$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/2e3f8feb-7aee-3410-9499-305c223b6a72.roa File: 2e3f8feb-7aee-3410-9499-305c223b6a72.roa (raw, json) Hash identifier: bCXgrozfFUHU2xcqflU/k0Wx6iCRvNjIzMGJlstdeZg= Subject key identifier: 04:4B:07:42:47:7E:AD:01:7B:C3:61:7F:19:AC:25:87:F1:A1:AB:21 Certificate issuer: /CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9 Certificate serial: 010D0C9F4328584B7DECAD99AD0DBE052EE18300 Authority key identifier: 9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/2e3f8feb-7aee-3410-9499-305c223b6a72.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 14618 IP address blocks: 216.24.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:ad:99:ad:0d:be:05:2e:e1:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=e4ffee22-79c8-4382-b685-7b44e4cd27ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5c:ee:b4:c0:92:3e:ba:31:cd:4b:27:39:0a: d6:6e:71:d8:c6:95:3f:18:35:61:01:84:24:fb:93: 68:22:39:7e:0f:5a:4e:4f:98:65:76:35:eb:15:f8: 91:0c:4b:8c:07:50:81:60:03:82:8e:fa:de:09:dd: 22:ee:8d:15:36:62:ca:70:d9:b5:8d:39:91:3f:a3: 0a:18:4d:b4:77:60:1f:3d:06:54:5d:ba:6d:eb:ef: cb:b5:9f:2b:12:c8:47:04:9f:2c:c5:dc:cd:49:f5: 8c:9c:f6:28:b8:04:8b:8f:a6:52:82:cc:fe:02:01: 64:a0:2d:a6:45:00:f2:21:0f:22:3c:4c:d6:06:71: 1e:21:3d:fa:24:7e:69:79:c7:79:0b:86:91:82:e5: 02:98:16:46:ba:bf:c9:ab:7a:66:e6:06:36:dc:95: a2:5b:99:72:2b:de:a3:25:52:6b:66:94:59:49:40: c4:a5:d0:6a:e8:d8:ac:57:93:f4:9f:0d:60:d4:a6: 79:86:d5:0c:0d:2a:54:a3:02:08:f7:cc:bc:52:4e: f5:cc:92:80:14:38:8f:f8:bf:09:7b:47:a9:d0:a8: 0c:ef:e9:9a:ed:11:c5:9e:6a:b2:75:14:89:d1:40: 97:50:6a:c1:bd:26:6f:30:02:7b:b4:e3:9c:30:e9: a2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:4B:07:42:47:7E:AD:01:7B:C3:61:7F:19:AC:25:87:F1:A1:AB:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/2e3f8feb-7aee-3410-9499-305c223b6a72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.crl X509v3 Authority Key Identifier: keyid:9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer sbgp-ipAddrBlock: critical IPv4: 216.24.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:43:81:c4:09:27:06:d3:96:f5:75:e3:75:b5:55:54:1b:f2: 8f:22:a5:5e:0b:dc:9d:03:73:3d:1b:71:55:19:12:e6:e0:64: 3a:21:da:02:46:ab:d6:98:48:6f:7e:e1:e6:4a:79:31:5f:6b: b1:c3:04:96:01:77:32:14:83:ca:f3:d2:c9:01:b5:23:98:b9: 44:a4:10:cc:85:54:e6:2f:46:b2:19:76:15:de:1d:73:51:9a: f9:78:d0:fc:ab:72:19:43:1a:af:59:bb:13:18:dd:56:ed:58: 31:90:13:41:b5:5a:b0:fd:e3:92:88:8a:44:3e:43:60:bc:99: 77:2e:85:c5:71:2a:7b:d5:fc:78:d7:af:c3:00:1a:18:37:5d: 14:5e:b9:d5:a3:b1:a1:b8:e1:f3:e1:a9:80:ed:c3:65:61:a2: 49:2e:46:b1:0a:64:18:3b:2e:13:69:4a:2d:06:3b:59:07:9f: c8:18:3d:9b:8e:eb:f1:19:86:ed:2d:a9:65:28:d6:10:9f:83: 83:d7:6e:bf:c3:d8:39:4d:65:3f:c5:aa:d3:78:86:db:a5:97: 99:8b:29:d3:f8:1e:29:d3:2f:08:23:bf:d3:92:b3:08:dc:e1: 70:0d:64:43:22:9b:13:9c:c1:49:71:a7:97:89:12:10:cb:06: 23:1d:b1:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97K2ZrQ2+BS7hgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxY2I2YWQtNmNkNi00NTgxLWE1YWMtNWE2ZmQ3NDQ5 NWM5MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk ZTRmZmVlMjItNzljOC00MzgyLWI2ODUtN2I0NGU0Y2QyN2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFzutMCSProxzUsnOQrWbnHYxpU/GDVhAYQk +5NoIjl+D1pOT5hldjXrFfiRDEuMB1CBYAOCjvreCd0i7o0VNmLKcNm1jTmRP6MK GE20d2AfPQZUXbpt6+/LtZ8rEshHBJ8sxdzNSfWMnPYouASLj6ZSgsz+AgFkoC2m RQDyIQ8iPEzWBnEeIT36JH5pecd5C4aRguUCmBZGur/Jq3pm5gY23JWiW5lyK96j JVJrZpRZSUDEpdBq6NisV5P0nw1g1KZ5htUMDSpUowII98y8Uk71zJKAFDiP+L8J e0ep0KgM7+ma7RHFnmqydRSJ0UCXUGrBvSZvMAJ7tOOcMOmivQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFARLB0JHfq0Be8NhfxmsJYfxoashMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NzFj YjZhZC02Y2Q2LTQ1ODEtYTVhYy01YTZmZDc0NDk1YzkvMmUzZjhmZWItN2FlZS0z NDEwLTk0OTktMzA1YzIyM2I2YTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODcxY2I2YWQtNmNkNi00NTgxLWE1 YWMtNWE2ZmQ3NDQ5NWM5Lzg3MWNiNmFkLTZjZDYtNDU4MS1hNWFjLTVhNmZkNzQ0 OTVjOS5jcmwwHwYDVR0jBBgwFoAUntBlR2d0sGuDPxz+dPUN9EuFl7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NzFjYjZhZC02Y2Q2LTQ1ODEtYTVhYy01YTZm ZDc0NDk1YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2BjtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxDgcQJJwbTlvV143W1VVQb8o8ipV4L3J0Dcz0bcVUZEubgZDoh2gJG q9aYSG9+4eZKeTFfa7HDBJYBdzIUg8rz0skBtSOYuUSkEMyFVOYvRrIZdhXeHXNR mvl40PyrchlDGq9ZuxMY3VbtWDGQE0G1WrD945KIikQ+Q2C8mXcuhcVxKnvV/HjX r8MAGhg3XRReudWjsaG44fPhqYDtw2VhokkuRrEKZBg7LhNpSi0GO1kHn8gYPZuO 6/EZhu0tqWUo1hCfg4PXbr/D2DlNZT/FqtN4htull5mLKdP4HinTLwgjv9OSswjc 4XANZEMimxOcwUlxp5eJEhDLBiMdsYM= -----END CERTIFICATE-----Generated at Mon Oct 20 02:07:23 2025 by rpki-client