$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e435bc1-de51-3a50-a2d6-786450c28f0b.roa File: 0e435bc1-de51-3a50-a2d6-786450c28f0b.roa (raw, json) Hash identifier: AVPhdP4e+63oja5XxRUm26l99tJgIKTlAPepdIGvmwY= Subject key identifier: BF:51:93:15:9E:98:ED:95:0D:0C:B1:B7:AF:57:38:FE:7B:74:A4:C3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC4203F2DD56BF06ADE3F80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e435bc1-de51-3a50-a2d6-786450c28f0b.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 24.14.6.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:20:3f:2d:d5:6b:f0:6a:de:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=cd77c896-2bbf-4442-bac6-c57e1e330a45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cf:1f:e9:80:09:37:ad:23:95:09:d8:64:13: 41:77:42:5d:84:23:b2:1f:db:e1:dd:d3:d2:d2:a8: 93:c8:54:c0:0a:65:9d:9c:b6:d5:a4:2f:8f:98:06: e8:46:fa:62:0d:ac:59:76:af:c2:db:3c:76:61:7e: 42:d6:57:fd:74:14:68:92:90:fa:a1:b9:ee:43:3f: 6b:99:2d:40:c3:e0:78:77:eb:d1:bb:2b:31:d2:6a: 99:7a:3d:b5:2f:f6:55:9c:4c:5e:ad:57:32:27:41: c8:90:41:65:c8:69:05:8a:c4:dd:68:3c:fc:83:9a: 12:e2:5e:b1:05:5c:fa:3b:69:6e:8d:32:ae:11:1b: b4:6e:1d:38:a8:f7:2b:63:94:e5:5c:8d:77:83:70: 8a:8e:8a:92:02:dd:3e:03:8f:99:71:eb:95:26:5a: 6b:b8:fc:99:7a:8d:5a:48:bd:c3:b4:3c:e8:05:da: 04:9e:93:00:34:6b:38:b5:b3:da:78:03:68:2e:ec: 4e:c9:1c:90:0c:ff:a5:40:57:fb:8c:65:62:05:46: 82:04:a9:71:ee:1a:6a:dc:54:cd:be:64:68:8d:b8: 7c:fa:10:96:86:17:9b:10:bb:a7:b8:e2:e2:5e:38: 1c:d4:a5:85:ff:5a:c4:18:30:0f:b2:5a:21:d7:51: 2e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:51:93:15:9E:98:ED:95:0D:0C:B1:B7:AF:57:38:FE:7B:74:A4:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e435bc1-de51-3a50-a2d6-786450c28f0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.14.6.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:50:90:ae:69:ac:3c:ba:bc:aa:00:54:1d:8d:f2:6c:22:7d: 96:58:c6:2e:d7:95:ff:f3:3a:24:af:83:72:46:eb:cc:4b:c0: e6:ce:70:17:25:2a:0c:9b:82:12:cf:e4:c6:b9:9a:94:34:83: a0:13:dd:73:47:a9:0a:ca:1a:3a:f1:f8:84:87:b7:e6:ba:92: 3b:14:26:77:26:9a:d0:c1:d3:bd:70:fb:c3:9e:0a:5e:bb:d3: 44:e5:b1:8e:49:47:67:79:f5:10:2a:6d:29:dc:24:c0:97:9d: c4:48:00:a6:8a:7c:c1:00:61:f0:e8:ba:c0:c2:34:5b:70:67: 96:18:4f:2a:42:bf:2c:23:fa:8f:fc:d7:a1:11:d7:f1:45:da: f9:5e:76:71:e0:f3:00:63:4b:be:94:b6:c7:8a:f2:7f:6b:3a: 04:d9:a9:4a:7f:3a:b8:38:c3:fb:92:2d:80:b2:0c:bd:9c:86: 87:96:ce:54:8b:9b:37:36:b3:e1:ce:5d:7c:54:b9:3d:34:1e: 9a:b7:90:49:0d:eb:dc:fa:3f:f6:98:67:c9:e7:c2:2e:d8:37: db:44:cd:62:56:a6:6b:70:51:24:e8:ed:48:0a:15:07:13:b4: b0:72:dd:a5:aa:cd:59:a1:a8:a6:b0:d8:db:4c:67:f3:74:d3: f7:58:c6:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxCA/LdVr8GreP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk Y2Q3N2M4OTYtMmJiZi00NDQyLWJhYzYtYzU3ZTFlMzMwYTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoc8f6YAJN60jlQnYZBNBd0JdhCOyH9vh3dPS 0qiTyFTACmWdnLbVpC+PmAboRvpiDaxZdq/C2zx2YX5C1lf9dBRokpD6obnuQz9r mS1Aw+B4d+vRuysx0mqZej21L/ZVnExerVcyJ0HIkEFlyGkFisTdaDz8g5oS4l6x BVz6O2lujTKuERu0bh04qPcrY5TlXI13g3CKjoqSAt0+A4+ZceuVJlpruPyZeo1a SL3DtDzoBdoEnpMANGs4tbPaeANoLuxOyRyQDP+lQFf7jGViBUaCBKlx7hpq3FTN vmRojbh8+hCWhhebELunuOLiXjgc1KWF/1rEGDAPsloh11EuOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL9RkxWemO2VDQyxt69XOP57dKTDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGU0MzViYzEtZGU1MS0z YTUwLWEyZDYtNzg2NDUwYzI4ZjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGA4GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZQkK5prDy6vKoAVB2N8mwifZZYxi7Xlf/zOiSvg3JG68xLwObOcBcl KgybghLP5Ma5mpQ0g6AT3XNHqQrKGjrx+ISHt+a6kjsUJncmmtDB071w+8OeCl67 00TlsY5JR2d59RAqbSncJMCXncRIAKaKfMEAYfDousDCNFtwZ5YYTypCvywj+o/8 16ER1/FF2vlednHg8wBjS76UtseK8n9rOgTZqUp/Org4w/uSLYCyDL2choeWzlSL mzc2s+HOXXxUuT00Hpq3kEkN69z6P/aYZ8nnwi7YN9tEzWJWpmtwUSTo7UgKFQcT tLBy3aWqzVmhqKaw2NtMZ/N00/dYxl0= -----END CERTIFICATE-----Generated at Sun Aug 24 05:41:26 2025 by rpki-client