$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/d21a8978-b2d2-30a9-a39c-0b84d71329e2.roa File: d21a8978-b2d2-30a9-a39c-0b84d71329e2.roa (raw, json) Hash identifier: FkFza18BG8wHq6dfSHBrwFsuI7e7rZxb3tYmk7H8Kew= Subject key identifier: 9B:95:3C:8F:B2:19:FA:AF:A8:C2:22:F6:18:93:BB:38:06:48:AC:45 Certificate issuer: /CN=7a7abeff-feac-4cc9-9077-866f0bb1b8cc Certificate serial: 010D0C9F4328584B8EACBAF022FE02CC9BAA3F80 Authority key identifier: FB:BF:7E:3A:E5:BD:B2:6B:C2:DD:40:13:1B:AE:F1:45:BE:AC:12:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/d21a8978-b2d2-30a9-a39c-0b84d71329e2.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 21615 IP address blocks: 24.75.116.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:ba:f0:22:fe:02:cc:9b:aa:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a7abeff-feac-4cc9-9077-866f0bb1b8cc Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=07abdfd0-79e8-4846-bfb0-ffa057107728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9f:4f:e8:42:99:a5:98:b4:71:d9:da:6e:77: d8:5f:d0:30:de:10:d9:96:2c:c9:87:d4:2f:97:01: a3:71:56:85:f3:66:13:10:be:a2:31:0e:b6:26:03: 59:de:83:98:5a:b0:cf:c0:da:13:9b:63:71:59:00: 66:c2:33:fe:ce:f8:64:e4:52:3b:94:0b:d3:ba:3e: 36:57:44:6e:a6:2b:c6:0d:d4:53:f8:3c:40:52:71: ba:87:f3:8d:11:95:b5:4f:34:86:09:3a:4b:de:00: 84:8e:a1:4d:c5:02:b2:d9:27:88:72:3b:67:f2:9f: 91:b4:79:b6:8b:cc:d7:d4:8a:15:20:47:69:73:78: 7a:d8:20:95:b2:a3:34:bd:7f:59:02:43:b2:37:da: 1e:b5:4b:54:60:34:f6:cf:55:9d:04:44:b7:e6:45: 45:56:98:ed:4b:19:c4:6b:25:fa:5d:b5:ca:41:c0: 73:30:01:9b:fd:11:06:5c:70:30:40:26:c4:a3:41: b1:8f:04:87:9c:cb:40:06:c2:48:58:85:10:1c:37: db:d9:3a:51:73:28:21:f1:fd:d2:49:ec:3c:74:ac: 26:18:3a:27:2a:3b:8e:3d:1d:e5:ab:0b:95:fd:b2: dc:37:f4:b9:fb:4f:96:07:92:24:fe:f4:43:e5:c6: fc:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:95:3C:8F:B2:19:FA:AF:A8:C2:22:F6:18:93:BB:38:06:48:AC:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/d21a8978-b2d2-30a9-a39c-0b84d71329e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.crl X509v3 Authority Key Identifier: keyid:FB:BF:7E:3A:E5:BD:B2:6B:C2:DD:40:13:1B:AE:F1:45:BE:AC:12:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.cer sbgp-ipAddrBlock: critical IPv4: 24.75.116.