$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/dda0d2a6-399f-3e07-a3ec-c3030205e12c.roa File: dda0d2a6-399f-3e07-a3ec-c3030205e12c.roa (raw, json) Hash identifier: TbVQOzaagdVoP1ju7jMuRA8X/82JJR68gAH0U2A2wB4= Subject key identifier: 44:75:EF:FF:51:9E:9F:24:F0:B3:E6:D2:6F:8C:E1:CE:68:D0:F6:C1 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584AF951511A190BFA88491B4D80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/dda0d2a6-399f-3e07-a3ec-c3030205e12c.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 5650 IP address blocks: 168.93.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:51:1a:19:0b:fa:88:49:1b:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=f95ddc70-9702-420c-9194-dcd31dc41e4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7b:14:82:b1:5a:31:3e:5c:59:83:00:ef:f3: 83:48:7c:e3:8a:14:f5:b0:7c:76:f6:c9:f3:88:a9: 0f:36:24:5f:b6:42:a2:11:d7:62:eb:a6:c2:7f:e3: a2:61:c7:55:c5:8e:93:fa:69:7f:0a:d0:d8:d2:db: 0e:a3:06:a7:c6:4e:b8:e5:52:8e:d6:91:1c:21:ca: 11:d3:85:66:51:08:f5:a8:ff:c7:62:91:ca:11:e7: a3:5c:a6:d1:3b:b4:8e:2f:77:d2:10:84:a5:16:05: c5:b3:02:6e:08:e8:a1:01:4b:7e:92:1f:3b:2f:46: cb:49:7c:3c:60:bb:81:52:70:00:90:2d:05:44:77: 8d:39:32:59:c2:34:c5:dd:11:c0:69:37:39:ca:2e: 33:56:43:43:5c:f5:ab:cf:86:cc:51:5e:47:0f:0c: 87:58:bc:35:16:62:be:85:db:33:ed:5d:10:6f:d9: cb:0e:4e:04:69:2e:df:c7:a9:04:c0:fa:4f:80:74: a1:24:ef:7a:81:02:45:94:b3:a9:0e:33:39:14:c9: 0e:bf:3f:3b:53:bf:75:00:74:63:a6:59:05:37:f2: 99:4a:4d:bd:30:4d:ce:b2:c2:06:92:47:4d:36:a8: ce:94:07:5e:94:51:21:2b:5c:3a:c0:c6:61:41:fb: 4c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:75:EF:FF:51:9E:9F:24:F0:B3:E6:D2:6F:8C:E1:CE:68:D0:F6:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/dda0d2a6-399f-3e07-a3ec-c3030205e12c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 168.93.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:ca:65:d7:a5:c8:74:43:4b:bd:2b:16:35:f5:22:c3:64:65: 1a:3e:3a:95:98:b3:41:4e:3e:fb:76:94:98:8b:cf:e3:3a:88: f0:57:0e:4c:9e:73:75:d4:b3:94:4a:05:c6:d0:40:4a:ff:93: b3:27:09:66:89:4b:5e:36:24:9c:d7:84:13:15:87:47:b6:de: d7:16:a1:06:4b:b4:8b:f8:63:a5:7c:4a:5f:83:75:88:a0:25: 75:2a:26:6e:74:08:7c:23:f4:44:1f:f0:76:1d:37:17:7d:91: ef:f0:3d:20:58:55:9b:bb:be:ac:3c:e6:1e:f1:47:f4:7f:e8: ae:2d:50:39:ff:78:04:28:2a:c3:5e:32:75:d9:67:9c:aa:4c: 63:de:00:50:50:ca:fc:2c:f5:2a:b0:da:ac:e9:d4:69:c2:ae: bb:1c:08:a4:a5:49:6d:df:f2:c7:4a:94:56:b6:c2:7b:2b:8b: 62:39:b8:35:c3:07:83:05:3c:15:09:57:92:fd:56:97:23:c5: c5:ef:79:49:d0:b1:7f:7a:33:e9:ac:1d:70:35:48:1c:ae:62: 66:d6:a5:16:a7:0f:49:f4:9a:83:c2:43:3e:3b:81:12:8d:28: 36:1a:51:79:80:00:69:4f:8d:26:8e:fd:4a:25:aa:0b:2f:2d: 04:f8:39:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UVEaGQv6iEkbTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk Zjk1ZGRjNzAtOTcwMi00MjBjLTkxOTQtZGNkMzFkYzQxZTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXsUgrFaMT5cWYMA7/ODSHzjihT1sHx29snz iKkPNiRftkKiEddi66bCf+OiYcdVxY6T+ml/CtDY0tsOowanxk645VKO1pEcIcoR 04VmUQj1qP/HYpHKEeejXKbRO7SOL3fSEISlFgXFswJuCOihAUt+kh87L0bLSXw8 YLuBUnAAkC0FRHeNOTJZwjTF3RHAaTc5yi4zVkNDXPWrz4bMUV5HDwyHWLw1FmK+ hdsz7V0Qb9nLDk4EaS7fx6kEwPpPgHShJO96gQJFlLOpDjM5FMkOvz87U791AHRj plkFN/KZSk29ME3OssIGkkdNNqjOlAdelFEhK1w6wMZhQftMWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFER17/9Rnp8k8LPm0m+M4c5o0PbBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZGRhMGQyYTYtMzk5Zi0z ZTA3LWEzZWMtYzMwMzAyMDVlMTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqF3vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7KZdelyHRDS70rFjX1IsNkZRo+OpWYs0FOPvt2lJiLz+M6iPBXDkye c3XUs5RKBcbQQEr/k7MnCWaJS142JJzXhBMVh0e23tcWoQZLtIv4Y6V8Sl+DdYig JXUqJm50CHwj9EQf8HYdNxd9ke/wPSBYVZu7vqw85h7xR/R/6K4tUDn/eAQoKsNe MnXZZ5yqTGPeAFBQyvws9Sqw2qzp1GnCrrscCKSlSW3f8sdKlFa2wnsri2I5uDXD B4MFPBUJV5L9VpcjxcXveUnQsX96M+msHXA1SByuYmbWpRanD0n0moPCQz47gRKN KDYaUXmAAGlPjSaO/UolqgsvLQT4OUI= -----END CERTIFICATE-----Generated at Tue Nov 4 22:01:21 2025 by rpki-client