$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/89b75ad8-137c-3ec5-b60d-c398db1c04cd.roa File: 89b75ad8-137c-3ec5-b60d-c398db1c04cd.roa (raw, json) Hash identifier: qY4IdhcnykU3ReNI2e963sOySdjA2ZEbyoSFMGcVoj8= Subject key identifier: D3:54:69:53:BB:08:74:6C:E4:D8:A2:1B:8A:CC:44:85:C4:AC:A8:E3 Certificate issuer: /CN=4edd6357-2935-4b92-8130-68071d4eaf01 Certificate serial: 010D0C9F4328584BBB7584C2E2DE38BFF0173BF0 Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/89b75ad8-137c-3ec5-b60d-c398db1c04cd.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 4181 IP address blocks: 24.224.64.0/18 maxlen: 24 68.71.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:84:c2:e2:de:38:bf:f0:17:3b:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01 Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=43282f61-e1aa-491c-a0d0-ee4fa00dec09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c1:54:18:60:47:40:1e:7e:6d:47:72:57:1c: ef:48:ec:aa:0a:58:60:75:b0:b7:3c:b4:64:83:b4: ad:9c:da:0b:55:ee:74:11:be:a3:ed:b4:8b:90:f2: 7e:84:e2:0f:2e:fc:74:49:2d:f8:b4:75:44:2f:0c: f7:2e:6f:97:51:45:c3:ee:ea:e0:98:41:5c:04:fe: e6:54:3b:b7:a5:0a:7b:83:14:a9:22:ca:6f:7b:52: 32:d8:22:c2:7d:eb:a9:31:20:41:8e:12:8d:2e:8d: dd:16:9e:b8:da:70:a7:d3:77:b7:59:ac:40:75:24: 10:bd:dc:b2:f7:3a:e7:06:1d:17:84:c4:e7:11:96: 92:22:b6:0d:49:87:f7:69:e7:be:5c:b4:c3:80:ab: 5b:11:89:ec:b4:35:98:55:17:f4:fe:84:f7:c6:26: 11:5c:4f:96:a6:31:42:14:08:a5:6d:06:de:10:4c: 13:6f:43:06:d8:6c:9b:43:fa:cd:76:70:3a:76:30: 04:a3:1b:b6:11:62:82:62:bc:70:50:23:79:d7:b8: 50:19:10:61:4a:d1:0e:c8:d8:8f:3e:94:7f:5e:81: c3:64:00:cb:25:bf:20:3c:02:be:b5:ec:4c:f7:4f: 32:df:32:23:91:b0:33:ef:f3:06:d4:0a:ac:3e:57: f2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:54:69:53:BB:08:74:6C:E4:D8:A2:1B:8A:CC:44:85:C4:AC:A8:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/89b75ad8-137c-3ec5-b60d-c398db1c04cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl X509v3 Authority Key Identifier: keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer sbgp-ipAddrBlock: critical IPv4: 24.224.64.0/18 68.71.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:d9:5d:07:98:5d:3c:d8:76:6d:5a:f8:3f:ba:f3:dd:99:b0: 72:97:96:c0:d9:85:56:eb:39:d3:61:17:d8:df:35:ae:2c:b8: a7:eb:8f:28:b1:73:27:34:1e:36:2c:03:d7:73:9c:9b:d9:98: 6a:c0:72:69:88:73:b4:69:54:3b:48:57:40:34:9b:2f:5f:01: 83:db:1f:f2:65:d9:f6:e7:94:59:a2:c7:76:00:60:9e:1f:f7: d3:a1:cb:83:cd:01:32:a8:ef:4f:df:37:af:c0:c7:94:88:5b: b8:69:7d:99:ad:56:53:bd:70:f0:d1:4e:43:c6:71:20:ae:c9: 82:ce:1e:c0:02:a1:39:11:f3:9a:35:6d:c3:e3:f6:e2:76:7b: cc:46:33:13:c0:ba:48:e2:98:e7:27:4d:87:a0:4b:a9:14:48: 4b:b7:ab:0e:d4:18:7d:b9:8b:b9:7a:11:31:e8:e7:79:b0:51: 96:0e:93:c3:60:39:9c:93:f6:91:30:28:74:13:75:d3:99:ca: ff:4e:7a:a5:91:59:bc:47:af:31:1c:dd:46:d1:1a:18:25:6a: 3e:df:f0:0e:17:7f:b7:af:11:b6:6b:15:56:b6:01:b9:e3:8a: 34:76:0e:6e:ba:9f:15:1c:6c:bc:f5:90:46:05:9c:45:9d:88: 2c:f4:10:ec -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEu7dYTC4t44v/AXO/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVkZDYzNTctMjkzNS00YjkyLTgxMzAtNjgwNzFkNGVh ZjAxMB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk NDMyODJmNjEtZTFhYS00OTFjLWEwZDAtZWU0ZmEwMGRlYzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8FUGGBHQB5+bUdyVxzvSOyqClhgdbC3PLRk g7StnNoLVe50Eb6j7bSLkPJ+hOIPLvx0SS34tHVELwz3Lm+XUUXD7urgmEFcBP7m VDu3pQp7gxSpIspve1Iy2CLCfeupMSBBjhKNLo3dFp642nCn03e3WaxAdSQQvdyy 9zrnBh0XhMTnEZaSIrYNSYf3aee+XLTDgKtbEYnstDWYVRf0/oT3xiYRXE+WpjFC FAilbQbeEEwTb0MG2GybQ/rNdnA6djAEoxu2EWKCYrxwUCN517hQGRBhStEOyNiP PpR/XoHDZADLJb8gPAK+texM908y3zIjkbAz7/MG1AqsPlfykwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFNNUaVO7CHRs5NiiG4rMRIXErKjjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWRk NjM1Ny0yOTM1LTRiOTItODEzMC02ODA3MWQ0ZWFmMDEvODliNzVhZDgtMTM3Yy0z ZWM1LWI2MGQtYzM5OGRiMWMwNGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGVkZDYzNTctMjkzNS00YjkyLTgx MzAtNjgwNzFkNGVhZjAxLzRlZGQ2MzU3LTI5MzUtNGI5Mi04MTMwLTY4MDcxZDRl YWYwMS5jcmwwHwYDVR0jBBgwFoAUDFBNSElnaFxxGqFqTzIP9RhkBw0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWRkNjM1Ny0yOTM1LTRiOTItODEzMC02ODA3 MWQ0ZWFmMDEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQGGOBAAwQF REegMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHjZXQeYXTzYdm1a+D+6892ZsHKXlsDZhVbrOdNhF9jfNa4s uKfrjyixcyc0HjYsA9dznJvZmGrAcmmIc7RpVDtIV0A0my9fAYPbH/Jl2fbnlFmi x3YAYJ4f99Ohy4PNATKo70/fN6/Ax5SIW7hpfZmtVlO9cPDRTkPGcSCuyYLOHsAC oTkR85o1bcPj9uJ2e8xGMxPAukjimOcnTYegS6kUSEu3qw7UGH25i7l6ETHo53mw UZYOk8NgOZyT9pEwKHQTddOZyv9OeqWRWbxHrzEc3UbRGhglaj7f8A4Xf7evEbZr FVa2AbnjijR2Dm66nxUcbLz1kEYFnEWdiCz0EOw= -----END CERTIFICATE-----Generated at Wed Nov 5 19:45:22 2025 by rpki-client