$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99fbe7fa-0c88-33dd-b463-c3f7d4ca6247.roa File: 99fbe7fa-0c88-33dd-b463-c3f7d4ca6247.roa (raw, json) Hash identifier: q8XAkgr5UbTyXdT+7N85qbICOK5cPsyNlzbmjoShzJ0= Subject key identifier: 7F:BA:DB:D4:48:76:5A:BF:2B:5A:37:B7:68:B1:5E:99:77:13:7F:C7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC41AA6EE3B046CC9760DC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99fbe7fa-0c88-33dd-b463-c3f7d4ca6247.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 24.12.78.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:1a:a6:ee:3b:04:6c:c9:76:0d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=2e03c59d-cbfb-4a4a-b435-ce34c71e1c9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a1:35:76:fa:60:91:50:bf:d0:b7:e5:0c:2d: e1:ca:f3:b5:a5:f5:c4:98:a1:36:9b:59:3e:99:0d: 56:02:0a:fa:4d:f3:f4:20:4a:37:0b:5d:23:25:72: bc:1d:3b:6b:50:68:d4:82:af:a8:7d:e7:e6:da:79: 53:df:58:40:bb:83:5d:02:53:50:99:79:40:71:3f: d4:09:9b:63:bf:a2:da:6d:aa:e9:73:82:5a:a3:93: 6f:28:07:d2:c6:59:4b:0e:54:a7:97:5b:d4:19:8a: 9a:71:51:8e:2b:ea:ac:14:e4:93:b9:9d:64:35:0b: 88:57:d0:e8:23:22:0f:1b:78:38:22:92:10:f9:74: f9:e4:81:03:af:46:aa:5c:2f:b8:5e:ba:47:7d:60: 75:5b:30:20:a6:12:b9:14:ec:7a:37:6d:6e:d3:aa: ec:25:e3:01:8f:ef:d8:7a:b1:ae:ec:c2:58:17:d7: 11:36:12:92:90:b8:29:5f:68:92:cd:70:8b:9a:19: 18:08:cc:3c:2d:a2:0f:dc:20:4c:31:89:36:d1:0d: 87:cf:84:ef:98:07:32:b2:4f:de:0b:64:11:b5:19: d3:e1:92:c9:80:21:8b:40:c6:41:3b:61:4d:80:c4: 8c:90:b1:0d:79:24:9d:9f:9d:1f:66:ff:f9:f6:b8: 37:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:BA:DB:D4:48:76:5A:BF:2B:5A:37:B7:68:B1:5E:99:77:13:7F:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99fbe7fa-0c88-33dd-b463-c3f7d4ca6247.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.12.78.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:22:69:25:fd:b0:40:b4:d5:e9:82:1a:9d:b2:e3:af:ac:49: e0:d8:0c:ae:6f:77:ca:2f:e1:51:99:96:c8:1d:2e:f0:f3:5d: 8c:2d:1a:0a:70:1b:eb:95:7f:bf:ba:8b:b6:7e:94:16:f2:69: af:c4:06:8a:d6:17:65:a4:d0:3c:13:66:39:02:01:21:c8:84: ac:e1:bd:d3:a0:e7:8c:ec:2e:1d:59:62:84:1c:7a:e5:67:9e: 65:d2:9f:b8:0d:70:d2:4a:ee:ab:ca:c0:67:37:f5:e2:0b:05: ae:df:90:3b:e4:a3:6d:de:4c:31:73:71:69:d3:09:7b:af:0e: b2:e5:5f:06:da:74:21:48:c7:2f:b8:ae:46:59:53:84:15:d6: 8f:df:32:c9:6f:1b:71:c3:b5:54:15:e9:34:9a:cc:91:43:dc: 33:15:a6:92:f0:c8:39:2d:e6:4a:a0:dd:33:aa:74:fa:ed:7b: 37:84:b8:2f:80:bc:75:c9:33:c5:97:4a:83:7d:31:ec:20:8a: eb:47:a0:ef:27:38:9a:6e:39:81:12:a8:0f:24:73:6a:da:37: c3:98:44:5a:58:1c:32:e9:09:55:70:ba:6c:5c:a9:13:09:62: 9e:56:07:52:c1:79:6f:c3:a7:0d:e3:c3:9c:b7:39:ec:24:db: 7e:aa:ce:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxBqm7jsEbMl2DcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MmUwM2M1OWQtY2JmYi00YTRhLWI0MzUtY2UzNGM3MWUxYzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKE1dvpgkVC/0LflDC3hyvO1pfXEmKE2m1k+ mQ1WAgr6TfP0IEo3C10jJXK8HTtrUGjUgq+ofefm2nlT31hAu4NdAlNQmXlAcT/U CZtjv6Labarpc4Jao5NvKAfSxllLDlSnl1vUGYqacVGOK+qsFOSTuZ1kNQuIV9Do IyIPG3g4IpIQ+XT55IEDr0aqXC+4XrpHfWB1WzAgphK5FOx6N21u06rsJeMBj+/Y erGu7MJYF9cRNhKSkLgpX2iSzXCLmhkYCMw8LaIP3CBMMYk20Q2Hz4TvmAcysk/e C2QRtRnT4ZLJgCGLQMZBO2FNgMSMkLENeSSdn50fZv/59rg3SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH+629RIdlq/K1o3t2ixXpl3E3/HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTlmYmU3ZmEtMGM4OC0z M2RkLWI0NjMtYzNmN2Q0Y2E2MjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGAxOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALIiaSX9sEC01emCGp2y46+sSeDYDK5vd8ov4VGZlsgdLvDzXYwtGgpw G+uVf7+6i7Z+lBbyaa/EBorWF2Wk0DwTZjkCASHIhKzhvdOg54zsLh1ZYoQceuVn nmXSn7gNcNJK7qvKwGc39eILBa7fkDvko23eTDFzcWnTCXuvDrLlXwbadCFIxy+4 rkZZU4QV1o/fMslvG3HDtVQV6TSazJFD3DMVppLwyDkt5kqg3TOqdPrtezeEuC+A vHXJM8WXSoN9MewgiutHoO8nOJpuOYESqA8kc2raN8OYRFpYHDLpCVVwumxcqRMJ Yp5WB1LBeW/Dpw3jw5y3Oewk236qziI= -----END CERTIFICATE-----Generated at Sat Aug 23 23:26:06 2025 by rpki-client