$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24b4a79c-3f8c-3532-ae2d-a0382fe626f2.roa File: 24b4a79c-3f8c-3532-ae2d-a0382fe626f2.roa (raw, json) Hash identifier: MDEBhybTcv9ZggN1BhIO4YdEM5gOfAzEiOYPsBqbFh4= Subject key identifier: 41:86:1C:A8:44:D2:67:2F:55:52:5D:7A:2B:5B:63:BC:32:1B:05:49 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC3D2B1D47EB7E1CB10A880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24b4a79c-3f8c-3532-ae2d-a0382fe626f2.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33287 IP address blocks: 68.83.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:d2:b1:d4:7e:b7:e1:cb:10:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=a9bc37cc-e608-44e9-ac77-39abca5d66ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:cf:1b:25:5e:db:c8:1a:1e:2d:97:18:0d:ac: d3:37:2b:fd:e2:d3:fa:a0:54:6a:f7:53:70:a8:c9: 8e:7c:5b:74:d2:e7:a4:d6:13:71:cd:0a:18:14:83: 4a:e5:39:72:82:ba:e6:e1:6f:ca:31:e7:02:ff:26: 22:e5:ed:73:24:c9:08:3e:df:97:d3:92:53:f3:dc: 03:9f:d4:1f:be:b2:45:07:40:fa:f5:b6:4c:2c:e7: 85:dd:22:fd:1c:08:0c:ed:7c:dc:60:18:35:48:ff: 40:2a:02:cb:74:42:64:92:31:dd:df:93:45:7e:b1: 96:0a:da:39:2b:20:58:de:9d:18:b7:29:39:7e:22: 90:c1:e3:6c:37:91:42:e8:68:7e:84:a2:06:23:e3: 22:38:db:9e:52:f6:f5:a7:66:eb:d1:65:f3:19:17: 09:8a:9f:de:61:58:e0:07:fe:31:1c:2d:5b:69:b7: 26:c5:e1:8e:15:dd:20:62:dd:84:aa:f0:fa:01:4b: 46:ca:ea:8f:b8:4c:19:51:0c:bf:70:f5:ad:bb:28: 93:3c:21:8c:64:e4:2a:a7:82:e1:3f:1b:84:15:33: a1:33:ab:e1:dd:4a:f6:be:df:d7:28:8b:86:e0:56: 56:3b:09:bd:62:fa:66:bb:cc:fc:0f:87:ca:02:8a: 48:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:86:1C:A8:44:D2:67:2F:55:52:5D:7A:2B:5B:63:BC:32:1B:05:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24b4a79c-3f8c-3532-ae2d-a0382fe626f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.83.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:f8:f1:8b:5a:6e:59:f0:47:d8:63:e6:b7:e5:66:df:6e:27: 6a:fa:4d:d2:a2:4b:63:67:c0:91:05:cb:52:ab:a3:01:47:56: 1f:46:d8:22:81:39:7c:75:bc:9b:d5:af:23:ce:75:ba:38:9f: eb:60:32:8e:4f:fb:c8:7d:4e:00:42:0a:22:9a:11:99:01:e9: 0b:c5:22:82:1d:b8:05:65:a5:8f:73:24:66:34:a6:f4:21:10: f7:7a:93:dc:50:2b:41:2a:f0:08:74:cc:5f:e0:b3:23:69:59: 03:eb:ee:c0:5a:c5:25:cb:4f:2e:a0:15:4f:18:4a:18:c3:37: 84:92:2a:c1:ba:27:c3:5c:3f:c1:78:95:e2:19:8b:6d:6b:ea: 1a:0d:47:03:db:9b:fe:5e:bc:1c:0e:70:d8:eb:fb:88:df:93: 13:17:24:62:9b:ba:fc:2c:7d:89:57:53:32:84:a9:ee:e2:22: de:06:04:66:a4:df:5c:2b:47:db:a0:6d:60:fd:d1:ef:13:2c: 42:df:c8:2b:05:ea:a0:be:7c:37:3f:db:d7:ac:c6:54:0e:55: 1c:28:26:89:1d:a6:4f:c3:98:de:5d:33:f3:de:d2:77:ed:da: e4:52:4a:54:37:76:44:f5:6c:25:31:ac:e8:d0:e5:b4:63:cf: 52:3d:29:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw9Kx1H634csQqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YTliYzM3Y2MtZTYwOC00NGU5LWFjNzctMzlhYmNhNWQ2NmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl88bJV7byBoeLZcYDazTNyv94tP6oFRq91Nw qMmOfFt00uek1hNxzQoYFINK5Tlygrrm4W/KMecC/yYi5e1zJMkIPt+X05JT89wD n9QfvrJFB0D69bZMLOeF3SL9HAgM7XzcYBg1SP9AKgLLdEJkkjHd35NFfrGWCto5 KyBY3p0Ytyk5fiKQweNsN5FC6Gh+hKIGI+MiONueUvb1p2br0WXzGRcJip/eYVjg B/4xHC1babcmxeGOFd0gYt2EqvD6AUtGyuqPuEwZUQy/cPWtuyiTPCGMZOQqp4Lh PxuEFTOhM6vh3Ur2vt/XKIuG4FZWOwm9Yvpmu8z8D4fKAopI4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEGGHKhE0mcvVVJdeitbY7wyGwVJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjRiNGE3OWMtM2Y4Yy0z NTMyLWFlMmQtYTAzODJmZTYyNmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARFOJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFf48YtablnwR9hj5rflZt9uJ2r6TdKiS2NnwJEFy1KrowFHVh9G2CKB OXx1vJvVryPOdbo4n+tgMo5P+8h9TgBCCiKaEZkB6QvFIoIduAVlpY9zJGY0pvQh EPd6k9xQK0Eq8Ah0zF/gsyNpWQPr7sBaxSXLTy6gFU8YShjDN4SSKsG6J8NcP8F4 leIZi21r6hoNRwPbm/5evBwOcNjr+4jfkxMXJGKbuvwsfYlXUzKEqe7iIt4GBGak 31wrR9ugbWD90e8TLELfyCsF6qC+fDc/29esxlQOVRwoJokdpk/DmN5dM/Pe0nft 2uRSSlQ3dkT1bCUxrOjQ5bRjz1I9Kb0= -----END CERTIFICATE-----Generated at Sat Aug 23 22:57:56 2025 by rpki-client