$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/5aa63fb5-82cf-3102-88d7-2e432477f9b3.roa File: 5aa63fb5-82cf-3102-88d7-2e432477f9b3.roa (raw, json) Hash identifier: pT4vU32HwyczDxSdDU73QxMyPXJAxHVYSwKJQk/B58o= Subject key identifier: 78:45:AA:2D:C4:2C:CD:5D:9A:7F:05:D9:2E:98:D8:3D:A2:6F:2F:D2 Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F4328584B1806E729A83AC3F488FB6780 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/5aa63fb5-82cf-3102-88d7-2e432477f9b3.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 11232 IP address blocks: 24.52.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:e7:29:a8:3a:c3:f4:88:fb:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=35667811-103f-4547-bddb-92cd15a31fad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:10:46:49:34:1f:53:ae:0e:70:ca:1f:ea:d6: d1:41:71:b9:e1:e2:b9:c3:a0:35:15:ee:08:94:4c: 0f:cb:3f:55:5a:77:33:16:b4:6c:e1:56:1f:d2:ec: 89:a2:89:2f:93:57:0c:08:39:03:0d:fb:c6:f9:1e: 2d:5a:69:0b:5d:44:8a:d2:e1:9d:35:60:b3:c9:17: 5c:b0:47:f0:a2:f4:d8:ce:09:a2:e8:37:44:a6:b7: 72:bc:5a:18:f2:e1:65:b2:2c:54:2d:4d:c2:f6:f4: 9a:5d:45:a4:33:ea:09:dd:da:7f:a0:29:71:91:50: b1:30:82:16:a8:76:d0:9e:48:bb:1a:0c:77:d4:d7: da:d1:ea:88:4a:12:53:94:b4:56:93:d3:91:31:f5: f2:6b:5d:10:0b:5e:6d:57:b1:85:e9:1d:77:01:85: d8:9d:83:df:d0:72:4e:91:36:c8:78:07:ac:c0:4f: 77:4e:99:35:11:42:bd:b0:c7:c7:6f:51:0d:87:43: 2b:9d:13:b6:ea:b1:5f:37:89:36:84:99:ea:0e:ff: 75:19:1b:92:70:c2:f6:0c:95:f0:d9:39:2a:c1:f8: b8:b6:ef:71:a5:2d:4d:3d:24:b1:77:30:3f:20:2a: a1:6b:5c:9c:cb:ac:bd:fc:9a:ab:3e:63:8f:44:00: ad:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:45:AA:2D:C4:2C:CD:5D:9A:7F:05:D9:2E:98:D8:3D:A2:6F:2F:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/5aa63fb5-82cf-3102-88d7-2e432477f9b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 24.52.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:0c:77:75:4e:98:33:fc:be:1c:ad:bc:b5:ac:61:88:07:fd: 39:31:48:23:98:39:2c:64:bd:35:73:25:ee:08:41:fe:b4:71: 99:8c:c1:3b:1d:0b:da:8b:8e:d5:52:81:6f:5d:2e:20:dd:2f: 1e:47:d1:81:16:f7:f5:6e:fa:96:5d:a4:72:34:53:64:4b:66: 57:e3:6d:8c:b9:79:34:55:69:c1:7c:3f:f3:55:87:02:19:b7: e5:8d:cd:3f:b0:ac:13:79:b9:02:fd:2b:86:2e:0f:84:fc:c2: 25:62:7f:4f:90:63:35:c1:fe:41:1e:b0:56:15:81:6e:c9:06: 00:61:6c:ed:6d:bc:fd:3c:43:ab:c1:50:6e:75:bf:08:fb:60: 32:97:c9:40:f8:a6:30:28:06:bf:a7:78:1d:e8:71:48:0b:f5: 52:3a:a7:05:5f:21:01:18:59:3e:f1:37:b3:7f:ef:2c:bd:6b: 40:f1:06:b6:96:06:5b:22:68:39:da:1b:f4:c8:40:c2:61:38: d3:d3:22:eb:f3:3f:59:d1:0a:58:1f:65:55:33:99:16:f3:fd: 31:ac:bd:01:fd:e5:80:0b:9f:84:6d:da:4c:a6:be:cb:ed:46: 3f:59:b4:95:72:97:5a:09:41:09:bf:36:c7:a5:2d:0c:bb:1b: 61:62:e6:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBucpqDrD9Ij7Z4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk MzU2Njc4MTEtMTAzZi00NTQ3LWJkZGItOTJjZDE1YTMxZmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBBGSTQfU64OcMof6tbRQXG54eK5w6A1Fe4I lEwPyz9VWnczFrRs4VYf0uyJookvk1cMCDkDDfvG+R4tWmkLXUSK0uGdNWCzyRdc sEfwovTYzgmi6DdEprdyvFoY8uFlsixULU3C9vSaXUWkM+oJ3dp/oClxkVCxMIIW qHbQnki7Ggx31Nfa0eqIShJTlLRWk9ORMfXya10QC15tV7GF6R13AYXYnYPf0HJO kTbIeAeswE93Tpk1EUK9sMfHb1ENh0MrnRO26rFfN4k2hJnqDv91GRuScML2DJXw 2Tkqwfi4tu9xpS1NPSSxdzA/ICqha1ycy6y9/JqrPmOPRACtiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhFqi3ELM1dmn8F2S6Y2D2iby/SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvNWFhNjNmYjUtODJjZi0z MTAyLTg4ZDctMmU0MzI0NzdmOWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGDQYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKUMd3VOmDP8vhytvLWsYYgH/TkxSCOYOSxkvTVzJe4IQf60cZmMwTsd C9qLjtVSgW9dLiDdLx5H0YEW9/Vu+pZdpHI0U2RLZlfjbYy5eTRVacF8P/NVhwIZ t+WNzT+wrBN5uQL9K4YuD4T8wiVif0+QYzXB/kEesFYVgW7JBgBhbO1tvP08Q6vB UG51vwj7YDKXyUD4pjAoBr+neB3ocUgL9VI6pwVfIQEYWT7xN7N/7yy9a0DxBraW BlsiaDnaG/TIQMJhONPTIuvzP1nRClgfZVUzmRbz/TGsvQH95YALn4Rt2kymvsvt Rj9ZtJVyl1oJQQm/NselLQy7G2Fi5sI= -----END CERTIFICATE-----Generated at Wed Nov 5 01:44:00 2025 by rpki-client