$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24de90e6-d95d-37bd-bd5c-4080b8d00412.roa File: 24de90e6-d95d-37bd-bd5c-4080b8d00412.roa (raw, json) Hash identifier: gTrK+JYw0wKliQa9z5PbWKlQyRJQQR03QhdQPrDLELo= Subject key identifier: 71:72:4E:9A:D4:CB:E7:2C:F6:AC:14:00:52:1D:CD:D5:88:4F:1D:3A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8794E7BE3332F890D0500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24de90e6-d95d-37bd-bd5c-4080b8d00412.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 73.89.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:79:4e:7b:e3:33:2f:89:0d:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=07217e2c-24e0-48f0-b551-5ac7cc8c9031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:15:a3:4a:78:0f:c5:6d:90:1b:76:33:7b:b9: 50:70:e8:07:59:13:2f:2a:2d:bc:d7:9b:d3:e7:23: 1d:f5:c8:3e:20:50:f6:28:32:b0:03:81:45:0b:3c: d2:36:7e:c5:ea:0b:7e:08:0b:06:0f:b4:9e:56:e3: 86:22:98:7d:b7:95:c5:ec:2f:01:90:81:00:95:4a: b8:ad:08:8f:ae:3e:5d:2a:2f:2b:d4:92:5e:4b:6c: e3:bf:65:b4:c4:54:61:d6:99:bd:f7:e6:0e:55:65: 87:63:d7:3b:23:f5:57:19:c3:ed:64:5e:6f:b9:45: 87:11:eb:49:86:f4:be:bc:6e:45:e4:96:a3:ed:71: c4:08:c9:f8:72:85:b9:7b:87:cf:d2:d0:8e:51:c3: 2d:a0:27:67:50:75:b2:4e:c7:5e:90:54:4c:23:cd: d9:42:ea:29:91:02:4c:35:c2:51:68:fb:70:11:3f: f6:b1:83:ae:4f:4c:32:3d:f2:26:5d:b9:4a:b0:a5: f6:2c:c1:cb:e7:00:b3:39:fd:ac:92:ef:df:25:0d: e2:74:5d:2a:7b:0e:22:40:1d:95:3c:67:87:e9:51: 29:37:44:c5:50:00:67:f3:d8:4f:f7:9f:bf:dd:d6: 88:56:5e:e8:46:7a:da:fd:91:4e:1c:36:26:a5:6d: 80:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:72:4E:9A:D4:CB:E7:2C:F6:AC:14:00:52:1D:CD:D5:88:4F:1D:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24de90e6-d95d-37bd-bd5c-4080b8d00412.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.89.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:0f:c8:e2:e3:7f:3a:48:f5:bc:c0:a4:4a:97:dc:43:1d:15: a0:1c:b8:75:51:b3:e0:78:c1:31:8f:3c:dd:66:0e:83:3d:a2: 2f:83:6d:04:45:d3:a4:f7:2d:ce:71:f7:b7:8e:e5:12:5c:7f: 10:42:9b:24:f3:48:63:42:e1:21:9c:22:09:69:15:97:cb:41: a8:9b:fc:2f:56:69:93:c0:7b:e4:22:40:a8:c3:ae:6e:1d:b6: e0:1b:c0:b4:19:8a:9e:74:5d:93:34:ca:9c:d4:fe:fd:b4:9e: 52:72:b6:ae:71:2d:b6:3d:dd:f0:fe:e0:73:93:1d:36:a6:05: ad:ae:18:82:70:8b:87:ab:4f:86:04:60:dd:38:41:46:c7:52: 58:e7:5f:b1:5f:e7:aa:b2:32:4a:64:19:a3:fa:cc:ee:64:10: d3:76:f0:ee:40:27:cd:87:21:e0:b5:c7:49:c8:ef:33:19:07: f9:35:d0:83:ea:81:07:45:e9:03:d1:b8:93:0d:7b:88:b5:79: 6c:56:3b:5c:5c:c9:39:0e:87:61:4a:3b:41:a4:78:0b:eb:45: c1:6d:06:a4:c0:32:a8:62:2e:bc:e1:f4:58:32:e0:2f:72:7e: 2f:df:2a:f0:22:f5:de:9e:4d:93:d9:d0:4b:0d:17:73:e6:ed: cc:68:da:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqHlOe+MzL4kNBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MDcyMTdlMmMtMjRlMC00OGYwLWI1NTEtNWFjN2NjOGM5MDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBWjSngPxW2QG3Yze7lQcOgHWRMvKi2815vT 5yMd9cg+IFD2KDKwA4FFCzzSNn7F6gt+CAsGD7SeVuOGIph9t5XF7C8BkIEAlUq4 rQiPrj5dKi8r1JJeS2zjv2W0xFRh1pm99+YOVWWHY9c7I/VXGcPtZF5vuUWHEetJ hvS+vG5F5Jaj7XHECMn4coW5e4fP0tCOUcMtoCdnUHWyTsdekFRMI83ZQuopkQJM NcJRaPtwET/2sYOuT0wyPfImXblKsKX2LMHL5wCzOf2sku/fJQ3idF0qew4iQB2V PGeH6VEpN0TFUABn89hP95+/3daIVl7oRnra/ZFOHDYmpW2A9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFyTprUy+cs9qwUAFIdzdWITx06MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjRkZTkwZTYtZDk1ZC0z N2JkLWJkNWMtNDA4MGI4ZDAwNDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSVkYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMkPyOLjfzpI9bzApEqX3EMdFaAcuHVRs+B4wTGPPN1mDoM9oi+DbQRF 06T3Lc5x97eO5RJcfxBCmyTzSGNC4SGcIglpFZfLQaib/C9WaZPAe+QiQKjDrm4d tuAbwLQZip50XZM0ypzU/v20nlJytq5xLbY93fD+4HOTHTamBa2uGIJwi4erT4YE YN04QUbHUljnX7Ff56qyMkpkGaP6zO5kENN28O5AJ82HIeC1x0nI7zMZB/k10IPq gQdF6QPRuJMNe4i1eWxWO1xcyTkOh2FKO0GkeAvrRcFtBqTAMqhiLrzh9Fgy4C9y fi/fKvAi9d6eTZPZ0EsNF3Pm7cxo2us= -----END CERTIFICATE-----Generated at Wed Nov 5 07:04:12 2025 by rpki-client