$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d7672b0-6395-3055-8bec-6fce39980a69.roa File: 8d7672b0-6395-3055-8bec-6fce39980a69.roa (raw, json) Hash identifier: B1lECDEHYKeuB6W/V3xBMjFOkLS5+ZB7YhS2PDpuwaU= Subject key identifier: 58:3C:4B:44:67:C8:CB:80:66:22:A4:FA:87:10:2A:43:02:A5:9D:93 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC41A71D45EBCC5FB1B0200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d7672b0-6395-3055-8bec-6fce39980a69.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 24.12.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:1a:71:d4:5e:bc:c5:fb:1b:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=b9b02aa7-2c05-4c18-9c7c-f91a1e0b3c11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c7:18:3e:cd:cc:a3:44:33:eb:c0:28:df:22: 4c:59:07:31:33:5f:87:4f:03:10:e4:dc:b6:31:77: 57:5f:3f:f1:72:ef:35:73:24:94:7e:09:7b:ce:df: 61:d0:89:78:34:c0:3a:e7:03:79:d9:a9:60:f5:bc: d0:27:36:ce:6c:96:8f:33:37:a3:d4:12:7f:bc:58: a7:6d:af:b7:fe:14:87:3c:e7:eb:e9:8c:8d:46:29: fb:10:a6:d0:76:17:fc:f6:d8:20:1a:d0:fd:ff:15: e6:7d:96:20:47:ad:c3:53:e0:16:cc:cf:4b:95:82: bb:63:7f:8d:26:34:81:9c:1c:c1:2c:fb:af:23:aa: 58:55:14:da:52:c7:35:2e:99:e7:01:d2:e3:fe:09: fa:ef:45:2d:57:8d:9e:f2:80:f0:75:a3:ac:47:f6: 0d:5c:ac:65:f8:04:ed:e8:ae:54:0a:5e:07:5a:6b: fd:48:42:fa:5b:74:92:f6:77:85:03:2a:eb:1f:82: 71:9b:1d:e4:56:15:ef:cf:7a:a0:97:15:2f:e6:92: 5c:c6:e8:d8:1a:17:2e:7f:63:6d:b5:b1:8a:8e:aa: 94:0c:fa:eb:12:37:40:63:f5:3d:2a:83:87:a5:77: df:55:46:79:4d:f4:e8:f2:1d:b6:b7:c2:9b:de:fc: c0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:3C:4B:44:67:C8:CB:80:66:22:A4:FA:87:10:2A:43:02:A5:9D:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d7672b0-6395-3055-8bec-6fce39980a69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.12.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cc:f0:3d:2a:3a:75:0d:5c:85:66:b7:22:9a:57:0d:47:6d:a6: eb:c4:03:c5:26:5b:65:d1:15:02:59:66:66:59:b9:40:a5:3b: 0b:7c:4c:4d:bc:a7:d8:cf:98:4c:32:68:44:4f:cf:42:4f:a9: ff:09:9e:0c:e9:40:03:84:d2:ec:2e:65:99:da:92:cb:ef:0e: 7d:14:5a:82:55:1f:6a:f4:d9:a0:50:8e:f3:ad:22:6b:83:d3: 92:92:d9:eb:b5:a0:4b:d5:46:46:28:d6:2f:b2:64:bc:a1:51: e2:8f:7e:26:49:38:1e:93:bf:8b:81:f2:b8:1a:d9:52:76:d3: 82:6b:ea:35:6d:f0:de:67:a4:e4:27:28:34:bf:0f:ee:6a:cf: ba:bf:ec:7c:64:f0:25:33:ad:48:d1:9c:b6:01:55:f0:c8:6e: f3:16:bf:52:c6:74:05:2c:68:54:56:3c:14:97:e9:ca:92:df: b3:7a:51:70:8c:da:e3:07:52:d2:a8:32:11:e1:b8:83:ab:ed: 65:20:31:c7:aa:a7:46:79:5c:e4:d1:f8:af:df:0c:34:06:a6: 1f:7e:5f:b3:fb:10:30:42:9c:29:d9:ff:65:37:32:91:9c:ff: 1f:b2:87:b9:df:d9:87:c2:05:c6:d2:2e:6c:d3:6d:30:75:7e: e7:77:cb:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxBpx1F68xfsbAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YjliMDJhYTctMmMwNS00YzE4LTljN2MtZjkxYTFlMGIzYzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyscYPs3Mo0Qz68Ao3yJMWQcxM1+HTwMQ5Ny2 MXdXXz/xcu81cySUfgl7zt9h0Il4NMA65wN52alg9bzQJzbObJaPMzej1BJ/vFin ba+3/hSHPOfr6YyNRin7EKbQdhf89tggGtD9/xXmfZYgR63DU+AWzM9LlYK7Y3+N JjSBnBzBLPuvI6pYVRTaUsc1LpnnAdLj/gn670UtV42e8oDwdaOsR/YNXKxl+ATt 6K5UCl4HWmv9SEL6W3SS9neFAyrrH4Jxmx3kVhXvz3qglxUv5pJcxujYGhcuf2Nt tbGKjqqUDPrrEjdAY/U9KoOHpXffVUZ5TfTo8h22t8Kb3vzAxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFg8S0RnyMuAZiKk+ocQKkMCpZ2TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGQ3NjcyYjAtNjM5NS0z MDU1LThiZWMtNmZjZTM5OTgwYTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGAxEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMzwPSo6dQ1chWa3IppXDUdtpuvEA8UmW2XRFQJZZmZZuUClOwt8TE28 p9jPmEwyaERPz0JPqf8JngzpQAOE0uwuZZnaksvvDn0UWoJVH2r02aBQjvOtImuD 05KS2eu1oEvVRkYo1i+yZLyhUeKPfiZJOB6Tv4uB8rga2VJ204Jr6jVt8N5npOQn KDS/D+5qz7q/7Hxk8CUzrUjRnLYBVfDIbvMWv1LGdAUsaFRWPBSX6cqS37N6UXCM 2uMHUtKoMhHhuIOr7WUgMceqp0Z5XOTR+K/fDDQGph9+X7P7EDBCnCnZ/2U3MpGc /x+yh7nf2YfCBcbSLmzTbTB1fud3y08= -----END CERTIFICATE-----Generated at Sat Aug 23 23:51:08 2025 by rpki-client