$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/287398b1-1474-316f-80e2-10e5cfe3e733.roa File: 287398b1-1474-316f-80e2-10e5cfe3e733.roa (raw, json) Hash identifier: hxdRT//uhlsSLe8lqR/HxRwa9MHr8R0vP0CxGcp6z6M= Subject key identifier: 9E:AE:67:C4:38:70:BC:2C:C9:DA:43:37:85:50:65:AE:C7:5C:D2:72 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A9A6E36DE50B4F55A7CD80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/287398b1-1474-316f-80e2-10e5cfe3e733.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 24.63.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:a6:e3:6d:e5:0b:4f:55:a7:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=0b1f9e2c-2523-4eaf-9eb3-0a651466b843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:fa:15:78:e4:e8:f0:cd:a0:98:a8:20:f9:7b: b0:06:0e:e1:52:85:05:f2:7a:fe:ef:7a:68:38:0d: 66:a6:c9:92:b3:49:de:32:dc:04:42:9b:14:43:99: 91:b6:49:96:55:b9:2a:ed:c1:cc:b8:ea:b6:08:dd: f3:c9:5e:2f:8a:eb:69:33:6f:ea:46:64:98:12:57: da:d4:5d:3f:9d:1f:d0:4a:1f:36:b8:6f:cc:0a:2d: ec:06:8e:44:65:63:24:bc:b8:29:89:f0:3b:8c:ef: 58:36:3f:53:13:da:e2:22:ef:9c:f0:9e:7a:0f:e4: 44:49:db:bb:9e:47:f4:a3:51:00:26:be:ef:e5:50: 8d:ce:8d:1f:7f:4b:d1:00:d5:f5:9b:16:27:8a:11: 6d:3a:8d:cf:76:a5:65:a2:e5:7f:77:ca:5c:fa:98: 5f:87:3b:1c:84:c4:70:52:11:19:37:0a:09:c9:97: 0e:db:ed:c4:1b:45:4c:2c:d6:c2:b5:9d:f3:7d:9e: 11:4c:b0:75:d9:79:4c:16:5a:5b:66:05:d7:ab:b3: af:fd:84:e4:4a:c8:90:42:3b:18:bc:f1:1e:d0:a5: f5:1b:2b:2c:d5:01:c0:39:9e:00:4c:a5:ea:07:9b: f5:6f:d1:0a:90:17:4b:b0:ec:a8:64:35:2b:49:83: 37:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:AE:67:C4:38:70:BC:2C:C9:DA:43:37:85:50:65:AE:C7:5C:D2:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/287398b1-1474-316f-80e2-10e5cfe3e733.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.63.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:da:b2:62:ce:af:82:46:f2:75:bc:99:38:ff:6b:cd:af:45: 37:cf:1a:6b:c1:5f:cd:f7:a6:b9:a4:71:80:dd:65:9f:86:10: 29:80:65:6e:9e:05:3f:9c:b1:39:19:b4:9b:63:ec:a5:a2:b1: c0:b2:cc:b3:e8:f0:91:9a:d4:66:5e:f1:0a:27:ee:41:1f:ad: be:f3:49:05:03:03:d5:8a:38:22:87:fe:b6:1c:1a:a7:2f:06: b4:d4:4f:d9:e8:fe:60:db:90:2c:00:3c:20:4a:c1:10:40:e6: 70:3d:bd:e6:79:75:d8:bd:a6:25:1c:94:8f:d3:5f:3e:0e:4a: 69:45:20:1a:05:75:97:f2:64:cf:8c:bd:33:1e:e3:a4:b5:49: 42:79:da:c8:74:03:76:3c:50:68:bf:c3:8d:28:19:0f:48:4d: 46:24:b6:6b:81:56:91:73:cd:13:29:f7:d2:58:fa:3c:72:51: ca:8b:2f:9a:f8:0a:2f:08:37:c1:6c:18:1d:ac:b1:1e:d7:15: 1e:b2:53:b1:6a:d5:fe:59:fa:db:98:d2:80:3f:3a:cb:88:82: 3b:55:dd:8a:10:ce:ba:c4:e8:52:c1:2c:74:aa:41:0b:6b:8f: be:d0:a6:86:2c:d9:04:2a:4a:75:08:ea:e6:40:b3:9c:47:21: c3:cb:31:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqabjbeULT1WnzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MGIxZjllMmMtMjUyMy00ZWFmLTllYjMtMGE2NTE0NjZiODQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfoVeOTo8M2gmKgg+XuwBg7hUoUF8nr+73po OA1mpsmSs0neMtwEQpsUQ5mRtkmWVbkq7cHMuOq2CN3zyV4viutpM2/qRmSYElfa 1F0/nR/QSh82uG/MCi3sBo5EZWMkvLgpifA7jO9YNj9TE9riIu+c8J56D+RESdu7 nkf0o1EAJr7v5VCNzo0ff0vRANX1mxYnihFtOo3PdqVlouV/d8pc+phfhzschMRw UhEZNwoJyZcO2+3EG0VMLNbCtZ3zfZ4RTLB12XlMFlpbZgXXq7Ov/YTkSsiQQjsY vPEe0KX1Gyss1QHAOZ4ATKXqB5v1b9EKkBdLsOyoZDUrSYM3zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ6uZ8Q4cLwsydpDN4VQZa7HXNJyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjg3Mzk4YjEtMTQ3NC0z MTZmLTgwZTItMTBlNWNmZTNlNzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGD/EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3asmLOr4JG8nW8mTj/a82vRTfPGmvBX833prmkcYDdZZ+GECmAZW6e BT+csTkZtJtj7KWiscCyzLPo8JGa1GZe8Qon7kEfrb7zSQUDA9WKOCKH/rYcGqcv BrTUT9no/mDbkCwAPCBKwRBA5nA9veZ5ddi9piUclI/TXz4OSmlFIBoFdZfyZM+M vTMe46S1SUJ52sh0A3Y8UGi/w40oGQ9ITUYktmuBVpFzzRMp99JY+jxyUcqLL5r4 Ci8IN8FsGB2ssR7XFR6yU7Fq1f5Z+tuY0oA/OsuIgjtV3YoQzrrE6FLBLHSqQQtr j77QpoYs2QQqSnUI6uZAs5xHIcPLMUQ= -----END CERTIFICATE-----Generated at Tue Oct 21 22:22:54 2025 by rpki-client