$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b23b0063-886a-3274-b648-1b412f7d2d87.roa File: b23b0063-886a-3274-b648-1b412f7d2d87.roa (raw, json) Hash identifier: N9NJ+8AiBvqIvwseOy/Y7Ct4ucFjStj/fZH5mGyKcXg= Subject key identifier: 8C:83:27:54:77:09:EE:C3:E8:64:3D:33:D0:90:FC:55:95:E0:28:13 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB98F7D45F8F9D6FA2400C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b23b0063-886a-3274-b648-1b412f7d2d87.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 13367 IP address blocks: 24.118.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:8f:7d:45:f8:f9:d6:fa:24:00:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=95d01e31-7aa1-4df8-888c-f6aabdc58e66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:40:f7:de:7c:88:35:43:38:91:ea:da:55:f1: 8e:1d:b5:1d:9e:5f:d3:d5:5b:f1:c3:d2:78:bc:e4: 05:31:e0:4c:4b:23:c9:cb:ac:85:c7:44:73:a1:c4: 40:d9:54:6a:c0:7d:61:3f:90:36:ef:5b:7a:e1:55: 63:b9:6e:3d:3f:b5:48:ff:16:30:98:af:9c:c2:f3: f1:3b:9b:c3:f2:56:79:fc:b4:18:12:8c:9b:df:a6: 05:85:e1:6e:2a:91:84:80:6b:64:24:4e:77:67:76: 57:ff:ae:70:04:f9:8c:e2:6c:7b:3b:13:5e:d8:0a: ed:dc:f0:d2:6a:34:4c:96:c8:b9:8e:c2:c9:4e:f7: c1:2b:20:fc:f7:2d:6d:cf:06:bf:56:16:01:3f:b8: 7b:d8:d0:ae:32:ec:b1:6c:7b:1c:ff:44:db:2f:9a: 95:87:26:4f:f2:a3:61:e5:d0:25:72:11:96:98:14: c2:13:81:cf:78:27:0e:23:8b:fb:54:db:02:3a:a7: 51:6b:a3:99:c6:4f:05:e3:b0:f5:7e:8c:1c:d5:3a: 82:3f:c0:29:94:66:fd:aa:e9:6e:58:e4:9f:5a:9a: a8:cf:c0:60:ad:76:2f:4f:82:99:c7:cd:73:c3:32: 1f:b9:78:5c:1f:98:f0:f5:be:2f:62:fa:bb:84:12: fe:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:83:27:54:77:09:EE:C3:E8:64:3D:33:D0:90:FC:55:95:E0:28:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b23b0063-886a-3274-b648-1b412f7d2d87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.118.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d8:d0:f2:08:a1:15:f2:4e:c3:68:86:fb:0a:69:81:56:dc:08: 46:09:92:44:3e:2f:2d:c6:e4:f5:04:eb:4a:07:a6:3a:8e:b2: d3:28:e8:b5:53:1e:bd:b8:aa:e9:2d:a8:17:7d:2d:ed:fc:6c: 82:7c:ba:7d:17:11:e8:11:c0:b4:d6:30:8f:a7:44:d9:1f:a4: 0a:e7:80:32:8a:5f:87:ce:f6:ae:94:28:99:d0:17:0a:69:ee: a7:4f:cf:46:e8:69:3d:08:1e:9c:33:90:5e:b9:8c:87:8c:31: 52:35:32:12:1b:6e:fa:88:ea:63:15:a8:0e:2e:39:59:13:a0: 78:e7:a8:39:74:d1:ff:d2:e8:7e:37:3b:3b:e6:e4:43:98:b5: 75:6b:1b:14:19:3a:9e:7c:eb:1d:09:21:67:c6:ab:61:9a:20: aa:18:ee:3e:3b:94:b5:27:83:ce:a1:e2:7e:56:12:55:f2:e4: a4:49:b3:c7:fd:a3:61:5a:ee:a9:06:d3:fe:45:c2:4a:ba:0a: 94:53:5c:07:57:86:d2:af:4c:e1:b8:36:43:5b:f4:dd:35:da: 1f:63:e1:0c:6f:cd:93:a3:5c:e7:6c:db:f9:80:84:cb:45:9d: 96:79:a4:8a:ec:cf:98:f8:19:a0:fb:f5:02:00:06:d7:ab:92: 7e:68:15:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uY99Rfj51vokAMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk OTVkMDFlMzEtN2FhMS00ZGY4LTg4OGMtZjZhYWJkYzU4ZTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwED33nyINUM4keraVfGOHbUdnl/T1Vvxw9J4 vOQFMeBMSyPJy6yFx0RzocRA2VRqwH1hP5A271t64VVjuW49P7VI/xYwmK+cwvPx O5vD8lZ5/LQYEoyb36YFheFuKpGEgGtkJE53Z3ZX/65wBPmM4mx7OxNe2Art3PDS ajRMlsi5jsLJTvfBKyD89y1tzwa/VhYBP7h72NCuMuyxbHsc/0TbL5qVhyZP8qNh 5dAlchGWmBTCE4HPeCcOI4v7VNsCOqdRa6OZxk8F47D1fowc1TqCP8AplGb9qulu WOSfWpqoz8BgrXYvT4KZx81zwzIfuXhcH5jw9b4vYvq7hBL+hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIyDJ1R3Ce7D6GQ9M9CQ/FWV4CgTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjIzYjAwNjMtODg2YS0z Mjc0LWI2NDgtMWI0MTJmN2QyZDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGHbYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANjQ8gihFfJOw2iG+wppgVbcCEYJkkQ+Ly3G5PUE60oHpjqOstMo6LVT Hr24quktqBd9Le38bIJ8un0XEegRwLTWMI+nRNkfpArngDKKX4fO9q6UKJnQFwpp 7qdPz0boaT0IHpwzkF65jIeMMVI1MhIbbvqI6mMVqA4uOVkToHjnqDl00f/S6H43 Ozvm5EOYtXVrGxQZOp586x0JIWfGq2GaIKoY7j47lLUng86h4n5WElXy5KRJs8f9 o2Fa7qkG0/5Fwkq6CpRTXAdXhtKvTOG4NkNb9N012h9j4QxvzZOjXOds2/mAhMtF nZZ5pIrsz5j4GaD79QIABterkn5oFWA= -----END CERTIFICATE-----Generated at Mon Oct 20 07:54:49 2025 by rpki-client