$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/872d3801-18da-32ef-9abb-8d04ecc2f908.roa File: 872d3801-18da-32ef-9abb-8d04ecc2f908.roa (raw, json) Hash identifier: QW73EEfPhlFt+r18zfzwi7PRwpqY8OT3Pvrd77ysq8g= Subject key identifier: D2:B2:75:2D:61:CD:B7:FE:00:CF:0F:AB:38:19:91:84:12:6B:86:89 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A9ABF1F5579BDB5C61A380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/872d3801-18da-32ef-9abb-8d04ecc2f908.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 24.91.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:ab:f1:f5:57:9b:db:5c:61:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=905a8b24-00ce-4776-bf5a-1dce930bdf6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d0:35:93:4e:b3:f2:2b:7b:2d:04:ab:37:ff: 47:d8:6c:1c:af:b0:c2:72:e2:de:71:42:22:a0:29: 3e:94:e6:9e:23:45:df:d2:74:82:d5:f7:b3:ea:bc: d8:42:6b:e9:7c:aa:e3:12:12:f4:79:57:fa:48:96: db:a7:66:e9:6c:78:0d:33:90:0b:b4:e8:47:f0:22: 52:1c:9e:28:63:ba:1e:9f:7e:87:a6:12:d1:c2:25: f8:38:af:80:c2:1e:aa:31:7d:65:ef:9f:32:dd:57: fe:86:2e:af:d5:09:f0:ec:b9:a5:15:2b:38:ad:55: 55:91:32:4c:a1:13:a8:59:76:6a:57:2f:e9:4b:fe: c7:54:06:78:2b:9c:ba:49:00:5e:f4:38:87:2d:c9: 22:71:7c:ea:dc:00:bf:1f:ca:57:38:af:3e:08:99: 64:5f:fc:a0:09:65:64:4a:9e:14:4a:36:57:94:e8: fa:ab:e6:64:96:27:d5:26:0b:9c:78:4b:1b:ac:75: 8a:71:2a:7e:0e:67:a1:1e:3b:9b:8a:65:d4:0a:59: 89:e8:d6:86:39:6d:f6:6c:76:b5:fc:a1:3b:94:a3: 6d:84:30:ff:61:e5:08:bb:79:a3:9e:6f:10:1f:d9: 47:dc:d6:85:cd:c4:54:4d:4f:5f:46:87:21:35:09: d4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:B2:75:2D:61:CD:B7:FE:00:CF:0F:AB:38:19:91:84:12:6B:86:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/872d3801-18da-32ef-9abb-8d04ecc2f908.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.91.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:fa:52:05:b7:ad:ae:d6:48:ec:e6:59:67:78:b0:99:8c:95: 53:f7:d3:d5:02:be:84:36:9a:4f:64:fd:72:56:48:29:81:d7: 6a:d6:3c:0b:cb:03:69:f6:93:47:c4:a9:8f:22:e4:cd:ef:53: 0c:a0:c3:38:94:76:03:4c:d8:8b:b5:e9:d0:b7:07:3e:f3:cf: 48:82:83:1d:a2:d0:e7:d5:0c:47:bd:c2:e0:03:95:01:3e:1d: cb:f4:66:c0:84:15:de:09:30:12:83:ef:81:8c:28:fb:aa:df: 4d:85:27:a4:c9:5b:3c:6f:3f:e8:95:83:83:8d:ad:16:3e:5d: 0c:7a:ec:f2:b0:6c:29:b6:3d:9b:14:06:e1:f7:27:3a:b6:f9: 47:27:69:eb:31:f2:5f:3c:25:f6:8f:ee:e7:40:42:7d:54:84: 04:7f:2c:08:75:9a:1b:08:e1:e6:af:e1:ce:86:04:58:8e:35: 57:e2:a0:97:bd:28:30:fd:af:80:da:38:40:8e:18:20:3f:4e: d3:57:d8:70:f4:78:fa:ca:7f:4a:b7:5d:d2:0e:e6:2c:21:db: c2:63:6e:ba:84:2d:a4:24:c0:22:49:37:e8:53:b3:34:19:0b: 00:44:1f:d4:9d:58:ee:d4:74:3d:2f:e1:c6:b6:4b:58:b0:95: 5c:19:94:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqavx9Veb21xho4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk OTA1YThiMjQtMDBjZS00Nzc2LWJmNWEtMWRjZTkzMGJkZjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9A1k06z8it7LQSrN/9H2Gwcr7DCcuLecUIi oCk+lOaeI0Xf0nSC1fez6rzYQmvpfKrjEhL0eVf6SJbbp2bpbHgNM5ALtOhH8CJS HJ4oY7oen36HphLRwiX4OK+Awh6qMX1l758y3Vf+hi6v1Qnw7LmlFSs4rVVVkTJM oROoWXZqVy/pS/7HVAZ4K5y6SQBe9DiHLckicXzq3AC/H8pXOK8+CJlkX/ygCWVk Sp4USjZXlOj6q+ZklifVJguceEsbrHWKcSp+DmehHjubimXUClmJ6NaGOW32bHa1 /KE7lKNthDD/YeUIu3mjnm8QH9lH3NaFzcRUTU9fRochNQnUbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNKydS1hzbf+AM8PqzgZkYQSa4aJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODcyZDM4MDEtMThkYS0z MmVmLTlhYmItOGQwNGVjYzJmOTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGFvYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACr6UgW3ra7WSOzmWWd4sJmMlVP309UCvoQ2mk9k/XJWSCmB12rWPAvL A2n2k0fEqY8i5M3vUwygwziUdgNM2Iu16dC3Bz7zz0iCgx2i0OfVDEe9wuADlQE+ Hcv0ZsCEFd4JMBKD74GMKPuq302FJ6TJWzxvP+iVg4ONrRY+XQx67PKwbCm2PZsU BuH3Jzq2+Ucnaesx8l88JfaP7udAQn1UhAR/LAh1mhsI4eav4c6GBFiONVfioJe9 KDD9r4DaOECOGCA/TtNX2HD0ePrKf0q3XdIO5iwh28JjbrqELaQkwCJJN+hTszQZ CwBEH9SdWO7UdD0v4ca2S1iwlVwZlKQ= -----END CERTIFICATE-----Generated at Wed Nov 5 13:25:11 2025 by rpki-client