$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f842d6b2-d6fb-33c1-8877-f1eb645b5e78.roa File: f842d6b2-d6fb-33c1-8877-f1eb645b5e78.roa (raw, json) Hash identifier: Iof5kZpuq7m3VarwYZ/n0Yk7/61o2J8rOBXs3Mo2m1o= Subject key identifier: BB:71:C9:1D:EA:54:28:6A:6D:E6:60:7C:E5:20:CF:0C:37:DE:C9:38 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AE03136A4150A236FEE11AC00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f842d6b2-d6fb-33c1-8877-f1eb645b5e78.roa Signing time: Sat 16 Aug 2025 13:00:42 +0000 ROA not before: Sat 16 Aug 2025 13:00:42 +0000 ROA not after: Fri 14 Nov 2025 14:00:42 +0000 asID: 7725 IP address blocks: 24.99.218.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e0:31:36:a4:15:0a:23:6f:ee:11:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 16 13:00:42 2025 GMT Not After : Nov 14 14:00:42 2025 GMT Subject: CN=dae45a17-86e7-48f7-81f0-e4e55f21b04f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ae:8e:36:b7:28:73:8a:5c:0a:25:fe:7e:77: 3c:aa:0d:92:9a:2a:63:ad:89:ce:9f:69:68:6c:a0: 3e:d0:b0:b6:cb:2c:77:27:eb:cf:58:76:0c:5e:b8: 9c:50:40:ae:d4:96:fb:a4:3f:cc:a9:aa:8e:bf:72: 05:fd:1d:7d:3b:5b:af:79:df:14:c1:73:d3:37:93: bb:48:ec:20:8e:76:de:d2:20:8d:e2:3d:9b:bd:91: 7a:6a:ef:69:4b:e0:ad:64:96:1e:1a:50:1c:a6:0a: 2b:78:97:24:4c:1f:97:c1:9f:72:6c:cd:c8:f0:9e: 4e:4a:6e:37:88:3d:63:3c:7d:d1:49:d2:6c:4a:3a: 96:ed:c7:2b:35:26:12:d0:14:6c:3d:9a:26:4e:35: d6:b4:6f:78:29:70:0e:da:14:2c:cb:45:fa:17:47: 5b:8f:01:91:f4:78:e8:e2:e1:da:f1:84:09:d7:38: e4:29:1c:1f:83:23:4a:00:9e:11:a0:46:b7:b1:bb: 28:00:b2:51:3d:e5:18:5c:7a:01:9c:4e:28:f8:77: e0:42:96:de:43:26:4d:df:87:ef:cd:ac:70:7d:ed: 91:6d:31:44:16:cc:21:d9:a6:a9:01:a6:a4:6b:86: 5b:af:90:0c:2f:7d:58:73:d6:99:75:f3:1e:e4:6a: 07:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:71:C9:1D:EA:54:28:6A:6D:E6:60:7C:E5:20:CF:0C:37:DE:C9:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f842d6b2-d6fb-33c1-8877-f1eb645b5e78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.99.218.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:4b:e2:77:24:8d:ec:fc:ba:d7:9a:41:59:64:80:0f:2e:c5: 7a:02:c0:c8:14:8e:05:82:fa:6a:74:dc:95:21:12:d7:a1:af: ef:a7:91:57:22:11:73:24:85:97:6c:9a:c1:e2:3d:32:29:4d: 2c:18:17:ff:39:fd:35:06:21:b2:21:30:f6:ad:88:82:d8:48: 2d:92:be:4a:5c:74:33:62:47:6b:10:4b:d8:d3:e3:e4:04:88: 19:10:aa:64:f5:bc:40:88:e3:0b:82:b0:28:e6:07:23:2d:fc: d3:bf:0f:f3:db:a3:ba:30:0d:0f:18:6b:30:91:f1:ac:b3:07: 6e:1b:53:79:82:42:63:8c:2c:c7:60:c6:97:54:e1:06:cd:3b: ae:46:78:c7:34:61:5d:82:75:95:26:8d:3f:9a:43:fc:f5:87: fb:8e:82:63:59:85:cc:c1:f9:15:78:06:93:ee:94:0b:95:06: 79:4a:5a:76:54:2b:17:ac:3e:33:65:a3:d5:b0:51:83:91:d8: 05:74:18:a2:bc:a3:f4:1e:8e:40:fe:37:e3:c0:2b:d1:6d:b9: 8f:e2:4e:3e:5b:c9:ad:fe:f9:af:05:ac:ef:fa:d3:69:08:5c: d4:d6:10:80:50:76:a8:bf:2b:40:a0:11:a8:fd:0e:a9:97:d5: 4e:8b:90:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErgMTakFQojb+4RrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgxNjEzMDA0MloXDTI1MTExNDE0MDA0MlowLzEtMCsGA1UEAxMk ZGFlNDVhMTctODZlNy00OGY3LTgxZjAtZTRlNTVmMjFiMDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnK6ONrcoc4pcCiX+fnc8qg2SmipjrYnOn2lo bKA+0LC2yyx3J+vPWHYMXricUECu1Jb7pD/MqaqOv3IF/R19O1uved8UwXPTN5O7 SOwgjnbe0iCN4j2bvZF6au9pS+CtZJYeGlAcpgoreJckTB+XwZ9ybM3I8J5OSm43 iD1jPH3RSdJsSjqW7ccrNSYS0BRsPZomTjXWtG94KXAO2hQsy0X6F0dbjwGR9Hjo 4uHa8YQJ1zjkKRwfgyNKAJ4RoEa3sbsoALJRPeUYXHoBnE4o+HfgQpbeQyZN34fv zaxwfe2RbTFEFswh2aapAaaka4Zbr5AML31Yc9aZdfMe5GoHBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLtxyR3qVChqbeZgfOUgzww33sk4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjg0MmQ2YjItZDZmYi0z M2MxLTg4NzctZjFlYjY0NWI1ZTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGGPaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxL4nckjez8uteaQVlkgA8uxXoCwMgUjgWC+mp03JUhEtehr++nkVci EXMkhZdsmsHiPTIpTSwYF/85/TUGIbIhMPatiILYSC2SvkpcdDNiR2sQS9jT4+QE iBkQqmT1vECI4wuCsCjmByMt/NO/D/Pbo7owDQ8YazCR8ayzB24bU3mCQmOMLMdg xpdU4QbNO65GeMc0YV2CdZUmjT+aQ/z1h/uOgmNZhczB+RV4BpPulAuVBnlKWnZU KxesPjNlo9WwUYOR2AV0GKK8o/QejkD+N+PAK9FtuY/iTj5bya3++a8FrO/602kI XNTWEIBQdqi/K0CgEaj9DqmX1U6LkI4= -----END CERTIFICATE-----Generated at Sun Aug 24 01:09:56 2025 by rpki-client