$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a41daad-e24d-344c-a5c6-e645d063a9ef.roa File: 5a41daad-e24d-344c-a5c6-e645d063a9ef.roa (raw, json) Hash identifier: boC3noLDRh1eU3dYbPCXuuOoAEV1UUOTewNqYb8HzY8= Subject key identifier: 08:C1:D9:CA:3D:EF:8E:75:B3:6E:22:84:02:C7:E6:5D:C2:59:B6:99 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC4FAF5910BC50D6489AD80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a41daad-e24d-344c-a5c6-e645d063a9ef.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 24.130.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:fa:f5:91:0b:c5:0d:64:89:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=9047c52d-9c71-4c90-be9b-02095a44c3b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:72:ec:05:65:54:83:61:fd:da:80:6e:03:81: 1f:60:62:fe:d7:b1:56:80:ec:cb:6b:62:ed:99:32: a4:7b:07:01:17:71:13:2a:f0:38:82:0d:c3:e7:0d: 6c:eb:65:23:4c:bf:d1:de:f7:1c:0a:17:96:67:34: 07:8f:9f:3f:e3:7f:34:e1:39:59:bb:aa:d1:59:06: 1f:37:79:85:da:5b:06:82:3a:c2:0a:fe:cf:cd:39: 87:e9:95:45:92:fd:c3:b6:ad:cb:bb:ab:06:6c:00: a6:aa:b2:ab:1f:3a:40:16:53:c8:3d:2a:d2:a7:59: c2:9f:03:c0:a2:ac:51:cb:05:1c:d7:f2:93:d9:ca: 85:28:61:25:47:69:fe:fe:c1:22:a5:33:3b:fd:0d: 87:97:89:42:6f:af:ec:38:65:3a:fa:02:70:cc:9f: b7:ed:7c:69:79:90:58:cf:4d:5b:e6:47:83:e0:dd: 89:e3:d2:13:af:85:52:0a:27:39:08:97:d4:f4:d2: 19:57:21:70:17:05:38:df:5a:69:95:94:86:7b:ae: d7:fe:52:c8:96:b3:6a:b9:af:ad:6f:a3:74:16:22: ac:03:2a:87:d9:e4:ca:82:e6:06:d0:55:d2:4f:b6: a0:81:51:99:22:be:a3:f6:02:c7:9a:d6:b5:ee:8b: 1f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:C1:D9:CA:3D:EF:8E:75:B3:6E:22:84:02:C7:E6:5D:C2:59:B6:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a41daad-e24d-344c-a5c6-e645d063a9ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.130.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:1b:42:94:68:43:0d:90:9d:13:c9:0a:e0:ca:89:b8:90:36: 1f:5c:a5:5a:84:64:ce:ed:95:a9:45:19:c6:5c:b1:27:5c:b3: bf:16:6d:78:08:06:29:27:8c:5d:64:24:72:16:8b:9b:ea:94: ef:f5:f9:2a:3e:8f:9a:13:55:81:70:54:38:a9:37:a1:24:60: c9:a2:c4:fd:5e:25:cc:ac:c7:ad:86:a3:80:d5:59:f0:81:90: d3:cb:c2:3e:7e:cb:23:cd:57:85:72:f0:03:a1:85:03:5f:9b: 98:7b:34:91:ec:7d:9c:37:e6:d7:56:9b:14:fa:52:e7:90:95: c4:2e:29:cd:5a:79:61:c9:bc:75:f9:98:42:4e:81:35:e4:77: 1f:33:8c:50:a3:58:6c:bf:94:f2:72:2f:79:c0:5d:98:b0:f9: a4:18:55:ad:2d:87:bc:d7:94:b5:43:e6:11:88:62:8f:4f:bd: 7d:dc:cf:b5:46:8a:49:e1:89:e0:6c:b6:fe:7b:39:82:af:e9: e1:5a:6e:2e:26:66:0a:2a:3e:fd:ae:a4:27:67:de:26:8a:e8: a9:8d:55:b9:50:21:4c:30:83:a0:84:22:fc:57:96:7b:65:52: 15:e7:e1:f1:f1:42:80:ea:fa:ee:68:d3:c5:80:cd:22:21:cb: 6d:42:6e:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxPr1kQvFDWSJrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk OTA0N2M1MmQtOWM3MS00YzkwLWJlOWItMDIwOTVhNDRjM2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXLsBWVUg2H92oBuA4EfYGL+17FWgOzLa2Lt mTKkewcBF3ETKvA4gg3D5w1s62UjTL/R3vccCheWZzQHj58/43804TlZu6rRWQYf N3mF2lsGgjrCCv7PzTmH6ZVFkv3Dtq3Lu6sGbACmqrKrHzpAFlPIPSrSp1nCnwPA oqxRywUc1/KT2cqFKGElR2n+/sEipTM7/Q2Hl4lCb6/sOGU6+gJwzJ+37XxpeZBY z01b5keD4N2J49ITr4VSCic5CJfU9NIZVyFwFwU431pplZSGe67X/lLIlrNqua+t b6N0FiKsAyqH2eTKguYG0FXST7aggVGZIr6j9gLHmta17osfXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAjB2co97451s24ihALH5l3CWbaZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWE0MWRhYWQtZTI0ZC0z NDRjLWE1YzYtZTY0NWQwNjNhOWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGIJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkbQpRoQw2QnRPJCuDKibiQNh9cpVqEZM7tlalFGcZcsSdcs78WbXgI BiknjF1kJHIWi5vqlO/1+So+j5oTVYFwVDipN6EkYMmixP1eJcysx62Go4DVWfCB kNPLwj5+yyPNV4Vy8AOhhQNfm5h7NJHsfZw35tdWmxT6UueQlcQuKc1aeWHJvHX5 mEJOgTXkdx8zjFCjWGy/lPJyL3nAXZiw+aQYVa0th7zXlLVD5hGIYo9PvX3cz7VG iknhieBstv57OYKv6eFabi4mZgoqPv2upCdn3iaK6KmNVblQIUwwg6CEIvxXlntl UhXn4fHxQoDq+u5o08WAzSIhy21Cblo= -----END CERTIFICATE-----Generated at Sun Aug 24 01:16:29 2025 by rpki-client