$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/abac5b99-a0df-3c9a-b10f-4d7e02693d92.roa File: abac5b99-a0df-3c9a-b10f-4d7e02693d92.roa (raw, json) Hash identifier: WDoazNueqxXERhkmYTm3ULP30sIlur1WbkpsVxjwZq4= Subject key identifier: E4:EC:CF:C3:FD:59:B4:D8:DA:D4:D7:E0:54:89:39:D5:78:B9:3F:06 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A7A935AB16BE1EAC6B9E80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/abac5b99-a0df-3c9a-b10f-4d7e02693d92.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33490 IP address blocks: 24.21.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:a9:35:ab:16:be:1e:ac:6b:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=adbe2a4a-16cc-4d9b-8537-47d0a510f884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:97:8a:43:58:14:0b:1f:be:8d:a0:d0:71:d2: 32:7b:fd:2a:a0:e2:c7:d6:3d:be:36:3d:97:43:4f: a8:b9:28:81:55:9d:87:f2:1a:46:4e:41:16:41:fd: 89:fc:f8:45:ef:aa:8e:9e:25:22:e1:fc:d1:20:66: 03:be:d4:5f:ff:ef:2a:60:bf:89:29:48:a7:92:75: 83:92:51:d3:39:7c:ec:11:c6:af:ef:df:44:b1:93: 04:5f:c0:a8:93:cf:c9:55:d1:31:b8:c6:d3:1f:92: e1:74:02:3a:07:03:67:1d:d3:7b:94:7a:6a:00:e9: 10:80:88:be:da:95:41:78:4a:94:1a:52:e7:8e:9a: 78:4e:d8:38:84:21:47:a1:52:18:9d:8b:bc:b4:ba: 3c:1e:f4:61:71:5c:14:ed:55:50:1c:d6:12:e8:c8: b0:08:fb:b5:ce:30:90:b4:6c:19:35:9b:61:11:1f: f6:28:10:80:e9:98:0b:1a:d9:a4:1a:33:b2:c5:64: 67:c1:43:09:7d:0d:b2:e9:bb:4d:8a:23:3d:d7:fd: 5e:57:fe:6c:fe:01:12:b7:81:14:61:76:60:d9:c0: 43:9d:1d:8d:33:73:dd:7a:f7:7b:e3:14:d5:66:c7: 70:a7:6a:78:0e:47:4f:16:b8:90:d2:12:ad:42:e1: 84:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:EC:CF:C3:FD:59:B4:D8:DA:D4:D7:E0:54:89:39:D5:78:B9:3F:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/abac5b99-a0df-3c9a-b10f-4d7e02693d92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.21.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:a5:87:e4:26:aa:8a:f1:a4:e9:d3:a8:c3:95:41:f9:49:d2: 77:4d:a6:93:5d:8d:a8:4e:ab:37:8a:cf:63:ce:63:30:33:13: ce:13:4d:13:67:04:44:0a:95:14:d3:3d:15:09:0a:42:3f:c8: 84:1a:4e:fe:8e:f3:99:2c:9e:6a:a6:1b:6f:16:79:d0:13:c0: 48:48:65:d6:15:f5:d5:27:12:f6:2e:ef:59:ec:a9:67:30:2d: 4d:3d:90:a2:b0:d7:6a:09:8b:a2:68:fb:77:94:04:78:cb:ca: f4:59:2d:ef:6f:9d:1c:ed:e3:00:c5:a4:36:d1:81:62:c4:2e: 0f:2e:3e:f7:44:2b:b1:c4:0c:41:56:1f:00:f7:0a:b6:b3:9f: 58:37:b0:f6:01:7d:bb:ff:c2:d5:c3:17:66:6e:19:a2:17:58: cb:6d:90:b6:db:61:0a:53:02:36:39:c7:b4:31:10:ed:c3:38: cf:0a:59:45:35:6f:5e:6a:41:29:f5:7c:dd:80:70:3a:cb:58: 34:f4:c4:d6:32:f7:5d:ed:5f:f7:ab:1c:7e:4b:c4:4b:02:f5: e4:9e:ac:34:da:4d:47:8e:01:bc:1f:60:3f:d8:6c:90:dc:85: 01:40:8b:7f:1a:38:ff:ae:5d:94:e2:71:8b:38:28:64:7e:f0: 5a:5f:2a:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp6k1qxa+HqxrnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YWRiZTJhNGEtMTZjYy00ZDliLTg1MzctNDdkMGE1MTBmODg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5eKQ1gUCx++jaDQcdIye/0qoOLH1j2+Nj2X Q0+ouSiBVZ2H8hpGTkEWQf2J/PhF76qOniUi4fzRIGYDvtRf/+8qYL+JKUinknWD klHTOXzsEcav799EsZMEX8Cok8/JVdExuMbTH5LhdAI6BwNnHdN7lHpqAOkQgIi+ 2pVBeEqUGlLnjpp4Ttg4hCFHoVIYnYu8tLo8HvRhcVwU7VVQHNYS6MiwCPu1zjCQ tGwZNZthER/2KBCA6ZgLGtmkGjOyxWRnwUMJfQ2y6btNiiM91/1eV/5s/gESt4EU YXZg2cBDnR2NM3Pdevd74xTVZsdwp2p4DkdPFriQ0hKtQuGE0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOTsz8P9WbTY2tTX4FSJOdV4uT8GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWJhYzViOTktYTBkZi0z YzlhLWIxMGYtNGQ3ZTAyNjkzZDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGBUUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6lh+QmqorxpOnTqMOVQflJ0ndNppNdjahOqzeKz2POYzAzE84TTRNn BEQKlRTTPRUJCkI/yIQaTv6O85ksnmqmG28WedATwEhIZdYV9dUnEvYu71nsqWcw LU09kKKw12oJi6Jo+3eUBHjLyvRZLe9vnRzt4wDFpDbRgWLELg8uPvdEK7HEDEFW HwD3Crazn1g3sPYBfbv/wtXDF2ZuGaIXWMttkLbbYQpTAjY5x7QxEO3DOM8KWUU1 b15qQSn1fN2AcDrLWDT0xNYy913tX/erHH5LxEsC9eSerDTaTUeOAbwfYD/YbJDc hQFAi38aOP+uXZTicYs4KGR+8FpfKsY= -----END CERTIFICATE-----Generated at Wed Oct 22 00:19:34 2025 by rpki-client