$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7d25c8e-d970-3a08-b038-4dc5f6de4b25.roa File: f7d25c8e-d970-3a08-b038-4dc5f6de4b25.roa (raw, json) Hash identifier: GXflkNZRn83wotsduyxjOBjPuW14od2RykfMq5ZeY/Q= Subject key identifier: 17:99:34:A5:50:9E:74:B1:67:05:51:9B:78:FA:B2:EA:AC:20:42:7D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584BC10AF358B7856F38329E2B80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7d25c8e-d970-3a08-b038-4dc5f6de4b25.roa Signing time: Wed 05 Nov 2025 02:00:31 +0000 ROA not before: Wed 05 Nov 2025 02:00:31 +0000 ROA not after: Tue 03 Feb 2026 02:00:31 +0000 asID: 7725 IP address blocks: 24.98.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0a:f3:58:b7:85:6f:38:32:9e:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 5 02:00:31 2025 GMT Not After : Feb 3 02:00:31 2026 GMT Subject: CN=3ac81071-165c-475a-8271-e0b33ef8cfa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fe:16:e4:48:8a:56:6a:35:5a:3c:70:67:da: a3:12:f0:2d:98:db:61:5f:d6:16:45:77:6a:7d:b7: 2b:05:af:a7:f0:f5:94:4d:a6:8c:40:c6:ac:4b:bd: a1:44:13:fc:72:e5:f2:d6:47:45:d3:54:6d:4e:3b: e4:d4:16:f6:87:5a:ed:c4:76:c7:82:77:37:1e:6c: 50:c3:2c:2b:04:80:10:e3:4a:87:09:5d:17:39:a7: a2:1b:64:a3:4d:34:0e:bd:22:fc:ae:7f:52:f0:34: e9:06:ac:40:ab:b6:55:97:07:5f:54:6b:a3:64:1e: 6a:e3:e2:ae:45:9c:8f:c1:f5:e5:9e:26:5c:78:da: ed:5b:7c:db:1c:38:d3:5f:1f:cf:a3:20:cf:2e:d8: 23:a7:9d:0d:bb:99:8c:43:54:c8:98:90:e9:ba:82: 76:d0:50:40:a4:7e:72:69:16:41:ad:4c:6d:dd:27: 20:9f:b2:28:d4:74:42:67:3f:23:e9:f5:a5:93:44: 29:27:17:76:bf:69:f8:9b:cd:20:a2:31:0c:28:06: 5e:35:42:cb:d1:b4:dc:3f:08:de:df:47:c1:80:14: f9:76:94:6a:e4:30:87:e2:8b:8e:2f:16:0d:6d:21: 3e:bd:a3:55:74:19:93:31:10:81:93:59:85:09:e2: 6f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:99:34:A5:50:9E:74:B1:67:05:51:9B:78:FA:B2:EA:AC:20:42:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7d25c8e-d970-3a08-b038-4dc5f6de4b25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.98.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:f2:87:5e:47:6a:c1:52:18:b3:19:d8:b7:4b:41:69:a4:53: 66:22:1f:15:5c:19:5d:62:17:95:a5:ec:bc:01:cf:8a:b0:e2: 8f:e5:85:79:c2:0e:67:09:38:ad:6b:c0:e1:c8:02:8a:9f:76: 53:79:77:ff:d6:3f:fc:4b:3b:f4:0a:26:f4:80:97:34:73:7b: 35:4a:fb:37:d6:bb:63:5b:20:f1:cd:ce:48:52:63:ed:f2:da: e3:21:e7:b4:a8:68:12:5e:c3:2b:f9:37:b6:ba:9e:ec:68:3f: 44:81:06:fd:ec:3c:89:4c:a7:97:09:ef:4a:01:8d:58:aa:38: 30:32:c8:27:10:de:e2:bf:85:d6:56:d0:87:ea:8d:a0:d8:fd: ca:61:80:1d:46:f5:09:9a:0d:30:78:e5:32:78:14:b8:5b:f1: 7d:68:6e:4d:17:cc:70:46:a1:0c:96:ee:99:93:07:99:7c:93: 5f:75:1f:df:93:8d:35:f2:87:c3:34:f7:9a:26:cc:66:c7:cd: 26:07:d9:cf:46:92:18:81:fa:20:93:09:10:f3:3d:74:17:90: 38:c4:03:69:73:1a:e8:3b:6f:2f:80:04:15:48:06:26:f0:a7: f1:36:1c:80:14:a9:66:83:5f:db:75:2a:92:cf:5c:16:01:f9: 88:9d:8a:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvBCvNYt4VvODKeK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk M2FjODEwNzEtMTY1Yy00NzVhLTgyNzEtZTBiMzNlZjhjZmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/4W5EiKVmo1WjxwZ9qjEvAtmNthX9YWRXdq fbcrBa+n8PWUTaaMQMasS72hRBP8cuXy1kdF01RtTjvk1Bb2h1rtxHbHgnc3HmxQ wywrBIAQ40qHCV0XOaeiG2SjTTQOvSL8rn9S8DTpBqxAq7ZVlwdfVGujZB5q4+Ku RZyPwfXlniZceNrtW3zbHDjTXx/PoyDPLtgjp50Nu5mMQ1TImJDpuoJ20FBApH5y aRZBrUxt3Scgn7Io1HRCZz8j6fWlk0QpJxd2v2n4m80gojEMKAZeNULL0bTcPwje 30fBgBT5dpRq5DCH4ouOLxYNbSE+vaNVdBmTMRCBk1mFCeJvuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBeZNKVQnnSxZwVRm3j6suqsIEJ9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjdkMjVjOGUtZDk3MC0z YTA4LWIwMzgtNGRjNWY2ZGU0YjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGGLMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvyh15HasFSGLMZ2LdLQWmkU2YiHxVcGV1iF5Wl7LwBz4qw4o/lhXnC DmcJOK1rwOHIAoqfdlN5d//WP/xLO/QKJvSAlzRzezVK+zfWu2NbIPHNzkhSY+3y 2uMh57SoaBJewyv5N7a6nuxoP0SBBv3sPIlMp5cJ70oBjViqODAyyCcQ3uK/hdZW 0IfqjaDY/cphgB1G9QmaDTB45TJ4FLhb8X1obk0XzHBGoQyW7pmTB5l8k191H9+T jTXyh8M095omzGbHzSYH2c9GkhiB+iCTCRDzPXQXkDjEA2lzGug7by+ABBVIBibw p/E2HIAUqWaDX9t1KpLPXBYB+YidivM= -----END CERTIFICATE-----Generated at Wed Nov 5 03:48:20 2025 by rpki-client