$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/855cbdaf-5fce-3a16-907e-f1feef71920d.roa File: 855cbdaf-5fce-3a16-907e-f1feef71920d.roa (raw, json) Hash identifier: YWPod7NCMDCkwLNZJfxAmwkBJ5g7W1uaZTh+ZNjVRU4= Subject key identifier: 3E:A5:3F:F6:8B:51:FC:51:59:C3:EB:39:78:EF:CD:FE:08:18:18:AE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A7AB2C345C1F625FC9FD40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/855cbdaf-5fce-3a16-907e-f1feef71920d.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33490 IP address blocks: 24.22.26.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:ab:2c:34:5c:1f:62:5f:c9:fd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=885b3370-2179-46a0-baa0-b05c723a2aa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:0b:d9:4b:fd:db:48:2a:8d:c9:70:35:80:85: 23:e2:e6:96:76:77:60:1d:0d:80:a8:b9:77:13:03: 52:4c:2d:45:73:c4:3e:9c:06:9b:0f:79:05:29:27: 56:7d:5b:7c:3f:d5:75:c6:f8:1a:b7:fd:3b:5e:de: f7:03:43:91:25:50:67:5a:67:bb:ca:0c:2b:83:0e: 3c:28:1a:b1:40:b6:59:1c:ea:db:9d:a1:1b:b1:55: 76:7d:9c:24:64:96:68:d7:28:1f:00:9b:f6:86:a5: 06:a7:9f:40:7f:b9:e5:30:0d:59:ec:88:86:97:41: d9:09:df:58:7d:f6:ba:dc:b0:c2:d4:b4:6d:02:6e: 8d:f2:af:98:99:ca:2a:26:4c:bc:2d:3f:ab:e7:cb: b7:78:1b:1b:19:ba:1a:9a:49:2c:e0:cc:12:7f:56: e5:74:06:66:5e:d4:f8:1b:47:d8:ef:4f:17:1b:c1: df:29:62:98:9a:b3:e1:6c:1a:3b:19:c2:e7:cd:48: 8f:e1:94:59:4a:66:d4:fd:8c:2d:ee:65:2f:6b:b4: a7:cf:ac:90:6c:49:aa:a8:59:5c:f1:ea:59:de:5b: 51:17:e8:60:21:74:ae:7f:50:d9:ef:e9:93:ec:50: a8:85:e4:57:83:7c:25:ab:3f:de:aa:4b:0e:45:02: 08:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:A5:3F:F6:8B:51:FC:51:59:C3:EB:39:78:EF:CD:FE:08:18:18:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/855cbdaf-5fce-3a16-907e-f1feef71920d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.22.26.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:72:e4:34:7c:30:0a:e6:9d:89:06:e2:9c:a2:85:c3:88:9a: e6:15:01:6e:1f:e9:a9:03:a7:c4:4b:e5:71:37:26:75:c9:20: 1a:aa:0c:b5:05:b3:29:e1:c9:e2:b3:b5:f6:49:07:3d:d5:4b: ef:2b:9d:a4:46:48:cb:8b:56:9e:6e:fb:fe:c6:e2:7c:de:f4: f1:a7:6b:e3:61:3c:67:6e:83:e5:48:b5:3d:a9:10:e6:b4:c5: bd:e8:82:ca:7e:f8:67:ec:2b:1c:b7:30:48:c8:12:4f:51:db: da:12:f6:a6:6a:15:ea:24:70:43:ca:a8:76:68:9e:14:c1:b9: a0:f4:a8:d2:c5:b3:df:c9:c5:20:26:a1:aa:e5:62:3d:4a:90: 88:0e:e3:26:eb:9e:31:a3:c7:f5:a9:b6:da:81:70:40:2e:1a: 49:18:08:ba:18:68:c8:0d:a0:79:55:1f:55:22:ee:48:9d:82: a0:c1:85:64:44:03:b0:f4:ce:da:7e:34:6f:84:1d:0d:d7:2a: 6b:08:7c:d7:fa:d5:a9:0b:37:f6:05:3e:75:82:7c:1a:aa:e9: 5a:f5:d6:ca:9e:02:2e:f3:13:95:6e:80:6b:1e:a6:d4:52:57: bb:43:21:41:db:37:19:71:c1:69:e8:02:31:19:27:9d:a3:20: a9:52:3b:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp6ssNFwfYl/J/UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ODg1YjMzNzAtMjE3OS00NmEwLWJhYTAtYjA1YzcyM2EyYWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggvZS/3bSCqNyXA1gIUj4uaWdndgHQ2AqLl3 EwNSTC1Fc8Q+nAabD3kFKSdWfVt8P9V1xvgat/07Xt73A0ORJVBnWme7ygwrgw48 KBqxQLZZHOrbnaEbsVV2fZwkZJZo1ygfAJv2hqUGp59Af7nlMA1Z7IiGl0HZCd9Y ffa63LDC1LRtAm6N8q+YmcoqJky8LT+r58u3eBsbGboamkks4MwSf1bldAZmXtT4 G0fY708XG8HfKWKYmrPhbBo7GcLnzUiP4ZRZSmbU/Ywt7mUva7Snz6yQbEmqqFlc 8epZ3ltRF+hgIXSuf1DZ7+mT7FCoheRXg3wlqz/eqksORQIIZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD6lP/aLUfxRWcPrOXjvzf4IGBiuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODU1Y2JkYWYtNWZjZS0z YTE2LTkwN2UtZjFmZWVmNzE5MjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGBYaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNy5DR8MArmnYkG4pyihcOImuYVAW4f6akDp8RL5XE3JnXJIBqqDLUF synhyeKztfZJBz3VS+8rnaRGSMuLVp5u+/7G4nze9PGna+NhPGdug+VItT2pEOa0 xb3ogsp++GfsKxy3MEjIEk9R29oS9qZqFeokcEPKqHZonhTBuaD0qNLFs9/JxSAm oarlYj1KkIgO4ybrnjGjx/WpttqBcEAuGkkYCLoYaMgNoHlVH1Ui7kidgqDBhWRE A7D0ztp+NG+EHQ3XKmsIfNf61akLN/YFPnWCfBqq6Vr11sqeAi7zE5VugGseptRS V7tDIUHbNxlxwWnoAjEZJ52jIKlSO9s= -----END CERTIFICATE-----Generated at Tue Nov 4 23:52:04 2025 by rpki-client