$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/948c42df-0401-37d0-8795-ec6caf58e75a.roa File: 948c42df-0401-37d0-8795-ec6caf58e75a.roa (raw, json) Hash identifier: 0Pmwh5lZq9Tihy9TbITztS1OdFwTUsKNOEhBP9VSUs4= Subject key identifier: 58:C7:DD:51:10:23:2A:27:2B:B1:66:04:65:8C:DA:95:5C:DE:88:25 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB880E6898567CF8941FF00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/948c42df-0401-37d0-8795-ec6caf58e75a.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 7922 IP address blocks: 24.40.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:80:e6:89:85:67:cf:89:41:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=99d48683-d4b3-47bc-b65c-cf188b40bb9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:36:9c:fe:57:ac:7e:36:d6:6f:c0:03:b7:8b: 64:53:d4:14:f5:bf:cc:33:2a:86:d6:80:9c:be:de: b1:d7:81:24:c1:4c:eb:80:57:52:fc:ad:f5:60:71: f8:fc:ec:e0:cb:fa:93:6a:33:c1:3a:33:b3:27:ff: 0e:54:e5:70:1a:f8:37:f9:86:69:39:4d:d3:77:3c: 8e:9f:a3:0c:dd:c1:7d:d2:af:b3:4c:a0:4a:87:f4: 85:e8:75:a2:95:c2:b1:1d:90:a7:07:7c:0b:fc:df: 13:77:1f:9e:ca:c9:f6:a5:47:35:2b:e7:63:79:9c: 33:91:00:77:2d:93:f4:be:08:28:a6:12:80:c2:f4: d7:e6:92:0e:94:6d:94:1c:20:e9:35:d8:ae:05:71: e2:83:b7:54:95:de:64:99:84:6e:41:96:c3:3f:21: e8:03:01:fe:ca:29:46:b7:2d:97:b7:20:ef:4a:a3: cb:3f:1a:f0:22:0c:47:6c:b3:42:60:55:df:15:d1: 3b:f6:4a:77:22:76:46:b0:22:dd:b7:e3:2a:57:b4: 23:ac:99:3e:19:c2:cd:de:fc:5e:01:16:df:6f:95: 6f:c1:d3:12:03:56:cc:6e:32:71:26:01:65:f1:9f: 09:a8:91:36:07:d4:8b:8b:9d:7e:7c:86:3d:ae:11: 24:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:C7:DD:51:10:23:2A:27:2B:B1:66:04:65:8C:DA:95:5C:DE:88:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/948c42df-0401-37d0-8795-ec6caf58e75a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.40.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:78:7c:8f:2e:e1:0d:6a:93:28:9f:b9:47:e6:1c:ef:e1:fb: 9f:05:5b:50:32:e9:65:6e:cb:59:9d:3a:98:d1:a7:aa:aa:b6: c4:0b:60:77:f1:94:93:b8:ce:d1:7d:60:98:c3:bc:62:67:ae: 9d:5b:13:e0:aa:af:fb:2a:09:31:1e:bb:7c:ae:21:94:e7:d9: 6f:e8:bb:6d:df:0d:a9:de:d4:c7:dd:ca:69:b8:cf:56:dd:7c: 89:a2:b8:96:02:1e:d2:e4:04:6b:a4:fd:69:57:ac:34:dc:c5: c9:f7:ac:7b:70:a5:a6:5c:d1:fd:8b:6e:98:4a:53:42:16:e3: 8b:a5:ae:6d:0a:a8:62:1f:26:e5:c3:91:ad:a6:59:ca:4a:2a: d3:67:60:ed:88:22:09:67:f0:f6:7d:10:38:89:5b:c4:fa:14: aa:0a:24:ed:dd:51:29:18:d3:fc:22:10:8c:fa:a2:a2:6c:01: d5:5a:a0:1b:2f:1a:12:7a:fb:63:2c:40:76:b6:87:a8:02:9a: a7:ff:db:20:d0:dc:d9:4a:27:e7:57:65:c4:28:68:42:c4:dc: c3:79:4a:55:db:65:96:a8:1b:6c:9d:3a:df:77:12:14:6d:53: 50:46:ea:d4:e6:0c:8d:8d:08:6c:ca:77:f2:62:d1:c2:d9:b0: 44:03:5a:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uIDmiYVnz4lB/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk OTlkNDg2ODMtZDRiMy00N2JjLWI2NWMtY2YxODhiNDBiYjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTac/lesfjbWb8ADt4tkU9QU9b/MMyqG1oCc vt6x14EkwUzrgFdS/K31YHH4/Ozgy/qTajPBOjOzJ/8OVOVwGvg3+YZpOU3TdzyO n6MM3cF90q+zTKBKh/SF6HWilcKxHZCnB3wL/N8Tdx+eysn2pUc1K+djeZwzkQB3 LZP0vggophKAwvTX5pIOlG2UHCDpNdiuBXHig7dUld5kmYRuQZbDPyHoAwH+yilG ty2XtyDvSqPLPxrwIgxHbLNCYFXfFdE79kp3InZGsCLdt+MqV7QjrJk+GcLN3vxe ARbfb5VvwdMSA1bMbjJxJgFl8Z8JqJE2B9SLi51+fIY9rhEk1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjH3VEQIyonK7FmBGWM2pVc3oglMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTQ4YzQyZGYtMDQwMS0z N2QwLTg3OTUtZWM2Y2FmNThlNzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGChAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD14fI8u4Q1qkyifuUfmHO/h+58FW1Ay6WVuy1mdOpjRp6qqtsQLYHfx lJO4ztF9YJjDvGJnrp1bE+Cqr/sqCTEeu3yuIZTn2W/ou23fDane1Mfdymm4z1bd fImiuJYCHtLkBGuk/WlXrDTcxcn3rHtwpaZc0f2LbphKU0IW44ulrm0KqGIfJuXD ka2mWcpKKtNnYO2IIgln8PZ9EDiJW8T6FKoKJO3dUSkY0/wiEIz6oqJsAdVaoBsv GhJ6+2MsQHa2h6gCmqf/2yDQ3NlKJ+dXZcQoaELE3MN5SlXbZZaoG2ydOt93EhRt U1BG6tTmDI2NCGzKd/Ji0cLZsEQDWmw= -----END CERTIFICATE-----Generated at Mon Oct 20 03:44:36 2025 by rpki-client