$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a56aa61e-63cc-333e-8c89-7b47d5624837.roa File: a56aa61e-63cc-333e-8c89-7b47d5624837.roa (raw, json) Hash identifier: lvreYGerERvShhY9podcd7T2zkJuPMe+06il5aEd1E0= Subject key identifier: 40:D8:F8:2D:45:D4:2B:BC:70:B9:B6:F0:E7:F0:BD:D5:39:AF:EC:70 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B52A74616E1D5367FA8596920 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a56aa61e-63cc-333e-8c89-7b47d5624837.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 33651 IP address blocks: 24.23.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:46:16:e1:d5:36:7f:a8:59:69:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=111ff004-3852-426e-9ef7-3ac6a3729aa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b3:bf:fa:e3:20:ff:16:55:90:75:70:74:d0: 14:15:c8:8d:c1:6c:ab:07:57:55:99:95:6f:02:55: c1:ab:f0:73:ac:18:31:5d:cf:90:8a:d5:58:34:c4: 90:a2:f2:03:70:68:5e:84:cd:ef:5e:80:dc:1f:48: 90:ea:6d:25:c2:9b:63:bf:d3:d5:02:5f:cb:9b:4a: 0f:e3:10:ae:98:29:56:d5:fb:2c:c9:05:07:9a:d2: 8e:50:64:91:05:c4:6c:34:c2:9d:b0:72:20:5b:9d: a8:6d:7b:57:01:f6:ac:b8:30:43:fc:38:d1:4c:92: b8:d6:24:92:8a:73:9c:81:c5:06:59:77:57:e4:d2: 62:c0:50:76:ba:f5:4f:02:8d:c2:d8:c8:66:0a:e2: 3d:23:c9:9f:2f:3e:2b:49:98:0e:92:57:3b:a1:69: 95:48:0c:e3:67:63:50:77:fe:7b:3d:34:c9:0c:a5: 70:64:44:c4:85:90:09:fe:c9:c6:1a:cb:fb:5a:df: 9e:cc:d9:a1:a2:61:5b:2a:4e:59:73:7a:de:0c:10: 77:8d:16:90:d7:ad:9f:9e:7c:32:14:14:dc:93:21: b8:76:53:b3:c5:bb:ab:cd:fa:a2:f4:61:48:4f:bc: 4f:c7:76:f8:48:86:28:c6:ed:4b:4e:dc:ed:85:1e: 49:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:D8:F8:2D:45:D4:2B:BC:70:B9:B6:F0:E7:F0:BD:D5:39:AF:EC:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a56aa61e-63cc-333e-8c89-7b47d5624837.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.23.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:d1:fd:93:20:f4:c6:e7:08:3d:e3:3d:cc:4c:30:74:09:d6: b7:f4:9c:64:d1:12:81:9a:8a:dc:b5:5b:64:56:69:98:c0:57: 79:44:30:cb:50:91:3c:fc:7b:68:5e:ac:6d:54:f4:6c:34:d3: ba:fa:8c:85:06:c4:34:6d:2f:43:fb:37:5b:80:df:fa:2a:b5: 52:e2:19:73:ec:c5:6f:a0:53:62:bc:db:3e:fa:4f:02:23:66: e9:c7:9d:96:d9:38:71:d6:e5:6b:8e:6e:fd:16:d2:49:9b:e1: c0:dd:d1:af:27:c9:f3:59:5f:4b:58:e7:f3:ca:a7:bf:2d:df: 6d:fe:89:34:57:6f:34:6b:4e:a9:3d:85:c1:27:01:de:30:b6: 4c:b4:14:19:aa:af:00:24:38:05:e7:a2:b6:ae:b3:e1:fd:a2: 51:c2:05:97:5b:9f:2b:e9:5a:3e:6a:07:85:21:09:6b:f9:99: c5:05:9a:c4:a1:a3:1d:1e:d8:cd:99:7b:5e:d2:d9:e7:b0:7f: e3:00:33:89:ef:1d:1e:b2:62:c3:73:b2:b7:e9:6b:a7:f4:bf: f1:99:89:82:ba:7b:d0:21:5b:1a:c2:ba:99:c2:2c:bf:3d:df: fb:76:ae:42:90:75:ba:0a:e7:b0:ef:2e:87:20:2d:eb:de:c1: e5:f9:4a:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp0YW4dU2f6hZaSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk MTExZmYwMDQtMzg1Mi00MjZlLTllZjctM2FjNmEzNzI5YWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLO/+uMg/xZVkHVwdNAUFciNwWyrB1dVmZVv AlXBq/BzrBgxXc+QitVYNMSQovIDcGhehM3vXoDcH0iQ6m0lwptjv9PVAl/Lm0oP 4xCumClW1fssyQUHmtKOUGSRBcRsNMKdsHIgW52obXtXAfasuDBD/DjRTJK41iSS inOcgcUGWXdX5NJiwFB2uvVPAo3C2MhmCuI9I8mfLz4rSZgOklc7oWmVSAzjZ2NQ d/57PTTJDKVwZETEhZAJ/snGGsv7Wt+ezNmhomFbKk5Zc3reDBB3jRaQ162fnnwy FBTckyG4dlOzxburzfqi9GFIT7xPx3b4SIYoxu1LTtzthR5JdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDY+C1F1Cu8cLm28OfwvdU5r+xwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTU2YWE2MWUtNjNjYy0z MzNlLThjODktN2I0N2Q1NjI0ODM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGBf4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjR/ZMg9MbnCD3jPcxMMHQJ1rf0nGTREoGaity1W2RWaZjAV3lEMMtQ kTz8e2herG1U9Gw007r6jIUGxDRtL0P7N1uA3/oqtVLiGXPsxW+gU2K82z76TwIj ZunHnZbZOHHW5WuObv0W0kmb4cDd0a8nyfNZX0tY5/PKp78t323+iTRXbzRrTqk9 hcEnAd4wtky0FBmqrwAkOAXnoraus+H9olHCBZdbnyvpWj5qB4UhCWv5mcUFmsSh ox0e2M2Ze17S2eewf+MAM4nvHR6yYsNzsrfpa6f0v/GZiYK6e9AhWxrCupnCLL89 3/t2rkKQdboK57DvLocgLeveweX5Sow= -----END CERTIFICATE-----Generated at Mon Oct 20 10:40:42 2025 by rpki-client