$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/4e57234e-6352-39da-a6ac-2994ef9d30b3.roa File: 4e57234e-6352-39da-a6ac-2994ef9d30b3.roa (raw, json) Hash identifier: jJ2GZzUNwAkj/5rg8zKaRL9aAX0sjTzmh5NDNpHYjAo= Subject key identifier: 4A:17:0B:F2:8F:D3:79:F7:36:82:34:18:9F:24:B8:4B:FE:64:6C:3F Certificate issuer: /CN=02ad5a58-3adf-41cb-9598-b3260591398c Certificate serial: 010D0C9F4328584A88409A782826BA226B7DE8B8 Authority key identifier: 28:D5:F6:E6:7B:EE:87:BE:AD:EE:45:FF:5D:19:56:7C:5A:31:45:90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/4e57234e-6352-39da-a6ac-2994ef9d30b3.roa Signing time: Wed 16 Jul 2025 01:00:49 +0000 ROA not before: Wed 16 Jul 2025 01:00:49 +0000 ROA not after: Tue 14 Oct 2025 01:00:49 +0000 asID: 12097 IP address blocks: 24.140.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/02ad5a58-3adf-41cb-9598-b3260591398c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/02ad5a58-3adf-41cb-9598-b3260591398c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:88:40:9a:78:28:26:ba:22:6b:7d:e8:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02ad5a58-3adf-41cb-9598-b3260591398c Validity Not Before: Jul 16 01:00:49 2025 GMT Not After : Oct 14 01:00:49 2025 GMT Subject: CN=c19ab3ba-75d2-46fe-b2e0-b219e6d8acd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:53:1b:81:d4:17:8d:ff:2d:98:45:8c:53:6a: 7a:0b:59:5d:ec:d9:0d:62:b1:ba:0f:b1:d2:5c:99: 75:f2:19:85:c4:a3:6a:45:0b:4d:2c:50:02:ee:4c: d1:cf:67:cf:75:0b:6d:36:f8:60:c6:bd:15:01:44: 7b:9a:16:6b:bc:7c:58:a1:6f:a2:2a:7f:63:0d:ae: 11:21:9e:58:79:e9:8b:f2:25:3d:f8:d0:e1:8b:1b: 02:fc:e9:ba:63:28:e6:11:64:b0:96:cb:dd:ba:36: 97:83:8e:6e:4a:49:b9:13:33:2f:b4:d5:8f:07:00: 6d:cc:20:22:8a:80:dd:2d:70:59:d1:e6:9e:7b:24: 31:94:1d:3e:92:3a:af:17:0c:24:30:03:fa:f0:8b: cc:61:77:4d:1c:a3:66:e6:b7:5b:66:60:e4:08:85: 9e:78:b8:c8:5f:97:bb:88:19:12:07:b1:67:62:57: ae:8c:6f:f0:22:3f:c9:e1:36:0c:a1:75:51:08:3a: f0:c0:5a:b4:b7:7c:dc:3e:07:9b:1b:50:8a:41:d4: af:0a:df:ac:40:9f:13:ba:03:0f:7e:91:b4:e9:48: f5:9d:16:f9:30:13:8f:88:65:b2:0b:21:fc:04:9b: a2:f0:01:a5:85:d8:62:e5:e6:f0:b9:00:41:09:d6: 4b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:17:0B:F2:8F:D3:79:F7:36:82:34:18:9F:24:B8:4B:FE:64:6C:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/4e57234e-6352-39da-a6ac-2994ef9d30b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/02ad5a58-3adf-41cb-9598-b3260591398c.crl X509v3 Authority Key Identifier: keyid:28:D5:F6:E6:7B:EE:87:BE:AD:EE:45:FF:5D:19:56:7C:5A:31:45:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c.cer sbgp-ipAddrBlock: critical IPv4: 24.140.