$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d15c78d8-1942-3699-8ec2-e0c56004732c.roa File: d15c78d8-1942-3699-8ec2-e0c56004732c.roa (raw, json) Hash identifier: PzOhG34URUYV0IfsymPB2uLd9g4UQK78l6/Sos4qn84= Subject key identifier: 8F:DB:A8:77:4F:2D:51:3C:09:51:B0:0C:0A:5D:CC:50:17:22:D4:94 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC2DC0D1916212676813970 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d15c78d8-1942-3699-8ec2-e0c56004732c.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 24.130.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:dc:0d:19:16:21:26:76:81:39:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=d28e23eb-4744-4359-9140-454befa0c6cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a7:24:7b:39:de:be:26:8a:34:03:be:a5:00: 7a:f1:f8:52:27:e1:19:ed:a8:28:dd:74:8b:8d:27: 8e:09:4d:22:1a:ea:09:ad:8a:72:56:89:01:e9:12: c6:7b:50:c5:26:1d:ce:a9:87:90:e3:2d:30:9d:1f: 2d:d1:94:85:d6:85:97:cf:4b:8d:e9:13:83:93:8a: 85:4d:59:5d:4e:13:23:76:f1:d5:c9:49:6a:e1:08: bf:22:9a:4e:42:31:42:a5:53:05:8f:18:3e:f2:49: c4:ed:06:bf:2b:27:83:90:26:ce:e7:46:66:99:96: 7f:c5:f9:4b:1a:5f:f7:7a:41:30:bf:af:a8:e1:49: 27:93:06:3b:15:db:41:92:97:c9:fc:47:7c:e6:7f: a5:68:db:7c:ad:4f:43:de:3c:6b:72:a6:64:53:12: a8:65:36:28:45:17:dd:db:79:94:79:06:fc:5d:8e: ca:8e:5d:77:61:96:5d:3a:46:d2:cb:29:a7:60:e8: 5e:44:e0:37:2c:58:b1:21:8c:b9:1f:fa:2d:5a:51: 83:d3:3a:0f:fe:56:63:fd:c4:aa:0c:1a:8c:62:de: ab:49:39:70:64:8b:dc:07:b0:21:bc:62:30:0b:27: 91:a3:61:0b:cd:c5:bb:4b:a2:4c:4d:f4:95:cf:dc: 56:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:DB:A8:77:4F:2D:51:3C:09:51:B0:0C:0A:5D:CC:50:17:22:D4:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d15c78d8-1942-3699-8ec2-e0c56004732c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.130.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:1c:dd:57:51:da:3f:c9:38:70:e6:89:5e:f8:7e:de:bc:7f: a2:cd:bc:f9:99:c6:b1:a8:0d:87:5a:83:b1:49:ac:5e:79:4a: e5:30:ae:fe:b5:fa:c6:73:a4:6f:20:29:1a:11:a9:7f:6a:12: e6:df:f5:f6:8c:1f:9a:91:a3:fd:5d:33:18:8d:50:f1:1a:99: 06:32:a7:a6:87:d5:89:b6:2f:26:f5:08:86:0b:5c:9e:3e:54: fd:5a:ef:a6:fc:6d:07:8f:b5:fd:a4:e9:c5:88:c5:e2:b1:f9: 96:1f:af:d3:4d:bf:c0:3b:e1:3f:81:ec:d4:34:55:c2:72:45: 9c:d3:22:44:20:d7:71:d9:a5:4b:8a:83:e1:1d:1e:20:8b:b4: 71:2d:95:22:58:f4:58:7f:0f:b8:37:6b:c4:77:76:c6:ff:a9: 2b:a3:b5:cd:f8:29:7f:a2:64:c6:bc:20:6c:40:19:71:ef:b9: ec:c2:4b:b1:17:49:53:84:23:9a:b3:9b:89:36:44:31:2a:3c: 56:46:32:cd:ef:33:e2:29:da:4d:37:38:e0:6d:50:4f:dd:f7: 30:ef:ad:a0:d4:33:07:10:fb:23:d0:b8:ce:78:2a:3e:b2:21: 50:11:18:9e:8e:34:4b:79:6d:ed:6d:7f:98:e9:f5:80:c2:00: de:ac:6f:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswtwNGRYhJnaBOXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZDI4ZTIzZWItNDc0NC00MzU5LTkxNDAtNDU0YmVmYTBjNmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoackezneviaKNAO+pQB68fhSJ+EZ7ago3XSL jSeOCU0iGuoJrYpyVokB6RLGe1DFJh3OqYeQ4y0wnR8t0ZSF1oWXz0uN6RODk4qF TVldThMjdvHVyUlq4Qi/IppOQjFCpVMFjxg+8knE7Qa/KyeDkCbO50ZmmZZ/xflL Gl/3ekEwv6+o4UknkwY7FdtBkpfJ/Ed85n+laNt8rU9D3jxrcqZkUxKoZTYoRRfd 23mUeQb8XY7Kjl13YZZdOkbSyymnYOheROA3LFixIYy5H/otWlGD0zoP/lZj/cSq DBqMYt6rSTlwZIvcB7AhvGIwCyeRo2ELzcW7S6JMTfSVz9xWcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/bqHdPLVE8CVGwDApdzFAXItSUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDE1Yzc4ZDgtMTk0Mi0z Njk5LThlYzItZTBjNTYwMDQ3MzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGIJwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALMc3VdR2j/JOHDmiV74ft68f6LNvPmZxrGoDYdag7FJrF55SuUwrv61 +sZzpG8gKRoRqX9qEubf9faMH5qRo/1dMxiNUPEamQYyp6aH1Ym2Lyb1CIYLXJ4+ VP1a76b8bQePtf2k6cWIxeKx+ZYfr9NNv8A74T+B7NQ0VcJyRZzTIkQg13HZpUuK g+EdHiCLtHEtlSJY9Fh/D7g3a8R3dsb/qSujtc34KX+iZMa8IGxAGXHvuezCS7EX SVOEI5qzm4k2RDEqPFZGMs3vM+Ip2k03OOBtUE/d9zDvraDUMwcQ+yPQuM54Kj6y IVARGJ6ONEt5be1tf5jp9YDCAN6sb5s= -----END CERTIFICATE-----Generated at Sun Aug 24 05:36:33 2025 by rpki-client