$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/a2241e64-ed32-3f3d-8b1e-19c73ebc633b.roa File: a2241e64-ed32-3f3d-8b1e-19c73ebc633b.roa (raw, json) Hash identifier: w586k3fMQGK3BWB4JiEG7s3EcT0TRkh+6tbIew+qZeo= Subject key identifier: 91:C8:6C:B3:2C:55:C5:CB:AE:C0:97:1A:48:CB:74:50:C1:15:8F:C8 Certificate issuer: /CN=69a80da8-69e1-4580-ab63-1ce23bea895b Certificate serial: 010D0C9F4328584B0B76A9703C147C62CE8C3FE0 Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/a2241e64-ed32-3f3d-8b1e-19c73ebc633b.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 11260 IP address blocks: 24.222.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:a9:70:3c:14:7c:62:ce:8c:3f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=2fed9fc4-071c-443a-9aa1-b6f3387168f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c3:40:58:38:4c:6a:7e:69:4b:37:4a:16:74: 9f:01:56:1d:ea:16:df:27:a0:17:95:9f:97:9a:65: 3a:d7:86:45:c7:2a:e9:5f:99:37:85:41:ab:67:50: de:00:b7:7a:95:93:88:6e:34:e5:fc:13:79:4c:49: 70:6a:5a:5f:e7:6a:ca:01:07:21:a5:96:06:4d:57: 8c:0e:98:3f:2d:12:9d:42:16:10:11:1c:fe:12:ac: 8d:12:22:c8:0a:92:e7:da:64:dc:6c:8c:88:12:03: e1:e4:8e:d0:c4:27:cc:76:d0:ff:f1:95:4a:79:be: 25:5f:13:95:90:52:7a:e7:8a:a8:87:7d:95:7a:16: 2a:8c:02:75:22:d0:4a:7d:43:78:64:03:ec:03:0c: 5d:98:53:0b:70:cf:88:40:fd:a7:18:03:f8:fa:fc: 0c:57:74:f8:d6:fd:fd:51:8a:64:50:07:3a:a0:2e: 27:36:67:40:e0:80:4a:a8:4c:07:33:34:83:58:f5: bb:81:7b:5b:bb:58:6d:03:9f:f2:91:9d:1f:46:d8: 7b:62:1e:f6:d3:49:f4:cd:93:2a:24:e1:46:81:4e: 84:9f:86:36:5c:93:8f:b4:04:9e:86:f5:94:7e:57: 2d:db:d2:48:6d:b5:63:47:90:f7:22:42:b0:55:1d: 1d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:C8:6C:B3:2C:55:C5:CB:AE:C0:97:1A:48:CB:74:50:C1:15:8F:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/a2241e64-ed32-3f3d-8b1e-19c73ebc633b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl X509v3 Authority Key Identifier: keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer sbgp-ipAddrBlock: critical IPv4: 24.222.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:74:40:99:62:3b:6a:83:d3:5d:a3:66:b0:b3:d3:d7:fc:72: 01:c0:db:c2:45:c4:64:58:dd:7a:4a:d1:05:41:e5:44:83:c7: 01:18:65:c0:f4:9b:b3:59:fa:98:50:d2:51:94:be:94:f8:30: 94:d1:a4:88:57:56:83:f4:92:3e:1e:6c:6f:c1:0e:68:6f:0c: 10:d4:16:7c:67:cd:f2:2e:67:57:2b:77:0b:e9:0a:e8:25:de: ec:92:bd:b0:95:3a:12:d1:52:bc:05:ac:c4:22:ce:44:00:f8: 2f:4e:cb:40:3a:4c:f8:5c:60:6c:a7:5b:a8:e9:ea:66:5f:06: 99:12:76:56:06:c1:e7:79:45:e2:16:e5:b8:78:17:2a:8e:e1: 97:49:46:53:b9:2c:89:12:1f:88:ad:9d:1b:68:7a:e1:16:ff: 10:4f:ba:a5:30:1b:9f:ba:5e:97:e0:8a:39:4d:12:27:a8:77: ca:7c:7e:1e:a0:d0:5d:ca:b8:17:cc:a9:e3:f8:bf:8a:94:53: 5c:32:3b:b9:e6:dc:0d:4b:6a:b4:80:a2:17:1f:d0:6a:29:8b: 5e:63:aa:3c:61:1c:45:62:8a:c8:ba:83:41:f5:a9:53:bc:94: ea:e1:d9:dc:21:53:78:e8:97:49:cd:19:64:25:0b:7d:e8:a4: ce:b2:d9:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdqlwPBR8Ys6MP+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlhODBkYTgtNjllMS00NTgwLWFiNjMtMWNlMjNiZWE4 OTViMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk MmZlZDlmYzQtMDcxYy00NDNhLTlhYTEtYjZmMzM4NzE2OGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMNAWDhMan5pSzdKFnSfAVYd6hbfJ6AXlZ+X mmU614ZFxyrpX5k3hUGrZ1DeALd6lZOIbjTl/BN5TElwalpf52rKAQchpZYGTVeM Dpg/LRKdQhYQERz+EqyNEiLICpLn2mTcbIyIEgPh5I7QxCfMdtD/8ZVKeb4lXxOV kFJ654qoh32VehYqjAJ1ItBKfUN4ZAPsAwxdmFMLcM+IQP2nGAP4+vwMV3T41v39 UYpkUAc6oC4nNmdA4IBKqEwHMzSDWPW7gXtbu1htA5/ykZ0fRth7Yh7200n0zZMq JOFGgU6En4Y2XJOPtASehvWUflct29JIbbVjR5D3IkKwVR0dAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJHIbLMsVcXLrsCXGkjLdFDBFY/IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4 MGRhOC02OWUxLTQ1ODAtYWI2My0xY2UyM2JlYTg5NWIvYTIyNDFlNjQtZWQzMi0z ZjNkLThiMWUtMTljNzNlYmM2MzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjlhODBkYTgtNjllMS00NTgwLWFi NjMtMWNlMjNiZWE4OTViLzY5YTgwZGE4LTY5ZTEtNDU4MC1hYjYzLTFjZTIzYmVh ODk1Yi5jcmwwHwYDVR0jBBgwFoAUhqiB3KYHVFZrTqUs0M1hUuvpHc8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4MGRhOC02OWUxLTQ1ODAtYWI2My0xY2Uy M2JlYTg5NWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGN7QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIR0QJliO2qD012jZrCz09f8cgHA28JFxGRY3XpK0QVB5USDxwEYZcD0 m7NZ+phQ0lGUvpT4MJTRpIhXVoP0kj4ebG/BDmhvDBDUFnxnzfIuZ1crdwvpCugl 3uySvbCVOhLRUrwFrMQizkQA+C9Oy0A6TPhcYGynW6jp6mZfBpkSdlYGwed5ReIW 5bh4FyqO4ZdJRlO5LIkSH4itnRtoeuEW/xBPuqUwG5+6XpfgijlNEieod8p8fh6g 0F3KuBfMqeP4v4qUU1wyO7nm3A1LarSAohcf0Gopi15jqjxhHEViisi6g0H1qVO8 lOrh2dwhU3jol0nNGWQlC33opM6y2aU= -----END CERTIFICATE-----Generated at Fri Oct 10 21:32:41 2025 by rpki-client