:17:2c:66:d1:ec:fc:3b:44:88:ca:68:d7: 9c:db:87:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uRuxAt8SrPgpi/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk YzExMmQwZjYtOTUwYy00OGFlLTg0ZTEtOWI0ODU2NzkwMTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8Sjy3z/URtIp06ArPtubzNFJUwsz9Fs+2bs zHMPV2j03Y4kTSZ4TD2FUpQxOWPJe8LHjeFJuRv/MAY271aE5t4Wr08TQ3UEa/5U poCKHRb/sQTDTn3PAKYwSaN+mkDPJHY7rHK+nJl67UMYq39xkTEMTF0IDvne50o4 9YPS1Gh2wBMhvdltLcjdbkknnwbs2WiD78oRrddxlQvZBxVJBHYXDgUVtZRi8TK4 YD1WDLTjT0H1aCDd4JV5PyB6UJk3cN0xTsBwyAwK0LlPKYOIST8xdjBEMK9aqYdZ R/YuSeOPTSFJOABJw4A+pDuQn2DOZ0wS3ZpdcKawdVSTEA09FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYIMUthbBuLo2Pf42uq+c+GFYJzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGM5ZTQ5ODktNDBhMy0z NmU3LTliYTctOWU5MTEwNDFjMzYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGHyEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7FkdwWLCMuDiZAnnRomxwpS8wNSuHbF3EhFz7QoaZGnDg8VdTZEuhn QHRt0ay66uDWRe1rwi1Rm9OZvnAvSt6Mmnb/mMxN1+58dqH4OguZyMxXgMkbLzJN gFPJZPwZfXCn1pb0RkFIUwg1lmJYEcZqVLAH0AxHLRG6SEUlI4L1Dwwct3f07zli 52MRhFWY5kHAk4/R0Oh/DnQtDTlDvOSHshQ4JfWiAxDY0yrx5cR6cP1YCwZFxSl3 G81Kx0cluM7PXoa5dXv0Gfc1oOcR7tNtINXMutZr9xB7Pghcune4FcvK5QWDvcRY jiUM42zc1BcsZtHs/DtEiMpo15zbhw8= -----END CERTIFICATE-----Generated at Mon Oct 20 03:31:58 2025 by rpki-client