$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afa62003-0728-3b9d-b69f-43d8da98c479.roa File: afa62003-0728-3b9d-b69f-43d8da98c479.roa (raw, json) Hash identifier: 3FessUwug2IIlPPIeEX6+BIcZNG/WI16p85TjKSlO1c= Subject key identifier: 1D:D0:D0:77:E2:8F:93:A0:8E:89:0D:13:E4:4B:A4:ED:24:02:AC:9E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584BC10B7489C4065B64F4A04E00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afa62003-0728-3b9d-b69f-43d8da98c479.roa Signing time: Wed 05 Nov 2025 02:00:31 +0000 ROA not before: Wed 05 Nov 2025 02:00:31 +0000 ROA not after: Tue 03 Feb 2026 02:00:31 +0000 asID: 7725 IP address blocks: 24.99.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0b:74:89:c4:06:5b:64:f4:a0:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 5 02:00:31 2025 GMT Not After : Feb 3 02:00:31 2026 GMT Subject: CN=de086142-edbf-4cbd-8a9a-611adc764089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:81:64:27:14:bf:00:f9:d1:c8:8a:d2:b8:84: cc:bf:ea:9c:99:04:22:55:bb:81:b4:81:48:99:73: 64:d1:7b:10:4b:fb:ce:a1:f1:37:61:89:97:01:57: d6:44:4f:7f:a0:70:5b:23:40:36:3c:d6:e6:68:e2: 42:41:6c:83:87:e5:82:99:d9:d5:08:32:c7:d6:d9: c2:b5:de:e5:c6:cd:e3:81:8e:53:55:37:d8:60:6a: 8a:17:a2:f2:db:9d:86:a3:63:59:ed:5d:09:ef:39: 2d:88:2f:e4:81:aa:42:e1:08:d4:9a:a0:55:79:6f: 2b:dc:fd:e9:41:2c:89:0e:8a:04:a6:d4:7f:ff:fb: 6a:81:25:3f:be:1c:72:5a:59:1a:16:cd:83:3d:0c: 2d:a6:a0:dc:ad:d3:71:1a:e0:ef:1d:90:10:46:6b: a3:9d:74:a1:16:01:49:58:7e:49:d8:a8:fb:75:d4: d9:31:1b:4c:3f:d2:64:e7:9c:75:c4:98:ec:41:83: 20:06:d7:db:7a:8a:e5:25:19:8c:d4:4d:b5:c3:c7: a8:af:ae:a2:29:c7:a2:50:74:f4:f9:ff:58:d6:78: 01:cd:89:18:bf:4a:56:8c:cb:77:38:32:db:33:51: 99:a6:55:84:1e:02:96:7c:b7:b0:88:ce:32:17:ac: 57:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:D0:D0:77:E2:8F:93:A0:8E:89:0D:13:E4:4B:A4:ED:24:02:AC:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afa62003-0728-3b9d-b69f-43d8da98c479.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.99.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:94:93:c5:05:73:23:87:2b:64:bd:7e:ec:d4:c4:6e:ed:0c: ba:9e:bd:5b:e6:b9:ec:18:81:f9:c9:ce:c7:0f:2c:50:d2:32: f8:6c:72:23:82:29:6e:9a:6d:b8:bd:09:ba:80:40:d6:6a:c2: e2:7b:d4:74:19:db:cc:85:ab:07:7e:db:4e:55:f4:62:e0:5c: 38:78:eb:02:fd:71:40:b8:3e:3c:f6:f5:cf:bb:eb:78:bb:50: 48:36:b4:e1:67:30:fa:7c:33:c2:24:95:8e:bc:d3:cb:44:76: 04:a5:5c:f5:a0:53:f0:52:58:08:23:54:05:b4:3e:d1:50:4a: 75:75:94:87:7d:ab:1f:31:03:5d:b3:8a:41:42:fc:ee:73:a7: 6d:3e:a4:92:56:ee:7e:91:c1:d4:08:05:15:30:2d:f5:88:c8: 9e:08:27:dc:d2:02:a1:66:6d:c2:71:9d:fa:4e:10:3b:d6:cb: 88:7e:6d:1f:ae:d7:ff:6e:41:50:d0:eb:88:15:79:3c:16:36: 5d:cb:81:88:17:2b:28:83:be:8b:e6:dd:94:2f:ae:c3:9c:1d: 28:76:08:2e:3b:28:12:84:e9:e0:55:3b:a3:38:c0:b1:0e:af: ac:27:c7:2d:14:97:d0:7f:02:e1:8b:83:8e:17:5e:41:24:7b: 5d:4e:99:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvBC3SJxAZbZPSgTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk ZGUwODYxNDItZWRiZi00Y2JkLThhOWEtNjExYWRjNzY0MDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4FkJxS/APnRyIrSuITMv+qcmQQiVbuBtIFI mXNk0XsQS/vOofE3YYmXAVfWRE9/oHBbI0A2PNbmaOJCQWyDh+WCmdnVCDLH1tnC td7lxs3jgY5TVTfYYGqKF6Ly252Go2NZ7V0J7zktiC/kgapC4QjUmqBVeW8r3P3p QSyJDooEptR///tqgSU/vhxyWlkaFs2DPQwtpqDcrdNxGuDvHZAQRmujnXShFgFJ WH5J2Kj7ddTZMRtMP9Jk55x1xJjsQYMgBtfbeorlJRmM1E21w8eor66iKceiUHT0 +f9Y1ngBzYkYv0pWjMt3ODLbM1GZplWEHgKWfLewiM4yF6xXuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB3Q0Hfij5OgjokNE+RLpO0kAqyeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWZhNjIwMDMtMDcyOC0z YjlkLWI2OWYtNDNkOGRhOThjNDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGGPrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqUk8UFcyOHK2S9fuzUxG7tDLqevVvmuewYgfnJzscPLFDSMvhsciOC KW6abbi9CbqAQNZqwuJ71HQZ28yFqwd+205V9GLgXDh46wL9cUC4Pjz29c+763i7 UEg2tOFnMPp8M8IklY6808tEdgSlXPWgU/BSWAgjVAW0PtFQSnV1lId9qx8xA12z ikFC/O5zp20+pJJW7n6RwdQIBRUwLfWIyJ4IJ9zSAqFmbcJxnfpOEDvWy4h+bR+u 1/9uQVDQ64gVeTwWNl3LgYgXKyiDvovm3ZQvrsOcHSh2CC47KBKE6eBVO6M4wLEO r6wnxy0Ul9B/AuGLg44XXkEke11Omeg= -----END CERTIFICATE-----Generated at Wed Nov 5 04:17:44 2025 by rpki-client