$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b4862b0-8a7d-4d69-bc18-38b430a8c232/02a99f07-8e81-33cf-a3e4-39b637121671.roa File: 02a99f07-8e81-33cf-a3e4-39b637121671.roa (raw, json) Hash identifier: xmV1jealKGBqLH8aImsxdJ2ONSqhcmdDO5ZgCmq6YTE= Subject key identifier: 80:FC:D3:B0:A7:35:B8:30:4F:50:27:F4:E6:0C:24:16:E1:28:67:77 Certificate issuer: /CN=9b4862b0-8a7d-4d69-bc18-38b430a8c232 Certificate serial: 010D0C9F4328584B6F7130B43463559077CDC300 Authority key identifier: 30:C6:EC:74:BB:9F:46:DC:2C:85:0C:72:B8:78:D5:FE:A1:22:2C:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b4862b0-8a7d-4d69-bc18-38b430a8c232.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b4862b0-8a7d-4d69-bc18-38b430a8c232/02a99f07-8e81-33cf-a3e4-39b637121671.roa Signing time: Mon 06 Oct 2025 20:30:29 +0000 ROA not before: Mon 06 Oct 2025 20:30:29 +0000 ROA not after: Sun 04 Jan 2026 21:30:29 +0000 asID: 32220 IP address blocks: 24.233.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b4862b0-8a7d-4d69-bc18-38b430a8c232/9b4862b0-8a7d-4d69-bc18-38b430a8c232.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b4862b0-8a7d-4d69-bc18-38b430a8c232/9b4862b0-8a7d-4d69-bc18-38b430a8c232.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b4862b0-8a7d-4d69-bc18-38b430a8c232.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6f:71:30:b4:34:63:55:90:77:cd:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b4862b0-8a7d-4d69-bc18-38b430a8c232 Validity Not Before: Oct 6 20:30:29 2025 GMT Not After : Jan 4 21:30:29 2026 GMT Subject: CN=38693ebe-1ef9-41c9-9db1-1577d2b492fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:61:6d:be:d4:ea:c1:f5:ec:c9:73:cb:8e:06: 8a:33:2a:ec:5b:13:bd:f7:6f:92:70:63:21:c0:01: 1e:8d:2f:ce:51:bd:0b:40:c0:39:72:9b:47:c2:5e: 91:e0:27:b2:cd:9c:c5:ce:82:80:12:3f:0c:1f:8f: 17:02:53:38:45:fb:ba:89:26:1e:c8:86:3b:d9:f0: a7:8e:ed:4c:59:f3:f8:08:85:9b:44:26:e7:62:e6: 7a:83:69:9d:41:d9:72:8a:9e:53:9f:be:67:96:5c: b5:c7:15:b2:d6:78:f0:a3:f7:0e:bf:ab:ae:67:db: 88:88:1d:5d:3a:71:0c:d5:d5:e5:25:e4:6d:30:83: 00:ae:d0:40:03:4c:27:58:33:23:d3:01:b8:6c:d8: 9e:36:ef:da:b2:74:f5:5f:f1:89:10:a8:37:d1:a4: e1:b0:d6:de:a7:5d:c2:26:9b:9c:98:85:8f:9d:67: b4:aa:ba:bb:4c:5c:31:ee:b7:d2:98:c5:ba:e5:64: ab:72:ef:ec:7e:3e:6f:45:ab:94:94:82:9d:3d:09: 83:d6:c0:92:26:1b:0e:d3:1a:dd:bb:16:5a:34:f2: 63:dd:8a:30:ee:ff:1a:fd:f5:18:b8:06:fd:7c:67: d8:17:ca:36:32:1a:db:3b:4b:34:45:62:d2:d1:ef: 18:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:FC:D3:B0:A7:35:B8:30:4F:50:27:F4:E6:0C:24:16:E1:28:67:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b4862b0-8a7d-4d69-bc18-38b430a8c232/02a99f07-8e81-33cf-a3e4-39b637121671.