$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5654c31c-84c2-347f-8617-27d2c2f9ac3d.roa File: 5654c31c-84c2-347f-8617-27d2c2f9ac3d.roa (raw, json) Hash identifier: 37goONNZZqNJYhAjp8cFMrdDoGWD+yXYa5lIO/cFsA4= Subject key identifier: 0F:98:2D:A1:3F:82:BD:86:5F:4D:4B:26:EB:BA:3C:34:99:16:2D:0A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A7A6EBA9C0017E91068180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5654c31c-84c2-347f-8617-27d2c2f9ac3d.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33490 IP address blocks: 24.20.66.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:a6:eb:a9:c0:01:7e:91:06:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=5dfd9e37-92c9-47ec-a144-12565f7e9b48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b5:19:79:e3:cc:72:21:e9:e8:1e:64:53:34: 9e:28:98:19:34:ed:6f:3c:63:1f:30:8a:7e:51:12: aa:78:c0:6f:c2:60:4a:92:5e:b2:4b:29:b4:3f:28: 89:e7:fd:de:b6:c4:b8:36:5a:dc:ff:c3:f4:f4:78: c2:c0:17:34:1c:b5:57:88:e9:6d:01:5d:9c:e7:cf: c3:79:1f:21:06:11:97:16:5c:07:2d:62:88:01:5d: 0f:99:c6:03:d2:da:3a:08:f3:c0:ee:c8:08:41:ff: b8:27:d9:c3:17:a2:86:2b:f5:95:5a:ac:b5:3b:a7: 01:4e:90:d4:c2:5b:e2:63:40:07:67:8e:e9:4a:51: 59:6e:6e:b1:43:fa:fc:e1:7b:9c:ed:9d:51:4f:18: 2c:f5:a1:35:0c:7b:9a:59:ec:67:32:73:31:88:b6: 3f:36:e0:f6:74:cc:96:d2:89:31:8a:3c:9b:10:e0: 17:0a:f6:80:3b:d8:6d:21:b1:ee:f4:cc:64:ea:7d: 7b:cf:41:38:0b:f8:29:28:9e:38:74:89:b4:2a:0d: 46:89:2e:d0:0b:0c:47:5a:05:25:ca:bd:cf:0f:ea: 07:96:b5:03:f2:74:b6:d3:42:aa:46:b0:da:42:35: f7:01:c0:e9:9f:0c:62:f6:c5:a3:d0:21:cd:57:47: 8c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:98:2D:A1:3F:82:BD:86:5F:4D:4B:26:EB:BA:3C:34:99:16:2D:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5654c31c-84c2-347f-8617-27d2c2f9ac3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.20.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:bd:20:fe:b5:aa:36:f4:bd:8e:4e:5b:fa:da:ff:cd:12:6b: c9:e5:38:3d:08:b2:20:7f:16:30:fe:c1:7f:cc:ab:55:09:1a: 3d:5a:6e:e0:e6:37:be:13:da:dd:7f:f9:12:e8:ed:87:b9:65: 50:f0:a6:e2:fa:ac:15:c7:bd:af:a8:c6:42:81:6a:4b:cb:ee: b5:42:89:1d:ef:e8:85:c8:3c:44:33:ec:f3:ed:8e:c3:51:0f: b0:3e:fd:45:64:c1:db:78:11:86:65:47:a0:07:ab:23:5c:a0: 63:dd:67:bd:c2:53:c1:40:b0:fc:84:19:fe:3a:ec:cd:4c:33: 03:bb:6d:6c:4e:4a:39:db:50:bb:54:d9:e2:77:0f:6b:c7:0d: f6:9f:57:58:4c:48:b4:d2:6c:a3:1b:ce:a9:01:9d:88:ea:3c: e7:29:4b:16:c3:71:0c:fc:4f:e3:69:97:47:3a:6a:b7:9d:45: f9:c1:e1:79:56:08:b9:71:ec:73:1e:66:9d:b1:9f:fb:bc:96: 79:44:17:80:89:bd:11:9f:99:7d:6f:49:19:11:83:21:fb:72: 8c:ff:e8:5d:85:23:66:4a:f7:c6:7c:02:35:e5:53:c4:de:93: ce:38:40:89:2c:11:15:6f:9c:a1:58:8a:b2:b5:3a:6c:f8:0b: e2:30:45:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp6brqcABfpEGgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NWRmZDllMzctOTJjOS00N2VjLWExNDQtMTI1NjVmN2U5YjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrUZeePMciHp6B5kUzSeKJgZNO1vPGMfMIp+ URKqeMBvwmBKkl6ySym0PyiJ5/3etsS4Nlrc/8P09HjCwBc0HLVXiOltAV2c58/D eR8hBhGXFlwHLWKIAV0PmcYD0to6CPPA7sgIQf+4J9nDF6KGK/WVWqy1O6cBTpDU wlviY0AHZ47pSlFZbm6xQ/r84Xuc7Z1RTxgs9aE1DHuaWexnMnMxiLY/NuD2dMyW 0okxijybEOAXCvaAO9htIbHu9Mxk6n17z0E4C/gpKJ44dIm0Kg1GiS7QCwxHWgUl yr3PD+oHlrUD8nS200KqRrDaQjX3AcDpnwxi9sWj0CHNV0eMjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA+YLaE/gr2GX01LJuu6PDSZFi0KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTY1NGMzMWMtODRjMi0z NDdmLTg2MTctMjdkMmMyZjlhYzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGBRCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEm9IP61qjb0vY5OW/ra/80Sa8nlOD0IsiB/FjD+wX/Mq1UJGj1abuDm N74T2t1/+RLo7Ye5ZVDwpuL6rBXHva+oxkKBakvL7rVCiR3v6IXIPEQz7PPtjsNR D7A+/UVkwdt4EYZlR6AHqyNcoGPdZ73CU8FAsPyEGf467M1MMwO7bWxOSjnbULtU 2eJ3D2vHDfafV1hMSLTSbKMbzqkBnYjqPOcpSxbDcQz8T+Npl0c6aredRfnB4XlW CLlx7HMeZp2xn/u8lnlEF4CJvRGfmX1vSRkRgyH7coz/6F2FI2ZK98Z8AjXlU8Te k844QIksERVvnKFYirK1Omz4C+IwRRE= -----END CERTIFICATE-----Generated at Wed Oct 22 02:44:55 2025 by rpki-client