$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/24c78a7d-3fc4-3ee2-a77f-02d8ffa1901e.roa File: 24c78a7d-3fc4-3ee2-a77f-02d8ffa1901e.roa (raw, json) Hash identifier: giysVOElbTEQ2XUMqg8duj/TQbiAb4Ku2FWzrpk1yKY= Subject key identifier: CC:D2:70:3B:4F:12:4E:AB:68:AE:98:F8:5F:DA:33:99:B8:DD:68:0A Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F4328584A89A6143B1BA196392F59EAC0 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/24c78a7d-3fc4-3ee2-a77f-02d8ffa1901e.roa Signing time: Wed 16 Jul 2025 13:01:03 +0000 ROA not before: Wed 16 Jul 2025 13:01:03 +0000 ROA not after: Tue 14 Oct 2025 13:01:03 +0000 asID: 16433 IP address blocks: 147.92.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:89:a6:14:3b:1b:a1:96:39:2f:59:ea:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Jul 16 13:01:03 2025 GMT Not After : Oct 14 13:01:03 2025 GMT Subject: CN=d3065316-90ea-4d1c-962f-7782661fd43c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:88:69:1b:62:98:16:67:b6:07:d4:1c:78:b9: 3f:b7:71:7e:d7:26:c2:3e:b3:3b:3c:0d:4c:6d:7e: 1f:cb:0b:36:5b:4a:44:3a:8b:5c:03:77:83:b5:1f: 75:1d:cc:68:45:73:90:3b:2a:a4:eb:55:95:e8:7f: db:ec:53:d9:65:ce:8b:e1:bd:03:76:03:2d:fd:33: d0:1c:89:fe:26:07:ed:8e:eb:1b:85:04:82:e3:69: 0f:0f:db:df:f6:cb:98:04:8b:d5:0d:0d:78:0b:89: 77:4e:a1:6c:a6:a8:c0:9e:ed:67:9a:0b:36:84:2a: e4:e2:df:4a:22:b2:21:ec:63:c8:cf:d9:44:62:e4: 23:6b:a3:68:73:23:e1:9e:a6:d0:44:b3:87:41:fd: d1:b3:18:2a:c8:55:2e:d2:48:2d:c8:cb:96:79:b7: 4b:43:a1:f8:7c:69:70:62:e2:98:a2:c2:00:93:cc: d0:26:43:2c:c9:bd:57:ee:e6:de:0d:c9:60:7b:ce: ac:c0:7b:09:3c:d6:66:a3:52:42:18:51:59:69:a6: f4:8e:d2:39:d4:70:ee:73:c0:76:75:c4:55:75:a8: 84:94:28:cf:73:f0:b2:1e:ee:eb:24:c0:13:52:01: 19:dd:2f:de:a9:b0:46:18:60:88:34:44:e0:33:e5: 31:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:D2:70:3B:4F:12:4E:AB:68:AE:98:F8:5F:DA:33:99:B8:DD:68:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/24c78a7d-3fc4-3ee2-a77f-02d8ffa1901e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 147.92.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:bf:16:e7:bf:35:51:fd:2b:e1:fa:51:62:05:c9:f8:79:0b: 31:aa:8a:b5:e3:c7:00:00:6f:dc:79:bd:d7:f8:8b:fa:d0:e9: 58:b8:93:f1:85:45:d5:98:82:c0:94:5e:3b:73:ac:8c:f9:bf: 96:e3:54:a7:b5:15:9c:94:4f:66:8b:1e:f5:52:69:82:67:e8: c8:7c:1a:ae:aa:0e:f9:e5:e4:4c:1f:81:2f:50:5c:07:da:70: 01:e7:e4:14:af:9b:f9:f7:d9:0f:9c:cc:1b:ce:72:86:f5:e3: 62:b7:d7:db:7f:5a:18:63:4e:b3:23:f9:90:03:d5:0e:7c:82: 0d:53:dd:7d:d7:6e:b0:c6:6f:2f:58:f0:7d:4a:46:27:a0:9f: 18:b3:6b:1a:ec:e5:d8:07:aa:ab:83:de:0d:26:6b:34:1e:76: 97:dd:c4:4a:f5:04:f4:d8:48:79:22:5d:26:7d:1c:6e:50:e7: cf:d1:a7:2b:63:37:53:97:be:d9:15:59:09:88:ab:2b:0f:e3: 66:56:c6:ca:29:44:e3:62:e8:fb:b0:ae:48:88:51:85:29:54: 6e:ff:3c:ab:e3:f6:d7:82:79:68:ce:56:44:7a:bb:c1:24:ce: c3:b7:e6:96:c1:4f:fd:97:cb:03:34:a1:74:9d:20:81:bb:55: 52:db:bc:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqJphQ7G6GWOS9Z6sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI1MDcxNjEzMDEwM1oXDTI1MTAxNDEzMDEwM1owLzEtMCsGA1UEAxMk ZDMwNjUzMTYtOTBlYS00ZDFjLTk2MmYtNzc4MjY2MWZkNDNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIhpG2KYFme2B9QceLk/t3F+1ybCPrM7PA1M bX4fyws2W0pEOotcA3eDtR91HcxoRXOQOyqk61WV6H/b7FPZZc6L4b0DdgMt/TPQ HIn+JgftjusbhQSC42kPD9vf9suYBIvVDQ14C4l3TqFspqjAnu1nmgs2hCrk4t9K IrIh7GPIz9lEYuQja6NocyPhnqbQRLOHQf3RsxgqyFUu0kgtyMuWebdLQ6H4fGlw YuKYosIAk8zQJkMsyb1X7ubeDclge86swHsJPNZmo1JCGFFZaab0jtI51HDuc8B2 dcRVdaiElCjPc/CyHu7rJMATUgEZ3S/eqbBGGGCINETgM+UxrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMzScDtPEk6raK6Y+F/aM5m43WgKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvMjRjNzhhN2QtM2ZjNC0z ZWUyLWE3N2YtMDJkOGZmYTE5MDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEk1wQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGe/Fue/NVH9K+H6UWIFyfh5CzGqirXjxwAAb9x5vdf4i/rQ6Vi4k/GF RdWYgsCUXjtzrIz5v5bjVKe1FZyUT2aLHvVSaYJn6Mh8Gq6qDvnl5EwfgS9QXAfa cAHn5BSvm/n32Q+czBvOcob142K319t/WhhjTrMj+ZAD1Q58gg1T3X3XbrDGby9Y 8H1KRiegnxizaxrs5dgHqquD3g0mazQedpfdxEr1BPTYSHkiXSZ9HG5Q58/Rpytj N1OXvtkVWQmIqysP42ZWxsopRONi6PuwrkiIUYUpVG7/PKvj9teCeWjOVkR6u8Ek zsO35pbBT/2XywM0oXSdIIG7VVLbvBE= -----END CERTIFICATE-----Generated at Mon Aug 4 14:07:28 2025 by rpki-client