$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/a4715222-51fd-3cc6-b174-0aa94bf55e04.roa File: a4715222-51fd-3cc6-b174-0aa94bf55e04.roa (raw, json) Hash identifier: XEAnlWQK3q2Mb62gQIJ4BDBCDn75YBA5xHtUQn5RKFk= Subject key identifier: C8:87:6D:9A:5F:3B:14:56:CC:76:3C:51:AB:95:0F:3D:D7:B1:DF:90 Certificate issuer: /CN=71e68809-5436-4288-ad80-0df35fa0b945 Certificate serial: 010D0C9F4328584AECC14A506D1372F745DAA380 Authority key identifier: 10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/a4715222-51fd-3cc6-b174-0aa94bf55e04.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 8075 IP address blocks: 192.28.24.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:4a:50:6d:13:72:f7:45:da:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71e68809-5436-4288-ad80-0df35fa0b945 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=b8dd66a9-29ef-4cd0-8aa5-da4009a62dd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d9:a6:4c:7d:9b:ec:3c:00:5e:bb:e4:0a:ef: 0f:83:cd:7b:26:57:25:58:53:67:94:32:e6:c2:35: b8:bf:c6:d4:95:25:9a:38:ff:a2:e1:c0:b9:4f:c6: f5:37:d3:89:28:59:ad:33:dc:e6:b3:51:e3:47:a1: e4:41:78:93:37:59:33:88:93:e5:15:fd:2a:a3:04: a6:12:c5:47:30:90:f9:25:10:7d:78:3f:2a:67:99: 19:fd:53:94:bb:6e:14:40:82:28:ed:4a:67:71:6f: 84:c1:9f:fb:d2:ab:0a:a6:b0:80:63:3e:3a:bb:d5: 1b:eb:49:47:3e:d3:26:84:f0:2b:91:f0:1f:96:27: 9f:e3:93:50:e1:af:a5:0c:63:e9:26:ff:30:94:85: 67:74:2a:71:e8:b4:f7:dd:9f:fd:66:5e:0b:93:37: e6:13:a2:7c:4f:bf:c7:08:ce:e9:b2:a5:cc:74:42: 1e:39:30:40:ae:ac:92:9f:50:f9:d3:6e:c3:a7:20: 14:4c:f9:04:32:f8:b9:40:d3:4e:69:cf:ae:9d:dd: 00:1d:e8:03:49:91:8a:5e:72:6b:b3:9a:87:8a:b2: 54:34:59:3b:64:03:7e:7b:fb:ec:58:e8:d1:a6:32: 82:d5:f7:98:3e:7b:61:d0:da:31:37:9f:d9:bb:2a: bc:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:87:6D:9A:5F:3B:14:56:CC:76:3C:51:AB:95:0F:3D:D7:B1:DF:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/a4715222-51fd-3cc6-b174-0aa94bf55e04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl X509v3 Authority Key Identifier: keyid:10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer sbgp-ipAddrBlock: critical IPv4: 192.28.24.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:19:f2:81:dd:81:76:d4:64:84:73:49:9d:ac:8d:59:1b:0f: f0:c6:9c:44:d1:5a:da:3f:37:e2:2d:ee:af:ac:07:64:3c:e4: 24:eb:81:ea:81:12:9b:8a:81:d1:13:3e:e4:3f:e7:c9:d6:69: 27:63:52:78:a6:c5:ae:0f:ff:f5:83:29:fe:ad:52:28:3a:b3: 67:4d:76:f7:3b:bd:7c:b6:3f:bd:a5:da:ef:d0:fb:30:f7:f0: 34:6e:aa:df:8c:d6:72:1a:9f:a7:04:0c:c7:9d:1a:71:f9:25: 86:76:17:8d:90:fe:f9:4c:75:0c:df:0a:ab:27:30:fd:c2:c5: b0:a8:94:8b:f3:7f:64:3d:b7:e9:5e:f0:f8:f9:85:19:08:f3: ef:14:a7:6f:0a:8a:5d:c5:17:44:b2:fd:78:db:72:5f:85:86: ed:36:aa:b1:a4:22:b1:d1:e3:8f:64:a9:eb:80:86:d0:3a:1d: f1:86:cf:98:09:32:26:57:e6:0a:ad:6e:fc:71:bc:7c:68:dc: 22:47:26:2b:ae:43:7b:ee:ec:28:ee:ad:ce:0b:e4:3c:ce:45: 08:43:4b:7c:f9:30:8c:67:48:5e:24:96:c8:f9:c5:1a:8c:bf: 5c:f8:ec:63:94:7f:33:42:cf:8f:66:e8:89:3d:29:b3:be:22: 19:a9:d0:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswUpQbRNy90Xao4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFlNjg4MDktNTQzNi00Mjg4LWFkODAtMGRmMzVmYTBi OTQ1MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YjhkZDY2YTktMjllZi00Y2QwLThhYTUtZGE0MDA5YTYyZGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NmmTH2b7DwAXrvkCu8Pg817JlclWFNnlDLm wjW4v8bUlSWaOP+i4cC5T8b1N9OJKFmtM9zms1HjR6HkQXiTN1kziJPlFf0qowSm EsVHMJD5JRB9eD8qZ5kZ/VOUu24UQIIo7UpncW+EwZ/70qsKprCAYz46u9Ub60lH PtMmhPArkfAflief45NQ4a+lDGPpJv8wlIVndCpx6LT33Z/9Zl4LkzfmE6J8T7/H CM7psqXMdEIeOTBArqySn1D5027DpyAUTPkEMvi5QNNOac+und0AHegDSZGKXnJr s5qHirJUNFk7ZAN+e/vsWOjRpjKC1feYPnth0NoxN5/Zuyq8RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMiHbZpfOxRWzHY8UauVDz3Xsd+QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2 ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYzNWZhMGI5NDUvYTQ3MTUyMjItNTFmZC0z Y2M2LWIxNzQtMGFhOTRiZjU1ZTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzFlNjg4MDktNTQzNi00Mjg4LWFk ODAtMGRmMzVmYTBiOTQ1LzcxZTY4ODA5LTU0MzYtNDI4OC1hZDgwLTBkZjM1ZmEw Yjk0NS5jcmwwHwYDVR0jBBgwFoAUEFAAX4YwKrkehfZQ9nLTMqW7VE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYz NWZhMGI5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwBwYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4Z8oHdgXbUZIRzSZ2sjVkbD/DGnETRWto/N+It7q+sB2Q85CTrgeqB EpuKgdETPuQ/58nWaSdjUnimxa4P//WDKf6tUig6s2dNdvc7vXy2P72l2u/Q+zD3 8DRuqt+M1nIan6cEDMedGnH5JYZ2F42Q/vlMdQzfCqsnMP3CxbColIvzf2Q9t+le 8Pj5hRkI8+8Up28Kil3FF0Sy/Xjbcl+Fhu02qrGkIrHR449kqeuAhtA6HfGGz5gJ MiZX5gqtbvxxvHxo3CJHJiuuQ3vu7Cjurc4L5DzORQhDS3z5MIxnSF4klsj5xRqM v1z47GOUfzNCz49m6Ik9KbO+Ihmp0CM= -----END CERTIFICATE-----Generated at Sat Aug 23 21:16:08 2025 by rpki-client