$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b43b2005-ceee-37cd-9ea5-cf551b47647b.roa File: b43b2005-ceee-37cd-9ea5-cf551b47647b.roa (raw, json) Hash identifier: 2bfoywgDSp6+q5cB/SZ5wuRS2hIUrRf1Qjs0rWX0eSw= Subject key identifier: 59:14:43:89:DD:19:DD:04:99:E3:A7:7F:26:D6:9D:E2:FD:9B:D9:73 Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F4328584B821D8F5F76267A66132A52D0 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b43b2005-ceee-37cd-9ea5-cf551b47647b.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 10796 IP address blocks: 24.209.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:8f:5f:76:26:7a:66:13:2a:52:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=3c31272e-8eb6-4305-8f1b-7b60087bac02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:33:7a:82:95:22:b1:24:1b:53:4f:b6:06:92: 87:e8:00:77:96:b3:b3:68:c7:88:af:8c:90:11:a4: 85:84:52:32:d0:25:05:54:fb:74:9a:5b:35:d1:38: 6f:68:6f:35:88:4f:da:e0:7b:44:91:f3:ce:28:b2: 00:96:21:bd:0c:30:b7:70:a5:a5:2d:d4:86:33:76: 91:53:bc:52:b2:c3:b7:ba:c1:1e:f9:7e:99:c1:3a: 32:ed:6b:42:5c:89:28:8d:da:75:9e:9b:83:72:4e: 51:e1:c8:2e:61:37:46:33:d3:19:91:1b:14:3d:b7: b2:3c:08:18:c1:e0:c6:81:02:d3:80:bd:82:43:99: 43:c1:ad:d0:2a:26:3c:fe:0d:47:64:67:88:50:b2: 48:83:47:8a:83:4f:06:a3:75:c6:06:ec:15:33:11: 98:05:2f:6f:80:80:e1:4c:a6:c0:b4:eb:63:91:3a: cd:dc:a3:36:6f:01:11:9b:5e:bb:f2:f4:a4:67:9b: 07:39:cb:5b:9b:73:4b:aa:ce:54:90:f5:e9:05:53: c6:60:48:70:2d:a0:83:f7:47:c8:4d:13:38:ce:35: 0a:a3:81:23:c6:ca:93:39:67:d4:c2:b8:10:ab:0f: b4:0b:0b:e7:9c:38:3e:60:0c:bb:16:55:7d:ed:ca: 24:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:14:43:89:DD:19:DD:04:99:E3:A7:7F:26:D6:9D:E2:FD:9B:D9:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b43b2005-ceee-37cd-9ea5-cf551b47647b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 24.209.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:b5:a9:bc:56:3d:8b:f6:67:2e:27:92:a5:f6:13:9a:83:fa: 9d:8b:ba:74:d8:ed:7c:5a:ff:66:1e:b7:40:d3:19:db:63:c2: 58:86:31:34:7d:e0:01:86:58:e5:0e:2f:16:b1:7f:4c:b1:0c: 62:2e:8d:b7:b6:54:92:b6:34:9f:a0:88:75:f5:0b:6e:27:68: d0:3e:88:f6:d8:03:9e:69:9f:88:88:01:f3:bb:48:97:d5:c5: 03:9b:0a:e6:a1:25:11:0e:78:7c:42:a2:47:d8:52:10:34:f3: cf:16:97:1d:79:59:f1:fe:35:0c:e3:23:44:e5:02:c7:91:63: 61:46:4d:00:d9:3f:4e:4f:bc:07:63:99:d7:b4:ec:11:ba:ca: 7c:6a:25:9d:4a:42:ef:d2:4d:d8:c0:6d:a8:2d:09:89:ae:ba: 7c:83:c0:67:4e:4a:42:ab:67:b8:9a:65:ba:17:99:82:ad:83: 6e:ba:8b:fc:e6:a7:d0:46:2a:d9:4e:32:bf:58:24:69:05:79: 4c:f8:1b:57:07:12:69:56:f4:07:fa:1e:58:0f:80:f5:7e:09: 02:c8:52:32:dd:4b:b0:9c:da:08:33:82:db:11:fe:01:95:5a: 29:ad:1e:56:00:f6:0b:29:3a:05:42:b5:31:15:69:1b:76:e0: 4a:bd:13:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHY9fdiZ6ZhMqUtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk M2MzMTI3MmUtOGViNi00MzA1LThmMWItN2I2MDA4N2JhYzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jN6gpUisSQbU0+2BpKH6AB3lrOzaMeIr4yQ EaSFhFIy0CUFVPt0mls10ThvaG81iE/a4HtEkfPOKLIAliG9DDC3cKWlLdSGM3aR U7xSssO3usEe+X6ZwToy7WtCXIkojdp1npuDck5R4cguYTdGM9MZkRsUPbeyPAgY weDGgQLTgL2CQ5lDwa3QKiY8/g1HZGeIULJIg0eKg08Go3XGBuwVMxGYBS9vgIDh TKbAtOtjkTrN3KM2bwERm1678vSkZ5sHOctbm3NLqs5UkPXpBVPGYEhwLaCD90fI TRM4zjUKo4EjxsqTOWfUwrgQqw+0CwvnnDg+YAy7FlV97cokBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFkUQ4ndGd0EmeOnfybWneL9m9lzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvYjQzYjIwMDUtY2VlZS0z N2NkLTllYTUtY2Y1NTFiNDc2NDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGNFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+1qbxWPYv2Zy4nkqX2E5qD+p2LunTY7Xxa/2Yet0DTGdtjwliGMTR9 4AGGWOUOLxaxf0yxDGIujbe2VJK2NJ+giHX1C24naNA+iPbYA55pn4iIAfO7SJfV xQObCuahJREOeHxCokfYUhA0888Wlx15WfH+NQzjI0TlAseRY2FGTQDZP05PvAdj mde07BG6ynxqJZ1KQu/STdjAbagtCYmuunyDwGdOSkKrZ7iaZboXmYKtg266i/zm p9BGKtlOMr9YJGkFeUz4G1cHEmlW9Af6HlgPgPV+CQLIUjLdS7Cc2ggzgtsR/gGV WimtHlYA9gspOgVCtTEVaRt24Eq9E/0= -----END CERTIFICATE-----Generated at Mon Oct 20 03:46:42 2025 by rpki-client