$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5578f7d2-f3f0-3d98-8026-bb350aa22721.roa File: 5578f7d2-f3f0-3d98-8026-bb350aa22721.roa (raw, json) Hash identifier: +dD1j/F8dpnwV529EF8ncCd8SIgCs2S1GJ5XSqxWYnc= Subject key identifier: 57:E8:70:9E:86:B2:52:7C:7B:AC:AE:FC:75:7E:75:49:A1:08:D0:5B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC20BBE1EB0FDA5EC2DDF80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5578f7d2-f3f0-3d98-8026-bb350aa22721.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 24.1.172.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:0b:be:1e:b0:fd:a5:ec:2d:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=dfbca779-2c1a-445d-8a24-e2d9bd31aa8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:5e:65:d1:00:15:54:bd:0c:21:d3:8c:08:fe: e8:8e:7e:7e:f1:2d:3f:79:91:c6:0f:ae:0f:f7:d4: 54:78:d9:ac:0f:19:0e:38:41:fe:41:67:e9:78:80: 37:41:93:a1:dd:ee:6e:1e:6d:e3:db:35:3f:f8:75: 3c:12:ec:6a:de:79:d0:d0:5a:1d:b3:31:bc:bc:11: d7:21:32:4c:e6:5a:3b:57:10:8c:df:00:3e:4e:5e: fc:3b:d1:f7:de:5d:9e:a8:66:aa:fc:48:ee:36:27: ea:6d:88:a3:2c:92:ad:93:ea:2a:b1:d8:63:65:58: 0a:0b:0a:5b:6e:56:7d:a8:da:3b:d1:70:fd:e0:cd: 08:04:b1:34:ce:d2:a2:1e:03:89:29:1d:60:9b:16: 77:8e:59:b5:5f:9f:71:a5:82:b4:b6:31:79:03:21: 9e:18:0d:1a:4c:ff:03:82:b0:d4:02:17:9f:39:c9: 5d:bc:84:22:13:49:9b:d7:e1:d3:21:b0:ab:51:7f: 83:45:7d:1a:57:68:b5:c5:d2:7b:33:68:8e:1f:75: 46:be:de:67:f6:28:d7:9a:e8:67:76:f5:14:de:50: 2e:d2:6e:4f:34:7f:3e:f3:56:b1:be:60:1e:48:e7: c6:be:c2:fa:6d:84:64:eb:1e:42:41:1d:0b:31:e5: a7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:E8:70:9E:86:B2:52:7C:7B:AC:AE:FC:75:7E:75:49:A1:08:D0:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5578f7d2-f3f0-3d98-8026-bb350aa22721.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.1.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:9a:2a:53:93:48:36:7a:4f:ba:44:2b:be:67:d8:d6:07:39: 3b:16:7d:e8:39:30:aa:60:fe:30:17:d6:2a:d6:97:f6:ac:39: f2:83:8f:ef:14:a1:a5:71:85:7d:c0:c0:41:1e:18:46:36:85: 00:03:4b:c9:75:71:73:67:0f:e7:99:30:f6:31:7d:89:bb:30: 6b:6c:3f:12:49:af:85:f8:45:23:f4:b8:07:57:ee:90:0f:6f: c0:ad:59:94:3a:39:8a:8b:97:df:75:10:f0:ea:11:cc:f3:51: 3b:a0:5c:9f:22:a9:c0:1c:09:21:c9:a9:1a:4a:ac:46:85:30: 7f:62:33:82:0d:db:dc:57:63:fd:cf:b7:4c:34:5a:47:1f:f8: ee:01:14:b5:11:b9:ea:fa:8f:05:96:bf:d1:76:e2:a8:c6:c5: e1:bb:b0:49:1e:fe:be:b4:37:8b:d6:fb:30:06:eb:60:3e:29: 53:70:28:1c:53:50:34:c2:6b:b0:e0:aa:f8:69:7c:b0:f3:7a: d1:69:78:3f:4d:61:ad:fc:ba:aa:4b:1d:18:75:64:02:2a:3e: 6c:0c:cd:ba:2d:e7:e4:5e:cc:15:1f:69:67:58:f1:62:7f:19: e7:9f:1b:5a:39:73:e7:3c:25:84:be:e8:89:02:7f:00:d7:f3: ba:09:52:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswgu+HrD9pewt34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZGZiY2E3NzktMmMxYS00NDVkLThhMjQtZTJkOWJkMzFhYThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgl5l0QAVVL0MIdOMCP7ojn5+8S0/eZHGD64P 99RUeNmsDxkOOEH+QWfpeIA3QZOh3e5uHm3j2zU/+HU8Euxq3nnQ0FodszG8vBHX ITJM5lo7VxCM3wA+Tl78O9H33l2eqGaq/EjuNifqbYijLJKtk+oqsdhjZVgKCwpb blZ9qNo70XD94M0IBLE0ztKiHgOJKR1gmxZ3jlm1X59xpYK0tjF5AyGeGA0aTP8D grDUAhefOcldvIQiE0mb1+HTIbCrUX+DRX0aV2i1xdJ7M2iOH3VGvt5n9ijXmuhn dvUU3lAu0m5PNH8+81axvmAeSOfGvsL6bYRk6x5CQR0LMeWn3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFfocJ6GslJ8e6yu/HV+dUmhCNBbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTU3OGY3ZDItZjNmMC0z ZDk4LTgwMjYtYmIzNTBhYTIyNzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGAGsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM+aKlOTSDZ6T7pEK75n2NYHOTsWfeg5MKpg/jAX1irWl/asOfKDj+8U oaVxhX3AwEEeGEY2hQADS8l1cXNnD+eZMPYxfYm7MGtsPxJJr4X4RSP0uAdX7pAP b8CtWZQ6OYqLl991EPDqEczzUTugXJ8iqcAcCSHJqRpKrEaFMH9iM4IN29xXY/3P t0w0Wkcf+O4BFLURuer6jwWWv9F24qjGxeG7sEke/r60N4vW+zAG62A+KVNwKBxT UDTCa7DgqvhpfLDzetFpeD9NYa38uqpLHRh1ZAIqPmwMzbot5+RezBUfaWdY8WJ/ GeefG1o5c+c8JYS+6IkCfwDX87oJUgc= -----END CERTIFICATE-----Generated at Sun Aug 24 04:29:56 2025 by rpki-client