$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85633cc9-d5f0-3194-bfa9-ecff3bcea81e.roa File: 85633cc9-d5f0-3194-bfa9-ecff3bcea81e.roa (raw, json) Hash identifier: 8V4XtRmX9Z65Z76mY2tdytsdlFo5DzRQSLjqxLLTd5g= Subject key identifier: 6E:A3:57:8A:EC:61:13:5E:D3:02:FC:78:CD:CB:CD:9D:C7:60:7C:3A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EC876C55D74D3C34F92DE0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85633cc9-d5f0-3194-bfa9-ecff3bcea81e.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33668 IP address blocks: 24.128.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ec:87:6c:55:d7:4d:3c:34:f9:2d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=d5a29107-5356-4b24-8094-99c5faf7a728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9c:cb:00:a7:29:b1:d3:79:65:7e:9a:97:4c: c9:e3:7e:ea:83:4f:d0:6b:43:e2:57:c9:48:98:31: 14:cc:2f:21:d4:d2:68:5a:80:90:97:64:0a:e7:d7: f7:bb:f2:49:74:c0:1b:27:3c:42:47:6e:92:66:97: 0b:a1:72:fa:2f:69:dd:ee:55:5c:0a:13:38:bb:3b: 76:61:07:3e:bf:4d:09:ab:2f:0d:55:75:49:29:a6: 71:71:e6:e3:e9:52:ab:d3:6a:3c:6c:9c:0b:59:af: 86:71:d7:c5:20:e5:a2:09:b5:17:ae:e6:be:be:91: b0:85:15:9f:ab:05:dd:8e:9f:3f:16:9d:04:42:3b: 1f:1c:a8:8d:26:52:1e:a6:82:41:1d:92:45:11:9f: ca:47:33:5c:20:b4:04:ca:9a:0c:e2:d3:54:27:e3: bc:7b:83:2c:49:b4:9c:d6:59:cc:ca:e6:70:d5:1c: f6:14:26:45:5e:ce:87:14:78:f1:8d:f8:06:4e:51: c3:c7:97:0b:be:01:d4:b1:7b:ac:b9:4f:f3:5e:e5: 33:c4:3c:f3:c5:f9:05:bc:10:b7:91:6d:1f:7a:22: 0d:8d:bf:63:5a:9e:36:56:87:e3:d8:4a:e3:7a:28: 42:0e:1e:6a:64:0a:c4:a6:6b:b4:6d:70:61:6a:b5: 17:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:A3:57:8A:EC:61:13:5E:D3:02:FC:78:CD:CB:CD:9D:C7:60:7C:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85633cc9-d5f0-3194-bfa9-ecff3bcea81e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.128.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:a1:87:ac:88:54:c6:77:8d:0f:46:d6:3f:92:5c:c7:e3:ad: de:88:b7:63:2f:35:97:21:cb:85:40:9e:11:f7:c7:1c:fc:b3: 81:78:f0:03:a8:f4:33:d4:9f:f3:a9:dc:ae:a0:4f:59:6c:d4: 0b:29:8b:a8:95:55:9c:79:74:3b:88:2b:ef:2f:a1:27:ef:61: 5e:f9:93:55:3d:9c:c0:a8:ef:d2:39:b4:87:a7:99:d4:98:0a: b4:db:25:0e:f6:f0:31:02:cb:e8:0c:d8:df:fd:65:38:c6:83: 46:fc:f1:1f:c9:88:b2:aa:f3:f3:c3:53:91:73:18:06:00:0b: 0d:6f:ca:3c:7f:b1:76:d8:96:a6:16:ae:ed:0a:1d:0c:80:3f: 43:d3:d4:79:7a:43:06:b2:10:7a:1f:80:3a:de:91:22:bb:9c: 23:16:79:43:67:bc:f2:11:f0:57:3a:bf:52:2b:43:d7:00:8e: 30:70:46:81:ba:38:67:d1:40:9b:a2:2c:c8:8d:1e:a3:e4:13: 11:61:a3:dc:a1:b5:59:92:25:1d:ee:b1:0f:a6:94:1a:fc:24: 24:4c:6d:3f:e2:41:c0:32:ea:db:6b:34:35:6f:45:e0:f7:9f: 41:67:c7:ba:4d:c0:5f:eb:5d:2d:c5:a8:e7:46:20:0b:52:fe: 6d:f0:41:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07IdsVddNPDT5LeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk ZDVhMjkxMDctNTM1Ni00YjI0LTgwOTQtOTljNWZhZjdhNzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZzLAKcpsdN5ZX6al0zJ437qg0/Qa0PiV8lI mDEUzC8h1NJoWoCQl2QK59f3u/JJdMAbJzxCR26SZpcLoXL6L2nd7lVcChM4uzt2 YQc+v00Jqy8NVXVJKaZxcebj6VKr02o8bJwLWa+GcdfFIOWiCbUXrua+vpGwhRWf qwXdjp8/Fp0EQjsfHKiNJlIepoJBHZJFEZ/KRzNcILQEypoM4tNUJ+O8e4MsSbSc 1lnMyuZw1Rz2FCZFXs6HFHjxjfgGTlHDx5cLvgHUsXusuU/zXuUzxDzzxfkFvBC3 kW0feiINjb9jWp42Vofj2ErjeihCDh5qZArEpmu0bXBharUX5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6jV4rsYRNe0wL8eM3LzZ3HYHw6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODU2MzNjYzktZDVmMC0z MTk0LWJmYTktZWNmZjNiY2VhODFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGIC8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEChh6yIVMZ3jQ9G1j+SXMfjrd6It2MvNZchy4VAnhH3xxz8s4F48AOo 9DPUn/Op3K6gT1ls1Aspi6iVVZx5dDuIK+8voSfvYV75k1U9nMCo79I5tIenmdSY CrTbJQ728DECy+gM2N/9ZTjGg0b88R/JiLKq8/PDU5FzGAYACw1vyjx/sXbYlqYW ru0KHQyAP0PT1Hl6QwayEHofgDrekSK7nCMWeUNnvPIR8Fc6v1IrQ9cAjjBwRoG6 OGfRQJuiLMiNHqPkExFho9yhtVmSJR3usQ+mlBr8JCRMbT/iQcAy6ttrNDVvReD3 n0Fnx7pNwF/rXS3FqOdGIAtS/m3wQRE= -----END CERTIFICATE-----Generated at Wed Aug 6 09:34:51 2025 by rpki-client