$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9401ced7-d880-490d-9b0d-7674db71191c/4499818c-8cc6-3d80-8388-c8d455da417c.roa File: 4499818c-8cc6-3d80-8388-c8d455da417c.roa (raw, json) Hash identifier: fXiNXdjqeJtLUpfQ+S6p0K0kJ/Cemiv18rszc23Wyrk= Subject key identifier: BA:E6:5D:24:60:79:20:2F:82:0D:2F:BC:98:19:E8:86:78:75:8A:7E Certificate issuer: /CN=9401ced7-d880-490d-9b0d-7674db71191c Certificate serial: 010D0C9F4328584BB88D1025EED488FCBD684B80 Authority key identifier: A2:6C:25:E4:3A:68:15:FE:27:73:FB:79:2B:DA:62:0E:F3:85:FD:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9401ced7-d880-490d-9b0d-7674db71191c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9401ced7-d880-490d-9b0d-7674db71191c/4499818c-8cc6-3d80-8388-c8d455da417c.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 12231 IP address blocks: 24.144.0.0/18 maxlen: 24 66.158.176.0/20 maxlen: 24 96.31.208.0/20 maxlen: 24 199.59.100.0/22 maxlen: 24 2605:a340::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9401ced7-d880-490d-9b0d-7674db71191c/9401ced7-d880-490d-9b0d-7674db71191c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9401ced7-d880-490d-9b0d-7674db71191c/9401ced7-d880-490d-9b0d-7674db71191c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9401ced7-d880-490d-9b0d-7674db71191c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:10:25:ee:d4:88:fc:bd:68:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9401ced7-d880-490d-9b0d-7674db71191c Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=1731f3b6-a0e0-42a7-8c1d-2c472d604c3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ba:48:cd:50:14:34:62:61:ef:17:ca:f1:b4: bc:f4:df:e4:5d:4a:da:e5:98:c0:66:e0:66:4e:57: ee:6f:6a:17:d9:03:a8:4a:75:03:ab:e7:a6:67:d7: 8a:40:4b:62:28:8a:09:4c:b2:bc:7e:55:5f:c4:5a: 12:05:05:fa:69:99:ee:e2:aa:8b:90:1f:5c:09:22: 23:ba:92:e4:91:bd:53:97:af:1d:42:f3:6a:e9:7b: 33:00:1c:3a:ba:50:0e:66:3a:3b:9d:0d:62:c9:8d: 2b:f8:9d:98:01:ca:5d:e1:13:ca:8a:47:3d:49:98: 9f:93:a8:12:6d:18:a3:d3:15:54:fe:d8:07:20:8c: 24:53:7c:ac:3b:b3:41:9e:cf:15:16:31:e1:63:0d: d0:73:66:ff:0f:cb:b7:0d:75:f1:65:fe:11:eb:d5: c5:23:d9:96:56:6c:aa:a9:23:0a:4c:14:86:e0:a7: f8:38:9c:ed:a2:71:f4:7b:b2:df:23:96:a2:6a:b3: 6c:e5:a5:b7:e0:a7:c7:b7:ae:c7:7a:56:cf:0b:7c: b4:75:0f:5e:90:2a:05:02:53:61:00:3e:9b:63:43: ba:e9:aa:4d:bd:08:38:76:46:25:55:44:cd:8f:ce: 69:52:89:73:bb:52:9e:6b:10:54:20:ec:ad:5c:ae: ec:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E6:5D:24:60:79:20:2F:82:0D:2F:BC:98:19:E8:86:78:75:8A:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9401ced7-d880-490d-9b0d-7674db71191c/4499818c-8cc6-3d80-8388-c8d455da417c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9401ced7-d880-490d-9b0d-7674db71191c/9401ced7-d880-490d-9b0d-7674db71191c.crl X509v3 Authority Key Identifier: