$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/421c10f9-ae31-3ba3-92bd-23b493a727a2.roa File: 421c10f9-ae31-3ba3-92bd-23b493a727a2.roa (raw, json) Hash identifier: 5rbJO/0Ck1zCZ1jGcr7j+Byd7wTLUUzIc7pdlUqsY6Y= Subject key identifier: 22:7E:CA:F0:4F:9C:27:F9:46:B1:EA:66:ED:BD:EE:19:63:3A:0F:79 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC35982F67C9C7920DD1580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/421c10f9-ae31-3ba3-92bd-23b493a727a2.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33660 IP address blocks: 24.11.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:59:82:f6:7c:9c:79:20:dd:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=f269ad6b-85cf-472f-8c58-5db798e4fc01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:43:bf:43:da:15:45:26:c7:c4:6b:49:70:8c: 5c:fe:a4:ae:43:fb:a6:dc:3b:54:ff:99:7e:03:63: 58:5d:7c:83:75:03:c8:86:53:c6:c6:8c:21:aa:be: fc:b9:f4:76:bd:15:0c:c1:7a:4a:5e:ff:79:d7:49: 97:1b:b2:d2:b1:a8:f8:d3:20:c1:e0:45:18:a2:d1: 7f:9e:ae:df:3a:1b:f7:ed:09:84:02:f0:23:d5:29: 5d:bd:88:c0:a8:d2:67:ad:35:c9:60:28:9a:7c:2b: e6:e4:fb:87:50:4b:36:7a:d8:3a:bb:21:05:3c:33: 5d:18:ee:81:b4:51:27:72:97:7b:f3:83:3e:d5:1d: ec:b0:50:53:0d:a1:a4:c0:34:2b:77:c7:b6:0c:73: d1:9d:91:a4:59:01:00:42:42:aa:ac:c9:d4:5c:54: ca:23:00:bd:52:87:97:4e:fc:c6:89:ff:50:be:6a: aa:00:02:da:07:b5:d1:6e:a1:d3:02:12:d8:5c:ab: f2:95:8f:ad:c6:16:e6:12:ae:81:31:9c:b3:e1:92: 64:e9:18:a8:83:f4:12:26:62:3e:72:38:fc:de:53: 86:1e:d1:f9:ec:b5:5c:41:d5:2f:fc:46:5a:00:ba: de:01:44:59:8c:c8:ae:3e:2f:3b:76:28:f7:85:58: 07:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:7E:CA:F0:4F:9C:27:F9:46:B1:EA:66:ED:BD:EE:19:63:3A:0F:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/421c10f9-ae31-3ba3-92bd-23b493a727a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.11.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:be:01:91:8e:9f:1f:e4:f3:e0:b3:4b:f7:9a:ac:72:7c:c0: d9:d3:58:da:5f:09:af:1a:5f:c4:06:ba:48:d9:cf:12:10:14: 79:60:7c:4c:5d:57:bd:eb:9f:44:f6:2d:bd:f4:14:b4:97:85: 45:9c:97:e8:f6:e5:fb:91:23:62:a8:ca:ce:f2:e5:63:8d:cb: 6a:3e:83:99:ae:1c:8f:20:31:4a:0f:f9:a1:9a:50:2e:46:06: af:9c:b5:4f:af:0f:91:4e:e3:5f:7d:31:15:9b:7b:03:1a:97: 8e:2d:05:4a:5b:af:ac:f2:7a:46:cc:fd:8c:d4:f2:dd:03:fc: 77:81:16:cf:8e:1b:f1:40:8e:bb:e2:ab:94:cf:7a:6e:b2:f2: 9e:ff:6c:d0:ed:32:b9:48:28:c9:84:84:11:27:21:bc:76:6e: a5:e4:00:70:8a:2d:f2:69:9b:0c:06:be:b4:c2:b1:da:35:46: 7d:c0:2b:de:08:82:20:f6:e2:59:24:21:c2:3c:63:da:44:70: bb:e8:cb:58:1c:0e:b3:b7:86:19:4d:1e:9e:b9:b0:46:0e:c2: a2:c8:39:60:10:4c:0a:c8:8f:d6:74:a6:99:24:f6:e3:cc:2c: 4d:b9:8e:ed:f8:f9:45:a9:70:9d:05:26:3f:28:f6:5f:d7:12: 33:d7:93:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw1mC9nyceSDdFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZjI2OWFkNmItODVjZi00NzJmLThjNTgtNWRiNzk4ZTRmYzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0O/Q9oVRSbHxGtJcIxc/qSuQ/um3DtU/5l+ A2NYXXyDdQPIhlPGxowhqr78ufR2vRUMwXpKXv9510mXG7LSsaj40yDB4EUYotF/ nq7fOhv37QmEAvAj1SldvYjAqNJnrTXJYCiafCvm5PuHUEs2etg6uyEFPDNdGO6B tFEncpd784M+1R3ssFBTDaGkwDQrd8e2DHPRnZGkWQEAQkKqrMnUXFTKIwC9UoeX TvzGif9QvmqqAALaB7XRbqHTAhLYXKvylY+txhbmEq6BMZyz4ZJk6Riog/QSJmI+ cjj83lOGHtH57LVcQdUv/EZaALreAURZjMiuPi87dij3hVgHMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJ+yvBPnCf5RrHqZu297hljOg95MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDIxYzEwZjktYWUzMS0z YmEzLTkyYmQtMjNiNDkzYTcyN2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGAt6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL2+AZGOnx/k8+CzS/earHJ8wNnTWNpfCa8aX8QGukjZzxIQFHlgfExd V73rn0T2Lb30FLSXhUWcl+j25fuRI2Koys7y5WONy2o+g5muHI8gMUoP+aGaUC5G Bq+ctU+vD5FO4199MRWbewMal44tBUpbr6zyekbM/YzU8t0D/HeBFs+OG/FAjrvi q5TPem6y8p7/bNDtMrlIKMmEhBEnIbx2bqXkAHCKLfJpmwwGvrTCsdo1Rn3AK94I giD24lkkIcI8Y9pEcLvoy1gcDrO3hhlNHp65sEYOwqLIOWAQTArIj9Z0ppkk9uPM LE25ju34+UWpcJ0FJj8o9l/XEjPXk9A= -----END CERTIFICATE-----Generated at Wed Nov 5 04:18:20 2025 by rpki-client