$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1287ed9-ac60-3c35-8def-bdbad2649108.roa File: a1287ed9-ac60-3c35-8def-bdbad2649108.roa (raw, json) Hash identifier: sXsMIBsxU1N6ouhEtVe7KtxSb6uN42TLLnKuh5ik95s= Subject key identifier: D5:E2:74:2D:8A:01:8E:65:60:1F:F4:D7:BC:E4:D6:CF:AB:68:F2:FC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB7F42B09D70B997D5C6300 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1287ed9-ac60-3c35-8def-bdbad2649108.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 13367 IP address blocks: 24.118.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:f4:2b:09:d7:0b:99:7d:5c:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=2bdea7e3-727a-44c8-81ef-4310f9b2eb55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5d:a3:52:c7:dd:91:89:1b:5f:07:50:e2:7e: 6a:b2:a5:98:82:0e:3a:8f:4c:48:d6:14:ff:db:bf: 0f:11:c6:fd:54:2b:d6:9d:ce:84:b9:f2:ef:7e:ef: e7:15:04:ee:34:a2:c5:59:05:f9:4d:12:48:77:25: fe:3d:01:51:99:bd:d1:1b:3b:3d:e0:26:68:9f:a5: 8a:1e:6a:a2:a6:64:a1:b2:ad:d7:a8:6c:0c:e6:17: d3:89:db:3c:c0:6f:5f:3f:5d:0f:78:e9:6c:c0:9b: 86:f0:33:b9:74:18:33:09:59:f5:46:86:c7:ad:b2: 3b:48:f3:f8:87:74:aa:f8:cf:8f:dd:60:b7:fd:35: a8:57:7c:7e:59:02:87:92:06:ee:dd:9a:6c:4c:fb: 80:15:be:b5:42:be:58:11:78:8f:7b:e6:35:c9:10: 7a:d0:f0:17:94:2b:14:26:d4:61:ca:ac:58:90:66: a2:1f:91:ce:23:05:78:fc:48:10:f2:22:1d:25:3d: 30:93:5a:7b:a3:c6:ac:10:16:b0:00:4f:5c:a3:26: 88:7a:6f:4b:fd:8f:fc:37:cc:e4:53:2d:cf:4a:d2: 98:f0:d2:29:5a:99:79:b1:fa:2e:d1:15:e7:aa:75: 86:1c:db:18:a2:9b:e9:b9:c9:5e:51:fe:a8:3b:e6: 6f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E2:74:2D:8A:01:8E:65:60:1F:F4:D7:BC:E4:D6:CF:AB:68:F2:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1287ed9-ac60-3c35-8def-bdbad2649108.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.118.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:92:3e:82:93:09:fe:56:06:1d:4b:c7:e9:b2:a1:38:52:f6: 95:47:27:7c:82:41:1e:de:3e:cd:dc:ae:af:a0:a7:93:01:3b: f2:9f:6e:33:e6:e2:1c:26:d8:91:24:f7:2b:89:6e:b1:f4:8b: 0d:2e:98:63:47:42:65:32:94:c1:dd:7b:6d:f0:96:94:72:f7: 74:e1:3f:86:86:b4:3a:ab:2f:64:ad:06:3a:de:ba:48:7d:01: c4:cb:af:9d:c1:78:e5:51:5f:d3:c2:0e:8b:69:1e:03:ec:ac: 92:19:65:35:66:15:fb:b0:02:52:3a:1f:21:d1:31:cc:67:e4: a1:ea:c1:25:76:48:df:4f:3d:66:11:db:1a:15:5a:2c:4f:53: 98:52:f0:26:8f:59:4f:6f:01:78:5e:3b:79:27:c5:2d:5e:14: a9:aa:a4:29:50:df:f9:0e:e5:33:46:67:90:ee:1e:c4:27:cc: 46:49:85:21:13:c3:75:f7:b3:7d:36:78:6f:d3:d3:54:a5:14: fc:ff:80:4c:a3:14:a2:6b:b7:a9:be:7e:59:e2:4c:6c:7d:63: b1:d7:9c:81:fa:08:5d:fb:c3:65:7a:2c:ff:66:c6:30:8f:b3: b2:20:90:67:6f:5d:40:0c:fa:da:4f:3a:fc:96:4b:16:cb:32: 3c:15:f3:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9t/QrCdcLmX1cYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MmJkZWE3ZTMtNzI3YS00NGM4LTgxZWYtNDMxMGY5YjJlYjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmF2jUsfdkYkbXwdQ4n5qsqWYgg46j0xI1hT/ 278PEcb9VCvWnc6EufLvfu/nFQTuNKLFWQX5TRJIdyX+PQFRmb3RGzs94CZon6WK HmqipmShsq3XqGwM5hfTids8wG9fP10PeOlswJuG8DO5dBgzCVn1RobHrbI7SPP4 h3Sq+M+P3WC3/TWoV3x+WQKHkgbu3ZpsTPuAFb61Qr5YEXiPe+Y1yRB60PAXlCsU JtRhyqxYkGaiH5HOIwV4/EgQ8iIdJT0wk1p7o8asEBawAE9coyaIem9L/Y/8N8zk Uy3PStKY8NIpWpl5sfou0RXnqnWGHNsYopvpucleUf6oO+ZvxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXidC2KAY5lYB/017zk1s+raPL8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTEyODdlZDktYWM2MC0z YzM1LThkZWYtYmRiYWQyNjQ5MTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGHbkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALGSPoKTCf5WBh1Lx+myoThS9pVHJ3yCQR7ePs3crq+gp5MBO/KfbjPm 4hwm2JEk9yuJbrH0iw0umGNHQmUylMHde23wlpRy93ThP4aGtDqrL2StBjreukh9 AcTLr53BeOVRX9PCDotpHgPsrJIZZTVmFfuwAlI6HyHRMcxn5KHqwSV2SN9PPWYR 2xoVWixPU5hS8CaPWU9vAXheO3knxS1eFKmqpClQ3/kO5TNGZ5DuHsQnzEZJhSET w3X3s302eG/T01SlFPz/gEyjFKJrt6m+flniTGx9Y7HXnIH6CF37w2V6LP9mxjCP s7IgkGdvXUAM+tpPOvyWSxbLMjwV8ys= -----END CERTIFICATE-----Generated at Mon Oct 20 10:42:48 2025 by rpki-client