$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2393cab8-0021-3e95-8ca3-23cc81ad8a12.roa File: 2393cab8-0021-3e95-8ca3-23cc81ad8a12.roa (raw, json) Hash identifier: qkX6modvsTD4ZCMXjU25XgzZHTAFf9HLqlNYuTQIM1c= Subject key identifier: 98:5F:DD:B4:CF:D4:39:96:77:ED:73:FF:97:8E:AF:36:D3:03:67:62 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584BC10AEDFED2921FDC86E161C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2393cab8-0021-3e95-8ca3-23cc81ad8a12.roa Signing time: Wed 05 Nov 2025 02:00:31 +0000 ROA not before: Wed 05 Nov 2025 02:00:31 +0000 ROA not after: Tue 03 Feb 2026 02:00:31 +0000 asID: 7725 IP address blocks: 24.131.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0a:ed:fe:d2:92:1f:dc:86:e1:61:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 5 02:00:31 2025 GMT Not After : Feb 3 02:00:31 2026 GMT Subject: CN=c74010a4-67a9-401e-b120-6d4d455da530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a2:ca:d5:56:f0:f2:fe:1c:76:1d:7f:dc:90: d7:a3:87:b3:09:8f:4c:bd:3c:12:da:87:1a:d9:23: e5:77:6e:60:e0:6e:f0:6e:b7:11:b8:7a:c3:7e:f6: ea:55:e7:b4:9f:65:00:5c:8b:31:ef:cf:0a:1a:6d: a1:4b:bb:49:4e:d1:ce:91:d5:2f:01:73:1e:b7:39: 92:c0:e3:c0:77:e5:66:e1:5b:fe:4f:c0:be:68:74: b0:45:91:6e:36:1d:3c:ce:af:9a:15:54:5f:eb:98: 4a:d7:90:88:e3:03:87:4b:60:11:c4:c4:b5:af:a3: e1:a9:14:e1:01:ba:80:ae:79:02:f5:44:c1:0d:5c: bd:fe:82:d7:6b:18:49:fa:2b:34:72:cc:f5:ec:36: 53:dd:86:f6:3b:cf:92:d3:7d:b0:e1:96:a7:4f:0c: a4:7e:97:a0:b0:fd:dc:35:79:2b:ad:fe:d4:3c:b1: 4e:2f:71:eb:d3:5a:d9:9c:a3:93:17:17:30:60:a6: f3:de:4b:56:83:6d:6c:8b:50:1f:1f:2d:4f:7a:2f: 4d:1f:40:11:ce:6f:66:86:61:d0:ec:17:06:b0:55: 6c:16:90:76:a7:2f:aa:4d:95:80:87:00:42:21:fb: 20:8a:5f:a4:34:11:be:a1:9c:cb:d2:2e:dc:01:5e: f4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:5F:DD:B4:CF:D4:39:96:77:ED:73:FF:97:8E:AF:36:D3:03:67:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2393cab8-0021-3e95-8ca3-23cc81ad8a12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.131.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:4a:71:c1:78:bb:2a:85:5c:66:69:6b:7d:3a:77:84:c8:e2: a0:a0:7f:a7:0f:50:21:7c:c7:30:57:ef:e7:c9:80:fd:55:04: bb:82:a5:fa:39:11:8b:0b:e4:19:3b:0f:99:7e:cb:71:dd:28: 07:de:49:79:37:a1:45:ce:26:b8:f6:c0:19:86:f4:30:a8:62: 15:19:73:25:a2:85:c9:ba:67:e1:5c:53:9d:dd:c7:6b:ee:16: f9:67:a2:40:53:eb:3b:d9:a9:27:98:c3:f3:d0:44:4e:30:7e: 02:f6:87:72:26:d9:3e:ed:a5:fa:0a:19:80:24:69:8c:4f:af: 3b:86:6a:b2:fb:e2:4e:58:d7:e7:64:85:42:a3:ef:6f:fe:fd: 56:65:56:eb:d6:14:3f:34:8f:a9:a4:d0:12:a4:90:b3:b2:b7: 1b:86:99:fc:3d:40:09:a9:a8:71:09:03:b2:19:5b:98:fd:78: db:83:75:ce:75:03:26:09:13:ae:cf:a1:ec:c2:50:a1:8d:b8: ab:59:cd:56:9f:0a:5f:b1:00:96:45:37:d2:39:2b:3a:42:aa: 83:fa:cb:f6:b0:91:17:b9:11:4d:d4:df:0b:ef:be:97:74:8f: dd:b5:0e:00:89:88:f4:c2:cb:a6:d5:43:31:e6:24:a0:d0:08: 22:a9:2e:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvBCu3+0pIf3IbhYcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk Yzc0MDEwYTQtNjdhOS00MDFlLWIxMjAtNmQ0ZDQ1NWRhNTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6LK1Vbw8v4cdh1/3JDXo4ezCY9MvTwS2oca 2SPld25g4G7wbrcRuHrDfvbqVee0n2UAXIsx788KGm2hS7tJTtHOkdUvAXMetzmS wOPAd+Vm4Vv+T8C+aHSwRZFuNh08zq+aFVRf65hK15CI4wOHS2ARxMS1r6PhqRTh AbqArnkC9UTBDVy9/oLXaxhJ+is0csz17DZT3Yb2O8+S032w4ZanTwykfpegsP3c NXkrrf7UPLFOL3Hr01rZnKOTFxcwYKbz3ktWg21si1AfHy1Pei9NH0ARzm9mhmHQ 7BcGsFVsFpB2py+qTZWAhwBCIfsgil+kNBG+oZzL0i7cAV70SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJhf3bTP1DmWd+1z/5eOrzbTA2diMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjM5M2NhYjgtMDAyMS0z ZTk1LThjYTMtMjNjYzgxYWQ4YTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGIMmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1KccF4uyqFXGZpa306d4TI4qCgf6cPUCF8xzBX7+fJgP1VBLuCpfo5 EYsL5Bk7D5l+y3HdKAfeSXk3oUXOJrj2wBmG9DCoYhUZcyWihcm6Z+FcU53dx2vu FvlnokBT6zvZqSeYw/PQRE4wfgL2h3Im2T7tpfoKGYAkaYxPrzuGarL74k5Y1+dk hUKj72/+/VZlVuvWFD80j6mk0BKkkLOytxuGmfw9QAmpqHEJA7IZW5j9eNuDdc51 AyYJE67PoezCUKGNuKtZzVafCl+xAJZFN9I5KzpCqoP6y/awkRe5EU3U3wvvvpd0 j921DgCJiPTCy6bVQzHmJKDQCCKpLuo= -----END CERTIFICATE-----Generated at Wed Nov 5 05:08:24 2025 by rpki-client