$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f340c07b-f62e-333a-9aaa-bab31459e334.roa File: f340c07b-f62e-333a-9aaa-bab31459e334.roa (raw, json) Hash identifier: vz+/duTnrVKIbtWNiu3ndr7RV3vKJV0f3oGmUzyHgPU= Subject key identifier: 2B:0E:74:DF:BE:32:27:0F:F3:1C:32:A6:0D:F5:4F:A0:8A:7C:5C:EE Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F4328584B5B0738D9DA59F468A2EA3300 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f340c07b-f62e-333a-9aaa-bab31459e334.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 16739 IP address blocks: 24.124.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:38:d9:da:59:f4:68:a2:ea:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=c621d825-86ff-40d4-801c-57a90950cd3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b9:4e:85:13:0f:5e:9a:6b:a8:20:50:c3:88: 0d:b2:04:cf:33:c5:fe:c1:5e:1e:56:71:50:e3:b7: 18:09:c8:a7:34:73:32:26:36:23:7c:bf:7e:71:ed: 95:f2:ac:1d:32:39:13:ca:b1:cf:53:a0:28:0b:35: f2:90:60:24:f6:3d:6a:37:9e:1f:a7:29:71:b3:1a: 16:c4:77:19:01:4f:07:8d:e3:9f:b1:87:1c:13:66: 1c:c0:c6:73:bd:df:6e:2b:ea:71:5d:1e:20:13:ee: e5:50:18:a0:22:51:c3:94:4e:d5:88:34:4b:81:7f: a8:f1:1a:a0:85:c6:29:0e:1a:4c:38:f6:c4:16:51: a6:4c:32:48:a7:4f:1a:09:77:ca:e1:4f:cf:3f:b2: 5a:8f:19:60:fc:8a:72:8f:81:28:3a:a6:f4:fa:9e: bf:b6:82:34:9e:0a:c4:53:84:a9:70:76:7f:c6:a2: bf:60:ab:4c:94:7a:58:22:cc:2e:ca:f2:e3:cf:48: 83:4f:c7:82:2e:43:62:20:77:b1:3b:6e:76:74:90: 1f:6c:28:7e:8a:ef:f7:9b:1b:b4:99:14:f0:bd:28: be:44:d5:e0:07:c6:ea:39:16:27:88:23:48:91:a1: 16:68:6a:56:f1:aa:93:44:17:6c:ff:ad:b9:b1:72: b6:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:0E:74:DF:BE:32:27:0F:F3:1C:32:A6:0D:F5:4F:A0:8A:7C:5C:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f340c07b-f62e-333a-9aaa-bab31459e334.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 24.124.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:dd:e7:ef:b2:6a:6b:71:d4:8e:e3:d9:02:75:8a:f7:c0:ac: 49:81:26:c6:89:6d:db:c0:aa:5a:f8:e3:bf:35:6e:f1:09:67: 37:1b:bf:2a:df:a0:46:21:9c:8c:77:bd:82:37:0c:e3:25:25: 42:47:f4:b1:5e:b1:be:2f:e7:cc:f9:57:72:36:94:6a:d9:a1: e2:47:3a:0b:17:7a:e4:f7:42:ad:44:a1:73:58:11:9c:ac:34: b1:37:1c:e1:f2:15:3b:67:c0:20:3b:b0:2c:b8:a7:18:9f:98: 63:7a:59:f1:f4:52:8e:61:d8:3e:92:08:b1:ed:dc:9b:f5:de: af:ad:11:47:3c:6c:af:43:71:28:c0:3d:84:2b:0d:6b:bd:fc: 86:55:f9:f2:9d:76:d7:1c:35:5f:00:eb:9b:3d:10:de:21:b9: 7f:01:bc:74:8e:d2:66:f1:49:2e:46:21:19:9d:89:22:ec:59: fe:64:66:a1:7e:d7:9c:38:d7:e0:30:5a:52:c2:44:94:9a:30: 74:cf:8e:ae:cd:9b:c8:f5:1c:74:fc:b3:82:fd:9a:f3:8b:66: 3c:20:c6:81:d7:6e:ee:83:6b:7a:30:1e:38:37:e2:1d:d3:b9: 83:23:7f:15:ac:a0:ce:b3:d2:fb:cb:8b:a5:9f:5e:69:b3:b3: 5c:9a:23:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbBzjZ2ln0aKLqMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk YzYyMWQ4MjUtODZmZi00MGQ0LTgwMWMtNTdhOTA5NTBjZDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7lOhRMPXpprqCBQw4gNsgTPM8X+wV4eVnFQ 47cYCcinNHMyJjYjfL9+ce2V8qwdMjkTyrHPU6AoCzXykGAk9j1qN54fpylxsxoW xHcZAU8HjeOfsYccE2YcwMZzvd9uK+pxXR4gE+7lUBigIlHDlE7ViDRLgX+o8Rqg hcYpDhpMOPbEFlGmTDJIp08aCXfK4U/PP7Jajxlg/Ipyj4EoOqb0+p6/toI0ngrE U4SpcHZ/xqK/YKtMlHpYIswuyvLjz0iDT8eCLkNiIHexO252dJAfbCh+iu/3mxu0 mRTwvSi+RNXgB8bqORYniCNIkaEWaGpW8aqTRBds/625sXK2pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCsOdN++MicP8xwypg31T6CKfFzuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvZjM0MGMwN2ItZjYyZS0z MzNhLTlhYWEtYmFiMzE0NTllMzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGHx8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfd5++yamtx1I7j2QJ1ivfArEmBJsaJbdvAqlr44781bvEJZzcbvyrf oEYhnIx3vYI3DOMlJUJH9LFesb4v58z5V3I2lGrZoeJHOgsXeuT3Qq1EoXNYEZys NLE3HOHyFTtnwCA7sCy4pxifmGN6WfH0Uo5h2D6SCLHt3Jv13q+tEUc8bK9DcSjA PYQrDWu9/IZV+fKddtccNV8A65s9EN4huX8BvHSO0mbxSS5GIRmdiSLsWf5kZqF+ 15w41+AwWlLCRJSaMHTPjq7Nm8j1HHT8s4L9mvOLZjwgxoHXbu6Da3owHjg34h3T uYMjfxWsoM6z0vvLi6WfXmmzs1yaI8M= -----END CERTIFICATE-----Generated at Mon Oct 20 04:46:24 2025 by rpki-client