keyid:A2:6C:25:E4:3A:68:15:FE:27:73:FB:79:2B:DA:62:0E:F3:85:FD:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9401ced7-d880-490d-9b0d-7674db71191c.cer sbgp-ipAddrBlock: critical IPv4: 24.144.0.0/18 66.158.176.0/20 96.31.208.0/20 199.59.100.0/22 IPv6: 2605:a340::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:b3:35:53:c1:92:70:0c:48:d3:58:28:1c:6c:59:53:35:13: 9a:54:4e:ad:4a:e2:6a:6c:9e:62:6b:dd:08:7a:44:fc:9e:92: 3f:78:79:8a:9b:43:7b:f0:88:52:1e:c8:40:3e:ca:67:7e:66: 81:36:d5:27:3c:03:3c:30:11:2a:13:e0:ed:9e:f5:a8:10:e7: 12:52:8b:db:81:41:37:d5:39:32:2c:26:78:39:3d:4a:7a:43: 2f:b8:51:8b:18:a9:0e:7c:35:7b:e7:73:ab:52:a3:1b:aa:84: 07:83:61:80:83:28:48:6c:fa:f0:28:f9:ea:7d:08:54:c4:94: 4f:9b:f8:e9:e3:bb:5b:68:1b:29:e1:cd:ce:a4:ee:5d:5a:c9: 3b:d6:61:5a:c4:1d:25:33:75:41:80:0c:45:d5:6e:75:dd:cb: 05:88:16:a6:86:be:49:e9:82:0f:f3:71:84:52:cc:4c:b4:ee: bb:ac:77:4c:97:1c:2d:2c:d5:9d:4d:49:59:71:06:63:03:3a: b3:7d:ee:13:d1:d7:17:5f:6f:c8:47:a3:3d:fb:a0:80:fd:23: 93:9b:b7:a7:07:12:26:fb:4b:d6:0d:c5:fd:6e:26:cb:6c:e2: e5:5c:88:56:a1:a5:e1:34:4d:5b:f0:f9:ab:ab:ec:05:bf:05: 9a:f0:30:80 -----BEGIN CERTIFICATE----- MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWEu4jRAl7tSI/L1oS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQwMWNlZDctZDg4MC00OTBkLTliMGQtNzY3NGRiNzEx OTFjMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk MTczMWYzYjYtYTBlMC00MmE3LThjMWQtMmM0NzJkNjA0YzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7pIzVAUNGJh7xfK8bS89N/kXUra5ZjAZuBm Tlfub2oX2QOoSnUDq+emZ9eKQEtiKIoJTLK8flVfxFoSBQX6aZnu4qqLkB9cCSIj upLkkb1Tl68dQvNq6XszABw6ulAOZjo7nQ1iyY0r+J2YAcpd4RPKikc9SZifk6gS bRij0xVU/tgHIIwkU3ysO7NBns8VFjHhYw3Qc2b/D8u3DXXxZf4R69XFI9mWVmyq qSMKTBSG4Kf4OJztonH0e7LfI5aiarNs5aW34KfHt67HelbPC3y0dQ9ekCoFAlNh AD6bY0O66apNvQg4dkYlVUTNj85pUolzu1KeaxBUIOytXK7sAwIDAQABo4IDdjCC A3IwHQYDVR0OBBYEFLrmXSRgeSAvgg0vvJgZ6IZ4dYp+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85NDAx Y2VkNy1kODgwLTQ5MGQtOWIwZC03Njc0ZGI3MTE5MWMvNDQ5OTgxOGMtOGNjNi0z ZDgwLTgzODgtYzhkNDU1ZGE0MTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTQwMWNlZDctZDg4MC00OTBkLTli MGQtNzY3NGRiNzExOTFjLzk0MDFjZWQ3LWQ4ODAtNDkwZC05YjBkLTc2NzRkYjcx MTkxYy5jcmwwHwYDVR0jBBgwFoAUomwl5DpoFf4nc/t5K9piDvOF/QIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85NDAxY2VkNy1kODgwLTQ5MGQtOWIwZC03Njc0 ZGI3MTE5MWMuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQGGJAAAwQE Qp6wAwQEYB/QAwQCxztkMA0EAgACMAcDBQAmBaNAMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAE2zNVPBknAM SNNYKBxsWVM1E5pUTq1K4mpsnmJr3Qh6RPyekj94eYqbQ3vwiFIeyEA+ymd+ZoE2 1Sc8AzwwESoT4O2e9agQ5xJSi9uBQTfVOTIsJng5PUp6Qy+4UYsYqQ58NXvnc6tS oxuqhAeDYYCDKEhs+vAo+ep9CFTElE+b+Onju1toGynhzc6k7l1ayTvWYVrEHSUz dUGADEXVbnXdywWIFqaGvknpgg/zcYRSzEy07rusd0yXHC0s1Z1NSVlxBmMDOrN9 7hPR1xdfb8hHoz37oID9I5Obt6cHEib7S9YNxf1uJsts4uVciFahpeE0TVvw+aur 7AW/BZrwMIA= -----END CERTIFICATE-----Generated at Wed Nov 5 08:58:52 2025 by rpki-client