$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8de973d1-f766-3372-a703-a68bb79b6ede.roa File: 8de973d1-f766-3372-a703-a68bb79b6ede.roa (raw, json) Hash identifier: 6I6V3NkuTsewYhsgI8gxet5+xKjyrLSHWEZaj1/5Uf4= Subject key identifier: 48:17:2A:22:5B:01:33:B8:C1:AA:C7:E1:1C:DE:8B:02:DD:C2:73:30 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB220E750AD34E5B5DFDBAEE0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8de973d1-f766-3372-a703-a68bb79b6ede.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 13367 IP address blocks: 24.118.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:20:e7:50:ad:34:e5:b5:df:db:ae:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=c9e150e1-b98a-47cb-bd24-352680bc8720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e6:eb:8f:e4:a1:d8:fa:2a:d4:6c:41:ad:75: 06:61:96:a8:ac:85:b1:08:97:d9:a3:5d:0a:2a:69: bf:24:77:36:38:4a:65:ee:3f:2e:c6:5b:6d:f7:f1: 65:3d:f1:c3:3d:46:80:15:f7:95:f3:e9:4f:1f:f6: 92:8c:e9:ec:4d:46:be:67:c0:7e:39:54:a7:28:0c: a1:dc:27:ae:38:77:30:85:0a:98:2c:c5:03:95:8e: d7:5c:b0:e2:13:8e:a1:de:01:8a:73:73:5e:a3:49: 87:53:0e:b7:00:32:48:df:95:e7:ed:63:43:1f:60: 14:6f:4c:c2:b1:d4:09:c6:9a:e7:2a:30:2e:27:91: 9b:70:8a:0e:8f:a2:4f:7f:fc:b3:b7:0d:3e:be:6b: 40:eb:b6:41:45:ee:ba:52:55:1b:38:53:f0:6e:a1: db:01:fc:be:8f:2e:87:8b:79:04:66:49:d2:69:4f: b2:1c:09:59:63:a0:ad:34:c5:24:45:1d:68:2f:99: 46:57:26:22:17:0b:1a:ba:dc:4a:5a:71:36:12:f2: 1a:6f:0d:da:52:b6:72:5e:cc:0b:69:83:55:14:b2: 8b:6b:34:5a:bb:cc:b3:93:d2:34:43:b7:8e:11:fa: 88:d2:ea:84:b6:9d:e8:ef:ef:44:ff:7f:d3:6a:90: f8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:17:2A:22:5B:01:33:B8:C1:AA:C7:E1:1C:DE:8B:02:DD:C2:73:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8de973d1-f766-3372-a703-a68bb79b6ede.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.118.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:41:a8:de:ea:bc:c0:e9:8a:cb:b6:6c:dd:92:39:0d:81:9f: 37:f3:6d:69:8d:86:9c:2c:1c:3f:7d:b9:9b:4d:6d:3d:20:1b: c3:88:3a:97:da:cc:5d:78:65:98:32:69:ff:fe:2e:71:53:19: 2e:f6:95:24:50:e9:e3:da:18:ad:d6:f1:33:2c:bf:e6:c5:36: bc:b4:ec:33:9b:51:63:25:9d:30:55:26:1a:60:8e:0c:34:90: ed:c7:59:a3:57:00:dd:ce:83:8d:c8:eb:b7:5c:7a:82:03:fe: e9:45:92:ce:45:9f:7d:bf:e0:7d:15:e8:fb:ea:a2:cb:de:09: e0:9e:29:70:e2:7c:46:23:a7:27:c4:78:7e:f0:c6:04:43:42: 9f:db:e9:42:73:c0:e0:63:54:09:84:ce:df:2d:cb:c9:27:8e: 62:47:a7:c7:a9:ba:06:af:1f:4a:f9:4d:ec:98:fd:1d:51:81: 25:bd:27:c4:db:97:43:ee:39:bc:e0:f3:6c:d0:60:de:c3:48: 7e:f1:51:11:04:f0:07:31:9e:7b:3f:18:f6:2c:e3:51:8b:6c: 05:38:4a:5a:da:53:86:81:45:c4:7e:98:18:c2:e6:ca:61:e9: 24:fa:f1:4c:52:8a:e8:cb:b8:24:bf:e7:6c:cf:df:ae:0f:1a: 96:e4:f5:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIOdQrTTltd/bruAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk YzllMTUwZTEtYjk4YS00N2NiLWJkMjQtMzUyNjgwYmM4NzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+brj+Sh2Poq1GxBrXUGYZaorIWxCJfZo10K Kmm/JHc2OEpl7j8uxltt9/FlPfHDPUaAFfeV8+lPH/aSjOnsTUa+Z8B+OVSnKAyh 3CeuOHcwhQqYLMUDlY7XXLDiE46h3gGKc3Neo0mHUw63ADJI35Xn7WNDH2AUb0zC sdQJxprnKjAuJ5GbcIoOj6JPf/yztw0+vmtA67ZBRe66UlUbOFPwbqHbAfy+jy6H i3kEZknSaU+yHAlZY6CtNMUkRR1oL5lGVyYiFwsautxKWnE2EvIabw3aUrZyXswL aYNVFLKLazRau8yzk9I0Q7eOEfqI0uqEtp3o7+9E/3/TapD4RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEgXKiJbATO4warH4RzeiwLdwnMwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGRlOTczZDEtZjc2Ni0z MzcyLWE3MDMtYTY4YmI3OWI2ZWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGHaUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJBqN7qvMDpisu2bN2SOQ2BnzfzbWmNhpwsHD99uZtNbT0gG8OIOpfa zF14ZZgyaf/+LnFTGS72lSRQ6ePaGK3W8TMsv+bFNry07DObUWMlnTBVJhpgjgw0 kO3HWaNXAN3Og43I67dceoID/ulFks5Fn32/4H0V6PvqosveCeCeKXDifEYjpyfE eH7wxgRDQp/b6UJzwOBjVAmEzt8ty8knjmJHp8epugavH0r5TeyY/R1RgSW9J8Tb l0PuObzg82zQYN7DSH7xUREE8Acxnns/GPYs41GLbAU4SlraU4aBRcR+mBjC5sph 6ST68UxSiujLuCS/52zP364PGpbk9TE= -----END CERTIFICATE-----Generated at Wed Aug 6 18:34:45 2025 by rpki-client