$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b21ac771-4bc8-390d-a0ba-c0b91f3ff561.roa File: b21ac771-4bc8-390d-a0ba-c0b91f3ff561.roa (raw, json) Hash identifier: zVrh3Q0Hv+qj2YQ8Vg+BiTtukaHSrb94GvyhDROPy+o= Subject key identifier: 99:FA:DA:58:BB:3C:38:A5:E1:A6:E0:5D:E1:58:AF:DD:37:68:2A:26 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584BC10AF75F45BCE167B622AA80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b21ac771-4bc8-390d-a0ba-c0b91f3ff561.roa Signing time: Wed 05 Nov 2025 02:00:31 +0000 ROA not before: Wed 05 Nov 2025 02:00:31 +0000 ROA not after: Tue 03 Feb 2026 02:00:31 +0000 asID: 7725 IP address blocks: 24.99.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0a:f7:5f:45:bc:e1:67:b6:22:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 5 02:00:31 2025 GMT Not After : Feb 3 02:00:31 2026 GMT Subject: CN=bb23a225-264f-49a7-a06c-b702522ece3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:60:8a:49:32:be:ad:12:25:3d:7a:64:7c:f4: b5:21:5e:f3:d7:3f:f1:d8:9e:28:d5:16:20:6c:a9: 76:39:09:87:35:33:b4:0e:db:2c:f2:81:ce:b7:11: 15:8d:ea:fd:ce:84:2a:85:4a:e2:48:5c:7d:dc:72: 9d:39:8a:c3:4a:ac:d7:67:36:2b:e2:1e:97:0a:d2: 10:d6:d6:c7:25:79:c8:39:bf:f9:0d:f4:7e:d6:cc: 91:65:b3:c8:9e:77:2c:76:65:90:a0:68:1c:6c:d6: 5a:64:c2:12:a6:dc:2b:9a:02:b6:0a:38:ae:8d:1c: ad:5d:dd:aa:52:25:65:08:9d:99:1a:f0:d7:01:d6: 7c:e7:7f:2d:ca:ed:42:b9:3d:f8:0c:fd:16:42:4d: 1e:dd:31:39:4b:8a:10:86:91:5a:b5:7a:80:49:e3: 4e:c2:9d:ba:2f:59:55:16:1b:f7:bf:4e:25:5c:e3: 35:03:c9:f1:4c:7f:eb:ca:3c:ae:70:e0:60:c7:48: 0b:62:9a:4c:05:d3:01:43:77:c5:d3:59:90:d3:fa: 0a:b5:73:ee:96:ab:39:a6:6c:fe:28:90:54:25:4d: 6f:6c:e8:32:52:9d:c9:97:d9:de:51:99:f0:c2:27: e7:6d:2e:db:21:11:48:7a:59:7d:9f:b6:7c:1f:b0: b7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:FA:DA:58:BB:3C:38:A5:E1:A6:E0:5D:E1:58:AF:DD:37:68:2A:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b21ac771-4bc8-390d-a0ba-c0b91f3ff561.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.99.166.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:b7:6d:9d:59:d8:d6:84:cb:ae:e3:54:8c:97:67:b5:de:1f: b8:80:e0:40:53:09:0e:a1:8d:ed:79:7e:a8:a2:26:0c:88:ad: 65:40:43:8b:0a:2f:61:1e:d7:a8:94:8b:c4:ae:28:52:ac:85: f3:ec:15:f6:49:cb:b3:00:3d:eb:93:20:af:40:09:59:89:ce: 73:fb:fc:fd:6d:87:b7:e4:dc:5b:91:ca:a9:d6:87:b0:36:0c: 4e:aa:e9:76:d2:6c:81:9f:5d:2d:e9:7a:5f:4f:df:4d:49:2a: 79:f0:51:ee:ad:90:0f:16:9f:17:38:9b:77:f7:9f:60:a7:35: d3:d0:b5:55:ab:54:5b:7f:ee:1a:7d:43:e2:81:0e:e2:80:9f: 13:cb:42:53:f4:62:b2:61:b6:d6:05:da:af:80:8c:c8:88:87: 8d:9e:ae:f5:e0:f4:58:ae:57:09:92:6e:b7:7f:e1:61:b0:e9: b1:ae:a2:a2:2b:4c:96:65:d2:07:44:18:74:8e:cc:3d:26:b4: e8:d6:1c:d1:ba:f1:06:93:46:b1:04:af:79:79:9d:a3:44:34: 36:f5:17:51:16:9c:81:4d:f4:36:b4:d7:6c:03:53:36:ed:b6: 29:22:c0:35:49:e4:90:11:bf:ce:33:dc:2c:a8:7e:4b:b5:9f: 0b:20:8a:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvBCvdfRbzhZ7YiqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk YmIyM2EyMjUtMjY0Zi00OWE3LWEwNmMtYjcwMjUyMmVjZTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGCKSTK+rRIlPXpkfPS1IV7z1z/x2J4o1RYg bKl2OQmHNTO0Dtss8oHOtxEVjer9zoQqhUriSFx93HKdOYrDSqzXZzYr4h6XCtIQ 1tbHJXnIOb/5DfR+1syRZbPInncsdmWQoGgcbNZaZMISptwrmgK2CjiujRytXd2q UiVlCJ2ZGvDXAdZ8538tyu1CuT34DP0WQk0e3TE5S4oQhpFatXqASeNOwp26L1lV Fhv3v04lXOM1A8nxTH/ryjyucOBgx0gLYppMBdMBQ3fF01mQ0/oKtXPulqs5pmz+ KJBUJU1vbOgyUp3Jl9neUZnwwifnbS7bIRFIell9n7Z8H7C3swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJn62li7PDil4abgXeFYr903aComMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjIxYWM3NzEtNGJjOC0z OTBkLWEwYmEtYzBiOTFmM2ZmNTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGGOmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANG3bZ1Z2NaEy67jVIyXZ7XeH7iA4EBTCQ6hje15fqiiJgyIrWVAQ4sK L2Ee16iUi8SuKFKshfPsFfZJy7MAPeuTIK9ACVmJznP7/P1th7fk3FuRyqnWh7A2 DE6q6XbSbIGfXS3pel9P301JKnnwUe6tkA8Wnxc4m3f3n2CnNdPQtVWrVFt/7hp9 Q+KBDuKAnxPLQlP0YrJhttYF2q+AjMiIh42ervXg9FiuVwmSbrd/4WGw6bGuoqIr TJZl0gdEGHSOzD0mtOjWHNG68QaTRrEEr3l5naNENDb1F1EWnIFN9Da012wDUzbt tikiwDVJ5JARv84z3Cyofku1nwsgioY= -----END CERTIFICATE-----Generated at Wed Nov 5 07:16:57 2025 by rpki-client