$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d70cbafa-2cc8-341b-a56e-8151898bd4c1.roa File: d70cbafa-2cc8-341b-a56e-8151898bd4c1.roa (raw, json) Hash identifier: y+cnfNByv47BDtHDU46Mv+H21sUk9WW+OYKjDjqoeRY= Subject key identifier: 67:46:82:02:A0:B4:55:FD:47:DC:97:CA:D5:8D:AC:39:69:0E:66:AF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A7EFCB018F34BFBF18A400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d70cbafa-2cc8-341b-a56e-8151898bd4c1.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 24.2.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:ef:cb:01:8f:34:bf:bf:18:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=1ea8d566-bd52-4a95-a5f7-aa16971632ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8f:a3:86:c0:0f:eb:68:6d:ed:fa:10:3c:0c: d9:c2:1a:58:ae:36:61:e4:48:0e:e2:51:b7:19:c3: e0:54:7a:6e:33:ab:17:9a:07:7e:a3:04:aa:07:d7: db:7d:1c:89:12:52:35:c0:07:14:c5:a0:72:2e:4e: e0:7c:4f:00:a6:6b:f3:a0:a9:76:6d:e2:1b:e4:4d: 90:7f:30:cb:f9:20:de:33:20:5f:62:37:e1:6c:e4: 46:24:46:6e:49:ad:fb:bf:84:4e:13:df:0c:f8:24: f2:4f:37:04:8a:1c:a9:6b:d1:83:33:a6:d0:c9:ad: 4e:d0:7f:4a:34:c9:5a:d7:79:b1:62:50:b9:0c:d4: a9:36:22:a6:8d:8c:0a:58:01:0a:ed:90:92:29:1d: 4f:0f:0b:68:d3:bb:c6:e6:46:ba:35:90:5a:b8:2a: 09:13:7a:d6:6f:a2:3c:13:e3:a8:86:81:eb:f9:6d: c3:20:66:cb:92:1a:2d:68:44:c4:63:56:b5:3f:41: a7:8c:3d:21:d0:af:b2:65:10:25:78:64:a1:1e:c7: bc:91:d8:24:6a:eb:fa:75:ab:ba:40:09:84:ef:fa: 03:da:99:3c:7e:99:35:ae:04:ed:00:e6:2a:2b:73: 75:a0:73:50:f0:24:24:92:d8:57:fd:b3:55:45:11: 75:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:46:82:02:A0:B4:55:FD:47:DC:97:CA:D5:8D:AC:39:69:0E:66:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d70cbafa-2cc8-341b-a56e-8151898bd4c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.2.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:85:c4:f4:01:78:97:7b:04:36:55:7b:0c:69:c0:66:cc:69: 6a:04:50:e7:5f:06:50:3a:66:40:39:f8:9b:52:3f:49:a3:dd: fb:78:4f:0b:6b:ae:5c:8e:35:2e:07:eb:0a:d6:00:de:e6:e7: 85:dc:aa:7d:17:60:fd:99:48:f5:63:ad:3a:7d:4b:b7:79:d8: 33:5e:08:60:20:2f:db:bf:a8:6a:63:d9:a4:e8:9b:5b:b3:eb: 2d:f8:48:23:27:d7:eb:71:60:bd:6c:78:75:3d:60:5c:14:93: de:70:5c:27:86:6b:c3:12:03:a6:24:04:56:da:a5:b8:eb:8c: b4:47:03:b5:3f:bb:48:06:38:5f:ac:08:a0:e1:05:c6:aa:81: 5f:a7:21:ab:c2:ba:0f:c1:f0:7a:75:3d:d8:89:63:c1:6c:b6: 5c:a3:1a:fb:0e:a5:a7:d3:91:eb:63:90:48:bd:0b:5b:e8:0f: 43:06:0b:2a:e5:e3:a2:29:58:d8:71:86:49:ae:df:31:54:21: b9:73:62:43:64:73:fa:94:58:79:af:69:24:ef:3d:12:70:ec: b8:e5:8b:01:cb:63:69:f1:e5:18:aa:cf:f6:f7:2a:54:9a:7b: 92:f3:66:14:34:ac:a8:9d:f1:9f:6e:b9:ef:d2:f3:53:e7:61: 84:24:a1:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp+/LAY80v78YpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MWVhOGQ1NjYtYmQ1Mi00YTk1LWE1ZjctYWExNjk3MTYzMmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApI+jhsAP62ht7foQPAzZwhpYrjZh5EgO4lG3 GcPgVHpuM6sXmgd+owSqB9fbfRyJElI1wAcUxaByLk7gfE8ApmvzoKl2beIb5E2Q fzDL+SDeMyBfYjfhbORGJEZuSa37v4ROE98M+CTyTzcEihypa9GDM6bQya1O0H9K NMla13mxYlC5DNSpNiKmjYwKWAEK7ZCSKR1PDwto07vG5ka6NZBauCoJE3rWb6I8 E+OohoHr+W3DIGbLkhotaETEY1a1P0GnjD0h0K+yZRAleGShHse8kdgkauv6dau6 QAmE7/oD2pk8fpk1rgTtAOYqK3N1oHNQ8CQkkthX/bNVRRF1gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGdGggKgtFX9R9yXytWNrDlpDmavMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDcwY2JhZmEtMmNjOC0z NDFiLWE1NmUtODE1MTg5OGJkNGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGAKWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCFxPQBeJd7BDZVewxpwGbMaWoEUOdfBlA6ZkA5+JtSP0mj3ft4Twtr rlyONS4H6wrWAN7m54Xcqn0XYP2ZSPVjrTp9S7d52DNeCGAgL9u/qGpj2aTom1uz 6y34SCMn1+txYL1seHU9YFwUk95wXCeGa8MSA6YkBFbapbjrjLRHA7U/u0gGOF+s CKDhBcaqgV+nIavCug/B8Hp1PdiJY8FstlyjGvsOpafTketjkEi9C1voD0MGCyrl 46IpWNhxhkmu3zFUIblzYkNkc/qUWHmvaSTvPRJw7LjliwHLY2nx5Riqz/b3KlSa e5LzZhQ0rKid8Z9uue/S81PnYYQkoYQ= -----END CERTIFICATE-----Generated at Mon Oct 20 15:30:40 2025 by rpki-client