$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/61e9eacc-9025-3743-b8da-aa105826534c.roa File: 61e9eacc-9025-3743-b8da-aa105826534c.roa (raw, json) Hash identifier: 889V9WB5bLpl/uK5kBSUNAvW0n2GKXG4+AzfBK0Xhf8= Subject key identifier: A5:7C:10:06:4F:BC:9E:8B:62:11:76:3E:2B:1B:04:05:DA:5B:60:32 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584BC10B7380211E1358FAF0EEC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/61e9eacc-9025-3743-b8da-aa105826534c.roa Signing time: Wed 05 Nov 2025 02:00:31 +0000 ROA not before: Wed 05 Nov 2025 02:00:31 +0000 ROA not after: Tue 03 Feb 2026 02:00:31 +0000 asID: 7725 IP address blocks: 24.99.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0b:73:80:21:1e:13:58:fa:f0:ee:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 5 02:00:31 2025 GMT Not After : Feb 3 02:00:31 2026 GMT Subject: CN=c1d90e00-2a56-40ad-a850-219113a1e1cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:16:5d:80:5d:e0:84:e1:2c:fb:ad:fc:30:82: b6:3c:d2:7e:74:e4:33:41:30:f6:10:4d:1e:76:cc: b7:70:b3:52:80:9f:7c:56:25:72:ba:6b:29:32:3e: 87:37:79:92:bc:af:12:14:c9:7b:a5:1f:1c:85:9c: 8d:6b:ed:6a:82:b8:e7:62:a2:fc:26:bd:54:40:3a: 5d:1c:de:be:93:4b:a6:47:c7:ca:49:7d:c7:89:0f: 51:33:98:ea:92:57:2b:79:67:a0:b7:f0:01:04:fd: b8:34:d2:f7:c4:57:33:51:a0:f1:42:b0:16:03:fa: 42:d7:fa:e2:b7:16:bd:b9:f6:7b:31:9b:74:41:69: 46:79:7a:e6:5a:3f:03:11:12:a5:4b:5a:31:56:70: 69:d2:e4:a2:e3:7d:b2:e2:45:c8:7e:f8:5c:e9:25: 4e:bc:b4:74:81:ee:07:49:73:d0:4c:db:92:92:67: 98:f0:31:0f:42:e4:5f:05:0b:93:78:ec:e3:40:6b: f4:a0:55:68:71:a2:96:76:b1:be:bb:cd:ca:c6:83: 75:bb:f2:ad:71:e6:95:d4:7d:ae:f2:44:ec:eb:af: 3a:e3:eb:5b:34:70:77:0d:c4:a1:81:a2:37:02:bf: 2b:bf:da:aa:f1:cc:c6:18:0a:00:11:f7:8c:c4:25: 85:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:7C:10:06:4F:BC:9E:8B:62:11:76:3E:2B:1B:04:05:DA:5B:60:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/61e9eacc-9025-3743-b8da-aa105826534c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.99.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d6:a9:55:5e:29:66:10:ae:de:2a:b2:b9:68:50:37:e6:77:e1: 86:d5:70:c7:00:0f:2e:c2:1d:16:46:2e:39:2e:68:4d:35:d2: d4:04:9b:bd:3a:cd:64:96:80:34:31:0d:48:c1:c4:cf:1b:f2: 18:cf:cd:d1:d2:39:fc:d6:41:f2:35:b5:c7:47:49:94:5f:21: de:e8:47:c1:7c:be:4b:4c:e5:a0:d4:cc:5a:98:47:3a:68:ae: ef:b2:82:4d:14:a6:ea:c6:8b:f1:10:b8:a3:89:f8:08:47:12: ae:bf:93:52:b2:43:9a:48:41:4c:08:82:57:46:88:9c:6b:63: 7d:6a:a6:63:e0:7b:0d:3b:59:92:3e:0e:f6:29:8d:a0:39:38: d9:8f:71:41:52:4d:dd:67:ad:d0:4b:f9:c0:31:72:dd:cd:0d: fa:44:50:b9:54:f2:d9:2b:d0:15:17:df:3a:a6:05:04:4c:65: 07:c1:4f:b6:53:9e:f8:3a:57:0a:c6:c0:a2:50:60:a2:c9:57: 58:b5:09:5f:c0:e7:98:4f:9c:d5:91:de:cc:1f:42:4a:62:7b: 82:fc:13:ad:25:93:c6:41:4f:f9:2c:a9:44:af:37:40:29:f9: b6:bc:9a:7a:86:39:14:63:6b:75:05:c7:47:26:66:d3:bf:e6: 66:8b:c8:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvBC3OAIR4TWPrw7sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk YzFkOTBlMDAtMmE1Ni00MGFkLWE4NTAtMjE5MTEzYTFlMWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxZdgF3ghOEs+638MIK2PNJ+dOQzQTD2EE0e dsy3cLNSgJ98ViVyumspMj6HN3mSvK8SFMl7pR8chZyNa+1qgrjnYqL8Jr1UQDpd HN6+k0umR8fKSX3HiQ9RM5jqklcreWegt/ABBP24NNL3xFczUaDxQrAWA/pC1/ri txa9ufZ7MZt0QWlGeXrmWj8DERKlS1oxVnBp0uSi432y4kXIfvhc6SVOvLR0ge4H SXPQTNuSkmeY8DEPQuRfBQuTeOzjQGv0oFVocaKWdrG+u83KxoN1u/KtceaV1H2u 8kTs66864+tbNHB3DcShgaI3Ar8rv9qq8czGGAoAEfeMxCWFQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKV8EAZPvJ6LYhF2PisbBAXaW2AyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjFlOWVhY2MtOTAyNS0z NzQzLWI4ZGEtYWExMDU4MjY1MzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGGMUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANapVV4pZhCu3iqyuWhQN+Z34YbVcMcADy7CHRZGLjkuaE010tQEm706 zWSWgDQxDUjBxM8b8hjPzdHSOfzWQfI1tcdHSZRfId7oR8F8vktM5aDUzFqYRzpo ru+ygk0UpurGi/EQuKOJ+AhHEq6/k1KyQ5pIQUwIgldGiJxrY31qpmPgew07WZI+ DvYpjaA5ONmPcUFSTd1nrdBL+cAxct3NDfpEULlU8tkr0BUX3zqmBQRMZQfBT7ZT nvg6VwrGwKJQYKLJV1i1CV/A55hPnNWR3swfQkpie4L8E60lk8ZBT/ksqUSvN0Ap +ba8mnqGORRja3UFx0cmZtO/5maLyDg= -----END CERTIFICATE-----Generated at Wed Nov 5 10:27:01 2025 by rpki-client