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:41:ca:3a:f5:07:96:e3:61:cd:f4:8c:d2:c1:c3:a1:f2:e3: 61:e3:03:e3:04:5e:86:2b:50:62:a8:ab:a7:2e:11:c8:df:a4: 52:e0:15:67:e1:f3:b5:4e:a1:29:9d:5e:2e:bf:96:34:6e:3a: 8c:70:67:36:28:30:56:b6:7c:27:fa:c9:40:b7:a6:47:a5:44: a2:f8:ed:c4:f2:5f:ba:82:a1:18:27:8c:96:90:17:ce:3e:2f: 4d:af:99:3f:9b:b7:8b:a4:2d:da:f0:9b:f9:a7:8d:5c:43:87: c9:dd:db:84:33:ed:54:e1:e0:e8:70:96:b4:74:96:62:16:c4: af:9d:27:59:4f:5c:3f:75:f7:f9:be:93:45:4a:f2:2e:15:fb: c1:ff:83:89:da:1e:5a:3f:33:94:fd:bf:4f:55:7c:7a:b4:65: d4:98:44:7d:78:5c:be:fa:b8:33:c6:a8:f1:9a:43:5e:05:6c: fb:d4:c5:c5:40:45:b8:45:0e:97:0a:a8:d7:54:fc:90:69:1f: d8:90:71:8f:2c:77:0e:ba:b7:35:b2:99:c0:24:2c:81:54:4b: 75:0d:8c:e2:98:29:6a:84:6a:1c:8b:d9:03:67:dc:db:87:b5: a7:8f:43:ec:58:51:c3:35:a3:cd:ef:38:55:27:50:0e:c4:ec: a4:1e:15:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqIQJp4KCa6Imt96LgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDJhZDVhNTgtM2FkZi00MWNiLTk1OTgtYjMyNjA1OTEz OThjMB4XDTI1MDcxNjAxMDA0OVoXDTI1MTAxNDAxMDA0OVowLzEtMCsGA1UEAxMk YzE5YWIzYmEtNzVkMi00NmZlLWIyZTAtYjIxOWU2ZDhhY2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFMbgdQXjf8tmEWMU2p6C1ld7NkNYrG6D7HS XJl18hmFxKNqRQtNLFAC7kzRz2fPdQttNvhgxr0VAUR7mhZrvHxYoW+iKn9jDa4R IZ5YeemL8iU9+NDhixsC/Om6YyjmEWSwlsvdujaXg45uSkm5EzMvtNWPBwBtzCAi ioDdLXBZ0eaeeyQxlB0+kjqvFwwkMAP68IvMYXdNHKNm5rdbZmDkCIWeeLjIX5e7 iBkSB7FnYleujG/wIj/J4TYMoXVRCDrwwFq0t3zcPgebG1CKQdSvCt+sQJ8TugMP fpG06Uj1nRb5MBOPiGWyCyH8BJui8AGlhdhi5ebwuQBBCdZLNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEoXC/KP03n3NoI0GJ8kuEv+ZGw/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMmFk NWE1OC0zYWRmLTQxY2ItOTU5OC1iMzI2MDU5MTM5OGMvNGU1NzIzNGUtNjM1Mi0z OWRhLWE2YWMtMjk5NGVmOWQzMGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDJhZDVhNTgtM2FkZi00MWNiLTk1 OTgtYjMyNjA1OTEzOThjLzAyYWQ1YTU4LTNhZGYtNDFjYi05NTk4LWIzMjYwNTkx Mzk4Yy5jcmwwHwYDVR0jBBgwFoAUKNX25nvuh76t7kX/XRlWfFoxRZAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMmFkNWE1OC0zYWRmLTQxY2ItOTU5OC1iMzI2 MDU5MTM5OGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGIzAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1Byjr1B5bjYc30jNLBw6Hy42HjA+MEXoYrUGKoq6cuEcjfpFLgFWfh 87VOoSmdXi6/ljRuOoxwZzYoMFa2fCf6yUC3pkelRKL47cTyX7qCoRgnjJaQF84+ L02vmT+bt4ukLdrwm/mnjVxDh8nd24Qz7VTh4OhwlrR0lmIWxK+dJ1lPXD919/m+ k0VK8i4V+8H/g4naHlo/M5T9v09VfHq0ZdSYRH14XL76uDPGqPGaQ14FbPvUxcVA RbhFDpcKqNdU/JBpH9iQcY8sdw66tzWymcAkLIFUS3UNjOKYKWqEahyL2QNn3NuH taePQ+xYUcM1o83vOFUnUA7E7KQeFYU= -----END CERTIFICATE-----Generated at Wed Aug 6 12:35:08 2025 by rpki-client