$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ddf7c39-6c6c-3a2c-886b-3e4e779757af.roa File: 5ddf7c39-6c6c-3a2c-886b-3e4e779757af.roa (raw, json) Hash identifier: 0AvTSR/v+bUWtgV+dQ3a9fjRGleZ01snfd5gORxMBhw= Subject key identifier: AF:AE:2D:55:94:F5:CF:57:3A:EE:B9:5F:5C:88:3D:83:0D:55:F7:9C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4ED4AB1A468999C0E15E500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ddf7c39-6c6c-3a2c-886b-3e4e779757af.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33490 IP address blocks: 24.20.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ed:4a:b1:a4:68:99:9c:0e:15:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=0c469fda-2df7-4cb9-9d59-11f380f48405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:3b:f7:5a:88:0c:56:65:d1:85:57:cf:8f:50: 0c:0d:13:80:82:8f:0b:c8:8d:eb:34:a5:b4:4e:f4: a7:96:f3:9c:ac:92:3f:05:3d:0f:f6:88:99:b3:09: bc:e8:3f:db:06:87:85:25:37:40:91:1d:21:79:eb: d8:d0:97:bc:ff:b7:5c:a3:f2:b1:91:f0:64:29:99: 15:d1:ab:30:cc:f2:ed:f7:fe:94:cd:85:84:77:14: 6d:c8:fb:ad:04:97:ea:1d:fb:49:3e:6a:18:72:3e: 35:52:66:2f:a1:a2:23:ed:9f:7a:5d:3f:49:41:23: 29:43:f5:9c:e3:60:1c:64:d1:6e:67:3c:6d:b5:7e: 01:18:71:ae:88:92:73:34:1e:e8:4f:98:12:d9:82: 3f:08:f3:a3:5b:fe:a6:10:e4:d0:68:f3:ab:5c:90: 7d:25:6e:44:c7:31:5c:5c:f0:dd:17:e0:cb:7e:37: ec:88:1d:39:e5:d6:73:81:e9:98:35:cd:98:99:2f: aa:61:8d:97:55:da:2b:43:37:9f:bc:0a:dc:7c:74: 5c:a6:54:23:74:fe:9b:eb:fd:14:e6:39:67:5f:bf: 0e:0b:23:06:cc:87:07:51:7a:fb:ed:27:31:ce:cc: f9:4b:f1:02:37:c6:dd:e4:5c:53:c7:ac:fd:e7:7a: fb:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:AE:2D:55:94:F5:CF:57:3A:EE:B9:5F:5C:88:3D:83:0D:55:F7:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ddf7c39-6c6c-3a2c-886b-3e4e779757af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.20.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:df:4a:22:31:07:fa:7d:6e:da:3f:03:7b:b7:7b:f1:2c:82: 6e:f3:88:2a:30:15:02:a3:27:15:2d:95:af:21:59:67:1f:49: 2b:b8:ec:fb:37:15:0b:2b:2c:74:75:87:f7:0c:04:d1:b3:d4: 62:b0:ad:8d:fc:7d:81:f9:aa:d0:6b:40:46:ff:ba:b1:45:6a: 4e:48:e5:c6:a8:78:5e:4e:b6:bb:dd:ba:f6:44:e9:21:10:f4: 20:2a:45:fa:22:cb:28:d2:fe:5c:a9:b5:fc:d8:59:c2:db:aa: e2:0e:01:f0:1d:13:4f:4b:5f:34:57:a5:64:c1:f6:0c:32:73: 1b:f2:6b:7f:5e:db:35:b0:be:2d:94:0b:15:01:d0:fe:62:fe: ea:6f:61:df:6b:dc:e1:91:bc:bf:26:54:14:59:2e:bc:ba:4d: f4:6f:15:2d:f7:14:6b:8e:c3:24:37:e6:82:96:7b:83:8c:22: 01:62:62:6d:8d:73:45:4f:e9:02:63:6d:fc:e6:7c:3d:3b:68: 43:7d:c5:02:eb:b5:82:f8:0b:e0:b5:e0:c3:d1:7d:52:5b:77: 77:78:f2:bb:81:a8:43:08:09:8b:4d:5c:9a:33:e9:19:59:92: 6d:6c:cd:6c:91:31:67:80:79:27:be:f1:ff:87:4f:bd:a3:a4: 6d:06:ff:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07UqxpGiZnA4V5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk MGM0NjlmZGEtMmRmNy00Y2I5LTlkNTktMTFmMzgwZjQ4NDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDv3WogMVmXRhVfPj1AMDROAgo8LyI3rNKW0 TvSnlvOcrJI/BT0P9oiZswm86D/bBoeFJTdAkR0heevY0Je8/7dco/KxkfBkKZkV 0aswzPLt9/6UzYWEdxRtyPutBJfqHftJPmoYcj41UmYvoaIj7Z96XT9JQSMpQ/Wc 42AcZNFuZzxttX4BGHGuiJJzNB7oT5gS2YI/CPOjW/6mEOTQaPOrXJB9JW5ExzFc XPDdF+DLfjfsiB055dZzgemYNc2YmS+qYY2XVdorQzefvArcfHRcplQjdP6b6/0U 5jlnX78OCyMGzIcHUXr77Scxzsz5S/ECN8bd5FxTx6z953r7cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+uLVWU9c9XOu65X1yIPYMNVfecMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWRkZjdjMzktNmM2Yy0z YTJjLTg4NmItM2U0ZTc3OTc1N2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGBQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrfSiIxB/p9bto/A3u3e/Esgm7ziCowFQKjJxUtla8hWWcfSSu47Ps3 FQsrLHR1h/cMBNGz1GKwrY38fYH5qtBrQEb/urFFak5I5caoeF5OtrvduvZE6SEQ 9CAqRfoiyyjS/lyptfzYWcLbquIOAfAdE09LXzRXpWTB9gwycxvya39e2zWwvi2U CxUB0P5i/upvYd9r3OGRvL8mVBRZLry6TfRvFS33FGuOwyQ35oKWe4OMIgFiYm2N c0VP6QJjbfzmfD07aEN9xQLrtYL4C+C14MPRfVJbd3d48ruBqEMICYtNXJoz6RlZ km1szWyRMWeAeSe+8f+HT72jpG0G/74= -----END CERTIFICATE-----Generated at Mon Aug 4 22:27:44 2025 by rpki-client