$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/65f28c65-a3fb-31c9-a14c-d600b6ec4237.roa File: 65f28c65-a3fb-31c9-a14c-d600b6ec4237.roa (raw, json) Hash identifier: opCpJvBstPYUXLLTjTxYTwDXG767uvua+tBK3hihzBs= Subject key identifier: D2:9E:AB:A4:20:58:19:E1:2D:6C:0F:2E:9B:73:64:CC:26:A0:20:BC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EB8754CBA384A925BB3F30 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/65f28c65-a3fb-31c9-a14c-d600b6ec4237.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33490 IP address blocks: 24.21.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:eb:87:54:cb:a3:84:a9:25:bb:3f:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=c349dfbf-01e6-4ece-b277-f6593bdf908f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8a:6c:ac:3a:cd:6c:ee:47:7a:37:d7:91:37: 8d:37:fe:a7:00:91:d2:11:82:25:c1:89:90:ca:4c: fd:6b:57:d3:90:6c:64:b9:06:a3:65:e4:ef:7f:e0: 6f:d3:d2:5b:31:a8:96:49:26:cb:ac:02:2f:48:2a: 5d:ac:04:07:2b:fb:e2:c8:58:17:27:53:fb:95:47: 21:a9:4f:be:2c:9f:2b:37:11:bd:fd:b5:49:bf:15: ae:a7:c8:de:fa:ec:e9:3b:b7:83:e4:e7:32:d5:66: 4c:f4:0c:1d:63:4f:fd:c0:b1:8e:54:7b:fb:d9:17: 09:6d:e9:08:9f:d0:4d:2b:43:3a:6d:c8:6e:c7:d3: 38:57:78:6b:51:43:1f:f1:be:b3:2e:de:ee:be:17: 23:0b:9c:60:1e:a2:ea:10:78:d2:aa:0a:48:04:f1: e0:d7:55:b8:14:a5:15:af:a0:ce:30:43:f5:83:96: 10:cd:9c:7b:1c:76:95:7f:c5:0b:1f:05:73:ee:15: cd:3e:8e:aa:15:4f:43:3c:61:20:9e:40:82:92:36: ac:3d:97:25:cd:53:26:e8:d3:da:46:73:e9:9f:a8: 24:05:33:5a:5e:3e:19:a6:9a:1d:ba:69:ed:07:44: f3:9b:07:a5:7c:6c:b2:34:3e:1c:d1:c3:0b:d3:58: a6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:9E:AB:A4:20:58:19:E1:2D:6C:0F:2E:9B:73:64:CC:26:A0:20:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/65f28c65-a3fb-31c9-a14c-d600b6ec4237.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.21.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:9c:d9:12:48:22:b7:15:e3:65:8e:d6:b2:01:3e:c3:71:e1: f3:b3:3e:ea:b2:dc:36:36:6f:63:ac:01:5e:74:11:32:56:5d: 91:c9:d5:77:fd:85:8d:de:6f:e3:8c:b5:60:a9:17:ff:0b:32: fc:18:be:f6:d3:c4:3d:49:3d:98:7d:38:54:f2:94:e7:e3:5a: d7:c3:71:86:b6:1f:32:fa:2d:bd:77:38:73:29:33:5b:2f:16: 52:a4:2a:2d:35:a7:5f:f8:cb:31:5d:10:9a:e3:4a:50:b7:2c: 4f:ec:86:58:b7:38:23:80:30:03:82:9b:47:5d:61:10:55:a3: 0d:41:97:fa:74:ff:99:e0:da:78:fb:a5:67:ac:b2:a8:b2:7b: 6d:5a:ba:34:d6:3c:0f:31:4c:39:c9:7e:38:68:5d:a5:27:6a: af:97:c1:f9:ee:c9:18:8e:6c:14:f7:a0:ff:87:47:e7:fb:fc: 5d:2e:58:09:7f:66:cf:c9:62:b2:2c:e4:b0:9d:8d:ce:12:88: ff:a6:57:c3:99:48:45:31:25:f1:9c:a0:d1:ad:9c:c2:a5:2d: d1:bd:6d:bd:d8:8e:82:63:02:ea:7d:16:f8:d0:4b:4e:6c:0b: ff:fb:c4:6a:1e:10:b4:08:4a:05:ff:c2:bb:91:1c:a4:4d:a6: fd:87:2e:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq064dUy6OEqSW7PzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk YzM0OWRmYmYtMDFlNi00ZWNlLWIyNzctZjY1OTNiZGY5MDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYpsrDrNbO5HejfXkTeNN/6nAJHSEYIlwYmQ ykz9a1fTkGxkuQajZeTvf+Bv09JbMaiWSSbLrAIvSCpdrAQHK/viyFgXJ1P7lUch qU++LJ8rNxG9/bVJvxWup8je+uzpO7eD5Ocy1WZM9AwdY0/9wLGOVHv72RcJbekI n9BNK0M6bchux9M4V3hrUUMf8b6zLt7uvhcjC5xgHqLqEHjSqgpIBPHg11W4FKUV r6DOMEP1g5YQzZx7HHaVf8ULHwVz7hXNPo6qFU9DPGEgnkCCkjasPZclzVMm6NPa RnPpn6gkBTNaXj4ZppodumntB0TzmwelfGyyND4c0cML01imywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNKeq6QgWBnhLWwPLptzZMwmoCC8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjVmMjhjNjUtYTNmYi0z MWM5LWExNGMtZDYwMGI2ZWM0MjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGBVyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKc2RJIIrcV42WO1rIBPsNx4fOzPuqy3DY2b2OsAV50ETJWXZHJ1Xf9 hY3eb+OMtWCpF/8LMvwYvvbTxD1JPZh9OFTylOfjWtfDcYa2HzL6Lb13OHMpM1sv FlKkKi01p1/4yzFdEJrjSlC3LE/shli3OCOAMAOCm0ddYRBVow1Bl/p0/5ng2nj7 pWessqiye21aujTWPA8xTDnJfjhoXaUnaq+XwfnuyRiObBT3oP+HR+f7/F0uWAl/ Zs/JYrIs5LCdjc4SiP+mV8OZSEUxJfGcoNGtnMKlLdG9bb3YjoJjAup9FvjQS05s C//7xGoeELQISgX/wruRHKRNpv2HLls= -----END CERTIFICATE-----Generated at Mon Aug 4 14:15:29 2025 by rpki-client