$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/3dbf5ad4-699a-3778-878c-b469cf9d348d.roa File: 3dbf5ad4-699a-3778-878c-b469cf9d348d.roa (raw, json) Hash identifier: /vc9rkF3YT42EosF3NAdf/2z7dQ2rP6aAiSPY2uObbo= Subject key identifier: D4:BB:B7:1C:FA:53:AA:C9:66:F8:BD:B7:9B:6E:A7:D2:4D:DC:01:5F Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F4328584B95A79F1D772389BB81BED8E0 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/3dbf5ad4-699a-3778-878c-b469cf9d348d.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 16739 IP address blocks: 24.56.182.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:9f:1d:77:23:89:bb:81:be:d8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=0d3bc7db-fa93-482e-b370-b867e4e658c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1c:08:8c:bd:ea:58:d1:4e:1b:03:c1:7c:b3: ef:10:df:87:72:60:72:3c:53:f9:d0:94:1e:cd:8b: 61:e4:b7:b2:32:dc:64:fa:10:57:fb:3a:d6:4a:28: e1:b8:5e:e1:db:29:dd:1c:74:86:8a:3a:16:91:e7: 80:03:7b:98:16:38:90:27:4a:ef:0b:cf:e1:c7:e0: 88:2c:73:7a:51:e0:a2:af:ad:3c:50:c2:d1:70:2a: 06:35:bf:de:96:8c:1a:f9:5d:97:a6:53:dd:89:ef: 70:bb:41:23:7e:38:03:37:42:11:3e:7d:29:ab:50: 72:d0:c7:be:10:1a:38:72:fd:25:4e:66:6e:78:12: f4:9a:02:2e:32:c4:c3:a1:7f:03:4f:c5:9d:da:67: 1e:3c:01:91:0c:fe:30:74:81:7b:7e:12:08:f1:c0: 0a:b1:90:37:58:2c:df:d7:8e:24:dc:9e:c3:06:9c: b6:f9:87:5b:70:2e:fa:d1:ef:60:09:2c:30:bf:e2: 5f:f5:2a:c5:61:53:71:9c:07:7e:0a:d5:57:f9:15: 48:9c:a3:d8:8c:df:e4:54:74:7e:7f:c1:e5:e9:43: 70:ac:e9:7c:9e:64:94:dc:2e:7d:ab:77:53:6c:1b: 73:5c:29:b2:e0:7f:0b:ca:36:6c:d9:5f:b9:50:3a: ab:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:BB:B7:1C:FA:53:AA:C9:66:F8:BD:B7:9B:6E:A7:D2:4D:DC:01:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/3dbf5ad4-699a-3778-878c-b469cf9d348d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 24.56.182.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:46:bc:0a:b2:3f:01:15:1a:e9:58:28:52:d8:9b:a4:70:01: de:ef:0d:69:eb:e2:ae:f3:cc:49:d0:6b:74:29:85:49:04:83: fc:24:df:87:0a:07:bd:c7:e6:58:e1:c0:68:a9:b5:f9:9e:fb: 99:48:26:07:16:c9:8c:d7:75:fb:8d:ef:67:dd:e0:27:5c:a2: d2:29:df:32:a5:c4:14:65:69:1a:4d:e3:7a:f5:fb:c9:25:4e: 40:6e:32:ed:db:88:c3:d9:18:ff:b1:64:1e:e9:32:4b:ad:b7: 59:5a:e6:6e:c9:76:d5:36:19:e3:a8:1e:5b:14:64:07:1d:28: 98:d3:27:f7:79:62:4f:ee:70:d2:f5:97:f0:17:1a:b1:b6:e1: f3:ef:da:af:ed:b8:f9:93:5e:6e:66:ca:e0:0c:7c:e5:e7:dc: 3b:41:07:9a:cb:28:31:08:51:54:bd:0f:a3:c5:9a:cc:10:57: e2:96:c7:fb:b5:21:29:5d:2b:70:4d:2a:9e:f7:23:09:b4:f5: 44:60:3a:c6:1e:af:64:bd:3f:74:d0:78:f4:a9:1f:22:ca:71: 46:da:d8:63:fa:6e:dd:45:f8:3a:c8:ec:1b:65:dd:cc:6f:9f: 6d:d7:64:63:04:73:04:34:d7:ee:11:35:b0:e3:c1:69:02:11: 7b:cd:68:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp58ddyOJu4G+2OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MGQzYmM3ZGItZmE5My00ODJlLWIzNzAtYjg2N2U0ZTY1OGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRwIjL3qWNFOGwPBfLPvEN+HcmByPFP50JQe zYth5LeyMtxk+hBX+zrWSijhuF7h2yndHHSGijoWkeeAA3uYFjiQJ0rvC8/hx+CI LHN6UeCir608UMLRcCoGNb/elowa+V2XplPdie9wu0EjfjgDN0IRPn0pq1By0Me+ EBo4cv0lTmZueBL0mgIuMsTDoX8DT8Wd2mcePAGRDP4wdIF7fhII8cAKsZA3WCzf 144k3J7DBpy2+YdbcC760e9gCSwwv+Jf9SrFYVNxnAd+CtVX+RVInKPYjN/kVHR+ f8Hl6UNwrOl8nmSU3C59q3dTbBtzXCmy4H8LyjZs2V+5UDqrtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNS7txz6U6rJZvi9t5tup9JN3AFfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvM2RiZjVhZDQtNjk5YS0z Nzc4LTg3OGMtYjQ2OWNmOWQzNDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGDi2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5GvAqyPwEVGulYKFLYm6RwAd7vDWnr4q7zzEnQa3QphUkEg/wk34cK B73H5ljhwGiptfme+5lIJgcWyYzXdfuN72fd4CdcotIp3zKlxBRlaRpN43r1+8kl TkBuMu3biMPZGP+xZB7pMkutt1la5m7JdtU2GeOoHlsUZAcdKJjTJ/d5Yk/ucNL1 l/AXGrG24fPv2q/tuPmTXm5myuAMfOXn3DtBB5rLKDEIUVS9D6PFmswQV+KWx/u1 ISldK3BNKp73Iwm09URgOsYer2S9P3TQePSpHyLKcUba2GP6bt1F+DrI7Btl3cxv n23XZGMEcwQ01+4RNbDjwWkCEXvNaLo= -----END CERTIFICATE-----Generated at Tue Nov 4 20:06:48 2025 by rpki-client