$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a052fa43-81ca-302d-b803-a173b9f06644.roa File: a052fa43-81ca-302d-b803-a173b9f06644.roa (raw, json) Hash identifier: kpQkJuwEsfdrXtde3m4wrXDKTZ1m3rt3KQCBtOjz8Os= Subject key identifier: C9:BB:1F:31:11:0C:40:46:CD:40:23:85:C1:DB:1C:2D:AE:28:4C:89 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4ED4BC026D769BC37F64F30 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a052fa43-81ca-302d-b803-a173b9f06644.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33490 IP address blocks: 24.21.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ed:4b:c0:26:d7:69:bc:37:f6:4f:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=a460be3f-ff92-4816-b52b-f03caa47dc30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:86:a4:0f:ac:80:73:ca:14:b8:38:5d:d2:57: 83:b7:aa:00:e8:07:23:5c:55:da:9d:32:f7:40:a4: 50:5d:85:cd:46:d0:d1:be:ec:cc:66:81:eb:cf:33: 48:a0:75:06:35:79:19:e7:72:12:95:6a:93:f5:60: ac:0f:d6:a0:b8:26:01:b7:17:15:ed:e0:04:be:d6: 8c:dc:eb:d5:bf:77:cb:80:c0:ab:ab:a3:03:cb:2c: 6d:6b:fe:54:23:30:0e:83:f2:a4:74:26:60:8e:0a: 2c:4c:76:08:73:e6:f1:57:2d:80:97:3b:25:8e:dc: 84:5a:d7:68:13:ee:bf:26:73:7f:d9:61:d2:0e:02: 22:d8:a6:9b:e1:e4:b3:c9:6e:4b:12:ba:e8:a2:0d: 48:15:37:6b:b0:38:13:8c:5e:1d:e0:86:68:bb:5b: cd:02:f8:94:3c:61:e6:62:7f:cb:c3:f1:95:0e:7a: 36:e3:86:02:8e:26:8f:58:ad:75:11:79:51:49:fb: 85:b4:8b:4d:60:47:4c:55:e6:94:7c:0a:7e:66:fa: 4d:5d:ba:7f:60:63:2b:4e:1b:a1:f3:1e:94:27:03: 83:1b:01:bf:bb:59:67:cc:25:ae:91:95:65:91:27: f1:d2:dd:b5:a9:f6:80:57:d3:c7:d0:c7:8c:a5:07: e0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:BB:1F:31:11:0C:40:46:CD:40:23:85:C1:DB:1C:2D:AE:28:4C:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a052fa43-81ca-302d-b803-a173b9f06644.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.21.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d7:1d:19:64:f6:fd:a9:59:bf:b7:44:1a:84:6c:82:02:bf:68: c1:80:65:5c:97:bc:24:97:3c:c6:b7:57:7c:31:15:20:d2:b2: 5d:8a:71:13:e6:a4:16:4b:0c:c4:58:cd:39:07:1e:48:86:f5: 14:30:f5:d6:1b:17:97:80:d1:5c:65:90:07:88:d9:39:95:cd: a8:46:63:8b:ee:44:42:11:09:b6:de:5c:d9:ed:ff:13:b8:0a: 29:b6:6d:09:63:c4:81:c5:02:ce:ed:0d:eb:05:d1:fa:98:e5: bd:3a:65:6d:cc:ed:ed:c1:cc:c7:44:ab:4a:6e:ec:ea:00:c9: 40:5c:8c:8c:90:80:3e:1b:c7:17:08:eb:df:1b:f7:c2:7e:13: a4:eb:b7:52:00:b8:06:79:2b:5d:54:21:1a:bf:5b:86:30:af: c8:eb:cd:e1:c3:b8:bc:dc:77:ce:a9:f7:7f:3e:f7:d1:63:9e: ea:e6:73:c7:6f:6f:ab:c7:d0:ef:39:3f:7d:55:4f:bd:64:ac: de:72:19:6e:eb:d2:2b:12:2f:10:0e:2b:38:f7:6d:66:57:b6: 93:14:ab:5d:fd:f5:bc:17:4f:6e:e8:43:fe:ea:f5:c6:0d:61: 33:05:0e:ed:18:66:5e:e0:13:c5:e6:6d:ed:55:a5:50:0d:5b: e9:e9:fe:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07UvAJtdpvDf2TzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk YTQ2MGJlM2YtZmY5Mi00ODE2LWI1MmItZjAzY2FhNDdkYzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIakD6yAc8oUuDhd0leDt6oA6AcjXFXanTL3 QKRQXYXNRtDRvuzMZoHrzzNIoHUGNXkZ53ISlWqT9WCsD9aguCYBtxcV7eAEvtaM 3OvVv3fLgMCrq6MDyyxta/5UIzAOg/KkdCZgjgosTHYIc+bxVy2AlzsljtyEWtdo E+6/JnN/2WHSDgIi2Kab4eSzyW5LErroog1IFTdrsDgTjF4d4IZou1vNAviUPGHm Yn/Lw/GVDno244YCjiaPWK11EXlRSfuFtItNYEdMVeaUfAp+ZvpNXbp/YGMrThuh 8x6UJwODGwG/u1lnzCWukZVlkSfx0t21qfaAV9PH0MeMpQfgIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMm7HzERDEBGzUAjhcHbHC2uKEyJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTA1MmZhNDMtODFjYS0z MDJkLWI4MDMtYTE3M2I5ZjA2NjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGBWIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANcdGWT2/alZv7dEGoRsggK/aMGAZVyXvCSXPMa3V3wxFSDSsl2KcRPm pBZLDMRYzTkHHkiG9RQw9dYbF5eA0VxlkAeI2TmVzahGY4vuREIRCbbeXNnt/xO4 Cim2bQljxIHFAs7tDesF0fqY5b06ZW3M7e3BzMdEq0pu7OoAyUBcjIyQgD4bxxcI 698b98J+E6Trt1IAuAZ5K11UIRq/W4Ywr8jrzeHDuLzcd86p938+99Fjnurmc8dv b6vH0O85P31VT71krN5yGW7r0isSLxAOKzj3bWZXtpMUq1399bwXT27oQ/7q9cYN YTMFDu0YZl7gE8Xmbe1VpVANW+np/oc= -----END CERTIFICATE-----Generated at Thu Aug 7 04:40:27 2025 by rpki-client