$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3851f3e1-b7a2-3a1c-a2dd-44d8f26b1dc5.roa File: 3851f3e1-b7a2-3a1c-a2dd-44d8f26b1dc5.roa (raw, json) Hash identifier: ASoiKd5x07m4TvKYSiKPhOp98OtXe4FuR4i6t9C3SeA= Subject key identifier: 46:1E:F8:7B:50:1D:A2:03:5D:CD:BA:10:D2:0F:2F:37:98:56:CB:E7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC4FBD713C4C28D833EE480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3851f3e1-b7a2-3a1c-a2dd-44d8f26b1dc5.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 24.23.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:fb:d7:13:c4:c2:8d:83:3e:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=9b65aebb-d205-42a1-9172-5000139ed568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:25:ff:9e:8e:ab:23:08:a0:04:4c:f9:33:fc: 71:f4:b2:d7:7b:58:da:7b:f2:4c:51:04:0d:27:ed: 15:4f:de:e6:f2:90:fe:e3:f2:20:94:d2:cf:34:1e: 22:7d:31:eb:ef:29:4d:b8:a4:b4:58:eb:ab:0c:3a: f9:b1:82:fe:8c:88:2d:62:7c:cd:11:9a:c5:ee:ce: 3d:a0:a5:eb:81:2e:a2:7c:cd:79:3c:9b:3d:bf:85: 10:07:44:67:1c:9d:51:81:67:e5:e5:88:ce:4a:93: 83:47:0e:eb:43:84:7a:fe:f2:69:31:9a:7f:1d:dc: ee:5a:14:ba:aa:7f:c2:ca:13:56:0f:c3:24:2c:8c: 0c:3e:de:9c:19:ae:9e:b0:79:45:89:1d:48:1b:90: ec:23:3b:16:b6:c2:a7:07:e0:86:09:2c:56:b9:f5: 9f:bb:d7:7b:90:c4:63:03:a2:ed:39:82:77:cb:e9: 28:fe:ad:99:59:80:5c:45:31:9e:d5:30:e4:b1:62: a7:4a:a7:c5:6b:50:b9:29:28:5a:10:e9:b4:01:a2: 04:eb:10:20:7c:dd:fb:81:c3:81:a0:9f:c5:a6:86: df:0e:85:e5:2a:81:15:ad:e0:0e:03:86:d2:54:4f: 0e:d8:8c:90:49:09:9a:36:f2:8f:8f:f9:7f:26:ae: b5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:1E:F8:7B:50:1D:A2:03:5D:CD:BA:10:D2:0F:2F:37:98:56:CB:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3851f3e1-b7a2-3a1c-a2dd-44d8f26b1dc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.23.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:93:63:5a:8d:71:a0:bd:02:92:3d:07:b3:76:d4:a7:d9:51: ee:4a:66:71:e1:62:c9:62:ac:5e:29:a1:af:03:30:15:92:47: d6:af:64:67:b1:63:1c:83:21:55:50:99:df:35:b0:a2:99:ce: 45:fe:84:50:6f:05:85:1d:be:95:ef:a5:7f:95:35:61:22:63: b4:e6:59:8a:79:e6:76:3b:75:a6:2d:3c:6f:7b:42:e6:9b:4f: fa:3d:49:b5:cc:a1:02:c6:3e:bd:d6:5c:d3:21:1a:07:a8:f0: b3:b4:f5:6a:af:e5:8b:f7:a4:cc:ab:27:07:0d:9c:60:4f:ff: 5b:36:d1:96:b7:2d:8a:fc:c2:82:ab:1b:bb:6b:43:fd:df:35: ed:c2:62:d1:b5:a5:e4:22:b6:14:13:94:34:f9:65:24:85:98: 42:86:d5:cb:27:4f:af:5e:cc:48:dc:7f:01:82:9e:79:52:9c: df:81:68:98:4e:ad:e1:ed:e5:64:ed:af:d3:f8:2c:2c:97:5e: 6c:7f:e5:e6:fb:6b:74:78:24:86:a9:d2:42:91:4c:2a:c0:0d: 48:33:38:2f:3e:8e:8e:2e:cd:f6:77:e2:99:ed:d1:51:a1:b4: c9:78:e1:38:30:32:88:8e:06:62:f1:43:9e:52:45:73:ad:df: 72:13:0f:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxPvXE8TCjYM+5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk OWI2NWFlYmItZDIwNS00MmExLTkxNzItNTAwMDEzOWVkNTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CX/no6rIwigBEz5M/xx9LLXe1jae/JMUQQN J+0VT97m8pD+4/IglNLPNB4ifTHr7ylNuKS0WOurDDr5sYL+jIgtYnzNEZrF7s49 oKXrgS6ifM15PJs9v4UQB0RnHJ1RgWfl5YjOSpODRw7rQ4R6/vJpMZp/HdzuWhS6 qn/CyhNWD8MkLIwMPt6cGa6esHlFiR1IG5DsIzsWtsKnB+CGCSxWufWfu9d7kMRj A6LtOYJ3y+ko/q2ZWYBcRTGe1TDksWKnSqfFa1C5KShaEOm0AaIE6xAgfN37gcOB oJ/FpobfDoXlKoEVreAOA4bSVE8O2IyQSQmaNvKPj/l/Jq61gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYe+HtQHaIDXc26ENIPLzeYVsvnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzg1MWYzZTEtYjdhMi0z YTFjLWEyZGQtNDRkOGYyNmIxZGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGBfcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOTY1qNcaC9ApI9B7N21KfZUe5KZnHhYslirF4poa8DMBWSR9avZGex YxyDIVVQmd81sKKZzkX+hFBvBYUdvpXvpX+VNWEiY7TmWYp55nY7daYtPG97Quab T/o9SbXMoQLGPr3WXNMhGgeo8LO09Wqv5Yv3pMyrJwcNnGBP/1s20Za3LYr8woKr G7trQ/3fNe3CYtG1peQithQTlDT5ZSSFmEKG1csnT69ezEjcfwGCnnlSnN+BaJhO reHt5WTtr9P4LCyXXmx/5eb7a3R4JIap0kKRTCrADUgzOC8+jo4uzfZ34pnt0VGh tMl44TgwMoiOBmLxQ55SRXOt33ITDzk= -----END CERTIFICATE-----Generated at Sun Aug 24 03:53:09 2025 by rpki-client