$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4cadfc17-4cd4-3b2e-a690-319a83a6a99a.roa File: 4cadfc17-4cd4-3b2e-a690-319a83a6a99a.roa (raw, json) Hash identifier: pu/5muTtnE3ZHyDI+BTF14OIIb7CWJlPXa5onJlfX3A= Subject key identifier: 72:0C:ED:C0:44:A6:E2:68:A3:F3:EF:E7:8B:CE:F4:3A:87:7E:BA:8A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EB8496CA59FFC5534CEEC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4cadfc17-4cd4-3b2e-a690-319a83a6a99a.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33490 IP address blocks: 24.20.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:eb:84:96:ca:59:ff:c5:53:4c:ee:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=3bf402fa-b09d-469a-8342-59f49b897616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e3:e7:b3:24:cd:a1:6d:57:bd:45:24:3d:6a: 66:18:cf:38:68:79:e9:21:bc:f6:97:14:3c:84:69: f2:62:9a:32:ae:da:25:9b:f9:c7:4a:4a:8b:14:20: 02:3c:8e:93:cd:bc:8d:92:eb:d0:fe:fb:83:e5:e7: 8f:26:7d:e8:c5:58:b3:df:c2:ab:cf:16:09:cb:7e: 46:1a:cd:a1:32:c7:8f:64:e7:72:cb:57:db:db:51: b5:e6:ea:34:5b:df:b1:a7:34:1e:46:3c:13:14:ce: ce:74:45:49:dd:42:e8:35:62:af:fb:d8:37:70:26: f1:a2:08:f6:34:1a:7c:90:1b:a6:a4:89:17:67:7c: e0:7f:91:25:bc:6a:1e:b2:ec:2f:fb:1a:4b:a6:33: 76:be:14:c2:25:05:3b:83:d4:d3:cf:d1:e3:71:a5: f8:54:70:ec:99:51:4a:27:3e:ec:29:99:87:42:ad: 05:05:33:7b:2f:cd:47:57:8b:7d:e4:ed:d3:18:55: a5:8d:7e:ec:f1:e2:86:37:cf:32:fd:d8:ea:12:34: f7:d5:9f:d1:98:a3:50:e9:fb:6d:63:b6:d8:42:c8: ee:7c:87:72:71:ba:82:2c:11:a9:a6:8e:b6:7b:c5: 82:43:77:98:63:88:66:61:9d:50:1d:cb:cf:21:f3: ff:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:0C:ED:C0:44:A6:E2:68:A3:F3:EF:E7:8B:CE:F4:3A:87:7E:BA:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4cadfc17-4cd4-3b2e-a690-319a83a6a99a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.20.162.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:a1:c9:fd:e7:f3:06:09:2a:f1:b8:0a:7a:a6:8b:09:a5:03: d2:5b:72:da:3d:57:8b:fd:aa:d9:14:a9:7a:2f:1e:56:1d:20: 53:3e:93:f8:77:72:8a:90:ba:f7:2b:76:c0:28:54:48:5c:9f: 3b:c2:a3:60:79:48:44:b3:8b:94:60:1f:b6:7f:a5:c5:02:b5: 62:6f:47:86:52:78:48:7f:47:96:c7:38:db:a7:0f:b8:f2:b4: 51:51:47:2d:1f:61:94:b0:f5:a1:06:7f:8d:14:7a:72:8b:0c: e4:b4:67:80:65:aa:3f:62:68:63:46:f0:c2:5c:cd:45:27:2c: fd:0f:48:a9:8f:d2:05:db:d7:78:3a:1a:aa:4a:c8:47:4e:14: f6:e1:f9:49:09:9c:de:2a:4e:98:c8:37:c7:95:f3:4a:14:02: 1c:f3:d2:d2:1a:bc:5d:40:42:ab:7c:18:14:b4:2b:54:50:22: 77:1c:ca:b8:6f:57:5e:f6:b4:60:37:d8:e8:f0:8b:c5:c9:f5: 2c:e0:21:69:70:9c:0d:9f:60:dc:da:8c:39:0a:f3:fb:be:78: d7:12:d9:81:f5:86:dc:85:48:8b:cf:b8:ed:09:80:56:87:5e: 3a:6e:45:24:a0:53:49:72:00:bf:fa:d3:08:2f:d0:7e:38:42: 56:4b:b4:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq064SWyln/xVNM7sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk M2JmNDAyZmEtYjA5ZC00NjlhLTgzNDItNTlmNDliODk3NjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhePnsyTNoW1XvUUkPWpmGM84aHnpIbz2lxQ8 hGnyYpoyrtolm/nHSkqLFCACPI6TzbyNkuvQ/vuD5eePJn3oxViz38KrzxYJy35G Gs2hMsePZOdyy1fb21G15uo0W9+xpzQeRjwTFM7OdEVJ3ULoNWKv+9g3cCbxogj2 NBp8kBumpIkXZ3zgf5ElvGoesuwv+xpLpjN2vhTCJQU7g9TTz9HjcaX4VHDsmVFK Jz7sKZmHQq0FBTN7L81HV4t95O3TGFWljX7s8eKGN88y/djqEjT31Z/RmKNQ6ftt Y7bYQsjufIdycbqCLBGppo62e8WCQ3eYY4hmYZ1QHcvPIfP/IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHIM7cBEpuJoo/Pv54vO9DqHfrqKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGNhZGZjMTctNGNkNC0z YjJlLWE2OTAtMzE5YTgzYTZhOTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGBSiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2hyf3n8wYJKvG4CnqmiwmlA9Jbcto9V4v9qtkUqXovHlYdIFM+k/h3 coqQuvcrdsAoVEhcnzvCo2B5SESzi5RgH7Z/pcUCtWJvR4ZSeEh/R5bHONunD7jy tFFRRy0fYZSw9aEGf40UenKLDOS0Z4Blqj9iaGNG8MJczUUnLP0PSKmP0gXb13g6 GqpKyEdOFPbh+UkJnN4qTpjIN8eV80oUAhzz0tIavF1AQqt8GBS0K1RQInccyrhv V172tGA32Ojwi8XJ9SzgIWlwnA2fYNzajDkK8/u+eNcS2YH1htyFSIvPuO0JgFaH XjpuRSSgU0lyAL/60wgv0H44QlZLtFA= -----END CERTIFICATE-----Generated at Mon Aug 4 16:03:12 2025 by rpki-client