$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/df99f080-3f81-3a55-969f-3784b59f95b1.roa File: df99f080-3f81-3a55-969f-3784b59f95b1.roa (raw, json) Hash identifier: xQkp5msGnYbzU1XfOoDoYDdSfZZySGznUb0nQgEXcdM= Subject key identifier: 26:81:9B:08:5C:85:1A:D0:AC:D2:B0:52:C5:92:01:07:CD:40:18:3E Certificate issuer: /CN=a7840f46-b135-4a45-8c47-daede4b0b707 Certificate serial: 010D0C9F4328584AF0F1523FBD774D1E8085A100 Authority key identifier: 91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/df99f080-3f81-3a55-969f-3784b59f95b1.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 398014 IP address blocks: 24.170.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:52:3f:bd:77:4d:1e:80:85:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7840f46-b135-4a45-8c47-daede4b0b707 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=0cfd6abd-e32b-40ab-a793-5b5e3e913864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:2f:3f:f9:a9:fd:84:aa:20:eb:3d:c0:af:dc: d4:0a:7b:38:f6:01:00:8e:dd:6b:9b:a3:62:d3:62: 95:46:11:e2:ea:28:2e:81:d1:9d:2a:ff:60:5a:e8: ea:cf:4e:2a:31:26:3e:53:1d:f5:59:a4:cc:ea:83: a3:b0:22:9a:95:c5:f7:6f:ec:6a:58:6c:54:a5:f1: 69:1e:60:52:e6:c9:20:51:81:3a:6b:43:26:eb:9c: 9b:88:7a:29:29:a4:35:ab:9b:15:f2:11:7f:40:a0: dd:de:18:44:b9:28:ec:5b:a9:3a:07:31:4f:f8:db: ab:2a:f9:d2:fe:24:66:ee:69:0f:00:d8:0b:59:4b: 2b:08:3b:d7:91:0e:3b:81:31:48:e9:ca:01:31:d0: b3:1f:af:66:75:64:db:31:0e:3b:2c:4a:de:91:80: 4b:59:df:39:e0:ec:49:42:d9:7f:a5:3c:5f:43:87: 02:e1:9a:e1:96:53:44:84:dd:9f:a7:b4:99:cc:33: f2:88:d9:de:2b:a0:29:58:bb:ee:7d:ff:25:2b:d0: 2f:f0:de:22:44:5d:30:67:e4:a2:36:98:02:53:a7: b5:47:54:20:e4:4c:9b:1b:98:d3:ee:11:cd:e8:27: c4:de:c8:38:fc:67:ce:bd:dd:7d:ab:4f:b6:cf:57: 7c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:81:9B:08:5C:85:1A:D0:AC:D2:B0:52:C5:92:01:07:CD:40:18:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/df99f080-3f81-3a55-969f-3784b59f95b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl X509v3 Authority Key Identifier: keyid:91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer sbgp-ipAddrBlock: critical IPv4: 24.170.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:26:02:f3:cf:c1:38:4b:1e:0f:a2:91:e8:59:5e:2b:39:3b: 6a:3e:e2:08:ed:94:6d:f8:0d:5f:34:60:38:90:28:3a:f4:79: 39:8b:66:d2:2d:f5:bc:37:1a:5a:60:a8:20:c1:a6:c0:29:a1: a5:d6:b0:30:b7:f6:f3:c0:d3:51:cd:9c:91:b6:25:6a:d6:89: 0f:d0:bd:52:a8:d8:7b:f4:1b:36:e4:4d:70:5b:82:8c:c5:54: 11:c3:ea:65:30:a9:c6:85:7e:1e:1d:f6:f2:e0:5e:2d:11:dd: 90:6e:75:fe:0c:f9:51:b5:e4:23:4a:a5:bb:2d:2b:2b:9b:98: 32:3f:c2:77:12:51:b4:14:7f:1f:82:88:63:73:1d:0e:df:b7: 2a:d1:18:ab:b6:f7:29:9a:ab:94:16:82:ed:7a:b2:8d:c1:94: 04:75:18:c1:2b:b7:b4:2f:de:5f:1c:49:80:fc:17:d1:2f:f6: cf:dd:d2:e2:91:e5:22:4e:ca:fe:ba:37:67:2d:1a:86:04:85: db:9a:72:10:58:fe:71:03:be:38:4d:ef:bc:83:27:f8:37:05: 67:9b:31:2b:ea:26:38:69:59:70:c4:19:ff:42:82:5c:72:7d: 22:79:a6:9c:3a:d7:dd:83:c2:e8:10:1f:27:aa:e4:7a:61:90: 5d:37:96:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8VI/vXdNHoCFoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc4NDBmNDYtYjEzNS00YTQ1LThjNDctZGFlZGU0YjBi NzA3MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk MGNmZDZhYmQtZTMyYi00MGFiLWE3OTMtNWI1ZTNlOTEzODY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhC8/+an9hKog6z3Ar9zUCns49gEAjt1rm6Ni 02KVRhHi6igugdGdKv9gWujqz04qMSY+Ux31WaTM6oOjsCKalcX3b+xqWGxUpfFp HmBS5skgUYE6a0Mm65ybiHopKaQ1q5sV8hF/QKDd3hhEuSjsW6k6BzFP+NurKvnS /iRm7mkPANgLWUsrCDvXkQ47gTFI6coBMdCzH69mdWTbMQ47LErekYBLWd854OxJ Qtl/pTxfQ4cC4ZrhllNEhN2fp7SZzDPyiNneK6ApWLvuff8lK9Av8N4iRF0wZ+Si NpgCU6e1R1Qg5EybG5jT7hHN6CfE3sg4/GfOvd19q0+2z1d83QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCaBmwhchRrQrNKwUsWSAQfNQBg+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0 MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVkZTRiMGI3MDcvZGY5OWYwODAtM2Y4MS0z YTU1LTk2OWYtMzc4NGI1OWY5NWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTc4NDBmNDYtYjEzNS00YTQ1LThj NDctZGFlZGU0YjBiNzA3L2E3ODQwZjQ2LWIxMzUtNGE0NS04YzQ3LWRhZWRlNGIw YjcwNy5jcmwwHwYDVR0jBBgwFoAUkXwZ6lZt7d6ge9kx5g0uw1oWE84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVk ZTRiMGI3MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGGKqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQmAvPPwThLHg+ikehZXis5O2o+4gjtlG34DV80YDiQKDr0eTmLZtIt 9bw3GlpgqCDBpsApoaXWsDC39vPA01HNnJG2JWrWiQ/QvVKo2Hv0GzbkTXBbgozF VBHD6mUwqcaFfh4d9vLgXi0R3ZBudf4M+VG15CNKpbstKyubmDI/wncSUbQUfx+C iGNzHQ7ftyrRGKu29ymaq5QWgu16so3BlAR1GMErt7Qv3l8cSYD8F9Ev9s/d0uKR 5SJOyv66N2ctGoYEhduachBY/nEDvjhN77yDJ/g3BWebMSvqJjhpWXDEGf9Cglxy fSJ5ppw6192DwugQHyeq5HphkF03lgY= -----END CERTIFICATE-----Generated at Sun Oct 26 22:39:08 2025 by rpki-client