$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfb2a54e-41e4-3fbf-a1cb-f07174938234.roa File: cfb2a54e-41e4-3fbf-a1cb-f07174938234.roa (raw, json) Hash identifier: nqyDR+GBnmW7WFPEnzobdvRZvuCZkJk5Nr8L/BktSRA= Subject key identifier: 4D:98:10:E5:29:D2:22:3D:8E:97:D0:15:EE:69:FC:1E:79:A7:9B:39 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584BC10B6ECC1E1C1FC401593600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfb2a54e-41e4-3fbf-a1cb-f07174938234.roa Signing time: Wed 05 Nov 2025 02:00:31 +0000 ROA not before: Wed 05 Nov 2025 02:00:31 +0000 ROA not after: Tue 03 Feb 2026 02:00:31 +0000 asID: 7725 IP address blocks: 24.98.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0b:6e:cc:1e:1c:1f:c4:01:59:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 5 02:00:31 2025 GMT Not After : Feb 3 02:00:31 2026 GMT Subject: CN=d67d849e-4ebc-40a4-893b-00eb160d9994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ae:2c:c1:3f:17:8a:20:95:d4:42:10:ed:06: 89:95:15:20:6a:29:fa:f9:17:dd:a8:70:7e:c2:59: 48:bc:ed:24:8e:cc:12:e8:2a:ec:3e:02:99:31:01: 80:a4:b5:6a:8c:cc:6c:4d:0c:f6:3b:a8:9f:d2:59: 4b:9a:49:44:1e:bd:7e:87:58:2a:1d:26:62:b8:70: ee:1e:24:b3:30:d3:52:97:bc:28:c4:9c:7d:0d:12: b8:d8:10:b9:20:c3:6d:8b:f7:f1:6b:61:e1:64:f0: 9e:69:5f:4f:4d:74:c9:3b:fc:90:79:79:7f:99:ad: e5:8d:d0:06:2e:e5:2b:6e:c6:de:8a:ea:f3:ec:85: 21:47:44:e0:f5:9d:ad:ca:c3:a1:b1:c4:7e:99:7e: ed:39:eb:78:c7:6b:8a:af:f4:b4:3f:be:18:68:0a: c4:6f:fb:f1:7d:1f:66:f1:41:68:ce:7e:bc:fa:c2: 5e:b6:27:00:31:f4:4c:af:06:1c:8e:18:4f:3d:87: ff:58:d5:51:5c:ee:a4:04:05:0f:d7:9e:b6:20:60: bd:09:9a:76:91:09:4d:a7:9f:2b:da:7a:35:e8:3d: 2a:f5:67:e0:c6:72:aa:a0:c2:12:d2:9b:9d:27:48: 05:85:10:65:97:22:92:0e:98:1c:40:af:74:c4:38: e0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:98:10:E5:29:D2:22:3D:8E:97:D0:15:EE:69:FC:1E:79:A7:9B:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfb2a54e-41e4-3fbf-a1cb-f07174938234.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.98.166.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:fa:4f:b5:97:6d:8f:36:a5:c9:e5:83:37:ac:c6:ce:c9:16: 69:83:71:65:ea:b3:4a:f0:c7:a1:31:df:81:7f:b5:bf:1c:24: 5b:c2:0e:35:95:dd:af:a0:e9:a3:18:89:e0:64:67:78:41:de: a7:cf:37:39:a9:3f:77:db:ea:0f:25:d1:4f:d3:6c:29:41:7d: 10:eb:c2:a6:a4:bc:08:cf:36:12:89:8b:6f:cd:e1:be:f6:bb: 62:5b:ec:52:6d:97:d3:49:3e:0d:2b:97:73:89:de:fa:fd:ed: 4f:3e:5b:29:1e:a6:87:44:29:63:05:23:a1:ed:be:0b:7a:04: fe:63:2e:68:44:84:34:d9:fb:22:28:51:68:02:b0:bc:33:44: bf:05:c6:15:66:33:ee:50:d5:72:47:73:6e:fd:df:18:a1:64: f7:3b:3d:ed:ce:18:da:64:4c:bb:e3:56:4d:59:9a:34:fa:ee: 6a:98:19:ce:f1:b0:3d:cd:f9:ac:9d:22:c0:48:0e:6c:e5:11: 07:de:de:d0:08:8c:68:97:46:c6:26:21:e7:cd:fa:37:ae:9f: c5:5f:8d:53:8b:b4:b6:dd:ae:2e:56:98:6c:77:ec:d8:4e:d7: 3a:fb:73:d2:90:14:7f:50:0c:53:7d:a4:08:e7:ae:2c:c4:e1: e9:22:be:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvBC27MHhwfxAFZNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk ZDY3ZDg0OWUtNGViYy00MGE0LTg5M2ItMDBlYjE2MGQ5OTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApK4swT8XiiCV1EIQ7QaJlRUgain6+RfdqHB+ wllIvO0kjswS6CrsPgKZMQGApLVqjMxsTQz2O6if0llLmklEHr1+h1gqHSZiuHDu HiSzMNNSl7woxJx9DRK42BC5IMNti/fxa2HhZPCeaV9PTXTJO/yQeXl/ma3ljdAG LuUrbsbeiurz7IUhR0Tg9Z2tysOhscR+mX7tOet4x2uKr/S0P74YaArEb/vxfR9m 8UFozn68+sJeticAMfRMrwYcjhhPPYf/WNVRXO6kBAUP1562IGC9CZp2kQlNp58r 2no16D0q9WfgxnKqoMIS0pudJ0gFhRBllyKSDpgcQK90xDjgSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2YEOUp0iI9jpfQFe5p/B55p5s5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2ZiMmE1NGUtNDFlNC0z ZmJmLWExY2ItZjA3MTc0OTM4MjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGGKmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGj6T7WXbY82pcnlgzesxs7JFmmDcWXqs0rwx6Ex34F/tb8cJFvCDjWV 3a+g6aMYieBkZ3hB3qfPNzmpP3fb6g8l0U/TbClBfRDrwqakvAjPNhKJi2/N4b72 u2Jb7FJtl9NJPg0rl3OJ3vr97U8+WykepodEKWMFI6Htvgt6BP5jLmhEhDTZ+yIo UWgCsLwzRL8FxhVmM+5Q1XJHc2793xihZPc7Pe3OGNpkTLvjVk1ZmjT67mqYGc7x sD3N+aydIsBIDmzlEQfe3tAIjGiXRsYmIefN+jeun8VfjVOLtLbdri5WmGx37NhO 1zr7c9KQFH9QDFN9pAjnrizE4ekivvw= -----END CERTIFICATE-----Generated at Wed Nov 5 12:13:51 2025 by rpki-client