$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/27dc152d-91a3-3a1d-a934-8ca2c78e2421.roa File: 27dc152d-91a3-3a1d-a934-8ca2c78e2421.roa (raw, json) Hash identifier: 3/0tETunZFxTacZNZvMMGgPAol9k2M2mInG72S6/mJI= Subject key identifier: 80:90:62:C3:2F:5C:AC:5E:58:FB:8B:EF:3D:6D:FF:48:2C:1C:D3:EF Certificate issuer: /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Certificate serial: 010D0C9F4328584B047C02D6AB52769E75412200 Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/27dc152d-91a3-3a1d-a934-8ca2c78e2421.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 13807 IP address blocks: 24.223.96.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:02:d6:ab:52:76:9e:75:41:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=2d16406f-6867-4793-9963-f7aa86ae52f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3b:d9:ee:93:49:4e:e3:53:1a:06:f6:56:36: c5:64:04:27:1f:75:b4:34:81:c9:ee:c3:b4:18:6e: 8e:3c:fa:46:38:15:69:63:f2:c1:c1:90:4b:b8:b9: 5d:f5:3b:fe:4e:55:8f:0d:a4:f7:7d:90:c0:2d:16: ca:e4:04:10:3e:b3:4e:ca:20:84:94:63:bb:03:85: 2a:81:93:fe:24:d5:7d:d9:ad:a4:17:49:b9:d7:a8: 8b:d0:ca:f9:b6:8f:e5:49:11:27:7d:b9:07:7c:7c: 7f:02:7e:9e:42:9d:b8:d3:5f:ea:95:bd:f2:65:7e: 21:5e:a9:19:02:f4:6d:05:73:59:24:a2:62:2d:a7: 83:15:68:85:8f:8a:89:a6:58:cf:1b:b8:c0:77:e3: c2:de:8d:4c:4e:4c:ee:d5:7e:b8:31:29:9b:16:e8: a9:ea:1a:db:c4:9b:09:78:c0:34:a7:fe:0a:5a:3d: f1:57:16:45:3c:25:02:dc:fe:7a:de:6b:4d:38:a2: 58:a6:62:66:5e:ec:ac:54:24:5e:7a:5f:e8:ff:47: c1:55:e4:6b:09:c5:04:86:48:c6:e4:ad:7a:85:12: 63:03:a4:2c:df:68:06:16:d6:e8:be:44:70:09:4f: d1:ab:9e:b6:84:11:1b:5e:c7:eb:74:e0:4e:0f:14: a3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:90:62:C3:2F:5C:AC:5E:58:FB:8B:EF:3D:6D:FF:48:2C:1C:D3:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/27dc152d-91a3-3a1d-a934-8ca2c78e2421.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl X509v3 Authority Key Identifier: keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer sbgp-ipAddrBlock: critical IPv4: 24.223.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:51:f2:14:c9:b0:07:ab:a3:1d:8d:79:dd:07:24:1b:62:4b: ec:66:ba:f0:77:60:27:6b:e1:f5:09:fb:06:e1:d6:2d:8d:1c: 72:c7:7a:2d:5c:e8:b9:c9:82:df:08:c4:3d:34:d7:63:46:9b: 32:21:9f:48:a0:fe:e8:9f:4b:84:86:98:22:f5:6d:a8:59:2d: 75:58:e3:09:6f:6a:39:e9:f3:f9:a3:f4:0e:ad:69:ff:c2:9a: 02:d5:79:e8:42:23:55:2d:23:6a:86:4a:b0:3e:30:ee:13:9c: a2:aa:96:d8:5c:2e:81:15:46:9e:d2:eb:97:f2:a5:1b:93:10: 7f:1e:2b:5d:af:95:95:aa:52:4f:84:7c:1c:f2:71:de:a8:b8: 12:a2:5d:43:da:d7:68:17:a8:d4:10:cb:6e:c4:ea:47:83:6c: 67:24:2d:e9:29:a3:8d:92:05:a7:13:47:8a:8c:89:1e:87:95: 51:32:1b:d4:e9:df:6d:51:e5:17:82:ac:6b:bc:29:98:c8:7d: a9:1b:71:a4:6a:a0:99:56:00:e6:e9:89:37:cf:10:74:0c:7c: 75:68:fd:f8:96:74:45:30:dd:6a:60:93:78:7e:c6:64:4c:05: 6a:45:08:5f:b7:13:2e:98:81:d6:7f:95:71:49:e0:86:86:94: 4f:38:80:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfALWq1J2nnVBIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3OWItZmU3YWVlMGMw NTM2MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk MmQxNjQwNmYtNjg2Ny00NzkzLTk5NjMtZjdhYTg2YWU1MmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDvZ7pNJTuNTGgb2VjbFZAQnH3W0NIHJ7sO0 GG6OPPpGOBVpY/LBwZBLuLld9Tv+TlWPDaT3fZDALRbK5AQQPrNOyiCElGO7A4Uq gZP+JNV92a2kF0m516iL0Mr5to/lSREnfbkHfHx/An6eQp2401/qlb3yZX4hXqkZ AvRtBXNZJKJiLaeDFWiFj4qJpljPG7jAd+PC3o1MTkzu1X64MSmbFuip6hrbxJsJ eMA0p/4KWj3xVxZFPCUC3P563mtNOKJYpmJmXuysVCReel/o/0fBVeRrCcUEhkjG 5K16hRJjA6Qs32gGFtbovkRwCU/Rq562hBEbXsfrdOBODxSjDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFICQYsMvXKxeWPuL7z1t/0gsHNPvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBm MzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdhZWUwYzA1MzYvMjdkYzE1MmQtOTFhMy0z YTFkLWE5MzQtOGNhMmM3OGUyNDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3 OWItZmU3YWVlMGMwNTM2L2NmMGYzMWI2LWVmNjItNGRkNS04NzliLWZlN2FlZTBj MDUzNi5jcmwwHwYDVR0jBBgwFoAUuVDNlGKpSLvXorEAEC5ORYttZHswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBmMzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdh ZWUwYzA1MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGN9gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRR8hTJsAerox2Ned0HJBtiS+xmuvB3YCdr4fUJ+wbh1i2NHHLHei1c 6LnJgt8IxD0012NGmzIhn0ig/uifS4SGmCL1bahZLXVY4wlvajnp8/mj9A6taf/C mgLVeehCI1UtI2qGSrA+MO4TnKKqlthcLoEVRp7S65fypRuTEH8eK12vlZWqUk+E fBzycd6ouBKiXUPa12gXqNQQy27E6keDbGckLekpo42SBacTR4qMiR6HlVEyG9Tp 321R5ReCrGu8KZjIfakbcaRqoJlWAObpiTfPEHQMfHVo/fiWdEUw3Wpgk3h+xmRM BWpFCF+3Ey6YgdZ/lXFJ4IaGlE84gMA= -----END CERTIFICATE-----Generated at Thu Oct 16 13:46:21 2025 by rpki-client