$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/50b265cd-72eb-3bf1-82c9-6aff8be4a21f.roa File: 50b265cd-72eb-3bf1-82c9-6aff8be4a21f.roa (raw, json) Hash identifier: QXtLU/4zqM41zYMd+yZRvPlCMJW7W6zlxIq1UjR80o4= Subject key identifier: 97:A2:9A:A4:0C:C9:0A:C9:73:94:15:FF:E5:B3:DB:E3:96:69:6D:91 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC37A4BC792FDFBF6A1E000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/50b265cd-72eb-3bf1-82c9-6aff8be4a21f.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33659 IP address blocks: 24.0.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:7a:4b:c7:92:fd:fb:f6:a1:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=f6f11f4b-6987-4db9-ae1e-d77e607d8096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:01:7d:a7:9d:f8:97:a2:08:69:7c:11:12:f9: d4:7a:89:93:11:a6:bf:68:54:0a:a7:50:6d:00:26: 7a:50:74:da:c4:26:85:5d:c4:e9:23:ad:a2:59:09: 88:7a:92:be:b5:73:cc:a3:75:01:11:61:bc:fa:ae: 08:9c:ed:ed:d6:69:90:6e:ef:0c:fe:86:f4:98:2c: 25:b2:92:7b:07:dd:7d:41:31:4f:b1:de:68:b5:aa: f4:56:e6:e6:21:ff:bc:84:f7:9d:75:24:52:89:ce: 1f:62:91:8b:3b:f4:ee:07:3d:b5:b1:b6:2c:4d:54: 63:38:86:92:bc:35:99:34:dd:33:e2:13:3e:bd:1b: 91:4e:21:b1:78:bc:ae:31:28:52:19:a7:b5:64:ba: e2:97:4e:6f:9a:ec:6c:e5:d6:25:b9:0f:c7:78:23: 82:68:c7:b4:3c:3a:b3:9c:d5:4f:9d:4b:92:b8:1e: d6:ad:31:03:66:bb:9b:a5:99:40:3f:79:c9:da:1e: 66:70:82:03:7f:32:87:5c:d3:d9:1d:5f:8b:28:92: e1:3d:71:a1:d6:92:1a:a5:75:cb:b3:50:03:3e:95: f3:87:b6:d4:c6:a2:ac:f1:16:e0:e1:76:53:92:62: 14:22:f9:39:c4:d9:e9:77:9a:e2:06:df:86:1b:d3: 38:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:A2:9A:A4:0C:C9:0A:C9:73:94:15:FF:E5:B3:DB:E3:96:69:6D:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/50b265cd-72eb-3bf1-82c9-6aff8be4a21f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.0.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:4c:9b:ce:34:bf:39:34:d0:64:79:62:ea:10:1d:90:9f:d5: e7:1d:31:59:04:fe:f8:e8:84:c5:aa:a3:6c:d3:e1:db:76:57: a1:5b:80:5d:2a:6c:1c:a1:53:26:9b:fa:62:64:27:24:fe:72: f8:17:4f:27:e2:1d:b7:e6:32:47:6d:36:1e:8e:ff:5b:53:ac: 2f:81:6a:c0:09:d5:f9:7f:bd:58:67:e5:82:e5:c2:9e:0e:e5: 36:56:55:51:0a:f2:18:f4:91:e7:b2:68:0d:45:c8:87:19:61: be:c1:2c:1b:b4:b6:c8:fe:7e:62:92:d9:e1:5b:ef:00:02:c7: ad:63:63:34:27:56:ba:88:e0:df:b6:37:c1:d2:ab:e0:56:b3: dc:c5:3d:82:8c:fa:8b:b5:bb:89:e7:94:40:e5:e5:c1:fb:df: 9e:cf:e5:2e:ea:f9:60:72:90:21:4f:8e:51:48:55:3e:82:d7: a2:5d:38:d8:3f:46:a9:3e:5c:e3:99:7d:40:59:c6:17:cb:d3: 44:a8:1e:b4:af:56:bf:48:fa:b4:b6:ca:36:94:db:30:8b:90: cd:c2:1b:4c:96:b9:73:3d:62:22:8a:a1:19:8a:5d:a6:28:63: fa:fd:b7:dc:93:fc:e2:e6:99:04:fd:f6:45:ca:3d:c2:78:e0: 2c:a0:af:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw3pLx5L9+/ah4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZjZmMTFmNGItNjk4Ny00ZGI5LWFlMWUtZDc3ZTYwN2Q4MDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQF9p534l6IIaXwREvnUeomTEaa/aFQKp1Bt ACZ6UHTaxCaFXcTpI62iWQmIepK+tXPMo3UBEWG8+q4InO3t1mmQbu8M/ob0mCwl spJ7B919QTFPsd5otar0VubmIf+8hPeddSRSic4fYpGLO/TuBz21sbYsTVRjOIaS vDWZNN0z4hM+vRuRTiGxeLyuMShSGae1ZLril05vmuxs5dYluQ/HeCOCaMe0PDqz nNVPnUuSuB7WrTEDZrubpZlAP3nJ2h5mcIIDfzKHXNPZHV+LKJLhPXGh1pIapXXL s1ADPpXzh7bUxqKs8Rbg4XZTkmIUIvk5xNnpd5riBt+GG9M4CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJeimqQMyQrJc5QV/+Wz2+OWaW2RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTBiMjY1Y2QtNzJlYi0z YmYxLTgyYzktNmFmZjhiZTRhMjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGABwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMRMm840vzk00GR5YuoQHZCf1ecdMVkE/vjohMWqo2zT4dt2V6FbgF0q bByhUyab+mJkJyT+cvgXTyfiHbfmMkdtNh6O/1tTrC+BasAJ1fl/vVhn5YLlwp4O 5TZWVVEK8hj0keeyaA1FyIcZYb7BLBu0tsj+fmKS2eFb7wACx61jYzQnVrqI4N+2 N8HSq+BWs9zFPYKM+ou1u4nnlEDl5cH7357P5S7q+WBykCFPjlFIVT6C16JdONg/ Rqk+XOOZfUBZxhfL00SoHrSvVr9I+rS2yjaU2zCLkM3CG0yWuXM9YiKKoRmKXaYo Y/r9t9yT/OLmmQT99kXKPcJ44Cygrws= -----END CERTIFICATE-----Generated at Sun Aug 24 05:40:53 2025 by rpki-client