$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd4c1596-2f51-342d-abd1-4537ee3e491e.roa File: dd4c1596-2f51-342d-abd1-4537ee3e491e.roa (raw, json) Hash identifier: ghLQ3PMEavyTQN3JFf3D0r7UlqRaaMC1DLvSOlOPKvo= Subject key identifier: DE:6B:37:C3:B1:71:5C:DE:45:CF:4F:3B:D7:CC:7A:55:2E:9E:27:6B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC41BA27792E33D60A11DC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd4c1596-2f51-342d-abd1-4537ee3e491e.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 24.13.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:1b:a2:77:92:e3:3d:60:a1:1d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=2fa8d72e-b6d7-410d-9c91-2c537c8d413a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a6:89:68:12:2f:3b:88:0e:93:8b:ae:21:36: a7:4e:5e:28:0f:62:39:5d:5e:01:44:fb:0d:ad:e8: 34:48:aa:d1:ae:e6:c8:a1:31:2b:13:5b:d5:ae:9b: b3:03:cb:35:c9:ae:98:7c:33:69:3f:bd:2a:8a:db: 7b:ee:68:ca:68:1e:79:ac:e7:fd:30:ad:fe:a3:aa: 71:06:38:fd:1b:d0:ae:28:3e:9b:22:46:c9:51:8f: b6:93:91:50:a1:3d:d1:97:49:5c:6e:48:36:cc:40: 26:0d:0c:ed:b5:e4:b2:11:a3:99:51:4d:e6:93:b8: 68:d2:4c:df:94:79:c4:c0:4c:5f:b8:87:5e:93:7e: da:6b:3f:d6:e4:c4:2b:b5:cc:c4:e2:31:20:ac:0c: cd:2b:f7:4e:8d:0d:6f:66:58:04:a9:00:d0:35:ab: 62:2c:c4:02:03:3f:80:a0:fb:49:5f:41:dd:68:12: 6a:94:14:73:5e:95:7f:90:82:63:22:6c:ca:bd:b4: 3d:aa:10:70:89:42:cb:c5:7c:52:66:26:e5:dc:a3: 87:a7:49:22:50:9b:ea:3b:55:38:f9:46:d8:6b:ed: 05:77:50:3b:b9:5c:d8:ca:a4:bb:21:c5:c8:ef:57: 6c:d7:11:ea:f6:11:5b:38:e2:94:ed:44:84:cd:b8: 8a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:6B:37:C3:B1:71:5C:DE:45:CF:4F:3B:D7:CC:7A:55:2E:9E:27:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd4c1596-2f51-342d-abd1-4537ee3e491e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.13.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:92:49:e0:96:c6:3c:5c:06:99:92:14:eb:f3:c1:34:a1:69: 69:0c:c2:c3:0c:35:77:f2:b7:e9:18:94:fc:b2:b6:96:d9:07: fc:f0:01:e0:79:1c:92:4b:86:f7:63:c9:f3:d0:7f:35:36:e9: 48:06:f2:a6:7a:2f:0f:cd:f7:46:87:ce:fb:ce:44:1d:c1:50: f6:61:2e:ac:ef:0c:cf:e3:f6:49:d4:d9:16:cf:d5:6c:1a:3c: 41:bd:45:9a:f0:ce:2b:56:17:c1:f6:d7:96:58:35:6b:cf:22: d4:cf:b8:a1:69:66:d3:6d:51:2e:1c:de:34:21:4d:65:66:7e: 38:ca:ec:51:87:a4:e4:4a:1d:3c:20:17:9c:75:f3:68:f8:ba: 2c:d7:7c:d5:f1:0b:84:9d:24:4d:a4:21:61:80:e6:35:02:61: 7e:79:62:24:be:44:40:d4:5d:27:fb:28:b5:25:2b:d1:bf:84: 6b:f2:3b:a3:4e:66:a3:a7:dd:6e:03:c5:5d:ec:d0:99:29:0d: ff:1a:36:bc:ac:1b:0d:21:32:16:0b:69:89:79:43:41:b7:74: ed:9a:fc:4b:1a:5e:78:bc:c3:5d:0e:db:52:59:5a:dc:50:ea: 38:33:cb:67:fd:51:0a:9f:7b:83:a5:ed:a7:ba:11:c3:f6:6d: 97:92:c7:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxBuid5LjPWChHcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MmZhOGQ3MmUtYjZkNy00MTBkLTljOTEtMmM1MzdjOGQ0MTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqaJaBIvO4gOk4uuITanTl4oD2I5XV4BRPsN reg0SKrRrubIoTErE1vVrpuzA8s1ya6YfDNpP70qitt77mjKaB55rOf9MK3+o6px Bjj9G9CuKD6bIkbJUY+2k5FQoT3Rl0lcbkg2zEAmDQztteSyEaOZUU3mk7ho0kzf lHnEwExfuIdek37aaz/W5MQrtczE4jEgrAzNK/dOjQ1vZlgEqQDQNatiLMQCAz+A oPtJX0HdaBJqlBRzXpV/kIJjImzKvbQ9qhBwiULLxXxSZibl3KOHp0kiUJvqO1U4 +UbYa+0Fd1A7uVzYyqS7IcXI71ds1xHq9hFbOOKU7USEzbiKSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5rN8OxcVzeRc9PO9fMelUunidrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGQ0YzE1OTYtMmY1MS0z NDJkLWFiZDEtNDUzN2VlM2U0OTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGA2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALGSSeCWxjxcBpmSFOvzwTShaWkMwsMMNXfyt+kYlPyytpbZB/zwAeB5 HJJLhvdjyfPQfzU26UgG8qZ6Lw/N90aHzvvORB3BUPZhLqzvDM/j9knU2RbP1Wwa PEG9RZrwzitWF8H215ZYNWvPItTPuKFpZtNtUS4c3jQhTWVmfjjK7FGHpORKHTwg F5x182j4uizXfNXxC4SdJE2kIWGA5jUCYX55YiS+REDUXSf7KLUlK9G/hGvyO6NO ZqOn3W4DxV3s0JkpDf8aNrysGw0hMhYLaYl5Q0G3dO2a/EsaXni8w10O21JZWtxQ 6jgzy2f9UQqfe4Ol7ae6EcP2bZeSx/A= -----END CERTIFICATE-----Generated at Sat Aug 23 23:29:35 2025 by rpki-client