$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/5a7572ff-0c1a-36e1-a553-3bbd80d6ecd7.roa File: 5a7572ff-0c1a-36e1-a553-3bbd80d6ecd7.roa (raw, json) Hash identifier: ufnB4wNVDI3H/r7mgzOEaI9eQrMhuvI27pxN0dyZmKM= Subject key identifier: D8:A0:35:66:8A:BB:F5:D3:78:2E:E1:50:A5:92:0B:B2:58:F5:C6:4E Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F4328584B821CD7F10A7D7010B5612120 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/5a7572ff-0c1a-36e1-a553-3bbd80d6ecd7.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 46687 IP address blocks: 24.233.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:d7:f1:0a:7d:70:10:b5:61:21:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=780f2cd5-f072-4162-9699-8ad474b7d661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8f:57:b0:95:a9:df:f5:a4:0b:94:11:0d:99: ec:37:47:21:5a:17:42:be:26:d7:fb:95:14:bd:b0: 5c:7e:4a:b8:80:e8:3e:2c:93:40:1d:2b:c1:84:9a: f1:47:da:f8:6a:15:8e:53:d9:56:b9:5a:c1:a8:ee: cd:24:2c:d5:ed:93:21:04:ab:43:8d:2a:69:07:32: 8c:02:64:ba:c7:c5:0b:2e:ec:f2:78:72:9d:d5:aa: a9:b2:57:bc:0c:9c:f8:8a:84:9e:f4:f1:f7:e8:de: 03:ab:d2:45:e4:53:69:3b:d6:96:ae:2a:70:f8:0a: 20:f9:fb:1c:2d:22:cd:21:ed:6e:a3:72:de:70:d1: 93:fd:1e:a5:23:9c:fc:fe:12:71:58:c4:16:c6:0c: 4a:0a:6d:eb:7f:d6:f0:24:5a:c8:00:10:f1:a6:25: 64:3a:8b:ae:7a:60:35:e1:1c:1e:9c:08:3c:1c:2a: ec:00:1f:ad:c5:19:2d:01:69:22:a4:f6:7d:da:8f: d4:bc:47:93:9e:71:4c:19:e9:50:5d:04:bc:08:19: b7:42:72:43:f7:3c:b7:8e:04:dd:bc:de:0e:92:9c: 4a:da:6a:fb:48:73:ee:a8:7b:d8:4d:b2:48:33:ae: 2b:a9:52:8b:f4:9a:c5:61:9b:3e:c8:84:82:e5:30: 25:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:A0:35:66:8A:BB:F5:D3:78:2E:E1:50:A5:92:0B:B2:58:F5:C6:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/5a7572ff-0c1a-36e1-a553-3bbd80d6ecd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv4: 24.233.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:1a:5d:73:99:a8:59:89:4a:0c:80:6d:7d:9d:1c:79:3d:06: 93:d6:56:7e:c9:5b:a5:b3:0f:bd:fb:dc:60:6e:c3:0b:08:ed: f1:fc:ec:b1:11:da:bf:2e:17:d7:6f:a8:ce:7b:43:51:8f:0a: db:c4:fc:75:7a:df:8a:b6:5c:eb:a3:37:d3:9a:23:b0:1a:80: 82:20:01:74:b1:ec:74:b8:e1:39:33:18:fc:de:f9:33:97:85: ea:d1:40:92:cf:81:88:e2:8f:a3:fd:3c:22:bc:b3:0c:61:70: 5c:0a:c0:0b:40:a5:f8:1c:11:7b:b2:c8:dd:ae:90:81:38:ca: 61:ac:e7:0b:42:de:81:91:12:cb:34:37:08:7e:9e:b3:1d:ab: 4b:a5:a1:0a:64:0e:6e:5b:b8:76:87:01:82:a6:6e:b6:11:61: 06:2e:81:08:82:7f:97:30:ca:96:bc:93:6c:03:32:0b:b5:5b: 5b:cb:93:ad:ab:e6:97:4c:0b:52:f7:cf:49:39:f7:f9:30:6c: 11:6b:5d:2c:34:2e:60:32:a4:10:d5:09:5e:a3:8b:d6:4c:bb: 34:1e:df:35:9c:2f:8b:9b:de:ec:4f:60:a8:dc:5c:e2:0f:0a: d1:a7:04:94:f8:ef:97:c9:52:8b:9d:4d:a6:08:56:21:58:f2: 74:28:af:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHNfxCn1wELVhISAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk NzgwZjJjZDUtZjA3Mi00MTYyLTk2OTktOGFkNDc0YjdkNjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoY9XsJWp3/WkC5QRDZnsN0chWhdCvibX+5UU vbBcfkq4gOg+LJNAHSvBhJrxR9r4ahWOU9lWuVrBqO7NJCzV7ZMhBKtDjSppBzKM AmS6x8ULLuzyeHKd1aqpsle8DJz4ioSe9PH36N4Dq9JF5FNpO9aWripw+Aog+fsc LSLNIe1uo3LecNGT/R6lI5z8/hJxWMQWxgxKCm3rf9bwJFrIABDxpiVkOouuemA1 4RwenAg8HCrsAB+txRktAWkipPZ92o/UvEeTnnFMGelQXQS8CBm3QnJD9zy3jgTd vN4OkpxK2mr7SHPuqHvYTbJIM64rqVKL9JrFYZs+yISC5TAldwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNigNWaKu/XTeC7hUKWSC7JY9cZOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvNWE3NTcyZmYtMGMxYS0z NmUxLWE1NTMtM2JiZDgwZDZlY2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGOngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0aXXOZqFmJSgyAbX2dHHk9BpPWVn7JW6WzD7373GBuwwsI7fH87LER 2r8uF9dvqM57Q1GPCtvE/HV634q2XOujN9OaI7AagIIgAXSx7HS44TkzGPze+TOX herRQJLPgYjij6P9PCK8swxhcFwKwAtApfgcEXuyyN2ukIE4ymGs5wtC3oGREss0 Nwh+nrMdq0uloQpkDm5buHaHAYKmbrYRYQYugQiCf5cwypa8k2wDMgu1W1vLk62r 5pdMC1L3z0k59/kwbBFrXSw0LmAypBDVCV6ji9ZMuzQe3zWcL4ub3uxPYKjcXOIP CtGnBJT475fJUoudTaYIViFY8nQor1E= -----END CERTIFICATE-----Generated at Mon Oct 20 11:05:26 2025 by rpki-client