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:54:e0:51:ec:a9:46:8d:c9:ca:93:d9:c1:6a:b1:dc:1d:b1: 61:42:ef:a6:08:67:dd:d7:04:0e:1d:83:39:14:6c:8b:87:4b: 9c:1e:db:54:d0:a9:68:b2:c7:98:85:20:a3:b5:4f:25:b2:3f: 9e:ed:bc:af:08:14:0d:f5:a0:a4:a5:53:56:18:c0:e4:c6:1b: 19:95:01:28:54:b1:8a:c7:36:f1:8d:e8:32:e0:b8:83:9a:f0: ed:92:36:cb:eb:0d:6f:bd:af:74:7a:03:41:39:63:ed:ac:f3: ae:f0:7a:01:ba:02:1e:33:a6:96:c3:30:5f:37:6b:32:9d:47: ef:29:59:99:df:aa:a7:c3:89:6e:d6:d3:6a:37:40:02:19:32: ae:66:ac:f6:0b:e2:c3:a6:ce:27:b3:ec:f4:51:f4:7d:c1:11: e3:dc:8a:1d:d4:82:d0:b4:89:a6:09:4d:a8:f9:36:d5:a0:47: 55:4e:dd:1d:e0:d9:3b:39:5a:b5:92:58:f0:88:5a:d2:55:b8: c8:76:96:3a:53:b1:2f:6f:a9:81:26:c2:3b:fb:29:dd:42:fb: 54:d6:05:e8:c6:29:af:b8:50:89:f6:46:f0:1b:fd:f4:e9:b0: 35:50:58:9b:5d:20:15:89:92:7e:2f:5a:49:8c:f9:b3:1a:34: f2:40:5e:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrLrwIv4CzJuqP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2E3YWJlZmYtZmVhYy00Y2M5LTkwNzctODY2ZjBiYjFi OGNjMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk MDdhYmRmZDAtNzllOC00ODQ2LWJmYjAtZmZhMDU3MTA3NzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAop9P6EKZpZi0cdnabnfYX9Aw3hDZlizJh9Qv lwGjcVaF82YTEL6iMQ62JgNZ3oOYWrDPwNoTm2NxWQBmwjP+zvhk5FI7lAvTuj42 V0RupivGDdRT+DxAUnG6h/ONEZW1TzSGCTpL3gCEjqFNxQKy2SeIcjtn8p+RtHm2 i8zX1IoVIEdpc3h62CCVsqM0vX9ZAkOyN9oetUtUYDT2z1WdBES35kVFVpjtSxnE ayX6XbXKQcBzMAGb/REGXHAwQCbEo0GxjwSHnMtABsJIWIUQHDfb2TpRcygh8f3S Sew8dKwmGDonKjuOPR3lqwuV/bLcN/S5+0+WB5Ik/vRD5cb8zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJuVPI+yGfqvqMIi9hiTuzgGSKxFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YTdh YmVmZi1mZWFjLTRjYzktOTA3Ny04NjZmMGJiMWI4Y2MvZDIxYTg5NzgtYjJkMi0z MGE5LWEzOWMtMGI4NGQ3MTMyOWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2E3YWJlZmYtZmVhYy00Y2M5LTkw NzctODY2ZjBiYjFiOGNjLzdhN2FiZWZmLWZlYWMtNGNjOS05MDc3LTg2NmYwYmIx YjhjYy5jcmwwHwYDVR0jBBgwFoAU+79+OuW9smvC3UATG67xRb6sEjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YTdhYmVmZi1mZWFjLTRjYzktOTA3Ny04NjZm MGJiMWI4Y2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGEt0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1U4FHsqUaNycqT2cFqsdwdsWFC76YIZ93XBA4dgzkUbIuHS5we21TQ qWiyx5iFIKO1TyWyP57tvK8IFA31oKSlU1YYwOTGGxmVAShUsYrHNvGN6DLguIOa 8O2SNsvrDW+9r3R6A0E5Y+2s867wegG6Ah4zppbDMF83azKdR+8pWZnfqqfDiW7W 02o3QAIZMq5mrPYL4sOmziez7PRR9H3BEePcih3UgtC0iaYJTaj5NtWgR1VO3R3g 2Ts5WrWSWPCIWtJVuMh2ljpTsS9vqYEmwjv7Kd1C+1TWBejGKa+4UIn2RvAb/fTp sDVQWJtdIBWJkn4vWkmM+bMaNPJAXss= -----END CERTIFICATE-----Generated at Mon Oct 20 20:41:08 2025 by rpki-client