$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3a91960-d454-3be0-a2fb-0a5e4d7975a9.roa File: d3a91960-d454-3be0-a2fb-0a5e4d7975a9.roa (raw, json) Hash identifier: IiLTmo+D5bLcTWUXv6os3DE4U1gfHhpT7NcOzBQ4KcE= Subject key identifier: CA:79:ED:15:CF:52:1B:82:94:98:DC:3A:CB:52:B3:43:06:97:55:79 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4ED4A4BBD4733AC533B94C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3a91960-d454-3be0-a2fb-0a5e4d7975a9.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33490 IP address blocks: 24.20.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ed:4a:4b:bd:47:33:ac:53:3b:94:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=6ca46269-3c29-4973-a800-80be4567646a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:10:d5:a5:fb:5b:ee:92:ac:02:97:6e:ca:50: 88:a2:34:23:d7:ce:a6:58:51:8a:98:87:98:c2:a7: 02:a4:5a:6d:50:29:e7:da:dd:45:ce:88:bd:83:3f: 89:df:9c:88:f6:1c:57:fe:26:88:7e:33:e1:bf:e9: ad:ca:a2:e2:3d:68:b5:3a:bd:dd:06:13:28:dc:1f: 73:aa:e1:29:17:df:88:8b:25:0c:00:b7:ef:17:1b: 25:cd:ca:98:37:d1:16:dc:b9:e9:47:3c:79:f8:3f: 40:2e:e2:04:63:ac:9d:2c:7c:32:56:be:7b:c9:44: c9:58:fd:84:cc:80:6c:1d:fd:aa:b0:02:34:70:88: cc:87:7f:02:e1:ad:3f:66:0a:c2:bb:32:45:90:78: 49:10:49:be:28:ca:a3:70:10:4c:e1:24:e1:05:23: 28:68:14:13:08:c7:34:c2:32:bf:59:10:10:c2:b0: b5:7d:fe:fc:99:48:f3:cd:6a:c8:af:2d:22:85:66: 05:5b:69:5c:6a:25:8a:94:33:ed:ca:3e:f3:da:bb: 4c:47:81:81:be:72:39:07:d2:96:59:21:fb:13:20: ba:f4:7d:eb:3a:c3:d9:ce:d9:98:6b:d5:a5:78:b5: 1c:75:9a:81:01:58:7c:da:9f:90:fe:bb:70:ec:c0: 94:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:79:ED:15:CF:52:1B:82:94:98:DC:3A:CB:52:B3:43:06:97:55:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3a91960-d454-3be0-a2fb-0a5e4d7975a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.20.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:a2:36:7d:22:c3:53:9f:3a:4a:ef:ea:72:2d:9d:8b:46:eb: 78:61:f7:28:5d:59:71:71:6f:77:ef:d6:0e:4e:69:9e:89:b8: eb:f7:f9:97:df:20:05:7e:66:ab:35:d5:7b:b6:f7:e3:64:46: 02:64:77:37:ca:10:59:1e:a9:6d:aa:6a:5c:ac:9e:8e:c9:39: b2:19:87:e5:17:ef:c6:fd:9a:73:41:a0:43:d0:e2:9e:40:ef: 30:a3:2e:72:fc:06:8e:9a:90:5e:6d:62:56:fc:e3:23:fc:6a: e9:22:17:83:fd:49:16:9f:40:87:4b:ee:cb:70:2f:0a:e9:84: 58:88:a9:78:5a:da:27:0b:a5:b4:09:7f:6b:4b:83:07:57:f3: a9:84:cf:eb:d8:1f:40:1f:f4:f8:9e:bf:a7:79:bc:33:28:87: 6d:f1:14:a1:c2:87:a1:39:61:db:8a:83:27:42:73:a1:ad:38: a1:32:7a:6e:6e:cd:11:e9:15:11:67:48:1b:1e:08:f9:ff:2d: 57:68:d2:f5:62:e7:01:68:6e:37:cd:08:2f:0b:e9:cb:1d:26: cc:81:1d:a1:fa:99:8f:eb:54:3d:2c:2a:53:64:5b:f2:7c:3d: 06:18:cb:40:bd:48:12:df:46:37:e5:8b:d8:2f:4f:18:a8:a7: 54:12:4a:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07UpLvUczrFM7lMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk NmNhNDYyNjktM2MyOS00OTczLWE4MDAtODBiZTQ1Njc2NDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBDVpftb7pKsApduylCIojQj186mWFGKmIeY wqcCpFptUCnn2t1Fzoi9gz+J35yI9hxX/iaIfjPhv+mtyqLiPWi1Or3dBhMo3B9z quEpF9+IiyUMALfvFxslzcqYN9EW3LnpRzx5+D9ALuIEY6ydLHwyVr57yUTJWP2E zIBsHf2qsAI0cIjMh38C4a0/ZgrCuzJFkHhJEEm+KMqjcBBM4SThBSMoaBQTCMc0 wjK/WRAQwrC1ff78mUjzzWrIry0ihWYFW2lcaiWKlDPtyj7z2rtMR4GBvnI5B9KW WSH7EyC69H3rOsPZztmYa9WleLUcdZqBAVh82p+Q/rtw7MCUewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMp57RXPUhuClJjcOstSs0MGl1V5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDNhOTE5NjAtZDQ1NC0z YmUwLWEyZmItMGE1ZTRkNzk3NWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGBQUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiiNn0iw1OfOkrv6nItnYtG63hh9yhdWXFxb3fv1g5OaZ6JuOv3+Zff IAV+Zqs11Xu29+NkRgJkdzfKEFkeqW2qalysno7JObIZh+UX78b9mnNBoEPQ4p5A 7zCjLnL8Bo6akF5tYlb84yP8aukiF4P9SRafQIdL7stwLwrphFiIqXha2icLpbQJ f2tLgwdX86mEz+vYH0Af9Piev6d5vDMoh23xFKHCh6E5YduKgydCc6GtOKEyem5u zRHpFRFnSBseCPn/LVdo0vVi5wFobjfNCC8L6csdJsyBHaH6mY/rVD0sKlNkW/J8 PQYYy0C9SBLfRjfli9gvTxiop1QSShs= -----END CERTIFICATE-----Generated at Mon Aug 4 15:01:47 2025 by rpki-client