$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d183df29-5ba4-3770-b39d-5ab3529220f7.roa File: d183df29-5ba4-3770-b39d-5ab3529220f7.roa (raw, json) Hash identifier: 7mlPPYIMAQkhRpMKQh0UDmVuYrFWDpmB6JoS5JCVEaE= Subject key identifier: 83:7B:A1:94:DF:2D:94:7B:79:19:DD:93:48:3A:A5:14:D7:2E:87:BA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC20E2CF31ACBD3ECDF1DF0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d183df29-5ba4-3770-b39d-5ab3529220f7.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 24.12.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:0e:2c:f3:1a:cb:d3:ec:df:1d:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=c8ee680d-27ca-4e77-be58-a0e1d39be177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:48:e2:6a:95:b7:05:62:3b:ac:53:b4:5e:aa: 67:42:2f:ea:52:e0:99:8d:71:db:23:c2:03:99:72: 2a:89:6b:c7:b0:50:71:6b:2e:64:c9:91:47:5f:9e: 3b:c4:50:07:06:bf:ab:63:e5:5b:de:2a:da:42:bd: ad:92:fb:15:e0:fb:ec:07:ab:22:44:c4:b7:a7:c1: 97:1b:95:86:bc:68:89:a2:8f:4c:7c:0a:57:22:07: 9a:ed:1b:4d:1c:ac:f2:4e:f7:3c:7e:21:b1:79:ff: 77:13:88:54:f1:86:dd:cd:a1:a0:76:90:9e:51:f6: 5b:43:0c:1e:d4:6d:4a:72:9e:63:db:d0:aa:ce:13: 56:b0:7f:dc:63:be:1f:d2:8a:91:a8:02:0d:5f:da: a7:01:95:67:4a:89:89:7a:2a:c6:8c:f7:e0:e4:8d: 65:59:b4:ed:f2:7d:19:0c:d5:e4:9a:78:ed:69:16: 41:45:21:7a:f5:68:1e:03:cd:1f:88:26:1c:41:87: e4:b8:bb:e8:24:9e:65:6e:57:4f:26:66:9a:f3:a0: 4b:f4:fe:22:e3:cb:80:b4:ac:b5:ff:b4:29:3d:3d: 95:16:6f:68:1c:3c:da:2c:bf:dc:18:5f:4c:38:f9: e2:5d:dd:89:b8:ec:39:69:48:09:7b:b6:7b:7e:42: d4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:7B:A1:94:DF:2D:94:7B:79:19:DD:93:48:3A:A5:14:D7:2E:87:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d183df29-5ba4-3770-b39d-5ab3529220f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.12.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:a2:4a:c1:b5:4e:fc:df:ae:98:18:93:9d:4d:c1:09:f8:0c: c0:56:d8:87:0e:37:6c:86:14:01:41:40:5f:2a:81:61:d4:82: d2:04:a0:3f:ae:2a:c9:8a:77:4b:a7:b8:35:e0:aa:3e:46:cd: 15:8b:a2:7b:f5:c3:45:1b:81:b9:02:36:e0:c1:66:42:fd:c5: 35:d1:24:78:25:64:9e:34:95:6e:9b:f8:41:0e:4b:17:40:af: bd:d0:94:fc:73:8f:b8:6d:f1:95:ab:45:1a:a6:68:20:12:de: f9:07:36:3c:a3:04:49:3e:5b:56:b8:77:20:38:be:6a:4b:d8: 3e:ff:32:f3:21:56:83:a3:f3:0d:98:9f:d2:04:ac:64:e2:36: d6:e9:8f:34:02:30:d6:e4:e7:3e:fa:90:25:7f:05:7b:94:d8: 83:1b:db:45:29:7c:3d:f9:3a:e6:b8:d2:0d:1e:10:bf:c7:6c: e6:f5:0a:a5:4b:6f:f5:8a:38:7a:3a:8e:bf:28:26:f4:db:35: e9:3f:c4:fb:1f:01:cf:20:d4:f8:79:28:f7:2c:7b:be:aa:18: 29:31:51:04:0e:bc:b8:96:b7:b2:80:ed:03:2c:f3:ae:7c:82: 73:42:76:b0:13:e9:e9:4b:a1:c9:23:5d:d8:dc:d2:67:48:24: bd:d7:ad:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswg4s8xrL0+zfHfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YzhlZTY4MGQtMjdjYS00ZTc3LWJlNTgtYTBlMWQzOWJlMTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEjiapW3BWI7rFO0XqpnQi/qUuCZjXHbI8ID mXIqiWvHsFBxay5kyZFHX547xFAHBr+rY+Vb3iraQr2tkvsV4PvsB6siRMS3p8GX G5WGvGiJoo9MfApXIgea7RtNHKzyTvc8fiGxef93E4hU8YbdzaGgdpCeUfZbQwwe 1G1Kcp5j29CqzhNWsH/cY74f0oqRqAINX9qnAZVnSomJeirGjPfg5I1lWbTt8n0Z DNXkmnjtaRZBRSF69WgeA80fiCYcQYfkuLvoJJ5lbldPJmaa86BL9P4i48uAtKy1 /7QpPT2VFm9oHDzaLL/cGF9MOPniXd2JuOw5aUgJe7Z7fkLULQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIN7oZTfLZR7eRndk0g6pRTXLoe6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDE4M2RmMjktNWJhNC0z NzcwLWIzOWQtNWFiMzUyOTIyMGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGAzwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+iSsG1TvzfrpgYk51NwQn4DMBW2IcON2yGFAFBQF8qgWHUgtIEoD+u KsmKd0unuDXgqj5GzRWLonv1w0UbgbkCNuDBZkL9xTXRJHglZJ40lW6b+EEOSxdA r73QlPxzj7ht8ZWrRRqmaCAS3vkHNjyjBEk+W1a4dyA4vmpL2D7/MvMhVoOj8w2Y n9IErGTiNtbpjzQCMNbk5z76kCV/BXuU2IMb20UpfD35Oua40g0eEL/HbOb1CqVL b/WKOHo6jr8oJvTbNek/xPsfAc8g1Ph5KPcse76qGCkxUQQOvLiWt7KA7QMs8658 gnNCdrAT6elLockjXdjc0mdIJL3XrTc= -----END CERTIFICATE-----Generated at Sat Aug 23 23:34:10 2025 by rpki-client