$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22f9befa-18c5-4079-9648-a9c8d05adb33/2055ac9c-161d-3938-bf56-acefc90af49e.roa File: 2055ac9c-161d-3938-bf56-acefc90af49e.roa (raw, json) Hash identifier: mh8SAVXUsLVwMJWryZELMUnBLE1lj+D4DHAz3uogbUc= Subject key identifier: 11:88:C4:23:9E:58:3C:D0:2C:3C:E0:96:54:8D:75:E8:A3:FB:5B:F9 Certificate issuer: /CN=22f9befa-18c5-4079-9648-a9c8d05adb33 Certificate serial: 010D0C9F4328584AC2E0DC75A8E8106FE9C71100 Authority key identifier: F9:EE:A2:92:98:5E:20:0E:D2:7E:B5:31:6F:7F:FB:A5:49:8C:4D:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22f9befa-18c5-4079-9648-a9c8d05adb33.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22f9befa-18c5-4079-9648-a9c8d05adb33/2055ac9c-161d-3938-bf56-acefc90af49e.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 11260 IP address blocks: 24.235.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22f9befa-18c5-4079-9648-a9c8d05adb33/22f9befa-18c5-4079-9648-a9c8d05adb33.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22f9befa-18c5-4079-9648-a9c8d05adb33/22f9befa-18c5-4079-9648-a9c8d05adb33.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22f9befa-18c5-4079-9648-a9c8d05adb33.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:dc:75:a8:e8:10:6f:e9:c7:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f9befa-18c5-4079-9648-a9c8d05adb33 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=0457bed3-0a6b-4a88-a337-99348555c3ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:80:3e:6b:fe:58:5f:22:31:6d:20:c7:2e:96: 40:f9:f8:fa:31:e2:4e:a9:33:9a:12:8e:94:e5:ba: 20:db:1a:25:5f:c9:79:6b:b0:b1:cc:99:ce:d7:6b: 6a:2f:3b:82:ce:89:46:94:25:9d:5c:90:a5:c2:54: 8f:9e:b6:5d:41:32:1a:59:3e:43:78:82:c8:66:1a: 98:fc:f4:2a:c6:0f:fa:06:e4:30:18:a1:b4:c6:35: 2c:b6:15:e1:5b:f4:bd:52:c9:bb:0e:9a:d4:1b:0b: c9:c6:f9:b6:fd:52:31:44:23:c6:f7:a8:13:7b:53: de:2d:d5:c0:39:2d:16:9b:b0:15:70:f5:cd:17:ee: 73:9f:d8:e8:e9:b6:5c:f5:55:61:ce:79:61:c2:3f: 0f:c8:24:64:cc:50:0b:f2:78:f1:2a:a4:fc:e2:38: 07:46:22:f9:cd:42:d6:69:26:64:ad:69:58:2b:4d: 88:7a:5f:3f:22:79:38:d0:e6:8c:35:1d:64:26:b6: a2:73:41:2f:ba:c1:9c:48:08:e7:8a:21:08:e5:5b: 7c:0a:c8:39:40:bb:74:f7:c8:e3:96:70:07:42:de: 55:f9:50:bb:2c:5e:b3:92:e8:0b:9a:e5:02:e0:09: fd:52:ae:47:c5:48:b4:e1:76:6c:77:78:48:ed:a7: 07:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:88:C4:23:9E:58:3C:D0:2C:3C:E0:96:54:8D:75:E8:A3:FB:5B:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22f9befa-18c5-4079-9648-a9c8d05adb33/2055ac9c-161d-3938-bf56-acefc90af49e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22f9befa-18c5-4079-9648-a9c8d05adb33/22f9befa-18c5-4079-9648-a9c8d05adb33.crl X509v3 Authority Key Identifier: keyid:F9:EE:A2:92:98:5E:20:0E:D2:7E:B5:31:6F:7F:FB:A5:49:8C:4D:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22f9befa-18c5-4079-9648-a9c8d05adb33.cer sbgp-ipAddrBlock: critical IPv4: 24.235.