$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/529b0c86-e348-332a-90f8-67d60e24a1b7.roa File: 529b0c86-e348-332a-90f8-67d60e24a1b7.roa (raw, json) Hash identifier: c2te4Mlh1bdMwRu80gN/OWpPg9ULNN/U6DNEmcKIjxc= Subject key identifier: 2C:F1:61:C5:7B:BD:6B:60:0A:3F:44:C1:50:A3:72:03:FE:C0:60:EF Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584A8B0B64D170805D59A35945E0 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/529b0c86-e348-332a-90f8-67d60e24a1b7.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 397543 IP address blocks: 134.87.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:64:d1:70:80:5d:59:a3:59:45:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=d2058f44-875c-4e35-9083-4dd1e2b281e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:20:eb:65:a5:19:5b:f0:fe:f0:d4:70:3a:93: 40:8b:d0:57:df:02:0a:8f:ba:71:23:c6:0f:8c:5f: 57:1d:9e:07:9d:33:f0:b1:3a:35:9c:d2:d3:f7:79: 57:e4:1e:c5:97:c4:83:23:50:6c:22:b0:72:50:b0: d0:17:b5:41:da:d8:8e:08:a3:8d:dd:e8:5c:17:57: 0e:2c:9f:f4:d3:90:d6:46:27:5f:38:28:2a:f2:fe: 10:a6:1d:01:1f:05:7f:aa:fb:83:64:01:3a:cf:4c: ae:63:d9:f2:0e:c0:43:77:38:cf:97:b2:71:e7:49: e1:32:3b:f0:6b:8f:a8:5d:08:78:ba:1b:09:1a:2f: 86:bc:df:ca:65:d2:6e:5a:e4:db:6d:28:bf:09:48: 00:43:61:71:70:de:f0:37:76:29:d5:a8:df:e8:e0: c5:31:f2:5d:4f:8f:32:28:f2:b6:5d:5e:44:15:81: 16:95:50:f0:f5:cd:92:79:fa:28:9a:06:67:b9:9e: 03:0b:fe:77:3e:cc:e7:bf:25:64:ef:81:84:81:43: bb:5e:9f:0a:e1:8d:2d:9c:5d:f4:5a:bb:42:44:b7: 0a:af:9e:83:a8:c0:c7:94:02:d1:da:78:2d:d9:c0: 11:f6:53:db:c2:fe:33:1b:86:35:28:86:4d:55:03: 00:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:F1:61:C5:7B:BD:6B:60:0A:3F:44:C1:50:A3:72:03:FE:C0:60:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/529b0c86-e348-332a-90f8-67d60e24a1b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 134.87.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:44:c4:6c:96:0f:94:bf:ca:69:c2:02:f7:54:d9:be:d2:76: 05:2d:a9:f1:99:5e:5a:f7:53:21:c6:aa:ab:d6:30:bb:47:ad: f4:90:cf:73:f0:c6:84:c9:b2:b6:6a:28:10:93:ab:e0:d8:23: ab:15:ae:d5:3a:44:74:61:47:94:7e:56:17:80:83:b8:40:e5: 40:8c:3e:39:65:78:ae:09:c8:65:b0:ba:2a:11:91:7d:82:70: bc:3a:f7:f6:cf:3c:39:12:ca:d1:c6:82:9e:4d:c1:25:7d:77: 34:0b:b0:96:fc:96:91:08:d1:02:86:27:76:20:c1:25:6a:04: a6:20:4f:c0:f1:d1:39:c3:9d:0c:ed:83:20:20:eb:05:51:74: 84:c4:66:96:72:19:84:4a:e0:08:5c:a1:73:7d:4b:f9:1e:b8: 93:61:12:25:c2:33:f5:e6:72:4b:0e:36:e0:87:2d:fe:66:cb: a2:76:0a:90:11:00:3a:a5:ef:db:62:e7:95:f6:f3:66:60:52: f3:46:6a:13:bb:19:d3:dd:44:22:78:ee:d2:0d:c8:83:1d:63: cd:46:e3:cc:47:30:41:d3:69:ae:d4:ab:f9:25:c4:9c:78:22: ab:74:14:3d:5b:f2:c4:10:dd:54:4e:8a:d4:7f:a1:34:ae:56: e1:43:c2:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC2TRcIBdWaNZReAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk ZDIwNThmNDQtODc1Yy00ZTM1LTkwODMtNGRkMWUyYjI4MWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiDrZaUZW/D+8NRwOpNAi9BX3wIKj7pxI8YP jF9XHZ4HnTPwsTo1nNLT93lX5B7Fl8SDI1BsIrByULDQF7VB2tiOCKON3ehcF1cO LJ/005DWRidfOCgq8v4Qph0BHwV/qvuDZAE6z0yuY9nyDsBDdzjPl7Jx50nhMjvw a4+oXQh4uhsJGi+GvN/KZdJuWuTbbSi/CUgAQ2FxcN7wN3Yp1ajf6ODFMfJdT48y KPK2XV5EFYEWlVDw9c2SefoomgZnuZ4DC/53PsznvyVk74GEgUO7Xp8K4Y0tnF30 WrtCRLcKr56DqMDHlALR2ngt2cAR9lPbwv4zG4Y1KIZNVQMAZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCzxYcV7vWtgCj9EwVCjcgP+wGDvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvNTI5YjBjODYtZTM0OC0z MzJhLTkwZjgtNjdkNjBlMjRhMWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChlcYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1ExGyWD5S/ymnCAvdU2b7SdgUtqfGZXlr3UyHGqqvWMLtHrfSQz3Pw xoTJsrZqKBCTq+DYI6sVrtU6RHRhR5R+VheAg7hA5UCMPjlleK4JyGWwuioRkX2C cLw69/bPPDkSytHGgp5NwSV9dzQLsJb8lpEI0QKGJ3YgwSVqBKYgT8Dx0TnDnQzt gyAg6wVRdITEZpZyGYRK4AhcoXN9S/keuJNhEiXCM/XmcksONuCHLf5my6J2CpAR ADql79ti55X282ZgUvNGahO7GdPdRCJ47tINyIMdY81G48xHMEHTaa7Uq/klxJx4 Iqt0FD1b8sQQ3VROitR/oTSuVuFDwig= -----END CERTIFICATE-----Generated at Mon Aug 4 14:20:47 2025 by rpki-client