$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4217901-bb22-3d9d-8964-d9588aab10ae.roa File: f4217901-bb22-3d9d-8964-d9588aab10ae.roa (raw, json) Hash identifier: /6T1spQxkLViwbonJ4YclDqTnyDJIBfJxW8MV8fW9lI= Subject key identifier: 08:A1:1F:6C:19:5A:05:6F:5A:27:19:27:DC:95:94:2B:8C:50:85:85 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A999DA3E3F04B832D340F8 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4217901-bb22-3d9d-8964-d9588aab10ae.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 24.147.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:99:da:3e:3f:04:b8:32:d3:40:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=210b2b7b-d4c4-45b2-b3aa-82efe05db12a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8c:e9:de:3d:a0:ec:4c:9e:55:ea:fc:15:b6: b9:74:e1:a1:80:6c:25:07:f9:6e:17:94:6b:63:4b: 22:c4:27:94:91:f1:ad:4a:29:68:41:54:3b:04:a3: ae:7c:7b:c4:20:81:05:a0:73:bb:58:ed:06:dd:0b: 36:8e:d0:b0:82:60:5e:89:e5:2c:f4:13:3d:50:34: de:da:83:67:50:c4:51:5a:d3:b3:ff:f5:d0:fc:49: 1f:fd:59:55:a8:df:85:94:65:1e:2b:ed:05:ea:83: bd:18:12:cd:9b:fd:f8:07:46:e6:78:88:3e:fb:cd: b7:46:df:28:ae:61:35:e6:46:0b:91:e1:28:19:31: 88:49:79:26:3f:7e:ce:f3:4a:4e:ef:c7:30:ac:98: 8b:6b:d8:f5:3f:02:5a:81:62:e4:e1:f3:18:57:ff: 95:16:f5:3b:2f:f0:9e:1b:5f:4f:0e:07:ab:82:7c: e9:32:cb:39:11:8d:b9:fb:ee:94:14:0e:a5:33:7f: 72:8c:e9:f4:ad:d5:0d:69:e3:f4:a1:c3:23:79:c3: e9:26:31:20:d9:6a:84:1c:45:a4:a2:4d:d8:82:a3: 18:c8:bf:86:d8:18:8f:68:47:6b:10:62:a1:a6:2d: 22:7a:c2:d1:e0:4c:b0:3e:a7:ad:f0:37:37:1a:fa: 03:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:A1:1F:6C:19:5A:05:6F:5A:27:19:27:DC:95:94:2B:8C:50:85:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4217901-bb22-3d9d-8964-d9588aab10ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.147.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:cc:b1:4a:d7:5b:f1:fb:06:47:0d:f5:fb:6f:63:d6:7d:fb: 42:10:4e:89:49:dc:1f:58:1b:0c:a7:bd:47:af:ee:64:aa:d7: 96:46:01:ad:55:87:9a:d3:ac:64:ed:fd:43:91:40:4b:4c:06: a2:5d:d7:61:79:32:8a:ba:f4:bf:1e:a5:28:81:d4:5a:5e:07: 65:ab:e7:f0:01:a0:d9:86:88:17:09:e2:24:bc:bf:a5:94:b0: fe:ac:f6:aa:dd:05:74:fe:18:d3:c4:42:d5:c7:07:4b:6c:81: f5:46:43:07:ef:2b:0c:a9:cb:97:7d:b0:36:ac:a2:86:e8:1e: b1:08:9e:f6:80:47:ef:23:aa:30:69:b8:54:ef:16:0d:8c:8a: ac:fd:50:71:00:83:21:7b:1d:88:74:22:02:ac:8e:ae:0f:74: 42:c0:54:9e:c1:20:ee:48:c6:38:56:c4:4a:a4:7f:5d:36:ca: 4e:a2:fc:15:02:a5:ca:ed:68:a4:cf:c0:d9:58:e8:6c:23:7d: be:44:b0:03:76:32:5a:1a:6f:da:48:36:1f:4d:e3:ec:22:84: 39:17:ca:1b:59:df:a6:1e:c8:33:bd:97:25:c5:54:17:a0:b7: 8b:3d:a7:98:40:d3:6e:16:9f:72:4d:6f:80:17:98:c3:08:15: 19:0a:e7:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqZnaPj8EuDLTQPgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MjEwYjJiN2ItZDRjNC00NWIyLWIzYWEtODJlZmUwNWRiMTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4zp3j2g7EyeVer8Fba5dOGhgGwlB/luF5Rr Y0sixCeUkfGtSiloQVQ7BKOufHvEIIEFoHO7WO0G3Qs2jtCwgmBeieUs9BM9UDTe 2oNnUMRRWtOz//XQ/Ekf/VlVqN+FlGUeK+0F6oO9GBLNm/34B0bmeIg++823Rt8o rmE15kYLkeEoGTGISXkmP37O80pO78cwrJiLa9j1PwJagWLk4fMYV/+VFvU7L/Ce G19PDgergnzpMss5EY25++6UFA6lM39yjOn0rdUNaeP0ocMjecPpJjEg2WqEHEWk ok3YgqMYyL+G2BiPaEdrEGKhpi0iesLR4EywPqet8Dc3GvoDUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAihH2wZWgVvWicZJ9yVlCuMUIWFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjQyMTc5MDEtYmIyMi0z ZDlkLTg5NjQtZDk1ODhhYWIxMGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGJOIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnMsUrXW/H7BkcN9ftvY9Z9+0IQTolJ3B9YGwynvUev7mSq15ZGAa1V h5rTrGTt/UORQEtMBqJd12F5Moq69L8epSiB1FpeB2Wr5/ABoNmGiBcJ4iS8v6WU sP6s9qrdBXT+GNPEQtXHB0tsgfVGQwfvKwypy5d9sDasooboHrEInvaAR+8jqjBp uFTvFg2Miqz9UHEAgyF7HYh0IgKsjq4PdELAVJ7BIO5IxjhWxEqkf102yk6i/BUC pcrtaKTPwNlY6Gwjfb5EsAN2Mloab9pINh9N4+wihDkXyhtZ36YeyDO9lyXFVBeg t4s9p5hA024Wn3JNb4AXmMMIFRkK58s= -----END CERTIFICATE-----Generated at Wed Nov 5 03:52:39 2025 by rpki-client