$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/66de522a-54eb-3da6-8e58-af92f7ba0a15.roa File: 66de522a-54eb-3da6-8e58-af92f7ba0a15.roa (raw, json) Hash identifier: orXzmhe13IzPlNAgoa1RY9jS9JKbFl8mr2TVJ9j/4eE= Subject key identifier: 4F:58:40:37:27:62:19:E4:6E:0F:5F:2D:83:DF:CD:48:1F:7C:06:42 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC211E56C06B712979576D0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/66de522a-54eb-3da6-8e58-af92f7ba0a15.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 24.14.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:11:e5:6c:06:b7:12:97:95:76:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=2c2fae9b-4490-4d33-a66c-e8a7a87731e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:be:e0:dc:55:54:56:67:c9:94:11:b2:da:91: 4a:97:5b:f7:ee:ef:8b:41:f2:9d:1e:1a:89:e5:96: d7:de:70:17:92:6c:84:3f:f9:28:c4:0f:69:96:e8: b7:aa:3d:73:51:c6:78:54:e1:ea:da:09:8d:5b:ca: 64:37:6f:2b:83:ac:d7:97:66:8a:6b:e1:0a:cb:09: 85:14:4b:19:d7:13:a8:ee:47:38:6f:56:39:00:ed: c0:43:f9:b6:7f:0d:43:0b:96:36:9d:f5:e4:af:91: 05:bd:4e:f2:f4:ef:4a:84:e2:60:0a:68:d1:a7:16: 1a:e1:f6:e4:08:ed:37:8e:62:5d:bb:50:e0:e6:3e: b9:cb:e5:51:d0:f5:96:e9:0a:e4:63:92:af:9c:8e: c7:d1:a1:2d:4d:51:94:32:0c:3b:ff:99:ad:03:68: bd:1f:da:ae:8e:50:17:a0:cc:e4:37:4a:80:bb:d9: df:8f:d2:10:69:d1:37:e9:fe:ad:a1:d1:b3:06:65: f3:07:03:d4:9d:b0:ea:74:bb:82:4c:26:ae:aa:e3: 7d:10:46:18:72:17:26:ec:46:69:e8:ae:0e:d6:77: 88:19:46:1a:d9:da:22:29:aa:87:91:28:7c:35:2c: 69:fc:f0:4a:20:1d:6e:9f:0b:c9:57:3a:ac:c2:c7: e9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:58:40:37:27:62:19:E4:6E:0F:5F:2D:83:DF:CD:48:1F:7C:06:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/66de522a-54eb-3da6-8e58-af92f7ba0a15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.14.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:2a:34:2c:9e:9f:7b:ff:8c:f4:8a:c1:0c:43:a3:e8:fd:4f: 87:57:8a:e7:92:c4:7a:a0:4d:f4:bf:8e:8a:cf:02:e0:5a:7b: 9e:c5:25:85:ce:e6:02:c1:14:06:d3:3f:f6:21:70:b7:aa:e8: 9f:8e:00:25:ec:5b:2b:ba:3a:a4:82:b0:72:8d:95:28:3b:5b: 81:66:de:a6:17:33:54:7f:6d:89:82:80:b7:07:bf:c1:2f:ae: de:d0:4a:34:d4:e4:66:95:a3:f6:d3:38:88:f4:87:ab:58:52: 12:f6:3c:cf:35:2a:9f:a5:ed:9e:0d:a6:72:95:87:54:06:84: a4:1f:bc:32:e2:2e:6d:d7:dd:79:3e:96:ef:d8:ed:de:a8:77: 0b:dc:27:81:a0:c0:91:88:b1:23:71:7e:e1:e2:e8:4e:1c:71: 07:c0:97:3a:b5:28:1d:38:24:e4:a3:98:aa:ff:5a:3c:a6:93: 96:ee:4f:01:9a:19:00:89:d1:ed:b6:b4:23:80:e5:a8:16:5d: 73:ca:c6:2f:e1:de:9d:99:02:23:58:ce:47:68:3e:60:37:d6: 3b:17:6d:05:83:68:95:31:b6:d3:71:23:20:59:16:b9:af:a6: da:87:38:d7:97:4b:9a:69:af:68:f6:7d:b0:9f:29:be:b1:7a: f6:15:e6:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswhHlbAa3EpeVdtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MmMyZmFlOWItNDQ5MC00ZDMzLWE2NmMtZThhN2E4NzczMWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvr7g3FVUVmfJlBGy2pFKl1v37u+LQfKdHhqJ 5ZbX3nAXkmyEP/koxA9plui3qj1zUcZ4VOHq2gmNW8pkN28rg6zXl2aKa+EKywmF FEsZ1xOo7kc4b1Y5AO3AQ/m2fw1DC5Y2nfXkr5EFvU7y9O9KhOJgCmjRpxYa4fbk CO03jmJdu1Dg5j65y+VR0PWW6QrkY5KvnI7H0aEtTVGUMgw7/5mtA2i9H9qujlAX oMzkN0qAu9nfj9IQadE36f6todGzBmXzBwPUnbDqdLuCTCauquN9EEYYchcm7EZp 6K4O1neIGUYa2doiKaqHkSh8NSxp/PBKIB1unwvJVzqswsfp7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE9YQDcnYhnkbg9fLYPfzUgffAZCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjZkZTUyMmEtNTRlYi0z ZGE2LThlNTgtYWY5MmY3YmEwYTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGA6UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUqNCyen3v/jPSKwQxDo+j9T4dXiueSxHqgTfS/jorPAuBae57FJYXO 5gLBFAbTP/YhcLeq6J+OACXsWyu6OqSCsHKNlSg7W4Fm3qYXM1R/bYmCgLcHv8Ev rt7QSjTU5GaVo/bTOIj0h6tYUhL2PM81Kp+l7Z4NpnKVh1QGhKQfvDLiLm3X3Xk+ lu/Y7d6odwvcJ4GgwJGIsSNxfuHi6E4ccQfAlzq1KB04JOSjmKr/Wjymk5buTwGa GQCJ0e22tCOA5agWXXPKxi/h3p2ZAiNYzkdoPmA31jsXbQWDaJUxttNxIyBZFrmv ptqHONeXS5ppr2j2fbCfKb6xevYV5v8= -----END CERTIFICATE-----Generated at Sun Aug 24 04:02:46 2025 by rpki-client