$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70083c7d-eb7c-320a-b580-fc9d6f586643.roa File: 70083c7d-eb7c-320a-b580-fc9d6f586643.roa (raw, json) Hash identifier: JtamPTG8jbz2JkDeqAM0ssFCGAIEkKB6jZsB37YCLgI= Subject key identifier: DC:9B:6E:36:79:A5:B4:8E:B0:54:1E:1F:7F:5D:A1:6C:93:CC:A4:0E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A7A623A0731E0ABB35F1C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70083c7d-eb7c-320a-b580-fc9d6f586643.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33490 IP address blocks: 24.20.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:a6:23:a0:73:1e:0a:bb:35:f1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=418d7b0d-6217-4a56-a50a-ef75e2179f30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b6:6d:7e:58:19:7b:87:70:e6:93:a5:8b:53: 20:6e:f8:95:d7:7d:6a:ec:85:61:7d:45:09:15:e4: 29:e6:a0:76:37:54:86:f0:72:7f:ba:3d:80:ce:71: 6d:a1:aa:e6:5e:fa:31:d8:62:36:71:fb:9f:5b:c2: 59:4f:5a:d1:1e:7e:13:97:cb:ad:a5:66:2b:f7:4a: a8:6f:31:44:2f:de:88:c8:e8:9c:84:62:d1:75:0a: 0e:b1:3e:b9:f6:57:4b:1d:65:65:34:fd:7e:a8:f2: 4d:c8:37:5c:71:d5:dd:79:00:e0:89:59:55:56:9a: ff:20:29:92:2f:bb:9a:c7:74:6e:fb:51:7f:a1:83: 4c:c4:87:c4:f5:e0:23:60:cf:94:90:f6:70:e9:67: cf:ce:1c:32:0d:e1:e4:1f:1b:6f:ce:c4:0a:d2:da: ca:e0:24:e6:31:e0:0f:71:79:84:4f:eb:0d:dc:18: 66:da:46:78:a3:e3:c2:26:b9:c4:96:aa:c7:ca:fd: 5d:84:4e:3a:90:7f:d9:66:a3:67:05:c5:68:d2:d9: 77:f4:02:d5:c1:8a:3a:31:c3:93:cb:e7:eb:0f:4c: ba:41:32:4c:1a:dc:a9:64:ff:db:71:0d:b7:7f:56: 2b:b5:a7:90:8a:bd:ab:b7:3c:a9:f3:f4:40:06:86: 72:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:9B:6E:36:79:A5:B4:8E:B0:54:1E:1F:7F:5D:A1:6C:93:CC:A4:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70083c7d-eb7c-320a-b580-fc9d6f586643.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.20.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:e8:6a:42:53:8f:d9:a8:f3:24:56:49:c1:e5:61:44:10:1f: dd:33:ba:3b:cd:bd:1d:53:40:3c:b5:2d:37:7e:04:91:98:3e: ab:1e:8e:d1:49:79:e8:b1:14:c4:d8:90:ce:e6:63:f4:47:0b: f2:d9:bf:4a:3c:ea:bd:cd:ca:d3:af:99:b6:cd:b4:55:4b:74: 8c:82:ba:d9:c6:c1:fe:19:09:37:e8:bb:25:85:8a:c4:9c:59: 2c:62:fc:b6:ad:93:7d:02:86:30:29:44:42:f9:81:29:d2:72: d9:16:a6:1e:b8:ae:76:0c:07:1d:47:c2:df:db:e7:fa:d2:1a: 48:28:b1:13:52:c4:64:ec:d0:e1:a2:2b:1e:b1:e5:35:42:ae: 46:98:93:fc:5a:f4:be:db:7a:eb:3c:a5:db:86:fb:0d:53:c5: 05:78:84:79:03:46:6a:15:b9:53:19:d5:79:ac:2f:28:8f:d0: 62:23:3a:06:fd:e1:d2:56:45:3e:66:fb:f0:11:f6:2c:34:2c: 44:38:67:ca:cb:fa:8f:42:93:2d:b5:41:52:99:cc:9c:b1:8c: bc:d5:f0:70:04:25:0f:35:cc:3c:52:65:17:c0:13:7f:b6:cc: 20:a5:02:fd:ed:27:84:c4:4c:be:75:bf:c2:c2:e8:ab:67:b1: b8:6c:c4:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp6YjoHMeCrs18cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NDE4ZDdiMGQtNjIxNy00YTU2LWE1MGEtZWY3NWUyMTc5ZjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrZtflgZe4dw5pOli1MgbviV131q7IVhfUUJ FeQp5qB2N1SG8HJ/uj2AznFtoarmXvox2GI2cfufW8JZT1rRHn4Tl8utpWYr90qo bzFEL96IyOichGLRdQoOsT659ldLHWVlNP1+qPJNyDdccdXdeQDgiVlVVpr/ICmS L7uax3Ru+1F/oYNMxIfE9eAjYM+UkPZw6WfPzhwyDeHkHxtvzsQK0trK4CTmMeAP cXmET+sN3Bhm2kZ4o+PCJrnElqrHyv1dhE46kH/ZZqNnBcVo0tl39ALVwYo6McOT y+frD0y6QTJMGtypZP/bcQ23f1YrtaeQir2rtzyp8/RABoZyKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNybbjZ5pbSOsFQeH39doWyTzKQOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzAwODNjN2QtZWI3Yy0z MjBhLWI1ODAtZmM5ZDZmNTg2NjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGBTgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALLoakJTj9mo8yRWScHlYUQQH90zujvNvR1TQDy1LTd+BJGYPqsejtFJ eeixFMTYkM7mY/RHC/LZv0o86r3NytOvmbbNtFVLdIyCutnGwf4ZCTfouyWFisSc WSxi/Latk30ChjApREL5gSnSctkWph64rnYMBx1Hwt/b5/rSGkgosRNSxGTs0OGi Kx6x5TVCrkaYk/xa9L7beus8pduG+w1TxQV4hHkDRmoVuVMZ1XmsLyiP0GIjOgb9 4dJWRT5m+/AR9iw0LEQ4Z8rL+o9Cky21QVKZzJyxjLzV8HAEJQ81zDxSZRfAE3+2 zCClAv3tJ4TETL51v8LC6KtnsbhsxFg= -----END CERTIFICATE-----Generated at Wed Nov 5 01:35:43 2025 by rpki-client