$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d64f774b-a355-329d-bfda-d0997d57bfe7.roa File: d64f774b-a355-329d-bfda-d0997d57bfe7.roa (raw, json) Hash identifier: rHqmRFzpCoFDsx3ILGQ0jDdZtccGy+QgiWkWEfNy5UU= Subject key identifier: FD:19:EE:8A:5F:17:22:8C:E7:05:BA:E4:BD:0C:FC:6F:7B:59:FA:6F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A89A2B5DA97A096F421000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d64f774b-a355-329d-bfda-d0997d57bfe7.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 24.127.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:9a:2b:5d:a9:7a:09:6f:42:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=bf1256f5-7fbc-4748-a4d1-b4d523dbf7db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:cf:4b:af:c4:75:14:4d:87:4a:5d:b4:1b:a1: 9b:99:8d:c3:6a:c2:95:33:39:53:26:e9:1b:3d:de: 9f:bf:39:c8:26:ed:14:4a:61:7c:6c:df:29:01:a3: 16:ec:a0:ec:bd:af:7e:f3:24:6a:0f:f1:bd:eb:aa: 1b:a1:0c:47:b2:3d:28:59:85:ec:68:3d:d4:58:95: 28:8a:92:db:a4:1d:e5:ed:b8:e4:07:f5:df:ba:d5: 95:e9:c2:95:e5:10:32:c5:0b:ca:6b:c4:7d:15:4a: f8:cf:d3:99:e1:2a:12:eb:c4:ff:97:42:ad:1c:e5: f0:95:f1:bf:2d:48:9a:31:9c:97:73:74:b0:b8:0d: 06:0a:e3:2b:ee:56:1c:64:f6:5f:c6:65:e3:81:cf: 9c:e8:37:10:b4:29:13:0d:23:30:07:ea:70:c7:38: 19:10:14:4a:4f:66:59:d2:99:e2:a8:22:0d:39:1e: 70:ef:8b:0a:5d:0f:19:19:97:63:2d:d4:c7:8e:c9: 34:12:bd:65:c3:a1:28:9d:05:34:6c:34:27:65:e7: 50:22:33:a8:45:bc:f4:15:23:5f:a2:63:80:9c:42: f8:4b:c5:4e:4d:e9:62:8c:6e:fc:62:c1:17:28:43: 7b:33:c7:da:e9:6d:0f:cc:9a:5b:e8:aa:64:e3:10: 1f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:19:EE:8A:5F:17:22:8C:E7:05:BA:E4:BD:0C:FC:6F:7B:59:FA:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d64f774b-a355-329d-bfda-d0997d57bfe7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.127.102.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:d5:a9:b9:73:44:77:f8:93:a5:c6:f7:80:ce:3c:f5:06:81: 84:31:47:f1:7e:50:76:d1:34:23:b3:2b:7d:56:3d:32:81:e4: cf:ad:88:a4:f2:42:56:14:85:52:e7:21:a6:58:37:82:0a:81: 1e:30:fb:ef:bd:5b:68:4e:4f:c0:34:8a:a6:30:07:13:69:11: c6:54:eb:00:1e:08:93:bf:ce:08:44:26:60:a9:6a:f9:65:c1: 73:41:bf:34:fc:83:55:1f:27:42:9f:36:e7:5f:c3:eb:33:80: 43:5f:58:83:b2:14:df:4e:75:7a:96:d2:23:11:d1:00:60:14: 5c:cd:69:51:da:54:36:6f:60:27:c4:fb:95:28:2e:f8:dd:7b: d3:64:1a:5f:0d:d4:24:c8:6f:96:91:ae:b5:dd:26:48:cb:77: 8c:26:55:ea:38:17:16:ec:0e:2b:30:c9:e7:9b:11:c0:81:f3: 1a:df:7c:42:00:cf:a9:69:eb:5d:3a:ef:6f:47:df:22:b2:e2: 01:3c:6d:13:45:75:af:77:13:18:98:0e:b6:e7:db:c3:42:7f: 54:d8:3e:87:c6:01:a2:39:ba:39:a9:81:18:40:32:41:be:00: 87:c8:20:f9:94:1c:ed:e5:db:3d:c2:93:84:fe:90:c8:fb:47: ff:64:b1:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqJorXal6CW9CEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YmYxMjU2ZjUtN2ZiYy00NzQ4LWE0ZDEtYjRkNTIzZGJmN2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAis9Lr8R1FE2HSl20G6GbmY3DasKVMzlTJukb Pd6fvznIJu0USmF8bN8pAaMW7KDsva9+8yRqD/G966oboQxHsj0oWYXsaD3UWJUo ipLbpB3l7bjkB/XfutWV6cKV5RAyxQvKa8R9FUr4z9OZ4SoS68T/l0KtHOXwlfG/ LUiaMZyXc3SwuA0GCuMr7lYcZPZfxmXjgc+c6DcQtCkTDSMwB+pwxzgZEBRKT2ZZ 0pniqCINOR5w74sKXQ8ZGZdjLdTHjsk0Er1lw6EonQU0bDQnZedQIjOoRbz0FSNf omOAnEL4S8VOTelijG78YsEXKEN7M8fa6W0PzJpb6Kpk4xAfvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP0Z7opfFyKM5wW65L0M/G97WfpvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDY0Zjc3NGItYTM1NS0z MjlkLWJmZGEtZDA5OTdkNTdiZmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGH9mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/VqblzRHf4k6XG94DOPPUGgYQxR/F+UHbRNCOzK31WPTKB5M+tiKTy QlYUhVLnIaZYN4IKgR4w+++9W2hOT8A0iqYwBxNpEcZU6wAeCJO/zghEJmCpavll wXNBvzT8g1UfJ0KfNudfw+szgENfWIOyFN9OdXqW0iMR0QBgFFzNaVHaVDZvYCfE +5UoLvjde9NkGl8N1CTIb5aRrrXdJkjLd4wmVeo4FxbsDiswyeebEcCB8xrffEIA z6lp6106729H3yKy4gE8bRNFda93ExiYDrbn28NCf1TYPofGAaI5ujmpgRhAMkG+ AIfIIPmUHO3l2z3Ck4T+kMj7R/9ksTk= -----END CERTIFICATE-----Generated at Mon Oct 20 15:55:17 2025 by rpki-client