$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4dfc609d-be8b-3e70-95e2-d4db25cc7e0c.roa File: 4dfc609d-be8b-3e70-95e2-d4db25cc7e0c.roa (raw, json) Hash identifier: 6IeQkrno/E6kQL/Kuw4U4MkO3HtLxz5n9uChh4pLk3s= Subject key identifier: 8D:8D:56:BC:4D:1E:57:71:06:76:4D:BF:F0:BF:44:C4:7D:B5:A9:09 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584BC10AF7C74F22915C351C2BF8 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4dfc609d-be8b-3e70-95e2-d4db25cc7e0c.roa Signing time: Wed 05 Nov 2025 02:00:31 +0000 ROA not before: Wed 05 Nov 2025 02:00:31 +0000 ROA not after: Tue 03 Feb 2026 02:00:31 +0000 asID: 7725 IP address blocks: 24.99.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0a:f7:c7:4f:22:91:5c:35:1c:2b:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 5 02:00:31 2025 GMT Not After : Feb 3 02:00:31 2026 GMT Subject: CN=a0c4a582-298c-4be3-9ebb-9a75f490a2f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:03:7d:cb:f8:70:c6:f7:24:15:48:11:e4:3b: fc:32:f4:17:08:7a:c5:f4:09:f1:c4:05:d8:88:17: fb:fc:9e:ea:3d:ea:42:a7:4f:84:f7:ef:f6:c3:52: c0:c6:5a:1b:a8:d9:0b:05:3b:bc:24:ba:da:24:cf: 8c:d7:87:fa:7d:89:ea:14:4e:28:0e:f3:14:1b:b9: 1d:b1:f5:b9:aa:f3:9b:67:64:a1:9a:e4:5d:f8:6e: e7:2e:d9:1c:05:fe:cf:06:43:0a:d0:6f:bb:f8:81: f0:7d:f8:df:35:1a:ee:1d:78:94:8b:b1:1a:1f:3e: ab:b8:60:62:b0:af:e1:27:91:32:86:04:34:17:8f: c6:15:f1:59:86:62:b8:46:93:cb:46:0b:5e:83:c3: af:57:6b:96:d8:7c:b7:b9:cf:12:4c:d2:c4:22:28: 65:5e:68:ba:39:d5:64:17:42:3c:5d:2b:58:21:e5: 09:13:d1:cb:4a:53:8d:be:df:42:12:b9:fc:15:c8: 4d:73:d3:da:2c:bd:88:6d:e4:9c:a8:89:53:8c:b5: 1e:42:25:0f:ad:e5:0a:92:32:c9:80:26:78:9a:05: 0a:be:21:e4:44:d6:f0:7e:dd:7a:c6:45:0b:db:fa: db:cb:79:0f:93:80:52:24:53:33:7d:a4:8b:c2:9e: b7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:8D:56:BC:4D:1E:57:71:06:76:4D:BF:F0:BF:44:C4:7D:B5:A9:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4dfc609d-be8b-3e70-95e2-d4db25cc7e0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.99.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d7:42:d7:72:ba:80:85:c6:c1:48:ce:53:7b:cf:9a:16:62:07: 2f:e8:03:87:03:f9:3d:50:5c:e4:43:54:cd:28:b1:2e:55:8e: bd:4d:3e:2d:04:6e:3c:90:95:19:7f:57:37:c6:99:6e:a3:f9: a8:d5:ac:33:80:36:8e:3a:ed:27:03:be:5e:cd:0d:ef:7d:db: 24:74:79:73:96:ed:db:98:9f:e4:be:c7:5a:61:6b:59:2c:7c: 5b:a7:9a:aa:14:38:e4:0d:6b:80:3f:d4:fc:f2:59:a2:3e:a1: 61:08:99:a0:79:6c:2b:e3:a9:14:84:e5:e8:13:c8:7a:d0:7b: 39:60:b4:aa:6a:1e:92:f1:f1:6a:a9:9a:ec:2a:16:d3:f9:9c: d6:9c:d2:a4:eb:d6:ff:4c:6b:6d:eb:80:0b:c0:5e:50:cf:13: 8f:04:0b:07:25:b8:00:b1:6e:68:db:ce:a3:27:5a:54:69:70: 99:7d:4c:ff:f5:90:3e:36:3e:3c:ee:06:58:9d:9b:a4:0a:40: 5a:e7:e7:b7:e3:b9:e1:75:65:30:51:9b:eb:4b:06:dd:91:63: 1e:2d:e9:35:3f:d3:f8:e4:26:37:58:e5:a3:f6:6d:73:2c:fb: 6e:6a:28:7c:16:f2:9c:ec:9b:7b:9f:b7:9e:39:b4:ac:be:fb: f0:43:f1:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvBCvfHTyKRXDUcK/gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk YTBjNGE1ODItMjk4Yy00YmUzLTllYmItOWE3NWY0OTBhMmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQN9y/hwxvckFUgR5Dv8MvQXCHrF9AnxxAXY iBf7/J7qPepCp0+E9+/2w1LAxlobqNkLBTu8JLraJM+M14f6fYnqFE4oDvMUG7kd sfW5qvObZ2ShmuRd+G7nLtkcBf7PBkMK0G+7+IHwffjfNRruHXiUi7EaHz6ruGBi sK/hJ5EyhgQ0F4/GFfFZhmK4RpPLRgteg8OvV2uW2Hy3uc8STNLEIihlXmi6OdVk F0I8XStYIeUJE9HLSlONvt9CErn8FchNc9PaLL2IbeScqIlTjLUeQiUPreUKkjLJ gCZ4mgUKviHkRNbwft16xkUL2/rby3kPk4BSJFMzfaSLwp63/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2NVrxNHldxBnZNv/C/RMR9takJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGRmYzYwOWQtYmU4Yi0z ZTcwLTk1ZTItZDRkYjI1Y2M3ZTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGGPRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANdC13K6gIXGwUjOU3vPmhZiBy/oA4cD+T1QXORDVM0osS5Vjr1NPi0E bjyQlRl/VzfGmW6j+ajVrDOANo467ScDvl7NDe992yR0eXOW7duYn+S+x1pha1ks fFunmqoUOOQNa4A/1PzyWaI+oWEImaB5bCvjqRSE5egTyHrQezlgtKpqHpLx8Wqp muwqFtP5nNac0qTr1v9Ma23rgAvAXlDPE48ECwcluACxbmjbzqMnWlRpcJl9TP/1 kD42PjzuBlidm6QKQFrn57fjueF1ZTBRm+tLBt2RYx4t6TU/0/jkJjdY5aP2bXMs +25qKHwW8pzsm3uft545tKy++/BD8fU= -----END CERTIFICATE-----Generated at Wed Nov 5 13:43:15 2025 by rpki-client