$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/5ebcd16e-1ba8-3203-84b8-09de0c1f4380.roa File: 5ebcd16e-1ba8-3203-84b8-09de0c1f4380.roa (raw, json) Hash identifier: mMmV6bS2lr+m00IRlEvwkBXmtVDU6TGWVwYWr4zb1bI= Subject key identifier: EF:93:AC:A4:7D:60:7F:2E:92:4E:98:51:72:F6:5E:CD:A0:E0:FD:7B Certificate issuer: /CN=0538ef3c-e342-4e27-a075-8167bc73c054 Certificate serial: 010D0C9F4328584AD7D11952880524A3F53C9940 Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/5ebcd16e-1ba8-3203-84b8-09de0c1f4380.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 11260 IP address blocks: 24.129.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:19:52:88:05:24:a3:f5:3c:99:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054 Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=de9f9bce-0251-41e5-8c31-9964226e4c44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:96:99:fb:1f:1c:de:1f:b8:97:f4:da:cb:b1: c1:21:a0:2c:a1:c9:a9:51:fc:e9:19:23:55:72:f6: 90:31:d5:50:15:05:c7:be:f3:99:9d:30:57:a4:25: 0f:2e:a0:77:6c:47:bc:16:ca:2e:29:84:a8:9e:be: 50:2e:92:1f:8d:1f:ec:b9:32:ac:ae:ad:24:ac:fe: 21:d1:6c:2e:12:eb:5e:38:ef:93:97:4b:d4:00:b8: d7:3a:09:a8:a4:a5:ad:fb:98:60:79:98:ab:5c:1b: e7:1d:9b:79:5b:64:4d:87:fd:0d:24:e9:7a:d8:5a: 82:b2:6b:4a:70:fb:bc:1d:6f:70:0b:f1:08:15:e8: 79:52:c9:20:c0:97:0a:7f:4e:a1:5a:eb:1b:15:de: e7:7b:8d:52:22:4c:f0:ae:49:98:c4:ec:65:8f:00: 4a:e7:f4:b3:74:ff:15:43:fb:8c:28:f3:95:d2:1b: 6e:31:d1:3d:b0:1c:60:54:bc:d3:9f:cb:d9:db:ed: 6c:c0:5b:80:1d:14:74:64:b8:b8:c3:f8:fa:49:0d: 65:13:b5:13:1b:01:2a:9a:b0:ee:d9:63:c6:c7:95: ab:1a:61:e0:d8:97:0b:8e:d8:d1:3a:c5:81:36:a3: 3c:2e:03:63:7a:38:31:e1:c5:0b:09:b5:56:e5:36: 63:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:93:AC:A4:7D:60:7F:2E:92:4E:98:51:72:F6:5E:CD:A0:E0:FD:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/5ebcd16e-1ba8-3203-84b8-09de0c1f4380.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl X509v3 Authority Key Identifier: keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer sbgp-ipAddrBlock: critical IPv4: 24.129.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:80:8c:4c:2e:b6:43:5b:2e:16:a2:17:b2:ee:fa:af:6e:b3: 29:9d:0c:51:a8:b7:44:3e:2d:e4:17:91:6f:7c:1f:cc:3d:b0: 5a:f4:45:d5:1f:aa:1c:b8:6b:41:df:83:94:9f:0e:f2:b8:72: 67:85:08:36:71:5d:06:4b:80:4c:3c:02:cc:e2:c2:78:c4:9f: 8d:29:84:d7:5d:e8:7b:1d:c0:4b:3d:c3:68:41:55:75:a8:26: 8b:da:6a:34:f8:a0:55:3a:f9:66:1c:fb:7d:21:3b:3d:68:da: b1:4a:27:1f:65:54:d0:66:b9:1d:89:5c:17:f7:38:a6:b5:5c: 7f:d2:84:8c:27:d8:9a:b1:a1:00:96:78:73:b6:6a:97:1f:3b: 9c:a5:0b:9d:a0:d3:15:89:25:47:a3:39:c8:98:a9:b2:d2:83: ec:17:00:bb:d6:dd:6d:d8:fa:eb:0a:1d:ba:fa:58:cb:e7:84: 2b:f1:60:2f:e4:61:30:2c:8d:01:32:2f:dc:b1:5f:70:86:ea: e3:24:c4:7c:5b:1f:c7:9b:0f:55:ae:82:29:26:cd:bb:03:f3: fa:cd:8a:44:cd:4a:18:43:67:fb:20:c6:c2:0c:b2:1e:2f:28: 93:1d:2d:0f:4a:5d:a8:7d:54:73:99:23:47:ba:c8:df:24:58: 6c:c9:fc:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0RlSiAUko/U8mUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOGVmM2MtZTM0Mi00ZTI3LWEwNzUtODE2N2JjNzNj MDU0MB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk ZGU5ZjliY2UtMDI1MS00MWU1LThjMzEtOTk2NDIyNmU0YzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5aZ+x8c3h+4l/Tay7HBIaAsocmpUfzpGSNV cvaQMdVQFQXHvvOZnTBXpCUPLqB3bEe8FsouKYSonr5QLpIfjR/suTKsrq0krP4h 0WwuEuteOO+Tl0vUALjXOgmopKWt+5hgeZirXBvnHZt5W2RNh/0NJOl62FqCsmtK cPu8HW9wC/EIFeh5UskgwJcKf06hWusbFd7ne41SIkzwrkmYxOxljwBK5/SzdP8V Q/uMKPOV0htuMdE9sBxgVLzTn8vZ2+1swFuAHRR0ZLi4w/j6SQ1lE7UTGwEqmrDu 2WPGx5WrGmHg2JcLjtjROsWBNqM8LgNjejgx4cULCbVW5TZjSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO+TrKR9YH8ukk6YUXL2Xs2g4P17MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4 ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3YmM3M2MwNTQvNWViY2QxNmUtMWJhOC0z MjAzLTg0YjgtMDlkZTBjMWY0MzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDUzOGVmM2MtZTM0Mi00ZTI3LWEw NzUtODE2N2JjNzNjMDU0LzA1MzhlZjNjLWUzNDItNGUyNy1hMDc1LTgxNjdiYzcz YzA1NC5jcmwwHwYDVR0jBBgwFoAUPawtOE5IBuFdK6OE1h3WEIXOM4IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3 YmM3M2MwNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGIHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKAjEwutkNbLhaiF7Lu+q9usymdDFGot0Q+LeQXkW98H8w9sFr0RdUf qhy4a0Hfg5SfDvK4cmeFCDZxXQZLgEw8AsziwnjEn40phNdd6HsdwEs9w2hBVXWo JovaajT4oFU6+WYc+30hOz1o2rFKJx9lVNBmuR2JXBf3OKa1XH/ShIwn2JqxoQCW eHO2apcfO5ylC52g0xWJJUejOciYqbLSg+wXALvW3W3Y+usKHbr6WMvnhCvxYC/k YTAsjQEyL9yxX3CG6uMkxHxbH8ebD1WugikmzbsD8/rNikTNShhDZ/sgxsIMsh4v KJMdLQ9KXah9VHOZI0e6yN8kWGzJ/PA= -----END CERTIFICATE-----Generated at Sun Aug 24 02:54:51 2025 by rpki-client