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:08:97:eb:4f:dc:5a:85:4d:6f:dd:d7:34:f8:02:d0:94:48: ed:c6:aa:8c:0b:10:f7:c9:33:cf:45:e4:07:9a:c1:f4:5a:15: 70:68:43:41:00:2c:16:8e:79:02:49:2c:d5:a3:e6:c8:c5:5e: 30:00:6c:10:2f:56:63:5b:c0:2a:fa:01:90:d8:fb:fd:85:55: 02:2c:ee:1a:ca:da:dd:86:1a:8a:52:b3:ac:03:f7:d4:cf:46: 81:98:1b:73:4c:4b:ec:85:76:de:07:21:24:0e:cd:63:5d:c4: 41:c2:86:0c:9b:79:7c:2d:65:81:3d:72:93:8a:2d:83:68:1e: 8c:50:d0:72:e3:6f:9e:e4:d7:5b:7d:b3:b9:04:4c:02:93:e9: 72:37:64:be:78:f3:25:2b:53:95:41:f9:06:2f:31:4e:68:96: 0b:fa:ad:4d:a9:b2:21:f2:a2:da:03:ea:c8:c9:8d:c9:25:ec: aa:60:76:ad:49:4b:dd:88:ba:1e:b8:3e:d5:b2:03:4c:e6:94: a3:16:96:8c:92:02:97:d6:83:e4:e2:3a:bf:bd:8a:fe:02:73: a0:9e:f6:54:b1:9a:e9:8e:5d:e2:18:f3:27:d6:ed:1d:52:18: fe:e5:4c:f9:de:cb:3e:25:cc:f2:75:2c:78:40:91:60:5f:1a: 8d:ef:78:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4Nx1qOgQb+nHEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJmOWJlZmEtMThjNS00MDc5LTk2NDgtYTljOGQwNWFk YjMzMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk MDQ1N2JlZDMtMGE2Yi00YTg4LWEzMzctOTkzNDg1NTVjM2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYA+a/5YXyIxbSDHLpZA+fj6MeJOqTOaEo6U 5bog2xolX8l5a7CxzJnO12tqLzuCzolGlCWdXJClwlSPnrZdQTIaWT5DeILIZhqY /PQqxg/6BuQwGKG0xjUsthXhW/S9Usm7DprUGwvJxvm2/VIxRCPG96gTe1PeLdXA OS0Wm7AVcPXNF+5zn9jo6bZc9VVhznlhwj8PyCRkzFAL8njxKqT84jgHRiL5zULW aSZkrWlYK02Iel8/Ink40OaMNR1kJraic0EvusGcSAjniiEI5Vt8Csg5QLt098jj lnAHQt5V+VC7LF6zkugLmuUC4An9Uq5HxUi04XZsd3hI7acHFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGIxCOeWDzQLDzgllSNdeij+1v5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMmY5 YmVmYS0xOGM1LTQwNzktOTY0OC1hOWM4ZDA1YWRiMzMvMjA1NWFjOWMtMTYxZC0z OTM4LWJmNTYtYWNlZmM5MGFmNDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjJmOWJlZmEtMThjNS00MDc5LTk2 NDgtYTljOGQwNWFkYjMzLzIyZjliZWZhLTE4YzUtNDA3OS05NjQ4LWE5YzhkMDVh ZGIzMy5jcmwwHwYDVR0jBBgwFoAU+e6ikpheIA7SfrUxb3/7pUmMTRgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMmY5YmVmYS0xOGM1LTQwNzktOTY0OC1hOWM4 ZDA1YWRiMzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGOsgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0Il+tP3FqFTW/d1zT4AtCUSO3GqowLEPfJM89F5AeawfRaFXBoQ0EA LBaOeQJJLNWj5sjFXjAAbBAvVmNbwCr6AZDY+/2FVQIs7hrK2t2GGopSs6wD99TP RoGYG3NMS+yFdt4HISQOzWNdxEHChgybeXwtZYE9cpOKLYNoHoxQ0HLjb57k11t9 s7kETAKT6XI3ZL548yUrU5VB+QYvMU5olgv6rU2psiHyotoD6sjJjckl7Kpgdq1J S92Iuh64PtWyA0zmlKMWloySApfWg+TiOr+9iv4Cc6Ce9lSxmumOXeIY8yfW7R1S GP7lTPneyz4lzPJ1LHhAkWBfGo3veJE= -----END CERTIFICATE-----Generated at Sun Aug 24 09:33:02 2025 by rpki-client