$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/98804329-a40c-3c27-9b85-a5c0cfb9b275.roa File: 98804329-a40c-3c27-9b85-a5c0cfb9b275.roa (raw, json) Hash identifier: IUtbBmA1NU1c+F8e4NIzKBA6wCZa7ltMSPmSZ6nx6Kc= Subject key identifier: D1:D9:A3:62:39:ED:C8:34:F7:95:AF:C2:9E:7F:F0:51:89:B3:EC:53 Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584BBE4064E31F3868551F925710 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/98804329-a40c-3c27-9b85-a5c0cfb9b275.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 394437 IP address blocks: 66.249.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:64:e3:1f:38:68:55:1f:92:57:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=4945ebf5-dba5-4443-a7fb-ad52478ba6f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:cc:bf:cf:4e:28:d5:6f:5d:68:94:e4:14:af: 5e:19:55:3f:f2:77:4e:3f:4a:af:82:7f:52:32:0b: 9e:37:d4:77:90:e5:1b:c7:1b:e4:67:e5:78:ce:96: 7f:01:f2:df:9a:8c:3a:3d:55:b6:f9:12:82:0e:72: 22:c4:1f:b6:b8:5d:a9:c3:3a:98:67:90:27:a4:75: 11:a7:ed:69:36:fa:0c:99:ce:f3:79:d9:07:e4:38: 62:04:aa:94:92:be:8e:80:59:57:60:96:c7:42:e5: e9:02:27:ae:bd:6c:ac:7b:d8:d8:fa:2f:9b:e9:48: 2a:44:21:67:de:8a:61:5a:e2:d7:c6:46:4f:83:80: 12:d0:bd:db:92:67:d3:b2:28:59:0a:b4:fa:a5:7e: 03:74:e0:56:7d:8a:26:aa:b4:30:5d:4f:b2:95:4c: 81:67:32:95:4f:1e:ce:7e:f8:19:29:a2:76:02:e1: d6:89:de:b1:dd:1a:ed:99:dc:6e:22:13:1c:21:b0: 46:5f:fc:b6:b0:c1:45:27:30:10:ea:ae:57:80:84: 15:dd:c3:2d:43:b9:57:0c:8e:f1:4f:f4:d8:d5:a3: 5c:54:84:de:d9:e1:20:d5:00:52:6f:3d:5e:12:94: e7:98:0f:c9:c8:40:b9:34:a1:cf:47:0a:54:8e:d8: 07:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:D9:A3:62:39:ED:C8:34:F7:95:AF:C2:9E:7F:F0:51:89:B3:EC:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/98804329-a40c-3c27-9b85-a5c0cfb9b275.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 66.249.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:2b:5b:fe:7d:77:f0:9b:ee:f5:44:cf:88:ce:dc:fa:24:f5: 3a:5f:e5:2f:be:9a:04:ab:c8:ae:c4:54:fd:3b:15:05:45:ca: 89:55:8d:e5:04:6b:1f:db:b7:a7:96:1e:b8:1d:d8:34:22:8d: c6:31:be:af:6b:07:cc:55:37:b2:54:10:ea:53:51:f4:eb:e2: ca:0f:e3:0d:0f:38:61:36:15:59:a3:a9:06:ca:9f:77:f6:1b: dd:5b:b2:b6:85:14:e2:90:51:a2:cf:aa:4b:ff:06:fe:09:70: 3e:fb:63:b8:62:3f:c9:76:22:29:2f:e5:cf:d4:62:90:0e:3f: 83:78:c7:d5:cb:d0:10:ec:d9:3d:44:70:33:62:91:17:68:88: d2:1c:f8:53:19:de:2c:9e:3b:af:28:c7:d1:29:9a:e3:34:a2: 50:fd:c1:d8:7e:d8:ec:19:9d:a6:cf:fb:d2:0d:90:70:62:b5: 87:bf:ba:3c:9b:a0:3d:0a:fb:42:bb:08:51:8a:64:62:43:03: 7c:a9:a9:e8:6c:9c:c5:3e:91:21:4d:2a:30:87:c7:d3:8e:c7: 46:3a:96:30:07:af:97:2d:b1:ec:ed:e2:e7:32:9c:0e:21:f0: 5b:08:ee:97:39:c2:c0:3a:bc:83:2f:e1:80:7f:cc:f3:c9:d3: b8:2c:19:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QGTjHzhoVR+SVxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk NDk0NWViZjUtZGJhNS00NDQzLWE3ZmItYWQ1MjQ3OGJhNmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMy/z04o1W9daJTkFK9eGVU/8ndOP0qvgn9S MgueN9R3kOUbxxvkZ+V4zpZ/AfLfmow6PVW2+RKCDnIixB+2uF2pwzqYZ5AnpHUR p+1pNvoMmc7zedkH5DhiBKqUkr6OgFlXYJbHQuXpAieuvWyse9jY+i+b6UgqRCFn 3ophWuLXxkZPg4AS0L3bkmfTsihZCrT6pX4DdOBWfYomqrQwXU+ylUyBZzKVTx7O fvgZKaJ2AuHWid6x3RrtmdxuIhMcIbBGX/y2sMFFJzAQ6q5XgIQV3cMtQ7lXDI7x T/TY1aNcVITe2eEg1QBSbz1eEpTnmA/JyEC5NKHPRwpUjtgHvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNHZo2I57cg095Wvwp5/8FGJs+xTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvOTg4MDQzMjktYTQwYy0z YzI3LTliODUtYTVjMGNmYjliMjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQvlkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMrW/59d/Cb7vVEz4jO3Pok9Tpf5S++mgSryK7EVP07FQVFyolVjeUE ax/bt6eWHrgd2DQijcYxvq9rB8xVN7JUEOpTUfTr4soP4w0POGE2FVmjqQbKn3f2 G91bsraFFOKQUaLPqkv/Bv4JcD77Y7hiP8l2Iikv5c/UYpAOP4N4x9XL0BDs2T1E cDNikRdoiNIc+FMZ3iyeO68ox9EpmuM0olD9wdh+2OwZnabP+9INkHBitYe/ujyb oD0K+0K7CFGKZGJDA3ypqehsnMU+kSFNKjCHx9OOx0Y6ljAHr5ctsezt4ucynA4h 8FsI7pc5wsA6vIMv4YB/zPPJ07gsGdM= -----END CERTIFICATE-----Generated at Wed Nov 5 07:14:12 2025 by rpki-client