$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9954cb8b-eb7a-3c3a-8916-a4e51b6eaa12.roa File: 9954cb8b-eb7a-3c3a-8916-a4e51b6eaa12.roa (raw, json) Hash identifier: jQX2GM4IOA0yrpBjJzMRBU85f6b0q2SChnVn75D6k9s= Subject key identifier: FB:FE:9D:F4:B7:09:92:91:94:69:47:A0:E6:A0:46:19:32:11:31:A3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA339F7B303A64F79B5A80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9954cb8b-eb7a-3c3a-8916-a4e51b6eaa12.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 76.24.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:33:9f:7b:30:3a:64:f7:9b:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=5fdce862-4438-4b57-a2d2-a1c0f5b19ac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cf:86:35:6e:28:54:78:73:39:c0:04:53:ac: ec:fc:db:27:1c:11:ea:82:d9:d9:c4:d2:6f:f9:62: d9:d0:9f:4f:69:96:57:39:9c:c0:47:d2:86:24:3b: f9:69:57:7e:d1:a9:a5:91:d3:7c:da:bb:5f:36:0f: ae:cb:31:a4:36:d3:09:95:9f:83:09:07:8b:56:02: e1:56:6d:39:25:51:73:10:ba:5e:16:69:11:d2:03: b5:1d:cf:6a:51:58:24:d0:da:65:d3:73:91:b0:2f: 5c:b5:94:90:dd:fd:7c:f9:4c:c3:03:e4:b0:a9:da: 83:29:4d:d6:d2:f8:9b:9d:c6:e3:1d:1d:5c:f7:b4: e1:e6:b1:6d:4a:5b:8a:37:03:44:68:0a:b0:0a:75: 30:9a:5b:74:69:e0:91:71:28:f2:85:11:c5:13:7e: c0:bf:01:8d:dd:3d:52:59:6f:78:f6:cd:7c:e9:30: fd:1c:52:69:d3:30:0b:89:3b:94:16:e4:87:f0:27: 27:6b:aa:13:47:8e:e5:9a:63:86:c9:34:6a:b5:b8: 63:c8:c6:6b:84:b7:cc:16:3d:26:91:3e:c8:1c:66: 1b:55:67:d1:e5:2f:b4:75:0e:61:26:5c:07:92:3a: a7:f4:dc:5a:c2:48:45:d0:32:46:75:8a:55:4b:90: ec:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:FE:9D:F4:B7:09:92:91:94:69:47:A0:E6:A0:46:19:32:11:31:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9954cb8b-eb7a-3c3a-8916-a4e51b6eaa12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.24.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:c7:fb:3b:fa:4d:59:ba:13:9f:8f:8b:2e:c4:70:fa:31:2e: 3f:cb:ac:d0:d3:b9:42:86:ec:9a:64:ef:c4:8e:f3:45:88:71: 4c:c7:69:ea:2e:73:0d:9d:be:f3:ea:39:42:c5:b1:f8:b4:4a: 69:8c:6e:a5:98:7a:75:f6:8b:f6:64:2e:b6:62:05:91:a3:dc: 03:2c:68:af:4e:a0:ba:ac:d2:3d:7f:21:eb:49:4f:3b:cf:5b: 4f:61:aa:4f:43:75:75:3a:04:00:0a:78:cf:69:c3:fd:20:1b: 98:22:ba:c8:8c:d6:f9:6f:b9:ca:d2:17:f9:c3:f5:fd:95:dc: 5e:7f:de:90:e7:5a:b7:ac:47:be:1c:47:54:cf:98:03:e4:53: b2:fe:a9:78:3e:26:4e:c6:68:cd:56:0a:fb:ec:bf:34:45:7a: 7b:13:90:3e:cc:31:f1:f3:a6:e7:83:cd:c1:86:f0:03:2b:64: 7d:32:32:7e:59:d7:11:24:d8:0e:08:7c:bb:ce:26:28:eb:c9: e9:3c:df:5f:44:ff:83:25:fb:69:2f:7c:4f:51:c9:f9:1e:6e: cb:f2:bb:64:5a:1e:12:5a:9b:24:7b:79:21:75:70:d8:e6:37: 5a:d7:f2:d6:1c:5c:b1:88:0a:d4:87:fe:db:6f:54:1b:47:d8: 3a:6c:81:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqjOfezA6ZPebWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NWZkY2U4NjItNDQzOC00YjU3LWEyZDItYTFjMGY1YjE5YWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAys+GNW4oVHhzOcAEU6zs/NsnHBHqgtnZxNJv +WLZ0J9PaZZXOZzAR9KGJDv5aVd+0amlkdN82rtfNg+uyzGkNtMJlZ+DCQeLVgLh Vm05JVFzELpeFmkR0gO1Hc9qUVgk0Npl03ORsC9ctZSQ3f18+UzDA+SwqdqDKU3W 0vibncbjHR1c97Th5rFtSluKNwNEaAqwCnUwmlt0aeCRcSjyhRHFE37AvwGN3T1S WW949s186TD9HFJp0zALiTuUFuSH8Ccna6oTR47lmmOGyTRqtbhjyMZrhLfMFj0m kT7IHGYbVWfR5S+0dQ5hJlwHkjqn9NxawkhF0DJGdYpVS5DsUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPv+nfS3CZKRlGlHoOagRhkyETGjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTk1NGNiOGItZWI3YS0z YzNhLTg5MTYtYTRlNTFiNmVhYTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTBjMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMvH+zv6TVm6E5+Piy7EcPoxLj/LrNDTuUKG7Jpk78SO80WIcUzHaeou cw2dvvPqOULFsfi0SmmMbqWYenX2i/ZkLrZiBZGj3AMsaK9OoLqs0j1/IetJTzvP W09hqk9DdXU6BAAKeM9pw/0gG5giusiM1vlvucrSF/nD9f2V3F5/3pDnWresR74c R1TPmAPkU7L+qXg+Jk7GaM1WCvvsvzRFensTkD7MMfHzpueDzcGG8AMrZH0yMn5Z 1xEk2A4IfLvOJijryek8319E/4Ml+2kvfE9Ryfkebsvyu2RaHhJamyR7eSF1cNjm N1rX8tYcXLGICtSH/ttvVBtH2DpsgbA= -----END CERTIFICATE-----Generated at Tue Oct 21 19:41:47 2025 by rpki-client