$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/db4e8fb2-9be2-396d-8901-f426a99eab07.roa File: db4e8fb2-9be2-396d-8901-f426a99eab07.roa (raw, json) Hash identifier: 0JhFQr0xR7LYkxtaWmlVDa3AOXiLELMuKn/WoaBjloM= Subject key identifier: BA:69:83:30:F9:A0:D8:F2:90:19:BD:AB:A6:0D:05:F5:37:58:F9:91 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC2E0CD9E567B12AA3BCD00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/db4e8fb2-9be2-396d-8901-f426a99eab07.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 24.4.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:e0:cd:9e:56:7b:12:aa:3b:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=fe46efab-963a-4d78-9d51-e1a61ca633ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ca:02:c8:64:7e:8e:d5:83:6d:b7:04:35:51: 19:f5:1d:25:8f:b9:87:bb:17:1f:ef:f5:94:bb:6d: 9f:bc:c8:20:68:75:9e:fb:fe:12:ee:ff:d6:04:cf: ae:c0:84:96:24:d6:99:be:15:1a:e6:7c:e6:21:0c: d8:0f:07:ee:15:44:76:a4:7a:7f:f6:08:cd:db:bc: 07:f2:eb:7c:ad:45:d6:3b:7e:6a:05:fa:46:f3:a5: f1:ea:f1:ce:69:58:90:bb:92:94:38:6c:76:aa:4c: e9:a4:57:3c:23:6d:d3:0b:34:46:af:73:90:b2:50: fe:d8:93:90:32:c6:2f:2f:f1:43:68:ef:a9:f5:b8: e5:04:51:d1:9a:4b:b7:a0:ec:d1:7b:49:3d:ab:8f: 4b:80:2b:b7:01:91:2d:26:2f:a7:1b:29:38:54:6d: a4:bf:65:1a:ba:fc:83:39:2a:7e:15:09:38:9e:cd: b8:b3:c0:4b:b1:f7:43:09:99:3e:f6:a2:7c:2f:d1: 98:44:38:71:4e:57:a1:d8:ef:35:b3:8e:03:d8:34: 3f:44:54:96:e9:11:97:cd:dc:b9:fc:54:31:98:b4: 96:21:e0:94:cb:d2:fe:47:75:82:67:d7:b4:90:b3: 15:28:77:70:18:8d:bc:fa:6e:44:aa:1a:44:5d:f6: 0e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:69:83:30:F9:A0:D8:F2:90:19:BD:AB:A6:0D:05:F5:37:58:F9:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/db4e8fb2-9be2-396d-8901-f426a99eab07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.4.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:f9:e6:45:83:eb:13:e6:c3:c7:6e:23:38:64:58:e8:a5:8b: c2:33:4c:bf:d7:2a:22:f4:8e:01:b9:1d:06:74:d9:d5:cb:f2: e7:d4:6c:c9:6b:eb:c3:c7:80:31:8d:53:57:fb:62:cf:e1:27: 68:56:44:f9:8f:15:86:5e:cb:e3:4b:ad:54:d1:92:04:03:ac: 5c:db:fe:c7:9b:f1:fe:bf:67:3c:63:ea:78:2b:6c:69:d5:3e: ea:ef:fa:50:c7:40:71:0d:27:56:f4:36:14:b4:b8:2c:23:a2: 91:06:b0:2f:b0:87:41:d1:40:0e:6a:9b:50:6b:15:8a:64:8c: 06:29:dd:26:4e:8b:1c:e9:05:4f:59:66:75:85:a8:c2:f0:5f: 66:95:5f:f8:bf:ab:ca:d3:a9:be:f7:af:24:db:df:bd:8f:ae: e0:15:5d:1f:7a:87:9e:52:61:b4:2e:6f:d6:70:18:37:ec:b1: 3d:88:66:37:13:9c:08:c7:b4:1b:3e:04:de:ea:c9:9e:31:c2: 39:11:ab:f6:a5:6e:21:5f:3e:d5:24:0a:fe:82:4c:3a:ca:2b: 32:58:3a:44:c1:7b:70:5a:7f:3c:f8:04:80:5a:f2:f1:a6:b0: a9:eb:61:6c:78:df:87:69:fe:1a:33:73:c1:24:57:01:e3:56: 4a:75:bc:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswuDNnlZ7Eqo7zQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZmU0NmVmYWItOTYzYS00ZDc4LTlkNTEtZTFhNjFjYTYzM2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMoCyGR+jtWDbbcENVEZ9R0lj7mHuxcf7/WU u22fvMggaHWe+/4S7v/WBM+uwISWJNaZvhUa5nzmIQzYDwfuFUR2pHp/9gjN27wH 8ut8rUXWO35qBfpG86Xx6vHOaViQu5KUOGx2qkzppFc8I23TCzRGr3OQslD+2JOQ MsYvL/FDaO+p9bjlBFHRmku3oOzRe0k9q49LgCu3AZEtJi+nGyk4VG2kv2UauvyD OSp+FQk4ns24s8BLsfdDCZk+9qJ8L9GYRDhxTleh2O81s44D2DQ/RFSW6RGXzdy5 /FQxmLSWIeCUy9L+R3WCZ9e0kLMVKHdwGI28+m5EqhpEXfYOGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLppgzD5oNjykBm9q6YNBfU3WPmRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGI0ZThmYjItOWJlMi0z OTZkLTg5MDEtZjQyNmE5OWVhYjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGAQIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALX55kWD6xPmw8duIzhkWOili8IzTL/XKiL0jgG5HQZ02dXL8ufUbMlr 68PHgDGNU1f7Ys/hJ2hWRPmPFYZey+NLrVTRkgQDrFzb/seb8f6/Zzxj6ngrbGnV Purv+lDHQHENJ1b0NhS0uCwjopEGsC+wh0HRQA5qm1BrFYpkjAYp3SZOixzpBU9Z ZnWFqMLwX2aVX/i/q8rTqb73ryTb372PruAVXR96h55SYbQub9ZwGDfssT2IZjcT nAjHtBs+BN7qyZ4xwjkRq/albiFfPtUkCv6CTDrKKzJYOkTBe3Bafzz4BIBa8vGm sKnrYWx434dp/hozc8EkVwHjVkp1vFI= -----END CERTIFICATE-----Generated at Sun Aug 24 01:21:52 2025 by rpki-client