$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5608cb79-2be1-3f3e-8960-4cf32ae72adc.roa File: 5608cb79-2be1-3f3e-8960-4cf32ae72adc.roa (raw, json) Hash identifier: idnOxcsVzHSxfW5Ph50sxhviMbLSpW25ncwHzVgQfC4= Subject key identifier: 65:29:DC:24:24:B0:42:A8:16:30:9C:EA:66:79:BF:E9:AE:5C:14:84 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC2DFA741EC705B536B3880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5608cb79-2be1-3f3e-8960-4cf32ae72adc.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 24.4.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:df:a7:41:ec:70:5b:53:6b:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=9168fbc6-d3d9-4f79-9b15-e94ccdd8d12f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:25:a2:6f:69:0e:30:b2:1d:fa:ad:c4:ec:5f: 08:d9:5a:75:a9:7f:6d:42:c9:1c:31:19:bb:4a:42: 99:e8:3d:1d:41:37:6b:2f:20:c2:e9:f2:15:53:54: e8:9f:db:a1:83:b4:db:7a:54:e3:af:22:56:98:ca: 07:5a:29:30:66:f4:9a:49:d1:5a:67:6f:76:79:e3: f1:00:56:dd:42:1e:b2:c8:43:e3:ac:93:a8:89:b1: 71:10:fa:60:57:df:7f:52:a1:81:01:2e:2e:26:30: ac:a1:bb:04:1a:4f:c3:bb:49:6c:58:9a:b4:bd:c0: 47:41:1b:ca:b1:d2:33:a1:f0:65:04:65:53:16:50: 43:d9:c1:b4:4a:a6:a5:24:f7:35:f8:0d:cb:30:1f: c2:1a:4d:5c:21:42:11:04:a8:2d:55:75:6d:8a:3e: 89:65:72:0a:91:e7:eb:5d:e0:92:c5:21:89:a0:c5: dc:d3:ab:c4:2d:a9:cd:a1:44:bc:bd:59:81:f4:e1: a1:ee:cc:9a:b5:8f:11:31:0b:c1:d3:33:1e:6b:7d: 56:23:a6:1d:3d:06:fc:ee:2f:9b:b0:9f:db:ad:9e: 73:44:f5:5d:22:3f:87:38:1d:c0:86:06:bf:16:d8: 17:b0:3a:00:c5:ef:4b:fa:f8:4c:08:59:d1:73:76: 1b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:29:DC:24:24:B0:42:A8:16:30:9C:EA:66:79:BF:E9:AE:5C:14:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5608cb79-2be1-3f3e-8960-4cf32ae72adc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.4.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:e3:94:63:79:3c:6b:a9:b1:6e:9a:8e:a0:54:61:0b:8f:88: e0:70:2a:54:57:61:7f:f4:3a:1a:54:47:08:d2:31:df:fb:34: 91:a2:40:f0:9c:86:a7:1c:94:08:dc:c2:a5:5d:22:be:64:ac: e8:1b:7d:bc:72:b8:cf:01:04:de:bc:10:e1:22:3f:76:bb:23: 62:6d:11:07:98:0a:01:e1:e3:81:7c:6e:d5:f1:aa:22:f0:1a: c6:62:3c:07:ad:d0:bc:aa:5e:ba:79:64:57:04:9b:0b:eb:b2: 70:cc:fb:dd:ee:33:62:f1:28:86:16:cf:37:98:5c:58:49:66: 8e:fb:a4:75:66:ec:32:1e:31:b5:78:f4:76:fd:6d:21:97:6c: e2:68:6b:f6:69:c7:24:da:d5:4f:aa:1a:92:22:6e:39:2b:4f: af:78:39:da:5b:6d:d0:25:b6:59:6a:99:b2:9c:a3:2f:a4:79: 68:60:b1:48:e6:f7:00:38:63:8a:48:2e:1d:dd:0a:b1:1b:99: ec:9a:82:a4:e6:05:19:f6:74:8d:36:df:ab:76:35:31:37:68: 0e:78:59:9a:fc:59:93:ba:b3:3d:d6:d1:ed:0b:d8:16:d6:7c: c4:2a:e0:42:67:a4:d3:b7:6d:e8:16:70:29:40:c4:39:72:24: ae:45:7f:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswt+nQexwW1NrOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk OTE2OGZiYzYtZDNkOS00Zjc5LTliMTUtZTk0Y2NkZDhkMTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyWib2kOMLId+q3E7F8I2Vp1qX9tQskcMRm7 SkKZ6D0dQTdrLyDC6fIVU1Ton9uhg7TbelTjryJWmMoHWikwZvSaSdFaZ292eePx AFbdQh6yyEPjrJOoibFxEPpgV99/UqGBAS4uJjCsobsEGk/Du0lsWJq0vcBHQRvK sdIzofBlBGVTFlBD2cG0SqalJPc1+A3LMB/CGk1cIUIRBKgtVXVtij6JZXIKkefr XeCSxSGJoMXc06vELanNoUS8vVmB9OGh7syatY8RMQvB0zMea31WI6YdPQb87i+b sJ/brZ5zRPVdIj+HOB3Ahga/FtgXsDoAxe9L+vhMCFnRc3YbkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUp3CQksEKoFjCc6mZ5v+muXBSEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTYwOGNiNzktMmJlMS0z ZjNlLTg5NjAtNGNmMzJhZTcyYWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGAQUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLjlGN5PGupsW6ajqBUYQuPiOBwKlRXYX/0OhpURwjSMd/7NJGiQPCc hqcclAjcwqVdIr5krOgbfbxyuM8BBN68EOEiP3a7I2JtEQeYCgHh44F8btXxqiLw GsZiPAet0LyqXrp5ZFcEmwvrsnDM+93uM2LxKIYWzzeYXFhJZo77pHVm7DIeMbV4 9Hb9bSGXbOJoa/ZpxyTa1U+qGpIibjkrT694OdpbbdAltllqmbKcoy+keWhgsUjm 9wA4Y4pILh3dCrEbmeyagqTmBRn2dI0236t2NTE3aA54WZr8WZO6sz3W0e0L2BbW fMQq4EJnpNO3begWcClAxDlyJK5Ff0k= -----END CERTIFICATE-----Generated at Sun Aug 24 06:08:26 2025 by rpki-client