$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f3b133a0-cc77-3b6b-96e4-9e186d02af2b.roa File: f3b133a0-cc77-3b6b-96e4-9e186d02af2b.roa (raw, json) Hash identifier: XulbxRjGBNDskY9xU1mLbCOyQnqq4OD0JRkNNEBnZUk= Subject key identifier: AC:BA:8C:52:4B:A3:DA:6C:1A:AC:61:61:A3:0D:CF:E6:97:ED:BD:13 Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F4328584B0CDC1EE51472D077E50DC1E0 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f3b133a0-cc77-3b6b-96e4-9e186d02af2b.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 11232 IP address blocks: 24.220.229.160/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:1e:e5:14:72:d0:77:e5:0d:c1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=4a530d34-8f03-4273-858f-eeb285153904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:76:e3:0b:51:a6:6d:ce:87:7d:7f:ce:1d:59: 76:1f:c3:2c:b2:71:42:71:99:a4:40:81:0a:5b:60: 10:6e:ee:00:26:6c:a3:9d:84:ee:a2:c5:8f:8e:63: 89:7d:02:c4:a0:a0:bd:2c:bc:4e:27:9e:b1:be:27: ef:a3:6d:18:1f:46:89:1e:f3:4a:cd:51:9b:4d:08: 12:cc:49:60:89:f3:1f:ea:6f:50:82:12:14:ae:7f: 82:86:fa:b3:87:40:f0:c4:9f:cf:c1:bc:af:d1:b5: 04:d1:4b:75:5f:d0:55:02:48:e0:b6:3b:0b:ca:59: 53:90:b1:45:da:67:4e:8e:7c:96:a4:3c:e8:3b:5c: 20:0c:cf:2c:0a:7f:91:1c:00:14:cc:5c:2b:f2:d3: 48:c5:12:df:fe:d0:05:74:1d:71:08:fd:a2:a3:fd: 57:93:14:e4:86:2a:a5:99:90:1f:42:03:95:d9:da: 52:8a:65:9a:35:eb:57:29:19:4b:58:d4:23:24:bd: 50:c6:7a:74:9c:16:1b:56:db:e1:23:58:ee:b3:5a: 7a:64:69:be:19:87:16:6e:6d:e6:57:89:cc:73:d6: 13:8f:c4:0f:b7:a3:00:f3:56:84:75:1b:14:dd:61: 6d:5f:f6:d6:7d:cf:d7:65:96:08:29:fa:aa:40:ad: e5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:BA:8C:52:4B:A3:DA:6C:1A:AC:61:61:A3:0D:CF:E6:97:ED:BD:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f3b133a0-cc77-3b6b-96e4-9e186d02af2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 24.220.229.160/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:de:d3:72:8c:2a:f3:4d:d5:f8:9a:ba:83:c9:50:9c:cf:2f: e1:5e:7f:e6:f7:35:d3:ad:50:22:2f:99:53:d2:34:11:af:19: 0e:d9:7e:11:37:e0:59:ed:78:97:f5:26:df:3d:24:ff:fd:90: e4:b6:d1:43:1d:e0:51:4d:a9:81:bb:58:ef:26:06:a2:93:31: 87:63:1f:a1:c6:c2:32:03:2b:90:d4:48:4e:6b:d0:1a:f1:1e: a9:17:11:ef:5d:4d:ee:8d:bb:6a:39:d3:f2:95:46:c5:1f:da: bb:02:c5:69:8e:ef:fe:a0:49:87:70:7d:e3:11:0c:a9:be:58: 8f:f1:f3:51:54:c7:b8:08:45:69:e2:c3:f8:4a:04:24:f2:1d: 3b:05:99:1c:e5:26:fd:57:41:33:37:7f:77:9d:a8:27:02:df: 12:e5:32:28:fd:6c:2c:dd:e6:4d:0e:f1:be:1d:d8:a4:89:7e: 21:64:06:e3:d2:7d:67:b8:76:aa:80:69:35:1b:a7:d4:f2:c4: e2:4f:7d:ea:8a:29:e9:0d:8e:d1:18:06:31:70:47:f2:59:73: 51:3a:3e:eb:76:09:cc:71:94:e1:bf:a6:f2:f5:52:91:73:7d: af:fc:3c:89:35:7a:58:ca:dd:93:2f:e7:83:5b:2a:e1:da:b3: 36:85:48:37 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsM3B7lFHLQd+UNweAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk NGE1MzBkMzQtOGYwMy00MjczLTg1OGYtZWViMjg1MTUzOTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXbjC1Gmbc6HfX/OHVl2H8MssnFCcZmkQIEK W2AQbu4AJmyjnYTuosWPjmOJfQLEoKC9LLxOJ56xvifvo20YH0aJHvNKzVGbTQgS zElgifMf6m9QghIUrn+Chvqzh0DwxJ/Pwbyv0bUE0Ut1X9BVAkjgtjsLyllTkLFF 2mdOjnyWpDzoO1wgDM8sCn+RHAAUzFwr8tNIxRLf/tAFdB1xCP2io/1XkxTkhiql mZAfQgOV2dpSimWaNetXKRlLWNQjJL1Qxnp0nBYbVtvhI1jus1p6ZGm+GYcWbm3m V4nMc9YTj8QPt6MA81aEdRsU3WFtX/bWfc/XZZYIKfqqQK3lSwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKy6jFJLo9psGqxhYaMNz+aX7b0TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvZjNiMTMzYTAtY2M3Ny0z YjZiLTk2ZTQtOWUxODZkMDJhZjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEGNzloDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBY3tNyjCrzTdX4mrqDyVCczy/hXn/m9zXTrVAiL5lT0jQRrxkO2X4R N+BZ7XiX9SbfPST//ZDkttFDHeBRTamBu1jvJgaikzGHYx+hxsIyAyuQ1EhOa9Aa 8R6pFxHvXU3ujbtqOdPylUbFH9q7AsVpju/+oEmHcH3jEQypvliP8fNRVMe4CEVp 4sP4SgQk8h07BZkc5Sb9V0EzN393nagnAt8S5TIo/Wws3eZNDvG+HdikiX4hZAbj 0n1nuHaqgGk1G6fU8sTiT33qiinpDY7RGAYxcEfyWXNROj7rdgnMcZThv6by9VKR c32v/DyJNXpYyt2TL+eDWyrh2rM2hUg3 -----END CERTIFICATE-----Generated at Mon Oct 20 19:01:51 2025 by rpki-client