$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e882c9ee-2769-33f0-aaaa-0f7aeb4ae3db.roa File: e882c9ee-2769-33f0-aaaa-0f7aeb4ae3db.roa (raw, json) Hash identifier: JkaEPodUsQRSrs9um3brT0K8GD6+cmsIrZ1b0uWtvbI= Subject key identifier: 42:AD:F6:46:B9:88:4E:16:19:81:51:E8:06:A3:70:13:88:79:11:B5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EC843ADEFA6D7B83AE3580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e882c9ee-2769-33f0-aaaa-0f7aeb4ae3db.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33668 IP address blocks: 24.127.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ec:84:3a:de:fa:6d:7b:83:ae:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=b8beca9a-31a7-42e2-b7ef-043b5516679e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5c:51:20:23:f5:b0:e1:c8:a1:7f:10:8c:6d: 24:13:c6:56:69:52:75:40:25:3e:37:2d:c3:2e:40: 1a:e9:74:96:49:27:0f:6b:3b:51:0e:07:6b:45:30: cc:e4:02:43:6b:52:7b:ed:79:82:70:a4:15:0b:f1: 9a:7b:5c:c6:8b:34:7f:37:12:6a:4c:45:d7:3b:89: f3:6a:de:75:40:da:1a:bc:32:ce:c2:ba:78:67:26: 5e:21:3b:0c:d0:84:33:e1:ff:ce:22:cd:09:e6:5f: 7b:b5:e1:3e:f6:4b:e7:e2:38:40:86:20:95:35:b9: d3:34:46:7e:d0:de:8f:2b:34:75:61:93:35:a3:97: c8:2c:ef:aa:6a:13:b9:9b:53:f4:8e:3d:4b:5a:e8: de:3c:ee:31:d5:0a:dc:fb:2a:71:b1:30:19:58:36: 1d:b8:24:e3:df:b5:3b:6f:31:28:23:8c:0f:82:23: d5:cd:15:a4:5a:58:71:6a:5e:0a:c3:cc:d4:05:fa: 05:bc:7f:51:ba:7a:46:78:c3:8c:10:97:27:6d:69: a0:95:8d:76:aa:62:4c:58:07:f3:c5:e1:01:f8:78: 1d:b4:1e:b7:d4:87:e1:06:c3:2a:e0:eb:4a:3f:4e: f3:a8:82:f7:7e:34:88:2b:94:e0:ba:aa:3a:8a:a2: 0a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:AD:F6:46:B9:88:4E:16:19:81:51:E8:06:A3:70:13:88:79:11:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e882c9ee-2769-33f0-aaaa-0f7aeb4ae3db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.127.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:44:08:e7:7a:9f:a2:de:47:0c:dd:52:f3:18:cb:e3:5f:2a: 65:08:bb:a8:64:c4:50:7b:64:9e:ab:da:90:6f:85:6a:f8:94: 69:f0:03:57:09:bc:7e:da:22:16:d4:83:48:da:ee:82:3c:44: 49:5a:56:42:76:f1:5a:b8:55:2d:a2:46:7e:45:f0:a0:31:03: c5:8b:74:8e:6b:66:16:e8:2d:af:1a:e5:65:a9:1a:4d:47:be: 2d:85:e4:62:13:8c:29:0f:d5:9c:2d:08:2e:88:f7:8c:39:12: b5:81:73:92:3c:63:3a:c9:d7:dc:3d:36:c2:6f:59:6b:f1:a0: 7f:02:ed:ed:cf:11:ce:51:94:a7:47:00:94:ad:95:3b:ba:12: a0:9f:e7:7d:43:37:ab:1a:44:4c:dc:e4:f1:d5:07:8d:72:b5: f6:b2:21:97:a7:b6:74:45:b0:09:a0:04:51:9c:56:70:c8:ae: 52:ee:83:30:00:36:bc:03:a5:55:ed:fc:93:a1:bc:5a:d1:6b: bd:47:65:0d:b9:dc:28:1e:e8:71:d2:33:e1:75:9c:8d:ee:90: b0:c6:7b:b4:3d:61:50:3e:d0:ef:a7:4a:01:09:c0:4a:6d:9f: 54:f0:3f:e2:95:19:2a:c2:23:a7:19:f1:84:06:bf:6a:bc:b3: 81:24:9c:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07IQ63vpte4OuNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk YjhiZWNhOWEtMzFhNy00MmUyLWI3ZWYtMDQzYjU1MTY2NzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVxRICP1sOHIoX8QjG0kE8ZWaVJ1QCU+Ny3D LkAa6XSWSScPaztRDgdrRTDM5AJDa1J77XmCcKQVC/Gae1zGizR/NxJqTEXXO4nz at51QNoavDLOwrp4ZyZeITsM0IQz4f/OIs0J5l97teE+9kvn4jhAhiCVNbnTNEZ+ 0N6PKzR1YZM1o5fILO+qahO5m1P0jj1LWujePO4x1Qrc+ypxsTAZWDYduCTj37U7 bzEoI4wPgiPVzRWkWlhxal4Kw8zUBfoFvH9RunpGeMOMEJcnbWmglY12qmJMWAfz xeEB+HgdtB631IfhBsMq4OtKP07zqIL3fjSIK5Tguqo6iqIKvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKt9ka5iE4WGYFR6AajcBOIeRG1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTg4MmM5ZWUtMjc2OS0z M2YwLWFhYWEtMGY3YWViNGFlM2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGH/5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKFECOd6n6LeRwzdUvMYy+NfKmUIu6hkxFB7ZJ6r2pBvhWr4lGnwA1cJ vH7aIhbUg0ja7oI8RElaVkJ28Vq4VS2iRn5F8KAxA8WLdI5rZhboLa8a5WWpGk1H vi2F5GITjCkP1ZwtCC6I94w5ErWBc5I8YzrJ19w9NsJvWWvxoH8C7e3PEc5RlKdH AJStlTu6EqCf531DN6saREzc5PHVB41ytfayIZentnRFsAmgBFGcVnDIrlLugzAA NrwDpVXt/JOhvFrRa71HZQ253Cge6HHSM+F1nI3ukLDGe7Q9YVA+0O+nSgEJwEpt n1TwP+KVGSrCI6cZ8YQGv2q8s4EknHo= -----END CERTIFICATE-----Generated at Wed Aug 6 11:18:02 2025 by rpki-client