$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af65b846-d4a1-34b8-8f66-e79654dad1cd.roa File: af65b846-d4a1-34b8-8f66-e79654dad1cd.roa (raw, json) Hash identifier: qJT8gSM7pi/mUhF01nuLuMsbvPlFdI/l69jQlpFgi3g= Subject key identifier: 2F:F8:E5:52:93:B4:83:CE:3E:7F:A6:30:37:77:5C:DD:3F:00:27:E7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC20AD2CD0BBEB54F0BCCE8 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af65b846-d4a1-34b8-8f66-e79654dad1cd.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 24.1.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:0a:d2:cd:0b:be:b5:4f:0b:cc:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=700cf0f7-b1b7-4da2-aea7-f3563fb73c26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:14:b9:4a:89:71:02:35:3c:4c:81:be:42:89: 9f:49:5b:7e:9f:7a:2f:03:40:8b:97:e5:d7:e2:c3: 6f:53:f2:6b:9d:bc:41:31:92:ce:51:f5:69:ad:69: 28:01:d4:5b:a4:9a:e0:9e:ee:4a:49:5c:f2:4a:e9: c4:b0:41:3c:d6:3c:7f:18:68:41:4d:ee:04:5f:85: 76:32:f4:31:1b:c5:65:94:a0:65:e7:e7:6e:d3:8e: c4:ca:63:0a:5f:73:0c:1b:9d:d1:7b:8b:0a:23:aa: 28:8a:a7:77:14:9b:1f:0f:b1:3c:09:8e:02:1d:73: 7f:e9:fb:61:71:0b:8a:d5:41:9d:f4:40:c9:ad:60: 1b:02:dc:77:9e:6e:2d:82:d1:ae:7c:ed:9e:cc:1e: d8:0d:e7:45:00:1d:29:df:14:d3:ee:68:25:91:80: 70:0f:f6:03:74:d2:67:6b:5a:4b:ee:1e:08:da:7f: be:78:c7:7d:76:92:1f:69:df:80:db:37:55:08:85: 05:b0:e2:18:f6:bb:f1:80:17:ab:d7:83:8b:46:19: b1:be:34:27:7e:7d:a1:49:c3:ba:55:d5:e6:fe:68: 7c:5c:50:bb:42:d3:f2:dc:4e:9d:87:53:96:50:aa: 17:41:c4:af:82:7b:bd:d7:8b:4e:ac:7f:52:64:00: 1d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:F8:E5:52:93:B4:83:CE:3E:7F:A6:30:37:77:5C:DD:3F:00:27:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af65b846-d4a1-34b8-8f66-e79654dad1cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.1.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:fb:25:e7:84:99:69:d6:65:20:35:d3:d3:c7:47:64:6f:ed: cc:63:9c:f5:4b:da:8d:f7:c5:5c:b4:be:8d:33:6b:c8:fd:43: 7b:8e:ac:6d:86:ad:e4:bb:3a:7e:8e:5d:f5:c3:7b:8c:28:ef: 1b:2a:1e:bb:23:33:a2:eb:85:9a:3f:a2:c3:ca:76:91:f0:51: 6c:8f:f8:63:77:ca:fb:7a:8b:e3:7c:94:16:36:b5:bf:2f:44: ca:e7:ee:24:91:82:45:80:2b:bf:90:94:e5:f8:53:8d:4c:d1: b2:7f:b0:27:38:91:54:39:d7:96:28:37:0b:79:9d:df:9e:d4: 30:28:b4:17:33:3a:95:66:34:51:d4:98:a3:0a:c3:f3:ea:9b: f0:06:5e:88:8c:32:9d:d3:bb:40:8b:66:82:6b:9e:40:bc:9e: 11:8c:9f:99:3a:fb:1a:28:2a:b9:f0:80:cb:c3:81:60:ca:da: e0:9e:92:84:57:57:34:02:f0:d7:dc:bb:c0:7c:b2:a5:7c:70: 51:91:46:2a:a0:b7:0a:07:69:a8:2e:5f:b5:3f:76:92:55:81: 8b:77:8a:11:c7:92:a8:f9:19:71:3a:a7:19:65:6b:06:d4:bc: 09:a0:9a:04:de:8a:c0:0d:e6:64:44:aa:1f:4c:a2:ec:6b:4c: b4:e2:09:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswgrSzQu+tU8LzOgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NzAwY2YwZjctYjFiNy00ZGEyLWFlYTctZjM1NjNmYjczYzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxS5SolxAjU8TIG+QomfSVt+n3ovA0CLl+XX 4sNvU/JrnbxBMZLOUfVprWkoAdRbpJrgnu5KSVzySunEsEE81jx/GGhBTe4EX4V2 MvQxG8VllKBl5+du047EymMKX3MMG53Re4sKI6ooiqd3FJsfD7E8CY4CHXN/6fth cQuK1UGd9EDJrWAbAtx3nm4tgtGufO2ezB7YDedFAB0p3xTT7mglkYBwD/YDdNJn a1pL7h4I2n++eMd9dpIfad+A2zdVCIUFsOIY9rvxgBer14OLRhmxvjQnfn2hScO6 VdXm/mh8XFC7QtPy3E6dh1OWUKoXQcSvgnu914tOrH9SZAAdZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/45VKTtIPOPn+mMDd3XN0/ACfnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWY2NWI4NDYtZDRhMS0z NGI4LThmNjYtZTc5NjU0ZGFkMWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGAGEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIT7JeeEmWnWZSA109PHR2Rv7cxjnPVL2o33xVy0vo0za8j9Q3uOrG2G reS7On6OXfXDe4wo7xsqHrsjM6LrhZo/osPKdpHwUWyP+GN3yvt6i+N8lBY2tb8v RMrn7iSRgkWAK7+QlOX4U41M0bJ/sCc4kVQ515YoNwt5nd+e1DAotBczOpVmNFHU mKMKw/Pqm/AGXoiMMp3Tu0CLZoJrnkC8nhGMn5k6+xooKrnwgMvDgWDK2uCekoRX VzQC8Nfcu8B8sqV8cFGRRiqgtwoHaaguX7U/dpJVgYt3ihHHkqj5GXE6pxllawbU vAmgmgTeisAN5mREqh9MouxrTLTiCdI= -----END CERTIFICATE-----Generated at Sat Aug 23 23:23:22 2025 by rpki-client