$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7a84d95-c6ee-3595-97c0-864f03448928.roa File: b7a84d95-c6ee-3595-97c0-864f03448928.roa (raw, json) Hash identifier: WZCDyiEqpUjRMJuPHdWaOUdTuL+igJ+hpd1vbxrtsOw= Subject key identifier: 29:87:28:35:CD:8A:7B:79:D1:B6:C0:16:78:E6:4A:CF:A6:C9:50:89 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B52A726147B6A0A8860A3FA60 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7a84d95-c6ee-3595-97c0-864f03448928.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 33491 IP address blocks: 24.1.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:26:14:7b:6a:0a:88:60:a3:fa:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=33d5e6f3-72a8-4175-b8ef-42d3b0734714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d0:92:e3:1c:1a:df:dc:d0:b7:79:34:01:4e: 61:9e:82:01:3f:93:00:ca:b8:a6:a5:8c:14:37:2e: 9d:39:a2:4c:fe:1f:80:58:64:f6:f9:05:62:b6:04: 3b:f8:54:64:36:40:69:d7:1c:34:9a:a7:9b:35:10: e8:2b:c2:ba:4d:74:71:76:fa:df:7c:33:eb:d1:3e: bc:d2:a3:db:93:77:6a:16:36:a9:0e:7e:06:68:b8: 05:b1:0b:bb:d6:96:e0:6f:fb:84:01:b5:88:40:62: d0:2d:86:1b:34:09:5a:55:91:e0:7e:f9:64:34:e6: 26:c7:52:8d:34:15:2c:da:f3:91:ac:9b:e4:b6:99: 02:0b:b0:22:fb:73:6b:7a:46:8b:47:88:1e:7b:86: 25:79:91:4f:7d:97:08:ad:39:6e:b5:56:74:62:0a: 17:76:0f:8c:5b:8d:8f:4b:67:e1:54:f6:95:02:f3: 0a:b2:bc:bd:89:c1:c7:cd:92:87:3a:a4:7a:c9:e0: 45:4d:72:61:49:5c:92:5c:05:9b:23:24:70:7a:d1: 42:91:19:f0:2a:0f:47:f4:55:8c:ec:e6:48:d7:a7: 3f:30:3d:ae:67:57:74:2d:09:41:28:6d:ad:cd:8c: b6:08:78:69:73:78:b6:71:5c:3b:9a:62:22:38:54: 78:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:87:28:35:CD:8A:7B:79:D1:B6:C0:16:78:E6:4A:CF:A6:C9:50:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7a84d95-c6ee-3595-97c0-864f03448928.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.1.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:ef:74:da:6c:b6:73:6d:d2:d6:a5:e7:6b:96:6d:ee:b6:06: c2:96:fc:55:69:9a:e9:19:82:93:78:44:19:4d:f7:d3:17:40: ad:92:a9:77:2b:3d:92:f1:f3:1c:4c:98:e4:75:1b:a0:f9:6b: 16:85:41:ca:e6:65:d0:f6:b3:5a:26:8e:de:dc:83:70:98:32: 60:d8:52:44:ea:8d:18:a6:26:58:52:18:5e:29:c9:d1:09:53: 25:38:67:62:8d:66:f6:49:de:95:78:87:c1:fd:96:84:c0:84: 47:4c:ee:68:f2:e4:56:99:7b:8e:32:aa:15:ed:3e:43:ab:b6: 1d:d1:0a:46:4e:05:5a:a2:7f:df:46:00:47:30:51:01:79:0e: 69:62:43:a4:db:6f:81:8d:1c:42:8c:da:de:07:57:d9:bf:ec: 60:2a:05:79:4c:d4:e3:54:1e:96:92:ad:2b:66:34:05:65:7e: 27:74:74:da:cd:00:bd:6e:ab:24:86:ac:1c:d6:de:05:f3:00: 1d:bd:50:bd:d0:2c:9a:5b:cd:ac:10:94:cc:6f:cb:fe:69:92: a7:47:b5:ae:00:c7:1c:ae:ed:fb:bd:31:b1:69:e2:3d:f0:d8: f4:e7:ba:bc:68:7f:d1:2c:fa:a4:89:9d:78:c0:ae:d2:f1:9a: 90:2d:17:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSpyYUe2oKiGCj+mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk MzNkNWU2ZjMtNzJhOC00MTc1LWI4ZWYtNDJkM2IwNzM0NzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitCS4xwa39zQt3k0AU5hnoIBP5MAyrimpYwU Ny6dOaJM/h+AWGT2+QVitgQ7+FRkNkBp1xw0mqebNRDoK8K6TXRxdvrffDPr0T68 0qPbk3dqFjapDn4GaLgFsQu71pbgb/uEAbWIQGLQLYYbNAlaVZHgfvlkNOYmx1KN NBUs2vORrJvktpkCC7Ai+3NrekaLR4gee4YleZFPfZcIrTlutVZ0YgoXdg+MW42P S2fhVPaVAvMKsry9icHHzZKHOqR6yeBFTXJhSVySXAWbIyRwetFCkRnwKg9H9FWM 7OZI16c/MD2uZ1d0LQlBKG2tzYy2CHhpc3i2cVw7mmIiOFR4TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCmHKDXNint50bbAFnjmSs+myVCJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjdhODRkOTUtYzZlZS0z NTk1LTk3YzAtODY0ZjAzNDQ4OTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGAEMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3vdNpstnNt0tal52uWbe62BsKW/FVpmukZgpN4RBlN99MXQK2SqXcr PZLx8xxMmOR1G6D5axaFQcrmZdD2s1omjt7cg3CYMmDYUkTqjRimJlhSGF4pydEJ UyU4Z2KNZvZJ3pV4h8H9loTAhEdM7mjy5FaZe44yqhXtPkOrth3RCkZOBVqif99G AEcwUQF5DmliQ6Tbb4GNHEKM2t4HV9m/7GAqBXlM1ONUHpaSrStmNAVlfid0dNrN AL1uqySGrBzW3gXzAB29UL3QLJpbzawQlMxvy/5pkqdHta4Axxyu7fu9MbFp4j3w 2PTnurxof9Es+qSJnXjArtLxmpAtFyc= -----END CERTIFICATE-----Generated at Mon Oct 20 03:32:32 2025 by rpki-client