$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a625d508-4f27-3569-bd48-56bc757ab64d.roa File: a625d508-4f27-3569-bd48-56bc757ab64d.roa (raw, json) Hash identifier: X9XfgxLmAktJkUUIYhdGb8U7ajjkYE83YD0r4GvezyA= Subject key identifier: 83:56:88:4F:4F:83:E9:4C:8A:F5:0B:7A:4E:9E:56:7F:78:11:AC:41 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A7A43D6370F485BF79A280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a625d508-4f27-3569-bd48-56bc757ab64d.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33490 IP address blocks: 24.20.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:a4:3d:63:70:f4:85:bf:79:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=75cfa80e-983b-45f7-a744-59f0c375a182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c1:cf:44:de:67:8d:d1:9b:e6:76:e8:71:2c: cb:0a:2c:38:6d:00:b7:c1:cd:f9:8e:1c:6e:f7:66: e3:6c:42:91:93:f8:38:69:38:a4:41:9a:d4:81:e2: 0e:5c:ea:23:3f:b8:1b:c8:8e:12:a6:74:c1:d7:9f: 97:7a:5a:12:87:5c:6b:e5:59:ec:4e:7a:c3:ae:23: 7b:f6:11:f9:8e:fb:f6:7d:10:8c:c0:a3:0b:88:bf: 93:a1:35:38:47:c1:90:a4:70:8d:09:50:82:38:88: 14:25:0d:c8:45:cf:0c:ef:a4:eb:fc:2a:7c:b6:6e: da:ad:1e:05:b5:0d:bf:8e:3a:e7:47:95:7d:6f:b5: 6f:dd:a4:dd:69:cf:87:35:9d:78:f3:59:b0:a5:9b: 97:99:32:39:ae:6f:f5:fd:5e:53:d4:33:74:45:55: 05:54:46:39:9b:a8:b5:4b:2f:97:56:d2:7c:b4:51: e5:5d:9f:09:41:4d:0a:95:76:53:08:65:2a:93:76: c0:49:96:82:09:74:83:29:f9:6a:c7:11:1b:12:40: ba:68:ae:e6:65:02:49:27:7a:a5:fe:e6:ca:6b:fa: d3:b7:62:b2:6f:d1:03:d6:a5:e4:e5:e4:c1:31:11: 43:59:86:4f:d7:f3:8c:71:98:ba:56:43:bf:27:a2: e2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:56:88:4F:4F:83:E9:4C:8A:F5:0B:7A:4E:9E:56:7F:78:11:AC:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a625d508-4f27-3569-bd48-56bc757ab64d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.20.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:bc:38:93:8b:70:fc:17:31:7f:cc:8b:5d:10:b3:e6:8e:73: e5:95:ed:7b:9b:30:4e:3f:ce:fe:61:37:eb:f8:2a:17:8e:45: b7:95:a9:8c:93:1a:bf:30:0c:f7:01:58:d9:05:8e:db:1d:be: e6:6d:71:fa:3f:aa:42:87:bf:5d:05:a8:f7:e1:d5:cd:c4:8d: d6:5b:ec:25:d6:97:eb:8f:cb:04:36:3c:82:8f:4e:b7:a5:8e: 2d:2b:83:16:00:55:47:b4:12:48:77:3b:b7:01:20:16:2a:6a: 1c:37:ff:b3:97:3f:27:8e:cf:ae:e6:ad:20:50:f1:ac:b8:61: fc:ad:c3:cf:78:e4:2c:c1:ac:29:da:53:59:8b:e2:fa:ed:d3: 08:f7:3f:65:14:bc:ac:78:ec:60:7f:30:71:fa:aa:c0:d8:ce: 82:76:71:fd:43:6f:a0:ac:c0:6b:b5:00:6f:10:dc:61:f0:c1: 77:9f:57:f1:7d:55:36:f1:68:97:56:33:15:f3:53:af:d5:d0: 63:26:81:76:8c:a1:8c:93:2b:fd:98:49:34:63:96:b7:b8:7d: 4a:d7:05:c8:d2:97:dc:7c:32:85:cb:31:33:d6:71:79:a1:a6: 1d:65:6e:8c:2f:15:2e:cd:76:21:b4:b2:e6:e1:be:a1:9c:4e: cf:0b:f5:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp6Q9Y3D0hb95ooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NzVjZmE4MGUtOTgzYi00NWY3LWE3NDQtNTlmMGMzNzVhMTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cHPRN5njdGb5nbocSzLCiw4bQC3wc35jhxu 92bjbEKRk/g4aTikQZrUgeIOXOojP7gbyI4SpnTB15+XeloSh1xr5VnsTnrDriN7 9hH5jvv2fRCMwKMLiL+ToTU4R8GQpHCNCVCCOIgUJQ3IRc8M76Tr/Cp8tm7arR4F tQ2/jjrnR5V9b7Vv3aTdac+HNZ1481mwpZuXmTI5rm/1/V5T1DN0RVUFVEY5m6i1 Sy+XVtJ8tFHlXZ8JQU0KlXZTCGUqk3bASZaCCXSDKflqxxEbEkC6aK7mZQJJJ3ql /ubKa/rTt2Kyb9ED1qXk5eTBMRFDWYZP1/OMcZi6VkO/J6LipQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFINWiE9Pg+lMivULek6eVn94EaxBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTYyNWQ1MDgtNGYyNy0z NTY5LWJkNDgtNTZiYzc1N2FiNjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGBQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMO8OJOLcPwXMX/Mi10Qs+aOc+WV7XubME4/zv5hN+v4KheORbeVqYyT Gr8wDPcBWNkFjtsdvuZtcfo/qkKHv10FqPfh1c3EjdZb7CXWl+uPywQ2PIKPTrel ji0rgxYAVUe0Ekh3O7cBIBYqahw3/7OXPyeOz67mrSBQ8ay4Yfytw8945CzBrCna U1mL4vrt0wj3P2UUvKx47GB/MHH6qsDYzoJ2cf1Db6CswGu1AG8Q3GHwwXefV/F9 VTbxaJdWMxXzU6/V0GMmgXaMoYyTK/2YSTRjlre4fUrXBcjSl9x8MoXLMTPWcXmh ph1lbowvFS7NdiG0subhvqGcTs8L9ao= -----END CERTIFICATE-----Generated at Mon Oct 20 15:22:03 2025 by rpki-client