$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/292446a7-2bf4-39f3-a885-2ea704ebe586.roa File: 292446a7-2bf4-39f3-a885-2ea704ebe586.roa (raw, json) Hash identifier: 1+gXWkDl+bUqZD+qfeyaiyxHHZLPzMdxjNHZqW2dX3g= Subject key identifier: 04:02:23:06:1F:6D:61:65:EB:67:BA:51:3F:9C:C7:B1:8A:98:51:D5 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584B6D2C9092C7AD4660D7706BA0 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/292446a7-2bf4-39f3-a885-2ea704ebe586.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 22759 IP address blocks: 24.113.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:90:92:c7:ad:46:60:d7:70:6b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=2cf8c124-e890-4c97-9395-faa626f73319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:88:7f:2b:fc:ae:47:95:ef:43:88:0f:64:81: 0d:85:7a:5c:89:c3:d8:f7:d8:67:c0:27:eb:7f:63: de:cb:8b:a4:b7:c4:47:98:fa:fc:5a:ec:f0:c0:98: 35:03:33:24:1a:16:f7:a1:41:01:43:09:ad:99:0f: 1b:67:25:80:2c:69:1e:c7:6b:7c:fe:85:78:4e:9c: e1:b2:d1:45:f8:bf:2d:a7:da:bb:90:47:22:43:20: 9b:a5:47:9f:31:5a:b0:be:c3:ee:7b:01:2f:91:9f: 0a:c9:08:d7:bc:6a:e4:00:e3:37:1d:9e:74:fe:5c: 74:df:94:e9:ea:b0:87:2a:04:17:31:8e:77:1d:8a: 42:08:d2:53:53:09:b0:2b:82:24:49:ab:c4:63:0d: 98:40:26:6d:08:eb:e3:84:bf:1f:f0:72:25:41:12: 42:56:af:3f:83:8f:65:4c:73:cd:02:ee:11:fd:a3: 68:64:7b:33:ea:46:9e:7d:fc:37:31:80:10:89:57: e5:e6:65:f8:50:1b:1d:48:f2:17:ca:8c:56:6e:e4: 4b:39:79:9c:10:a2:17:92:53:9c:63:6c:f7:d7:47: 7d:b8:37:44:24:6e:1e:19:15:25:49:97:ae:5a:c4: f3:67:a0:16:75:5a:4c:ca:a7:b9:85:14:b1:9f:92: ac:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:02:23:06:1F:6D:61:65:EB:67:BA:51:3F:9C:C7:B1:8A:98:51:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/292446a7-2bf4-39f3-a885-2ea704ebe586.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 24.113.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:a3:69:d6:48:c2:b6:02:aa:d2:64:7b:60:d6:9e:74:4f:b3: 6e:a6:2d:db:a8:27:b2:bb:82:30:42:6b:c1:ca:47:b7:ee:d7: 91:b5:77:26:18:37:d2:6a:28:19:c2:fb:36:de:44:7d:89:ec: f5:c7:8c:7b:b5:e2:6b:7f:1a:31:92:84:cd:14:2d:37:3e:54: 64:1a:4f:c7:d2:c2:09:d8:90:69:b4:e8:59:38:ae:c8:64:98: 2b:41:1c:78:5a:f6:e6:5b:ed:8d:45:85:cd:45:1d:2f:a9:0a: bd:3e:d0:50:8c:15:3b:cc:ee:af:2b:fb:23:70:0d:48:a7:82: a9:3f:45:e2:03:3a:da:7f:06:32:41:73:e0:46:93:78:d7:cc: 5c:24:cf:91:3e:0d:42:40:ba:04:b9:80:19:4d:3b:be:9a:ea: 06:25:5c:e3:43:85:87:ce:07:eb:e3:3a:8a:11:2d:e4:93:47: 6b:aa:05:a3:7a:da:7d:16:f0:8c:9a:f8:7f:05:40:52:4f:97: a4:95:8c:e0:bd:d5:aa:ec:11:50:be:0f:5d:a5:39:db:c0:9b: c3:12:22:f0:89:e6:96:62:49:2f:81:f3:b4:2b:9e:03:fa:b6: 7c:c4:e8:f7:f1:4e:ca:f9:8d:1d:59:29:8a:31:cd:d8:fc:9a: e8:e8:60:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLJCSx61GYNdwa6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk MmNmOGMxMjQtZTg5MC00Yzk3LTkzOTUtZmFhNjI2ZjczMzE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYh/K/yuR5XvQ4gPZIENhXpcicPY99hnwCfr f2Pey4ukt8RHmPr8WuzwwJg1AzMkGhb3oUEBQwmtmQ8bZyWALGkex2t8/oV4Tpzh stFF+L8tp9q7kEciQyCbpUefMVqwvsPuewEvkZ8KyQjXvGrkAOM3HZ50/lx035Tp 6rCHKgQXMY53HYpCCNJTUwmwK4IkSavEYw2YQCZtCOvjhL8f8HIlQRJCVq8/g49l THPNAu4R/aNoZHsz6kaeffw3MYAQiVfl5mX4UBsdSPIXyoxWbuRLOXmcEKIXklOc Y2z310d9uDdEJG4eGRUlSZeuWsTzZ6AWdVpMyqe5hRSxn5Ks8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQCIwYfbWFl62e6UT+cx7GKmFHVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvMjkyNDQ2YTctMmJmNC0z OWYzLWE4ODUtMmVhNzA0ZWJlNTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGHG/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2jadZIwrYCqtJke2DWnnRPs26mLduoJ7K7gjBCa8HKR7fu15G1dyYY N9JqKBnC+zbeRH2J7PXHjHu14mt/GjGShM0ULTc+VGQaT8fSwgnYkGm06Fk4rshk mCtBHHha9uZb7Y1Fhc1FHS+pCr0+0FCMFTvM7q8r+yNwDUingqk/ReIDOtp/BjJB c+BGk3jXzFwkz5E+DUJAugS5gBlNO76a6gYlXONDhYfOB+vjOooRLeSTR2uqBaN6 2n0W8Iya+H8FQFJPl6SVjOC91arsEVC+D12lOdvAm8MSIvCJ5pZiSS+B87QrngP6 tnzE6PfxTsr5jR1ZKYoxzdj8mujoYEQ= -----END CERTIFICATE-----Generated at Fri Oct 10 21:33:59 2025 by rpki-client