$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2cbf91e7-5fc3-3875-935a-28214d1f5a9a.roa File: 2cbf91e7-5fc3-3875-935a-28214d1f5a9a.roa (raw, json) Hash identifier: C+1r8pT+DtgoKDYs8B8cLIvb3cEop5IzQXnBhaeUknw= Subject key identifier: 8B:7C:0D:02:3A:D4:76:32:B8:FE:1E:44:DD:E9:A9:B6:56:1F:34:FD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC417E499572C2003DC7100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2cbf91e7-5fc3-3875-935a-28214d1f5a9a.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 24.12.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:17:e4:99:57:2c:20:03:dc:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=df8a2c0e-2d2c-4f8a-942d-125ea1b6ab29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d0:73:c5:09:9e:ae:ae:b6:8e:fc:f1:65:2b: 6f:b9:cb:db:89:e1:92:76:1a:3b:7e:52:4a:35:fa: 9a:9e:9b:9e:99:8d:17:bd:85:4d:35:1c:da:c5:b5: 55:c4:72:49:ef:23:0f:63:cc:d2:25:d7:73:22:d6: f4:18:ab:59:4a:2d:08:78:6a:47:e1:7a:22:a1:dc: ec:d9:78:9f:06:14:22:ff:a3:3b:0c:b3:bd:34:9e: b1:ba:0b:bd:80:2d:6a:c7:10:df:df:8d:84:c0:b6: 50:2c:e5:94:3c:f8:75:d1:fe:15:df:08:69:ad:ca: f3:dd:a7:51:a0:e2:c9:05:c5:14:d3:5c:de:c9:07: de:52:00:53:f8:50:71:0f:db:16:09:bc:06:4b:ae: ae:9d:e5:be:b5:01:ef:4b:cd:81:1f:fd:81:85:f8: f9:9f:8c:51:30:17:e2:ba:1a:5f:7f:87:68:bb:d1: c9:75:05:3c:cb:5e:e6:0d:d2:50:1b:a4:11:9f:25: bd:a1:ba:47:8e:b2:fc:c9:e8:be:b8:4c:8f:e6:52: b3:36:f5:ce:6b:04:a6:7b:7a:51:4f:fa:ab:14:1c: 1a:24:cf:b1:f8:7d:0b:b1:01:b9:56:a7:69:92:6a: dc:e5:3b:c5:a1:78:4e:59:f7:6e:d4:a2:ce:ee:59: 99:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:7C:0D:02:3A:D4:76:32:B8:FE:1E:44:DD:E9:A9:B6:56:1F:34:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2cbf91e7-5fc3-3875-935a-28214d1f5a9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.12.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:19:9c:5e:e0:c8:de:ba:87:db:eb:62:e3:d4:fc:17:47:20: 7b:a1:b7:fd:a7:db:29:9a:cf:bc:ae:70:6d:1c:17:23:27:c5: 25:25:ce:d6:0a:02:a8:9d:f6:79:fd:bf:5e:62:22:6f:c1:a0: c3:95:6d:d4:9b:cc:10:4e:81:3c:75:20:86:ff:3f:67:a3:67: 7e:c9:90:7d:22:44:ad:af:6c:94:17:66:30:9f:99:0f:e0:a8: 38:3b:be:4d:ba:10:55:91:8d:65:02:0f:d7:60:2f:c3:25:9b: c6:c3:8c:90:0a:24:d6:92:56:70:89:6c:ac:93:70:0f:67:37: 5f:58:90:6c:0f:92:ac:4a:46:e5:9c:ee:e4:50:f2:09:a7:4b: 1d:b7:73:9a:f2:2e:69:0c:bc:b6:95:bb:6a:ca:1f:35:6b:17: bf:32:07:a1:10:de:35:63:52:e7:63:fa:b6:12:ca:ff:a6:18: 15:5c:12:36:05:0b:25:63:a7:2c:4c:75:6e:ed:88:85:88:1c: 64:73:60:8c:4d:f3:2a:dc:5a:c4:20:25:a6:74:74:8a:b1:1a: 21:b6:71:45:2c:8c:67:cd:0b:07:ad:ee:ac:6d:45:30:42:a3: 05:7f:60:1b:f6:a5:91:ce:3e:da:7c:74:90:5d:9a:56:b8:4f: 0d:f6:6b:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxBfkmVcsIAPccQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZGY4YTJjMGUtMmQyYy00ZjhhLTk0MmQtMTI1ZWExYjZhYjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09BzxQmerq62jvzxZStvucvbieGSdho7flJK NfqanpuemY0XvYVNNRzaxbVVxHJJ7yMPY8zSJddzItb0GKtZSi0IeGpH4Xoiodzs 2XifBhQi/6M7DLO9NJ6xugu9gC1qxxDf342EwLZQLOWUPPh10f4V3whprcrz3adR oOLJBcUU01zeyQfeUgBT+FBxD9sWCbwGS66uneW+tQHvS82BH/2Bhfj5n4xRMBfi uhpff4dou9HJdQU8y17mDdJQG6QRnyW9obpHjrL8yei+uEyP5lKzNvXOawSme3pR T/qrFBwaJM+x+H0LsQG5Vqdpkmrc5TvFoXhOWfdu1KLO7lmZ1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIt8DQI61HYyuP4eRN3pqbZWHzT9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmNiZjkxZTctNWZjMy0z ODc1LTkzNWEtMjgyMTRkMWY1YTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGAxyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUZnF7gyN66h9vrYuPU/BdHIHuht/2n2ymaz7yucG0cFyMnxSUlztYK Aqid9nn9v15iIm/BoMOVbdSbzBBOgTx1IIb/P2ejZ37JkH0iRK2vbJQXZjCfmQ/g qDg7vk26EFWRjWUCD9dgL8Mlm8bDjJAKJNaSVnCJbKyTcA9nN19YkGwPkqxKRuWc 7uRQ8gmnSx23c5ryLmkMvLaVu2rKHzVrF78yB6EQ3jVjUudj+rYSyv+mGBVcEjYF CyVjpyxMdW7tiIWIHGRzYIxN8yrcWsQgJaZ0dIqxGiG2cUUsjGfNCwet7qxtRTBC owV/YBv2pZHOPtp8dJBdmla4Tw32a8Y= -----END CERTIFICATE-----Generated at Sun Aug 24 01:24:42 2025 by rpki-client