$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8abb768a-6333-3c34-86d4-6ecea3a9a7e7.roa File: 8abb768a-6333-3c34-86d4-6ecea3a9a7e7.roa (raw, json) Hash identifier: AHnLqcvje49kpIsmvWcWz5FrIsf2CBY7X1QLvtGrsfI= Subject key identifier: 96:5C:C8:B7:2A:1B:2A:AF:16:C1:B2:89:73:78:BA:C0:82:1B:8F:32 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A89A78E2B72D2DAD1D7700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8abb768a-6333-3c34-86d4-6ecea3a9a7e7.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 24.127.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:9a:78:e2:b7:2d:2d:ad:1d:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=784963b7-459f-48df-a0e8-2c3cff52ab65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:19:30:79:3b:19:4f:23:5a:1c:46:f1:a8:72: 21:9a:c0:e2:bc:30:db:2e:c9:ac:27:21:d8:08:a7: 81:33:cc:2c:23:20:29:ad:16:a5:e2:2d:15:1d:d8: 5e:00:cf:53:e4:48:b6:e7:24:c3:70:04:8a:24:80: 78:bb:0a:69:f8:ab:f8:cd:53:d5:42:14:10:52:9d: c4:00:15:61:04:3e:eb:f5:b2:2c:76:3e:b2:e9:d3: 45:83:b1:f7:60:d7:ef:e8:e9:06:31:97:d7:4c:d3: 0d:66:75:ba:5f:a0:67:9a:be:1d:ce:06:0e:14:45: 8f:e0:6b:4c:c0:b3:81:6d:ba:3e:2b:30:0d:e5:73: bc:75:b6:57:ad:3a:0e:f2:ce:69:0f:a4:43:c0:b2: 52:01:34:d3:6d:bf:f7:f4:6a:a9:7c:23:c5:55:90: 89:65:3a:90:56:e6:89:a1:e8:78:8f:fc:35:bd:3a: 69:8a:34:c9:61:33:9f:ac:66:03:3b:7f:d9:a1:d8: a1:a4:ab:73:9e:93:f9:c9:a6:42:ef:25:6f:cb:45: 8d:f1:93:b4:1c:a0:27:a2:87:40:75:7f:ba:54:b8: 8c:2e:ac:26:33:ca:6c:1c:59:a9:2d:fa:c3:20:60: cd:ef:5e:b6:6f:db:fc:f0:b3:26:c4:01:12:74:91: b8:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:5C:C8:B7:2A:1B:2A:AF:16:C1:B2:89:73:78:BA:C0:82:1B:8F:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8abb768a-6333-3c34-86d4-6ecea3a9a7e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.127.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:da:7a:c1:b3:63:d8:47:1b:84:b9:a0:fc:27:5f:f5:b3:fb: a3:6b:19:e6:a7:5b:c7:5c:b8:59:71:3f:04:07:e7:05:85:de: 16:94:fb:e0:2d:7f:cc:5f:e5:20:57:37:4f:1e:39:d9:e6:9b: ac:c1:44:0c:88:a6:dc:eb:47:0d:e5:be:d0:ec:1c:3a:d3:e3: 37:0f:86:67:b7:86:69:be:d3:1d:1b:9e:a8:f2:b9:fa:53:ee: 16:d4:7e:a9:15:0e:40:2e:af:2a:a7:94:ac:b8:84:56:af:77: de:32:2f:d3:e8:ac:78:9b:86:7b:31:62:36:28:e3:6f:5b:fd: 6e:d6:1e:45:63:79:ed:fb:87:14:c0:0f:46:20:b3:28:c6:8a: 1b:24:a0:60:4a:14:65:c2:05:ac:cf:16:1d:a7:ff:02:53:13: 19:0d:2c:07:17:9a:1a:2e:e5:10:13:2f:dd:72:d3:a3:b1:04: 69:5c:93:e2:0c:76:03:3f:de:b5:30:9c:8b:b6:e9:80:dd:09: 2b:b5:95:45:85:aa:e1:84:17:f1:b1:75:ec:68:16:c2:bb:dd: 25:88:66:d9:92:e2:5b:00:e0:1c:c7:39:98:15:b0:ec:d2:8f: 23:5f:e7:e5:ad:65:22:da:69:c8:9f:39:1d:55:0c:9a:49:d3: 13:55:bd:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqJp44rctLa0ddwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk Nzg0OTYzYjctNDU5Zi00OGRmLWEwZTgtMmMzY2ZmNTJhYjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxkweTsZTyNaHEbxqHIhmsDivDDbLsmsJyHY CKeBM8wsIyAprRal4i0VHdheAM9T5Ei25yTDcASKJIB4uwpp+Kv4zVPVQhQQUp3E ABVhBD7r9bIsdj6y6dNFg7H3YNfv6OkGMZfXTNMNZnW6X6Bnmr4dzgYOFEWP4GtM wLOBbbo+KzAN5XO8dbZXrToO8s5pD6RDwLJSATTTbb/39GqpfCPFVZCJZTqQVuaJ oeh4j/w1vTppijTJYTOfrGYDO3/ZodihpKtznpP5yaZC7yVvy0WN8ZO0HKAnoodA dX+6VLiMLqwmM8psHFmpLfrDIGDN7162b9v88LMmxAESdJG4DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZcyLcqGyqvFsGyiXN4usCCG48yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGFiYjc2OGEtNjMzMy0z YzM0LTg2ZDQtNmVjZWEzYTlhN2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGH8QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDaesGzY9hHG4S5oPwnX/Wz+6NrGeanW8dcuFlxPwQH5wWF3haU++At f8xf5SBXN08eOdnmm6zBRAyIptzrRw3lvtDsHDrT4zcPhme3hmm+0x0bnqjyufpT 7hbUfqkVDkAuryqnlKy4hFavd94yL9PorHibhnsxYjYo429b/W7WHkVjee37hxTA D0YgsyjGihskoGBKFGXCBazPFh2n/wJTExkNLAcXmhou5RATL91y06OxBGlck+IM dgM/3rUwnIu26YDdCSu1lUWFquGEF/GxdexoFsK73SWIZtmS4lsA4BzHOZgVsOzS jyNf5+WtZSLaacifOR1VDJpJ0xNVvZU= -----END CERTIFICATE-----Generated at Mon Oct 20 15:52:38 2025 by rpki-client