$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d77f3d95-67b7-3221-84a3-3930d2c9dc61.roa File: d77f3d95-67b7-3221-84a3-3930d2c9dc61.roa (raw, json) Hash identifier: zM2IvSwdsy0jLxR20KPKoEn1IE795iQNYTUbajvQ8bg= Subject key identifier: 8E:7B:1D:B1:DC:37:E8:F9:A4:4E:58:BD:CD:D5:54:60:EE:78:FD:08 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EC8895F95DAED37CE23700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d77f3d95-67b7-3221-84a3-3930d2c9dc61.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33668 IP address blocks: 24.128.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ec:88:95:f9:5d:ae:d3:7c:e2:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=77b1627d-98b7-48a1-afaf-7fed416caf09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5a:1c:5c:91:f1:8d:29:68:44:4f:be:3f:86: 66:91:97:38:5e:ad:e8:ac:7d:25:24:50:b1:f7:8b: 8a:75:c1:81:4a:c2:47:6f:2e:79:42:e4:60:4d:e8: fc:21:6a:f4:02:0b:0c:56:0d:10:40:5d:40:2a:ab: 06:74:22:ad:bd:dd:81:79:48:f3:12:1e:94:31:07: 97:cc:c5:b5:09:02:c2:cd:51:81:a8:1a:68:13:73: 58:c0:de:e9:56:86:2d:a3:5d:77:38:04:1e:0e:bf: 97:fd:ff:6d:94:13:a9:a7:8f:ab:06:6a:d9:03:64: 3e:f1:f3:ea:c0:73:6b:e7:22:5c:0a:ea:ef:71:63: f3:eb:a0:d0:a7:df:89:87:ee:4b:18:22:75:f2:64: f9:9b:dc:58:e9:f3:2f:fd:3e:a6:29:96:0d:c9:85: ab:90:6d:c7:b7:08:84:c0:4b:2b:68:a8:68:0d:23: 56:a5:a2:94:df:41:eb:60:26:23:69:9b:09:fa:83: 01:fd:1c:61:20:99:97:21:01:ba:a2:e3:35:8d:a2: 54:29:ef:4a:6f:c8:4e:de:5b:ca:1e:fc:2b:56:f4: df:23:70:8e:e4:28:22:30:03:91:35:57:1e:32:5d: 36:15:a1:ef:ac:5b:49:bb:54:2d:92:6b:6e:ce:89: 31:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:7B:1D:B1:DC:37:E8:F9:A4:4E:58:BD:CD:D5:54:60:EE:78:FD:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d77f3d95-67b7-3221-84a3-3930d2c9dc61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.128.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:57:1e:76:af:f9:78:c5:4d:3e:a3:51:ad:31:d0:ee:f1:62: 05:48:26:5a:ab:2c:58:60:c4:1d:1b:42:3a:0e:ed:91:27:dc: 21:0e:0c:40:41:69:c6:74:86:4e:e4:c8:9c:b0:d6:45:d8:8f: 47:a5:af:1f:2e:8c:8b:3b:45:88:0c:88:d0:63:20:ad:9c:81: 77:4b:db:e1:f2:c7:f4:dd:c4:12:2a:37:15:3d:2c:b6:11:9b: 88:63:a9:d4:73:5e:e9:79:f3:1f:86:6d:40:8d:03:5f:5a:1d: d5:48:2a:a3:c2:a2:1b:62:da:67:51:06:d1:ed:83:f7:93:0f: 0f:59:cf:a0:75:db:d1:db:dc:cd:e9:d6:2e:6d:9d:97:d3:a5: 90:e8:1b:c3:17:56:66:70:b1:5a:c6:38:47:34:59:90:35:17: 28:b8:ef:68:df:bf:aa:c3:e6:a0:eb:f1:5d:66:12:fb:7e:88: c2:4e:28:18:7a:da:6e:72:3a:e3:0c:0e:b9:77:2f:e2:42:3d: 73:59:4a:6f:b4:40:ae:e4:42:e9:02:3a:b2:f3:da:4e:ea:c1: ed:dc:5f:b8:22:2f:73:e1:2a:cd:25:be:38:98:80:a9:64:aa: 4b:c1:de:25:b3:74:e1:02:f0:4b:bc:ec:f8:af:26:8f:b6:23: a7:b5:04:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07IiV+V2u03ziNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk NzdiMTYyN2QtOThiNy00OGExLWFmYWYtN2ZlZDQxNmNhZjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VocXJHxjSloRE++P4ZmkZc4Xq3orH0lJFCx 94uKdcGBSsJHby55QuRgTej8IWr0AgsMVg0QQF1AKqsGdCKtvd2BeUjzEh6UMQeX zMW1CQLCzVGBqBpoE3NYwN7pVoYto113OAQeDr+X/f9tlBOpp4+rBmrZA2Q+8fPq wHNr5yJcCurvcWPz66DQp9+Jh+5LGCJ18mT5m9xY6fMv/T6mKZYNyYWrkG3HtwiE wEsraKhoDSNWpaKU30HrYCYjaZsJ+oMB/RxhIJmXIQG6ouM1jaJUKe9Kb8hO3lvK HvwrVvTfI3CO5CgiMAORNVceMl02FaHvrFtJu1QtkmtuzokxSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI57HbHcN+j5pE5Yvc3VVGDueP0IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDc3ZjNkOTUtNjdiNy0z MjIxLTg0YTMtMzkzMGQyYzlkYzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGIDsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpXHnav+XjFTT6jUa0x0O7xYgVIJlqrLFhgxB0bQjoO7ZEn3CEODEBB acZ0hk7kyJyw1kXYj0elrx8ujIs7RYgMiNBjIK2cgXdL2+Hyx/TdxBIqNxU9LLYR m4hjqdRzXul58x+GbUCNA19aHdVIKqPCohti2mdRBtHtg/eTDw9Zz6B129Hb3M3p 1i5tnZfTpZDoG8MXVmZwsVrGOEc0WZA1Fyi472jfv6rD5qDr8V1mEvt+iMJOKBh6 2m5yOuMMDrl3L+JCPXNZSm+0QK7kQukCOrLz2k7qwe3cX7giL3PhKs0lvjiYgKlk qkvB3iWzdOEC8Eu87PivJo+2I6e1BNk= -----END CERTIFICATE-----Generated at Wed Aug 6 11:08:40 2025 by rpki-client