$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc4617a9-dac4-3a1f-b62a-75970aba05cd.roa File: cc4617a9-dac4-3a1f-b62a-75970aba05cd.roa (raw, json) Hash identifier: /STC2zKB4tw9uRNO+pJD9JtrdLPLLe7oYj5tUZ/GDtI= Subject key identifier: A4:D3:CA:5E:35:39:6D:19:5F:F0:93:27:AB:28:6C:75:97:8E:76:14 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC2DE4F878398D4F8256940 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc4617a9-dac4-3a1f-b62a-75970aba05cd.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 24.23.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:de:4f:87:83:98:d4:f8:25:69:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=dfba51d1-d4cc-437b-b8b6-e0206012c1f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:af:96:84:aa:1c:a6:3d:38:13:f8:cd:29:e7: 4a:44:27:34:b8:6b:fb:6e:4f:2d:d8:56:60:b5:9b: 18:e7:a4:7f:5b:0d:f3:3f:b3:b0:05:42:7c:9e:fb: 51:5f:68:08:21:76:93:6e:60:7f:ef:63:1b:67:5f: f3:af:e9:6d:a8:06:7a:fe:ed:eb:aa:ff:90:0e:f7: fd:7c:59:41:b3:33:64:60:a1:d5:de:bf:af:0e:e0: 02:02:27:44:57:a2:91:21:80:63:35:03:06:44:61: 61:33:71:96:d8:d0:57:4d:2a:7b:3a:d6:e0:61:c0: 76:2a:6d:df:a0:19:90:de:8d:b7:b8:19:a1:1b:33: dd:2a:6d:b7:47:9e:c0:0a:c6:f6:71:60:fe:13:db: ae:10:8f:08:37:94:50:e8:38:8e:39:db:0e:35:13: b4:82:53:8a:87:e2:57:e6:e3:66:f9:b8:b9:9d:11: a1:f4:21:b1:1e:dd:97:70:11:ce:3c:94:7c:41:a7: 65:c5:ad:d1:e0:f8:49:81:42:ab:ae:20:4a:29:ba: 5f:23:a3:33:af:26:2c:d9:bc:d0:ac:63:ba:fe:f6: 7e:79:46:7f:79:66:3e:e5:ff:34:d0:ea:bd:eb:05: 05:35:0c:be:c5:37:29:d6:35:d3:cb:a6:52:25:e9: 3c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:D3:CA:5E:35:39:6D:19:5F:F0:93:27:AB:28:6C:75:97:8E:76:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc4617a9-dac4-3a1f-b62a-75970aba05cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.23.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:d3:9f:10:d3:d4:c0:8f:4e:14:35:a7:79:00:0c:1d:b7:bf: 23:38:6e:96:a0:0d:1f:fb:63:b1:8a:d3:59:ec:5f:79:07:ad: f3:7a:24:3a:bf:84:fb:4f:91:a0:1d:44:3f:7d:ab:ac:95:68: 00:a7:d3:2e:25:87:f5:22:73:d3:7c:39:2b:a3:37:41:14:8b: a0:eb:d5:8d:65:c2:4e:2b:37:e1:83:a2:80:2d:1d:ec:b7:a5: 69:6b:10:d9:75:bb:c0:8f:6f:24:26:88:ef:41:57:d9:4f:b4: 37:45:9e:d9:84:f4:4d:fd:4f:28:b3:75:72:8e:51:19:23:1a: da:9a:df:00:06:83:65:7f:27:a1:e0:48:18:37:82:48:8d:4c: 55:80:80:0b:31:b8:66:d7:bd:8e:5f:13:f4:34:7d:4a:43:86: b3:d0:dd:74:52:33:1b:e4:19:4f:7f:95:06:af:e0:4f:9f:57: fe:94:33:4c:46:ef:7e:ae:6c:f4:43:7d:98:65:97:d7:d1:2a: 90:1a:3c:15:97:0b:b3:2e:df:87:3b:ca:7d:17:57:2d:86:a5: 1d:0c:08:1f:f0:16:12:79:40:36:d3:4d:84:12:bf:e5:ca:4c: 66:0b:0b:08:35:8b:dc:2c:4b:1e:6e:82:83:e5:e9:eb:d3:db: 90:da:3c:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswt5Ph4OY1PglaUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZGZiYTUxZDEtZDRjYy00MzdiLWI4YjYtZTAyMDYwMTJjMWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5a+WhKocpj04E/jNKedKRCc0uGv7bk8t2FZg tZsY56R/Ww3zP7OwBUJ8nvtRX2gIIXaTbmB/72MbZ1/zr+ltqAZ6/u3rqv+QDvf9 fFlBszNkYKHV3r+vDuACAidEV6KRIYBjNQMGRGFhM3GW2NBXTSp7OtbgYcB2Km3f oBmQ3o23uBmhGzPdKm23R57ACsb2cWD+E9uuEI8IN5RQ6DiOOdsONRO0glOKh+JX 5uNm+bi5nRGh9CGxHt2XcBHOPJR8Qadlxa3R4PhJgUKrriBKKbpfI6MzryYs2bzQ rGO6/vZ+eUZ/eWY+5f800Oq96wUFNQy+xTcp1jXTy6ZSJek8BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTTyl41OW0ZX/CTJ6sobHWXjnYUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2M0NjE3YTktZGFjNC0z YTFmLWI2MmEtNzU5NzBhYmEwNWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGBfYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfTnxDT1MCPThQ1p3kADB23vyM4bpagDR/7Y7GK01nsX3kHrfN6JDq/ hPtPkaAdRD99q6yVaACn0y4lh/Uic9N8OSujN0EUi6Dr1Y1lwk4rN+GDooAtHey3 pWlrENl1u8CPbyQmiO9BV9lPtDdFntmE9E39TyizdXKOURkjGtqa3wAGg2V/J6Hg SBg3gkiNTFWAgAsxuGbXvY5fE/Q0fUpDhrPQ3XRSMxvkGU9/lQav4E+fV/6UM0xG 736ubPRDfZhll9fRKpAaPBWXC7Mu34c7yn0XVy2GpR0MCB/wFhJ5QDbTTYQSv+XK TGYLCwg1i9wsSx5ugoPl6evT25DaPI0= -----END CERTIFICATE-----Generated at Sun Aug 24 03:59:41 2025 by rpki-client