$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df3087fa-78ac-344d-8106-ef969a254161.roa File: df3087fa-78ac-344d-8106-ef969a254161.roa (raw, json) Hash identifier: fBSrDskljjjXDsZ5Mo7m0/Cmobv5TOjiT6EWuWk7MyQ= Subject key identifier: 7F:D7:D4:C1:2D:77:43:74:C8:BE:50:4A:DD:5B:21:28:33:4D:05:4D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584BC10AF80CBCC526EA56A06000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df3087fa-78ac-344d-8106-ef969a254161.roa Signing time: Wed 05 Nov 2025 02:00:31 +0000 ROA not before: Wed 05 Nov 2025 02:00:31 +0000 ROA not after: Tue 03 Feb 2026 02:00:31 +0000 asID: 7725 IP address blocks: 24.99.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0a:f8:0c:bc:c5:26:ea:56:a0:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 5 02:00:31 2025 GMT Not After : Feb 3 02:00:31 2026 GMT Subject: CN=089a1507-3cf8-4ddf-a687-72db4cf72ef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:83:55:90:ac:c5:f9:31:ef:ab:24:9a:c3:7b: d1:cf:89:77:a3:5d:11:85:64:3b:00:16:ca:ce:2e: 25:bd:2a:5d:26:fa:94:5a:7d:e0:05:e4:14:d8:19: d8:6d:80:93:34:22:fb:62:d8:79:49:3e:aa:b4:0b: 5a:27:46:2a:6e:8d:bc:bc:34:1a:93:c1:87:25:1f: a9:52:f6:ff:29:8b:a4:a9:15:82:b7:dc:0c:b1:27: 68:96:0b:36:a6:a9:4c:68:b6:94:6d:38:70:dc:c0: c0:cb:02:9f:a6:ad:f7:33:4d:be:ac:2c:fc:15:51: 6b:d1:dd:b3:ef:f8:5f:68:0c:98:96:48:3c:fb:fd: 72:92:3e:28:8f:c7:4e:32:56:1a:d5:d5:4b:44:ae: 84:2e:64:f2:f2:6a:6e:39:df:53:8b:eb:e9:6f:0b: e6:d2:4c:c6:61:5e:21:ba:43:a4:6b:90:8a:93:0b: f4:cb:38:70:41:b7:d8:69:f0:2e:4c:a6:b9:f5:cc: bf:d1:14:c9:45:8c:3a:49:f1:1e:5d:d3:54:eb:67: a3:77:57:9e:e6:d4:df:d3:0b:73:a6:f0:91:cb:ed: 47:b7:09:3a:5a:2f:e1:d1:27:30:3b:a5:5f:1d:9b: 23:5b:eb:d6:3f:7c:ed:c1:4d:cd:da:9f:8a:40:d9: fe:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D7:D4:C1:2D:77:43:74:C8:BE:50:4A:DD:5B:21:28:33:4D:05:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df3087fa-78ac-344d-8106-ef969a254161.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.99.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:e9:37:11:5b:13:c2:06:18:87:37:16:3b:0b:0a:a2:e8:f7: 2d:20:96:61:1b:90:45:9c:b2:8e:2a:d5:b7:cd:1f:22:a0:8b: 20:36:c3:75:e2:05:d2:e1:c8:b5:69:64:d6:f0:54:58:3d:ea: 9b:04:f0:10:fb:38:53:ed:e2:6f:02:19:b0:24:8a:64:ca:82: 07:47:e2:5c:45:1a:00:d6:4d:a3:8d:ff:58:6d:c5:a4:49:49: c0:f2:2f:7c:5e:dd:bb:ff:67:15:6f:d3:a7:00:f7:c1:f2:2c: 3c:a2:49:2e:d5:f6:31:4b:ee:54:c8:fd:59:fd:53:6c:ae:87: 49:ba:73:12:7b:07:98:1f:15:91:1d:d0:e6:04:db:30:2a:14: bb:fd:d5:12:6a:07:3f:ed:b1:6a:97:dd:68:a5:39:bb:08:e9: ae:ad:79:e6:0b:c2:0b:20:80:ed:91:67:79:12:30:e6:0d:67: fe:87:6e:5a:7c:9b:60:47:22:f0:e6:1a:3f:f9:1e:95:b2:b5: 44:13:fd:06:3c:43:63:fd:9a:78:73:06:02:f1:e6:6d:69:4b: c5:1c:b4:30:dc:e2:72:44:40:6f:93:eb:d8:f6:00:03:f6:2c: a0:79:d8:b6:9e:2b:d8:d0:8b:4f:d8:d6:4f:0e:e9:0b:ee:82: cf:d1:2d:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvBCvgMvMUm6lagYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk MDg5YTE1MDctM2NmOC00ZGRmLWE2ODctNzJkYjRjZjcyZWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYNVkKzF+THvqySaw3vRz4l3o10RhWQ7ABbK zi4lvSpdJvqUWn3gBeQU2BnYbYCTNCL7Yth5ST6qtAtaJ0Yqbo28vDQak8GHJR+p Uvb/KYukqRWCt9wMsSdolgs2pqlMaLaUbThw3MDAywKfpq33M02+rCz8FVFr0d2z 7/hfaAyYlkg8+/1ykj4oj8dOMlYa1dVLRK6ELmTy8mpuOd9Ti+vpbwvm0kzGYV4h ukOka5CKkwv0yzhwQbfYafAuTKa59cy/0RTJRYw6SfEeXdNU62ejd1ee5tTf0wtz pvCRy+1Htwk6Wi/h0ScwO6VfHZsjW+vWP3ztwU3N2p+KQNn+VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH/X1MEtd0N0yL5QSt1bISgzTQVNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGYzMDg3ZmEtNzhhYy0z NDRkLTgxMDYtZWY5NjlhMjU0MTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGGPtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfpNxFbE8IGGIc3FjsLCqLo9y0glmEbkEWcso4q1bfNHyKgiyA2w3Xi BdLhyLVpZNbwVFg96psE8BD7OFPt4m8CGbAkimTKggdH4lxFGgDWTaON/1htxaRJ ScDyL3xe3bv/ZxVv06cA98HyLDyiSS7V9jFL7lTI/Vn9U2yuh0m6cxJ7B5gfFZEd 0OYE2zAqFLv91RJqBz/tsWqX3WilObsI6a6teeYLwgsggO2RZ3kSMOYNZ/6Hblp8 m2BHIvDmGj/5HpWytUQT/QY8Q2P9mnhzBgLx5m1pS8UctDDc4nJEQG+T69j2AAP2 LKB52LaeK9jQi0/Y1k8O6Qvugs/RLX8= -----END CERTIFICATE-----Generated at Wed Nov 5 10:29:05 2025 by rpki-client