$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8df04e1-c964-33d8-95e7-867bde7d403e.roa File: d8df04e1-c964-33d8-95e7-867bde7d403e.roa (raw, json) Hash identifier: TE2UkdaffssB3fxTeYUNQJBtBqtLP3ZCMLvHC0Lx834= Subject key identifier: 22:E0:11:F0:85:4A:4C:21:86:25:BC:C0:28:48:40:E5:D5:3D:44:D7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584BC10AED035030E15C94DFDA80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8df04e1-c964-33d8-95e7-867bde7d403e.roa Signing time: Wed 05 Nov 2025 02:00:31 +0000 ROA not before: Wed 05 Nov 2025 02:00:31 +0000 ROA not after: Tue 03 Feb 2026 02:00:31 +0000 asID: 7725 IP address blocks: 24.126.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0a:ed:03:50:30:e1:5c:94:df:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 5 02:00:31 2025 GMT Not After : Feb 3 02:00:31 2026 GMT Subject: CN=98b351f3-fd06-498f-a040-1d7c1c40cc84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a3:1c:94:ea:fa:46:d8:30:70:41:1f:e2:d4: 6f:df:e2:6a:1b:7b:f5:6d:d7:55:a9:05:6d:b9:00: 51:48:12:a6:00:e4:13:89:2a:e0:7c:81:1f:fa:48: af:47:88:69:50:85:6c:4e:43:61:ff:1d:14:4a:ed: b5:25:1c:d3:af:09:b5:23:44:8c:31:99:15:f6:f2: 4f:5c:f2:d5:44:6e:1a:da:45:1f:95:40:d5:fb:49: 6f:bf:d5:a3:ce:14:b7:4f:0b:6b:c6:d3:b0:b6:d2: 8a:a3:8c:21:be:3d:35:a3:d7:df:6a:3c:63:3a:86: ce:d4:f8:ac:9b:49:43:35:07:88:c6:60:39:61:32: 0b:81:8e:70:6a:42:a3:06:cb:e0:8a:51:1f:aa:e3: 17:43:bc:e7:71:07:4a:ca:05:9a:ec:91:45:eb:e4: 44:b1:86:9a:c8:a1:6c:dc:11:5c:5b:df:ca:93:7a: 7a:60:53:9f:22:b1:9a:54:4a:d8:bf:13:85:ad:40: 7b:78:53:47:05:33:8e:78:60:4a:36:cb:08:f3:98: a8:ba:99:51:c7:30:30:20:b7:7a:e7:18:bb:b3:9d: da:62:92:27:c4:fe:eb:1b:d6:f5:7b:49:b0:37:0d: 6e:8f:06:de:82:a5:05:7d:56:26:0a:83:50:cd:20: aa:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E0:11:F0:85:4A:4C:21:86:25:BC:C0:28:48:40:E5:D5:3D:44:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8df04e1-c964-33d8-95e7-867bde7d403e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.126.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:da:d3:f7:b0:dc:08:87:4c:dc:88:cd:a8:4c:5d:51:a3:4f: b8:1e:a7:70:17:48:09:96:93:37:11:a4:95:57:d0:de:67:8c: b6:bf:27:90:b7:6b:7b:49:1d:ec:c8:c6:b4:85:62:04:4f:16: ca:ef:86:70:f2:6c:c9:e4:8a:d2:60:af:c9:2b:1c:09:3b:2d: c2:81:3c:3d:ed:f9:08:de:43:ab:e4:42:23:a6:2b:a3:04:5a: 87:4e:8e:b1:8d:78:32:60:8f:b9:fd:d9:ae:4f:fd:a1:39:da: 19:cc:3a:45:a7:24:ab:18:04:ea:6f:19:a2:b1:47:08:12:8a: 72:77:84:27:95:67:42:a2:3b:63:ae:bd:c8:e8:d9:7d:87:84: 12:3f:c2:36:87:08:09:d9:19:8d:e9:b7:15:56:13:9d:32:d3: 0c:a0:4f:94:71:e6:45:06:1a:aa:f9:3b:c7:80:1b:65:c4:e4: 3f:9f:b5:f9:56:d8:11:dd:15:9b:0d:01:cd:6d:92:6b:33:9d: 74:94:98:10:17:9e:9e:39:e8:5e:5d:cc:1e:cc:21:0a:3f:a9: 4f:a7:87:6b:99:e1:28:12:99:b6:eb:ef:9a:31:2f:04:07:ce: 7d:9d:d1:0c:21:1b:0b:42:db:9a:8d:95:09:ec:e1:29:b3:3e: 7c:a8:e5:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvBCu0DUDDhXJTf2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk OThiMzUxZjMtZmQwNi00OThmLWEwNDAtMWQ3YzFjNDBjYzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaMclOr6RtgwcEEf4tRv3+JqG3v1bddVqQVt uQBRSBKmAOQTiSrgfIEf+kivR4hpUIVsTkNh/x0USu21JRzTrwm1I0SMMZkV9vJP XPLVRG4a2kUflUDV+0lvv9WjzhS3TwtrxtOwttKKo4whvj01o9ffajxjOobO1Pis m0lDNQeIxmA5YTILgY5wakKjBsvgilEfquMXQ7zncQdKygWa7JFF6+REsYaayKFs 3BFcW9/Kk3p6YFOfIrGaVErYvxOFrUB7eFNHBTOOeGBKNssI85iouplRxzAwILd6 5xi7s53aYpInxP7rG9b1e0mwNw1ujwbegqUFfVYmCoNQzSCqDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLgEfCFSkwhhiW8wChIQOXVPUTXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDhkZjA0ZTEtYzk2NC0z M2Q4LTk1ZTctODY3YmRlN2Q0MDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGH6wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANDa0/ew3AiHTNyIzahMXVGjT7gep3AXSAmWkzcRpJVX0N5njLa/J5C3 a3tJHezIxrSFYgRPFsrvhnDybMnkitJgr8krHAk7LcKBPD3t+QjeQ6vkQiOmK6ME WodOjrGNeDJgj7n92a5P/aE52hnMOkWnJKsYBOpvGaKxRwgSinJ3hCeVZ0KiO2Ou vcjo2X2HhBI/wjaHCAnZGY3ptxVWE50y0wygT5Rx5kUGGqr5O8eAG2XE5D+ftflW 2BHdFZsNAc1tkmsznXSUmBAXnp456F5dzB7MIQo/qU+nh2uZ4SgSmbbr75oxLwQH zn2d0QwhGwtC25qNlQns4SmzPnyo5cw= -----END CERTIFICATE-----Generated at Wed Nov 5 07:15:26 2025 by rpki-client