$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/24c78a7d-3fc4-3ee2-a77f-02d8ffa1901e.roa File: 24c78a7d-3fc4-3ee2-a77f-02d8ffa1901e.roa (raw, json) Hash identifier: 2pvokoBgLs9nif1fg0nWUmi6bHdK5JqGWV2lcD9Lpbw= Subject key identifier: 4C:87:E3:84:87:D0:EE:21:22:9F:D1:B0:2F:5B:EE:DC:C1:C6:EC:1C Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F4328584B6A61E138C79F99D4253FC580 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/24c78a7d-3fc4-3ee2-a77f-02d8ffa1901e.roa Signing time: Sun 05 Oct 2025 01:00:32 +0000 ROA not before: Sun 05 Oct 2025 01:00:32 +0000 ROA not after: Sat 03 Jan 2026 02:00:32 +0000 asID: 16433 IP address blocks: 147.92.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:61:e1:38:c7:9f:99:d4:25:3f:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Oct 5 01:00:32 2025 GMT Not After : Jan 3 02:00:32 2026 GMT Subject: CN=b09b6537-2893-42f9-b349-5a28837ea153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e6:03:14:2c:16:36:8b:4a:66:df:6e:15:0d: 1a:e6:83:bc:f9:d6:e1:57:1b:90:f6:08:7e:45:a8: a5:09:90:e4:fb:4a:83:c7:0b:85:e7:52:61:cb:19: a2:60:20:ec:55:9b:ed:e5:71:0c:d6:2b:a5:01:43: d6:7f:20:5f:81:b4:43:f2:0a:77:58:aa:c6:2c:12: 19:41:ce:5d:d4:1a:c9:4d:c2:47:06:3f:80:4f:3c: 33:2f:42:19:ab:d6:ab:9f:05:cd:15:a7:d8:18:04: 7a:6c:de:7d:99:3c:2c:b4:2d:f2:b5:84:be:bc:4d: 7a:ee:91:3e:37:bc:31:17:3f:99:80:ee:43:bb:f5: fa:98:3b:70:74:0b:14:44:c4:2d:e9:ec:f6:0a:09: d3:36:cd:b8:a7:79:d8:d2:d9:8f:a4:e9:8d:84:6c: 61:18:a5:d5:4e:78:7d:eb:1d:40:34:5e:21:d2:77: 15:79:18:7e:a6:41:e1:bd:45:5c:39:1d:2e:bc:ca: 3a:64:54:1d:52:9f:35:65:0a:e3:79:41:4d:93:69: 41:00:67:f3:9a:b6:d2:17:f4:a1:fd:36:a0:93:d2: 57:e0:8f:e6:28:69:83:b1:30:de:ea:68:f7:78:d8: 2d:4e:a6:c0:24:d6:cc:ba:9d:c1:39:ff:82:7d:0b: 34:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:87:E3:84:87:D0:EE:21:22:9F:D1:B0:2F:5B:EE:DC:C1:C6:EC:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/24c78a7d-3fc4-3ee2-a77f-02d8ffa1901e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 147.92.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:27:38:80:99:df:fb:86:58:15:70:cf:e5:b2:60:c1:99:86: cf:61:96:a1:30:35:1d:45:9d:eb:10:5e:d3:b2:8e:02:7f:71: 33:f5:1c:7e:9e:95:bf:52:6b:fc:fc:56:e2:7f:2c:22:89:5e: ec:18:e1:e5:8d:1d:cd:ce:77:68:22:83:50:1b:b4:9d:fb:a0: d8:71:9e:f6:ba:bf:d6:f1:90:2a:1e:fb:8d:e1:6c:64:28:11: 78:ad:56:32:f9:d6:69:d9:27:c7:f2:89:17:1a:72:ae:96:a2: 5f:05:fb:de:41:23:a0:aa:75:6d:43:d8:a9:fc:13:4b:7d:70: 96:0f:53:63:96:72:0e:bf:c0:cd:f7:34:aa:9d:27:b6:0b:11: 14:29:1f:04:85:c1:ea:29:8c:f3:57:b8:bf:5b:4c:a0:fa:80: d5:c7:96:87:fc:b3:51:bf:28:10:cd:3b:db:92:92:88:b0:c2: 1b:51:fc:3d:de:cd:96:dc:61:f7:03:ba:0e:97:35:74:1f:39: dc:c3:05:e7:0a:0f:4e:f7:28:40:fb:b2:13:59:e9:e5:9e:55: 7c:48:b5:8d:22:9b:ea:f1:b0:a0:78:8b:5a:14:e2:e8:44:3e: a1:eb:f6:5a:2a:7b:a1:cc:64:e5:06:4b:e9:54:10:83:04:cf: ef:a3:e8:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtqYeE4x5+Z1CU/xYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk YjA5YjY1MzctMjg5My00MmY5LWIzNDktNWEyODgzN2VhMTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieYDFCwWNotKZt9uFQ0a5oO8+dbhVxuQ9gh+ RailCZDk+0qDxwuF51JhyxmiYCDsVZvt5XEM1iulAUPWfyBfgbRD8gp3WKrGLBIZ Qc5d1BrJTcJHBj+ATzwzL0IZq9arnwXNFafYGAR6bN59mTwstC3ytYS+vE167pE+ N7wxFz+ZgO5Du/X6mDtwdAsURMQt6ez2CgnTNs24p3nY0tmPpOmNhGxhGKXVTnh9 6x1ANF4h0ncVeRh+pkHhvUVcOR0uvMo6ZFQdUp81ZQrjeUFNk2lBAGfzmrbSF/Sh /Tagk9JX4I/mKGmDsTDe6mj3eNgtTqbAJNbMup3BOf+CfQs00QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEyH44SH0O4hIp/RsC9b7tzBxuwcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvMjRjNzhhN2QtM2ZjNC0z ZWUyLWE3N2YtMDJkOGZmYTE5MDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEk1wQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8nOICZ3/uGWBVwz+WyYMGZhs9hlqEwNR1FnesQXtOyjgJ/cTP1HH6e lb9Sa/z8VuJ/LCKJXuwY4eWNHc3Od2gig1AbtJ37oNhxnva6v9bxkCoe+43hbGQo EXitVjL51mnZJ8fyiRcacq6Wol8F+95BI6CqdW1D2Kn8E0t9cJYPU2OWcg6/wM33 NKqdJ7YLERQpHwSFweopjPNXuL9bTKD6gNXHlof8s1G/KBDNO9uSkoiwwhtR/D3e zZbcYfcDug6XNXQfOdzDBecKD073KED7shNZ6eWeVXxItY0im+rxsKB4i1oU4uhE PqHr9loqe6HMZOUGS+lUEIMEz++j6HM= -----END CERTIFICATE-----Generated at Sun Oct 19 00:56:58 2025 by rpki-client