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b4862b0-8a7d-4d69-bc18-38b430a8c232/9b4862b0-8a7d-4d69-bc18-38b430a8c232.crl X509v3 Authority Key Identifier: keyid:30:C6:EC:74:BB:9F:46:DC:2C:85:0C:72:B8:78:D5:FE:A1:22:2C:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b4862b0-8a7d-4d69-bc18-38b430a8c232.cer sbgp-ipAddrBlock: critical IPv4: 24.233.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:70:67:72:cd:db:bf:e8:37:32:15:f1:97:8e:7c:81:88:69: d6:f9:ea:42:ab:af:bc:6b:18:e2:56:aa:2c:86:c3:89:25:ab: 71:87:8b:bd:ad:3e:95:59:05:20:79:b9:01:b8:7e:63:a0:40: ee:86:1c:12:af:59:10:42:80:35:7d:9f:3b:4f:21:bb:71:d8: 98:0c:a9:04:fb:76:a2:76:05:a9:3f:38:4c:53:c6:f0:6e:78: 1a:92:d1:9b:12:d8:e4:a3:a3:00:cb:7e:39:c6:ba:34:c6:cf: 64:d6:e3:ae:a5:d0:f8:c0:0a:98:74:94:ed:45:c4:ee:f6:4a: 70:62:8f:bb:3c:9c:0c:22:41:fe:78:e9:c0:df:c2:8b:2d:4a: 5d:67:ed:ed:20:e0:b5:19:bf:71:7d:4b:15:b1:09:a9:ce:60: cf:87:07:98:ec:18:88:a6:0a:60:07:70:07:0b:7e:a3:14:3b: 3a:98:48:fc:c0:32:28:db:13:a1:97:f2:ea:88:1e:22:ed:42: e8:41:48:c5:11:b4:3f:c5:f8:95:f3:a6:ba:d6:5b:59:44:51: 12:e7:da:62:ad:73:3f:60:19:d0:4e:d2:8e:4c:59:c4:ef:96: cc:2a:47:56:57:77:41:41:09:c6:53:21:af:f1:c9:b1:6e:57: e0:ce:a5:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtvcTC0NGNVkHfNwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWI0ODYyYjAtOGE3ZC00ZDY5LWJjMTgtMzhiNDMwYThj MjMyMB4XDTI1MTAwNjIwMzAyOVoXDTI2MDEwNDIxMzAyOVowLzEtMCsGA1UEAxMk Mzg2OTNlYmUtMWVmOS00MWM5LTlkYjEtMTU3N2QyYjQ5MmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32FtvtTqwfXsyXPLjgaKMyrsWxO992+ScGMh wAEejS/OUb0LQMA5cptHwl6R4CeyzZzFzoKAEj8MH48XAlM4Rfu6iSYeyIY72fCn ju1MWfP4CIWbRCbnYuZ6g2mdQdlyip5Tn75nlly1xxWy1njwo/cOv6uuZ9uIiB1d OnEM1dXlJeRtMIMArtBAA0wnWDMj0wG4bNieNu/asnT1X/GJEKg30aThsNbep13C JpucmIWPnWe0qrq7TFwx7rfSmMW65WSrcu/sfj5vRauUlIKdPQmD1sCSJhsO0xrd uxZaNPJj3Yow7v8a/fUYuAb9fGfYF8o2MhrbO0s0RWLS0e8Y+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFID807CnNbgwT1An9OYMJBbhKGd3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85YjQ4 NjJiMC04YTdkLTRkNjktYmMxOC0zOGI0MzBhOGMyMzIvMDJhOTlmMDctOGU4MS0z M2NmLWEzZTQtMzliNjM3MTIxNjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOWI0ODYyYjAtOGE3ZC00ZDY5LWJj MTgtMzhiNDMwYThjMjMyLzliNDg2MmIwLThhN2QtNGQ2OS1iYzE4LTM4YjQzMGE4 YzIzMi5jcmwwHwYDVR0jBBgwFoAUMMbsdLufRtwshQxyuHjV/qEiLFkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85YjQ4NjJiMC04YTdkLTRkNjktYmMxOC0zOGI0 MzBhOGMyMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGOlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRwZ3LN27/oNzIV8ZeOfIGIadb56kKrr7xrGOJWqiyGw4klq3GHi72t PpVZBSB5uQG4fmOgQO6GHBKvWRBCgDV9nztPIbtx2JgMqQT7dqJ2Bak/OExTxvBu eBqS0ZsS2OSjowDLfjnGujTGz2TW466l0PjACph0lO1FxO72SnBij7s8nAwiQf54 6cDfwostSl1n7e0g4LUZv3F9SxWxCanOYM+HB5jsGIimCmAHcAcLfqMUOzqYSPzA MijbE6GX8uqIHiLtQuhBSMURtD/F+JXzprrWW1lEURLn2mKtcz9gGdBO0o5MWcTv lswqR1ZXd0FBCcZTIa/xybFuV+DOpSI= -----END CERTIFICATE-----Generated at Wed Oct 8 22:58:43 2025 by rpki-client