$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/a3dc9795-9236-3def-a653-ce48d2f188e3.roa File: a3dc9795-9236-3def-a653-ce48d2f188e3.roa (raw, json) Hash identifier: FFfojQ4uWrJnhdCSdu98zZCvo2hlp4D8t9jghq/d4Xc= Subject key identifier: 61:1F:88:CF:83:6B:BD:D8:4F:63:DF:E7:C1:06:85:FF:EB:BA:8E:25 Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Certificate serial: 010D0C9F4328584B21CC23B85B912FB1BC5D4CC0 Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/a3dc9795-9236-3def-a653-ce48d2f188e3.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 12083 IP address blocks: 24.214.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:23:b8:5b:91:2f:b1:bc:5d:4c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=4b5e8fab-4ed2-4a19-9243-c8efcb752806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9c:28:4b:32:18:f9:b8:a7:fd:ee:6e:1a:c3: 07:a4:95:a3:bb:b7:47:1c:b9:47:0e:03:66:5d:ce: d9:da:7c:39:42:da:ed:1e:7a:8a:c3:a1:07:da:ce: 94:3b:a7:a1:b5:8f:d8:55:10:9c:54:54:7a:58:12: ca:49:8b:02:d2:28:33:93:e1:7f:8d:c6:db:27:ef: fe:69:91:11:14:d7:4d:8c:6d:2d:76:9f:f8:2c:fc: 54:5d:05:98:82:0a:0e:fa:c8:19:c5:a4:d5:0c:19: b8:6a:02:76:80:c7:04:61:57:ee:57:b3:5a:50:81: 1d:9f:0f:58:06:09:4a:ac:53:66:b4:94:36:ad:f0: c1:f6:c7:1a:c5:fc:96:6b:54:aa:66:12:c8:76:e0: 07:af:1e:19:ee:e3:82:7d:72:bf:5e:73:f9:4b:e6: 6c:43:6d:d9:10:19:dd:86:39:a4:9c:4c:b1:cc:b5: 3a:e9:30:41:0b:00:c5:f8:64:44:71:36:d9:bb:7e: cb:c0:74:a9:b6:4e:09:1b:9c:82:f4:e6:46:11:46: eb:67:30:73:1a:72:c3:00:b7:03:d4:8c:27:a1:06: c7:9b:db:78:c5:d5:9b:05:37:1c:f8:bb:f0:dc:34: 24:c6:03:f5:c0:14:aa:1a:d8:61:1a:ed:e7:80:9a: 8b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:1F:88:CF:83:6B:BD:D8:4F:63:DF:E7:C1:06:85:FF:EB:BA:8E:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/a3dc9795-9236-3def-a653-ce48d2f188e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl X509v3 Authority Key Identifier: keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer sbgp-ipAddrBlock: critical IPv4: 24.214.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:7a:07:e7:21:34:a8:e7:d0:37:c7:ad:6f:19:45:8d:55:db: 26:98:28:14:a3:eb:5f:0e:c1:47:31:25:f9:82:7a:58:8a:21: 0f:ad:35:94:be:f9:26:42:74:78:6d:b0:9d:04:28:dc:83:7a: fb:b7:00:3c:35:2d:22:df:9a:7b:af:a7:31:48:be:36:18:e9: 4e:38:57:58:41:4e:e4:d0:fd:fc:c7:e6:b3:61:8c:a9:51:9e: 8e:5d:78:5d:9a:f4:b7:62:b1:d0:7f:53:8e:0d:29:93:cd:f0: a5:b8:85:98:6c:cc:f0:1c:ad:9d:30:aa:0b:74:da:a5:48:ce: 1b:aa:75:dc:bf:6b:d9:e1:79:dc:4a:19:f3:03:6b:7e:89:24: 1a:81:6d:30:fc:f3:d7:af:15:cf:a4:e0:75:5e:a7:68:93:32: 5a:51:d4:fa:12:8e:c4:d2:5b:b5:01:89:39:3f:3c:a2:9e:60: 82:1d:8a:64:68:39:c5:e5:50:a6:39:bf:58:5c:45:7c:46:2a: 09:09:14:d3:37:c6:59:0b:f4:d8:da:e1:a5:86:f1:12:de:7f: 70:95:57:ad:80:d5:1d:bd:72:c9:d2:69:39:e6:a1:a5:62:92: ca:0a:90:d7:54:2b:9e:fb:6c:0c:b4:20:a2:92:76:41:b5:c6: 85:49:57:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzCO4W5EvsbxdTMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm NWZlMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk NGI1ZThmYWItNGVkMi00YTE5LTkyNDMtYzhlZmNiNzUyODA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5woSzIY+bin/e5uGsMHpJWju7dHHLlHDgNm Xc7Z2nw5QtrtHnqKw6EH2s6UO6ehtY/YVRCcVFR6WBLKSYsC0igzk+F/jcbbJ+/+ aZERFNdNjG0tdp/4LPxUXQWYggoO+sgZxaTVDBm4agJ2gMcEYVfuV7NaUIEdnw9Y BglKrFNmtJQ2rfDB9scaxfyWa1SqZhLIduAHrx4Z7uOCfXK/XnP5S+ZsQ23ZEBnd hjmknEyxzLU66TBBCwDF+GREcTbZu37LwHSptk4JG5yC9OZGEUbrZzBzGnLDALcD 1IwnoQbHm9t4xdWbBTcc+Lvw3DQkxgP1wBSqGthhGu3ngJqLnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGEfiM+Da73YT2Pf58EGhf/ruo4lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvYTNkYzk3OTUtOTIzNi0z ZGVmLWE2NTMtY2U0OGQyZjE4OGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2 ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2 N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGNbyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG96B+chNKjn0DfHrW8ZRY1V2yaYKBSj618OwUcxJfmCeliKIQ+tNZS+ +SZCdHhtsJ0EKNyDevu3ADw1LSLfmnuvpzFIvjYY6U44V1hBTuTQ/fzH5rNhjKlR no5deF2a9LdisdB/U44NKZPN8KW4hZhszPAcrZ0wqgt02qVIzhuqddy/a9nhedxK GfMDa36JJBqBbTD889evFc+k4HVep2iTMlpR1PoSjsTSW7UBiTk/PKKeYIIdimRo OcXlUKY5v1hcRXxGKgkJFNM3xlkL9Nja4aWG8RLef3CVV62A1R29csnSaTnmoaVi ksoKkNdUK577bAy0IKKSdkG1xoVJV/Q= -----END CERTIFICATE-----Generated at Wed Nov 5 04:31:23 2025 by rpki-client