$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38025ef0-be86-3680-8cd0-1475f16a4c50.roa File: 38025ef0-be86-3680-8cd0-1475f16a4c50.roa (raw, json) Hash identifier: ha8eDuQeaIG8Gn1GPDfTD/LtlU+lRssTJp/rzbfWbj8= Subject key identifier: 93:41:EF:4F:10:52:FD:7D:63:BF:6E:88:FD:3D:C2:17:BD:40:C7:0F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AE03130D96EF2EFAA2CE51600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38025ef0-be86-3680-8cd0-1475f16a4c50.roa Signing time: Sat 16 Aug 2025 13:00:42 +0000 ROA not before: Sat 16 Aug 2025 13:00:42 +0000 ROA not after: Fri 14 Nov 2025 14:00:42 +0000 asID: 7725 IP address blocks: 24.98.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e0:31:30:d9:6e:f2:ef:aa:2c:e5:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 16 13:00:42 2025 GMT Not After : Nov 14 14:00:42 2025 GMT Subject: CN=5c7cf0fc-fc6f-4ba0-ada0-897c4f2315c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1e:3f:64:4d:f9:7e:25:0f:ce:00:87:b4:31: 6d:8f:0b:b9:dd:5d:72:35:66:1f:90:cd:6d:4f:63: 96:44:37:32:ce:e7:50:5c:f1:fb:9e:49:e6:37:56: 76:8e:6c:0a:d0:c0:4a:35:2b:ec:cd:cf:77:70:6c: 1f:f2:94:56:62:ce:59:f3:27:cf:16:62:fa:c4:25: f7:a2:14:ee:ca:cd:92:1c:05:9b:12:c6:8e:e5:75: 93:4e:e4:d1:7c:44:f9:84:05:fe:b7:31:c6:2e:0e: 0b:d9:01:b7:fd:d8:b0:60:6e:1c:3f:95:60:ef:fd: e7:1f:25:7e:4e:c5:4b:05:7d:11:b5:51:c2:16:06: cb:04:6e:64:a0:85:fa:99:f0:68:07:50:28:a6:1d: 96:33:73:c1:61:f1:4c:f2:53:c2:1f:8b:ce:47:cd: f8:81:83:66:36:9c:94:7e:f3:73:bb:a4:a3:bc:36: c6:30:95:e0:c4:d3:87:14:d3:98:74:d6:9f:68:30: 56:28:d7:78:8d:df:b4:a2:f7:b9:16:b6:21:95:f7: 3c:13:11:f3:87:3a:68:5f:90:29:d5:77:b9:6b:d5: dd:e5:14:ea:9d:ff:7b:d9:2f:53:42:ac:3a:24:df: e1:4c:65:ee:30:23:0b:80:fe:8c:8c:11:8c:d2:b1: 7a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:41:EF:4F:10:52:FD:7D:63:BF:6E:88:FD:3D:C2:17:BD:40:C7:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38025ef0-be86-3680-8cd0-1475f16a4c50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.98.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:18:a8:ce:36:49:59:cf:08:61:50:2e:07:39:0e:fa:a7:db: 0b:2a:09:1e:30:50:2d:b7:ed:fc:a2:9d:50:05:00:75:52:43: 13:9f:e4:43:67:3b:22:4e:12:7f:47:b9:90:e1:3d:b4:ca:84: a2:97:ec:bb:bf:28:09:e3:a2:c1:ab:87:dc:3b:fd:4c:5c:c6: 5c:51:96:ea:e6:3e:c7:64:b1:37:f6:4b:15:df:67:6b:1a:40: 92:5d:86:28:39:ba:8f:35:d5:a7:be:a0:cf:9c:11:91:4c:04: 64:29:8a:76:95:e2:c8:44:2d:a8:03:d7:86:c4:24:ed:f0:59: 52:13:10:85:0f:71:ed:85:bb:ec:60:3e:86:a9:fc:05:34:fb: c0:ae:c1:b3:b5:b8:25:34:4d:99:d1:1a:94:f3:7d:c6:7a:a6: d2:dd:3e:8d:9f:e6:a8:27:9e:1d:2f:94:19:72:e8:c0:c8:f8: 21:78:c6:ef:d4:93:2c:c2:46:4f:11:16:fb:fd:b0:1d:77:ae: c5:09:9b:a1:a7:a2:4b:15:51:46:ad:af:d2:46:64:db:bb:e6: de:a4:ce:af:67:12:1c:ac:99:ae:e1:c2:72:84:3d:d6:20:5b: 10:dd:e4:ef:7d:b4:87:0a:ef:60:93:cc:7f:28:8c:3d:77:ab: 5f:d1:a8:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErgMTDZbvLvqizlFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgxNjEzMDA0MloXDTI1MTExNDE0MDA0MlowLzEtMCsGA1UEAxMk NWM3Y2YwZmMtZmM2Zi00YmEwLWFkYTAtODk3YzRmMjMxNWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlh4/ZE35fiUPzgCHtDFtjwu53V1yNWYfkM1t T2OWRDcyzudQXPH7nknmN1Z2jmwK0MBKNSvszc93cGwf8pRWYs5Z8yfPFmL6xCX3 ohTuys2SHAWbEsaO5XWTTuTRfET5hAX+tzHGLg4L2QG3/diwYG4cP5Vg7/3nHyV+ TsVLBX0RtVHCFgbLBG5koIX6mfBoB1Aoph2WM3PBYfFM8lPCH4vOR834gYNmNpyU fvNzu6SjvDbGMJXgxNOHFNOYdNafaDBWKNd4jd+0ove5FrYhlfc8ExHzhzpoX5Ap 1Xe5a9Xd5RTqnf972S9TQqw6JN/hTGXuMCMLgP6MjBGM0rF6fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJNB708QUv19Y79uiP09whe9QMcPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzgwMjVlZjAtYmU4Ni0z NjgwLThjZDAtMTQ3NWYxNmE0YzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGGKIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIoYqM42SVnPCGFQLgc5Dvqn2wsqCR4wUC237fyinVAFAHVSQxOf5ENn OyJOEn9HuZDhPbTKhKKX7Lu/KAnjosGrh9w7/UxcxlxRlurmPsdksTf2SxXfZ2sa QJJdhig5uo811ae+oM+cEZFMBGQpinaV4shELagD14bEJO3wWVITEIUPce2Fu+xg Poap/AU0+8CuwbO1uCU0TZnRGpTzfcZ6ptLdPo2f5qgnnh0vlBly6MDI+CF4xu/U kyzCRk8RFvv9sB13rsUJm6GnoksVUUatr9JGZNu75t6kzq9nEhysma7hwnKEPdYg WxDd5O99tIcK72CTzH8ojD13q1/RqPo= -----END CERTIFICATE-----Generated at Sat Aug 23 23:39:40 2025 by rpki-client