$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/520aca61-cb8f-3cfc-9536-71bb2424b3b2.roa File: 520aca61-cb8f-3cfc-9536-71bb2424b3b2.roa (raw, json) Hash identifier: 2Vbslf/YJnnrMTxNOucbAViWzpcxuXW0fgpDCop8O5M= Subject key identifier: 49:4D:69:5E:CD:AA:56:28:9B:DA:BF:DB:59:08:D5:52:CD:1A:D0:AB Certificate issuer: /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15 Certificate serial: 010D0C9F4328584ABD4B7E2FA0C1B726295BA880 Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/520aca61-cb8f-3cfc-9536-71bb2424b3b2.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 53720 IP address blocks: 24.246.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:7e:2f:a0:c1:b7:26:29:5b:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15 Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=a02cafc4-f7fc-488f-a06d-dd93bdfc5e91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4b:8c:e9:89:11:87:44:9a:c3:0f:99:49:bb: 47:c9:15:63:10:7c:57:bd:66:d8:71:c5:a9:4e:fb: 69:47:a3:71:46:cc:59:2e:92:36:0d:e6:41:74:bd: 9d:b0:f1:69:2a:55:e7:f2:f2:92:75:7b:47:7a:5a: 1c:b6:9b:c8:5b:78:4c:60:82:9a:a5:8b:05:05:6d: d2:78:ba:f2:c5:51:4a:c8:b8:4a:7f:05:73:8f:27: a6:bc:fb:38:38:1a:11:d5:26:da:86:90:d5:94:f6: dd:c6:83:0e:36:cd:50:16:2c:5c:5f:25:5d:38:35: 9a:0b:43:54:8d:ea:d4:e7:3b:8b:19:20:f5:7f:79: e1:bf:65:78:88:56:62:14:ca:4d:4e:db:50:3e:1c: 01:1b:a8:a3:4a:db:79:c0:fb:a5:eb:31:46:68:b3: 54:8d:05:34:70:16:79:8a:2f:e8:bf:0d:23:d6:ed: c1:06:09:7c:65:47:9f:57:c9:d3:62:25:ea:4f:06: 40:fd:88:0c:1c:0c:1a:d2:f6:1f:dc:b5:e5:d2:1c: 46:bb:3a:6a:a1:e2:b5:57:57:76:25:b1:33:65:18: ea:20:42:49:df:2b:32:21:6d:de:19:9e:67:3f:ef: 36:c9:b0:10:b5:3d:1f:40:44:0a:1b:fe:32:ad:1c: 95:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:4D:69:5E:CD:AA:56:28:9B:DA:BF:DB:59:08:D5:52:CD:1A:D0:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/520aca61-cb8f-3cfc-9536-71bb2424b3b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl X509v3 Authority Key Identifier: keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer sbgp-ipAddrBlock: critical IPv4: 24.246.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dd:fb:1e:4e:28:a1:79:25:ba:e6:44:58:38:51:78:b4:a1:4f: 66:29:73:eb:4f:f2:7a:80:5e:25:d6:2a:c6:33:77:4c:8e:39: fc:d6:75:f0:5f:9c:16:96:9f:7a:b5:f2:fd:1b:65:fd:4d:60: a1:86:1f:6c:fd:f2:3e:61:df:58:d3:01:c5:d7:df:e3:fb:cd: de:c5:81:0f:86:3d:46:29:e2:d4:f8:9a:5e:8d:7c:31:9f:c5: f6:97:d3:7c:08:d4:f9:90:08:11:1f:f1:89:97:59:f8:06:ed: 5c:b1:6c:20:26:a0:e1:cd:9e:b8:d3:2b:83:13:95:8f:48:f2: f5:60:a7:0b:95:5b:f0:7e:4a:06:f6:b2:8d:c0:96:a7:94:c6: 96:1d:80:79:fb:14:64:23:c7:54:8f:69:9a:27:a1:d0:ec:82: 50:49:02:0d:bb:14:1a:82:66:fa:78:06:21:48:a7:e9:6b:51: 1f:b6:18:e5:f5:b9:7c:b0:b3:19:0a:6d:25:b3:98:e1:9a:d1: 25:54:4e:a3:91:39:ac:64:c7:69:94:77:58:ac:4d:d5:97:62: f0:5e:0e:32:19:46:17:61:36:fb:64:e9:c8:87:b5:8a:d7:8b: 16:24:a0:a8:09:e9:41:95:fa:16:e8:f5:e3:c4:d2:30:22:20: 5b:16:fb:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S34voMG3JilbqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZThmOGM0MTEtZmE1Yy00MjhjLThhYzEtZTA4ZThhMDBh ZDE1MB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk YTAyY2FmYzQtZjdmYy00ODhmLWEwNmQtZGQ5M2JkZmM1ZTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0uM6YkRh0Saww+ZSbtHyRVjEHxXvWbYccWp TvtpR6NxRsxZLpI2DeZBdL2dsPFpKlXn8vKSdXtHeloctpvIW3hMYIKapYsFBW3S eLryxVFKyLhKfwVzjyemvPs4OBoR1SbahpDVlPbdxoMONs1QFixcXyVdODWaC0NU jerU5zuLGSD1f3nhv2V4iFZiFMpNTttQPhwBG6ijStt5wPul6zFGaLNUjQU0cBZ5 ii/ovw0j1u3BBgl8ZUefV8nTYiXqTwZA/YgMHAwa0vYf3LXl0hxGuzpqoeK1V1d2 JbEzZRjqIEJJ3ysyIW3eGZ5nP+82ybAQtT0fQEQKG/4yrRyVCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElNaV7NqlYom9q/21kI1VLNGtCrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4 YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhlOGEwMGFkMTUvNTIwYWNhNjEtY2I4Zi0z Y2ZjLTk1MzYtNzFiYjI0MjRiM2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZThmOGM0MTEtZmE1Yy00MjhjLThh YzEtZTA4ZThhMDBhZDE1L2U4ZjhjNDExLWZhNWMtNDI4Yy04YWMxLWUwOGU4YTAw YWQxNS5jcmwwHwYDVR0jBBgwFoAU2mOPS3cNceq6IgA5tQH/tSVxq18wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhl OGEwMGFkMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGPZpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAN37Hk4ooXkluuZEWDhReLShT2Ypc+tP8nqAXiXWKsYzd0yOOfzWdfBf nBaWn3q18v0bZf1NYKGGH2z98j5h31jTAcXX3+P7zd7FgQ+GPUYp4tT4ml6NfDGf xfaX03wI1PmQCBEf8YmXWfgG7VyxbCAmoOHNnrjTK4MTlY9I8vVgpwuVW/B+Sgb2 so3AlqeUxpYdgHn7FGQjx1SPaZonodDsglBJAg27FBqCZvp4BiFIp+lrUR+2GOX1 uXywsxkKbSWzmOGa0SVUTqOROaxkx2mUd1isTdWXYvBeDjIZRhdhNvtk6ciHtYrX ixYkoKgJ6UGV+hbo9ePE0jAiIFsW++A= -----END CERTIFICATE-----Generated at Wed Aug 6 05:14:35 2025 by rpki-client