$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/296f3449-5b88-3c7e-93ed-389128dc28df.roa File: 296f3449-5b88-3c7e-93ed-389128dc28df.roa (raw, json) Hash identifier: fq0Rkaop0w0eHt6vvZTvVpsJCclK5CdBJpInwegYtkI= Subject key identifier: 09:59:CC:51:5D:2D:8C:F0:1D:60:41:B3:74:9A:0D:A3:D4:34:17:17 Certificate issuer: /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15 Certificate serial: 010D0C9F4328584BAEC7C0FD5D91F39BA1233800 Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/296f3449-5b88-3c7e-93ed-389128dc28df.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 54120 IP address blocks: 24.157.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:c0:fd:5d:91:f3:9b:a1:23:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=1d68a808-6a1f-4dd5-8e56-f7becf76bb28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2f:d5:28:ae:dd:9e:73:71:d1:14:d2:7c:a0: fd:c9:b4:6f:0a:25:9a:4b:df:30:56:7d:bc:e4:c9: 89:88:80:30:43:46:4c:ed:ed:41:11:ca:dc:4e:30: 75:0b:8c:32:50:47:8d:26:50:ee:5f:30:65:79:7e: a9:f7:5e:47:12:15:30:4e:25:85:70:bd:45:59:d7: fd:9c:26:bf:31:a6:b3:e2:db:30:73:9d:5a:fa:3f: f7:5e:74:62:6f:ce:8b:c2:6d:b0:b3:cb:4f:5b:79: 3a:3d:b4:d2:a1:8e:12:dd:f1:84:35:65:1e:0f:33: f3:19:80:bc:b4:9e:b8:b8:a1:50:a4:13:fd:45:a0: 41:2a:31:88:a0:b8:d4:ed:32:2c:1c:ea:3b:fc:e9: cd:a4:2d:58:ba:10:1a:1f:25:cb:3d:69:d3:1d:76: 01:1b:ab:4b:01:c2:6f:cf:32:d6:a3:48:fb:54:81: 28:59:b4:cc:52:82:fb:10:65:dc:0a:ed:36:bf:16: b7:8a:ba:90:22:54:52:aa:d0:b2:93:a0:34:40:ad: 2c:a1:47:6d:3b:b7:ba:36:5d:a3:68:8c:53:17:59: 27:35:9f:49:8f:c7:23:77:b2:85:d0:ef:2e:32:f9: cd:52:10:00:bd:33:79:46:7b:84:93:0f:99:c8:89: 1b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:59:CC:51:5D:2D:8C:F0:1D:60:41:B3:74:9A:0D:A3:D4:34:17:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/296f3449-5b88-3c7e-93ed-389128dc28df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl X509v3 Authority Key Identifier: keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer sbgp-ipAddrBlock: critical IPv4: 24.157.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:0a:1c:1d:17:91:51:84:7d:25:f4:8e:b2:bf:a6:1a:36:c6: ad:49:14:4d:ca:bd:0e:41:f8:cd:fd:01:e0:f2:90:e3:8e:be: 4b:52:b9:5f:92:7f:30:7c:26:4a:5d:51:09:a1:7b:7e:9f:33: d9:bb:38:a9:25:17:f2:d0:74:41:33:a1:06:a9:ac:13:39:ec: fb:7b:2f:13:eb:11:fd:a8:3a:15:45:49:ab:cb:91:15:6c:2a: fc:b7:79:a1:3d:02:6b:77:c2:4a:ea:d1:73:78:bd:e9:b8:55: ae:24:e8:9a:8b:1e:a3:f7:f1:63:c4:12:1b:98:9d:b5:f0:20: 10:2e:27:e4:1a:e6:2f:6e:d2:07:22:ec:db:f9:d2:28:4e:59: e7:5a:f6:b6:55:95:b1:dd:3f:f1:32:85:0b:bc:88:6e:db:f7: b5:e5:24:21:cc:52:9e:11:3a:b5:59:d1:0d:80:be:2f:94:7b: 7f:75:fb:5f:7d:51:03:71:aa:60:ec:2f:36:94:ed:39:2a:c5: 51:a3:09:83:8f:86:a3:18:e9:5c:90:2a:41:17:fe:93:67:7d: a2:ed:a3:ee:a7:75:48:b4:60:7c:43:e0:e0:b0:8c:57:f1:81: f1:2a:f1:97:ce:8f:f3:71:7e:15:24:31:b2:9e:7b:36:0a:16: 3b:40:5e:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux8D9XZHzm6EjOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZThmOGM0MTEtZmE1Yy00MjhjLThhYzEtZTA4ZThhMDBh ZDE1MB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk MWQ2OGE4MDgtNmExZi00ZGQ1LThlNTYtZjdiZWNmNzZiYjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC/VKK7dnnNx0RTSfKD9ybRvCiWaS98wVn28 5MmJiIAwQ0ZM7e1BEcrcTjB1C4wyUEeNJlDuXzBleX6p915HEhUwTiWFcL1FWdf9 nCa/Maaz4tswc51a+j/3XnRib86Lwm2ws8tPW3k6PbTSoY4S3fGENWUeDzPzGYC8 tJ64uKFQpBP9RaBBKjGIoLjU7TIsHOo7/OnNpC1YuhAaHyXLPWnTHXYBG6tLAcJv zzLWo0j7VIEoWbTMUoL7EGXcCu02vxa3irqQIlRSqtCyk6A0QK0soUdtO7e6Nl2j aIxTF1knNZ9Jj8cjd7KF0O8uMvnNUhAAvTN5RnuEkw+ZyIkbDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAlZzFFdLYzwHWBBs3SaDaPUNBcXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4 YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhlOGEwMGFkMTUvMjk2ZjM0NDktNWI4OC0z YzdlLTkzZWQtMzg5MTI4ZGMyOGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZThmOGM0MTEtZmE1Yy00MjhjLThh YzEtZTA4ZThhMDBhZDE1L2U4ZjhjNDExLWZhNWMtNDI4Yy04YWMxLWUwOGU4YTAw YWQxNS5jcmwwHwYDVR0jBBgwFoAU2mOPS3cNceq6IgA5tQH/tSVxq18wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhl OGEwMGFkMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGJ0hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkKHB0XkVGEfSX0jrK/pho2xq1JFE3KvQ5B+M39AeDykOOOvktSuV+S fzB8JkpdUQmhe36fM9m7OKklF/LQdEEzoQaprBM57Pt7LxPrEf2oOhVFSavLkRVs Kvy3eaE9Amt3wkrq0XN4vem4Va4k6JqLHqP38WPEEhuYnbXwIBAuJ+Qa5i9u0gci 7Nv50ihOWeda9rZVlbHdP/EyhQu8iG7b97XlJCHMUp4ROrVZ0Q2Avi+Ue391+199 UQNxqmDsLzaU7TkqxVGjCYOPhqMY6VyQKkEX/pNnfaLto+6ndUi0YHxD4OCwjFfx gfEq8ZfOj/NxfhUkMbKeezYKFjtAXrs= -----END CERTIFICATE-----Generated at Wed Nov 5 04:46:14 2025 by rpki-client