$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b7d0bda-909f-3e3a-93a3-58cfa7e4b48c.roa File: 5b7d0bda-909f-3e3a-93a3-58cfa7e4b48c.roa (raw, json) Hash identifier: tXyzyQqvkmMQYqBA0421MSEYWtD5y3rPVpMA0G+NrwE= Subject key identifier: CB:0C:A4:53:CC:D1:AC:FF:A5:5D:BE:ED:CE:E8:1F:49:F5:9F:84:0F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EB8979FDF9439F5CC27B00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b7d0bda-909f-3e3a-93a3-58cfa7e4b48c.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33490 IP address blocks: 24.21.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:eb:89:79:fd:f9:43:9f:5c:c2:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=b5cc08a3-423c-4325-a5c3-f497b55617ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:59:d3:6b:ff:28:62:7e:61:76:73:73:28:d8: 34:3b:7f:8f:e6:b8:56:01:5f:99:b6:9f:24:31:e6: d5:1a:b0:28:1b:2a:84:64:17:c3:82:67:9e:b0:30: 35:80:6d:55:d5:1f:de:ec:40:2e:85:be:a9:d6:fa: 71:1a:77:53:79:04:65:1b:95:48:bf:73:98:25:ad: 31:0d:25:fe:ac:17:bd:36:a5:b5:d1:b9:43:2c:e4: a7:9f:86:2a:34:f5:e7:04:c7:46:ec:cd:36:63:4a: 7e:f3:a3:94:df:eb:e2:e5:e8:f3:86:35:89:2d:92: 58:1a:2f:df:3e:aa:75:a4:c3:7e:75:73:16:13:83: bf:78:56:67:e3:e4:1f:a7:5c:b6:bb:17:58:60:d5: 77:5b:42:5f:bf:3d:31:80:fc:eb:80:41:85:ac:f7: 57:eb:91:24:f9:d0:07:9d:c5:bd:9c:61:4c:ed:cd: 59:87:ee:c4:a1:f7:6d:09:06:e7:fe:cb:3f:6e:30: 1b:93:91:bc:70:eb:8a:f1:1e:4c:d1:f9:be:61:33: a3:e8:93:cf:8c:96:5c:c2:0f:91:e2:7b:80:16:c7: 7c:e4:f9:cb:14:4c:32:e1:20:c1:3d:67:ed:ad:ec: ed:86:4e:8b:10:23:70:db:81:77:9e:b7:22:03:29: 3b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:0C:A4:53:CC:D1:AC:FF:A5:5D:BE:ED:CE:E8:1F:49:F5:9F:84:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b7d0bda-909f-3e3a-93a3-58cfa7e4b48c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.21.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:96:06:bf:fb:af:66:82:d7:e0:1c:c2:db:45:af:c8:f3:1e: d8:85:a2:f0:52:8b:e9:ad:bf:46:99:c4:af:db:b7:69:aa:38: 1e:2d:8c:23:70:0a:49:68:72:58:88:f2:8a:ed:2c:f9:87:8d: ff:34:bd:74:86:7f:b2:40:52:35:19:36:d9:bb:25:79:dd:86: c9:da:26:7b:59:0e:0d:48:de:9f:bc:8f:2a:78:7a:92:53:a7: 3c:d6:d0:10:cc:c4:07:59:c0:ec:81:a3:ed:f7:58:33:05:db: e1:06:33:06:cd:6f:f4:75:ce:b7:9c:3b:bf:a1:44:95:2a:2e: 8c:7f:b8:fb:69:1f:60:71:b0:b6:57:97:78:92:b6:ba:d4:75: 03:fa:5f:b0:45:63:9b:cb:b0:24:c4:a2:59:77:19:86:2e:7c: d3:d1:4a:2c:66:d7:18:58:91:d2:91:91:56:43:9f:c8:66:72: 71:2c:d0:bf:28:86:e0:9f:4c:47:b8:27:78:4c:a7:fe:d3:89: c4:5c:43:20:76:9c:c1:58:4a:75:8d:10:22:81:60:82:c8:0f: 7d:60:c2:e8:3d:0f:66:1b:eb:f1:42:54:11:8c:19:ef:67:55: 15:f2:dc:fe:b3:cd:7c:59:65:ee:66:98:0b:c1:db:b5:96:e3: 38:ad:65:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq064l5/flDn1zCewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk YjVjYzA4YTMtNDIzYy00MzI1LWE1YzMtZjQ5N2I1NTYxN2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVnTa/8oYn5hdnNzKNg0O3+P5rhWAV+Ztp8k MebVGrAoGyqEZBfDgmeesDA1gG1V1R/e7EAuhb6p1vpxGndTeQRlG5VIv3OYJa0x DSX+rBe9NqW10blDLOSnn4YqNPXnBMdG7M02Y0p+86OU3+vi5ejzhjWJLZJYGi/f Pqp1pMN+dXMWE4O/eFZn4+Qfp1y2uxdYYNV3W0Jfvz0xgPzrgEGFrPdX65Ek+dAH ncW9nGFM7c1Zh+7EofdtCQbn/ss/bjAbk5G8cOuK8R5M0fm+YTOj6JPPjJZcwg+R 4nuAFsd85PnLFEwy4SDBPWftrezthk6LECNw24F3nrciAyk7RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMsMpFPM0az/pV2+7c7oH0n1n4QPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWI3ZDBiZGEtOTA5Zi0z ZTNhLTkzYTMtNThjZmE3ZTRiNDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGBX4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyWBr/7r2aC1+AcwttFr8jzHtiFovBSi+mtv0aZxK/bt2mqOB4tjCNw CklocliI8ortLPmHjf80vXSGf7JAUjUZNtm7JXndhsnaJntZDg1I3p+8jyp4epJT pzzW0BDMxAdZwOyBo+33WDMF2+EGMwbNb/R1zrecO7+hRJUqLox/uPtpH2BxsLZX l3iStrrUdQP6X7BFY5vLsCTEoll3GYYufNPRSixm1xhYkdKRkVZDn8hmcnEs0L8o huCfTEe4J3hMp/7TicRcQyB2nMFYSnWNECKBYILID31gwug9D2Yb6/FCVBGMGe9n VRXy3P6zzXxZZe5mmAvB27WW4zitZbs= -----END CERTIFICATE-----Generated at Wed Aug 6 04:13:44 2025 by rpki-client