$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/c1337ef0-f7e6-384f-a349-52b7ab3af9de.roa File: c1337ef0-f7e6-384f-a349-52b7ab3af9de.roa (raw, json) Hash identifier: CCHqodPLLY+K3ZimdV8ZcAWC8EkQdpUq+tNNUorvs/0= Subject key identifier: 7C:A7:FA:FA:22:8D:5F:C4:E7:DE:99:86:3D:0D:F3:AB:27:BC:FC:12 Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F4328584AA160E2685E840A7CFBC91C00 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/c1337ef0-f7e6-384f-a349-52b7ab3af9de.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 46687 IP address blocks: 24.213.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:e2:68:5e:84:0a:7c:fb:c9:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=b051043e-2c46-4c82-a2a4-377d97633ac7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:86:0d:a2:d2:50:e0:55:3b:55:8d:da:9b:8f: 3e:19:25:c6:c9:ce:08:c2:fa:9d:95:b0:ff:9d:8a: 80:1a:08:4e:00:00:68:8d:50:7f:ec:ad:19:3f:0d: 5d:b2:85:cf:9a:23:06:98:0b:54:7b:ec:cd:e3:0a: 00:3d:04:db:ec:eb:7c:14:71:d6:ec:9c:45:39:97: a8:16:18:69:0e:09:f9:75:3f:81:73:59:2d:b6:c7: 41:b6:a2:c1:6d:e6:a4:6c:61:b2:9b:01:01:3c:b1: 48:98:17:a8:ee:c5:3d:b8:c2:d2:f6:0e:d5:ef:5e: ff:0d:b5:9a:c7:e2:b4:bc:54:8c:20:38:26:b4:26: 6b:23:8a:5a:4c:4d:a2:32:dd:9f:60:01:4b:2a:a2: 35:fb:a9:09:1f:e2:e6:7c:87:37:79:2a:0d:e9:57: 78:16:f0:7f:31:4b:4d:08:7d:69:11:31:9f:95:c4: e6:05:3f:d8:27:c4:72:04:58:26:9b:57:74:4d:51: bc:a3:32:5f:e5:9a:34:59:a8:3c:fa:f1:9c:d6:ce: 4d:bc:8a:12:53:a0:e8:36:ec:87:66:90:5b:30:dd: 3d:c4:75:d4:5d:43:1c:8c:c5:c3:1a:33:3d:bf:fe: 59:7c:f6:8a:88:54:0b:69:28:9b:d0:d5:f7:64:05: 38:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:A7:FA:FA:22:8D:5F:C4:E7:DE:99:86:3D:0D:F3:AB:27:BC:FC:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/c1337ef0-f7e6-384f-a349-52b7ab3af9de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv4: 24.213.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d3:71:9f:86:5e:8d:59:9c:c7:27:ee:06:db:26:1d:d3:9a:07: 5e:b3:0e:a2:2c:0e:d2:1e:4f:20:e4:a6:b3:3b:6d:a5:0f:01: fe:17:3d:3b:40:4e:23:39:cf:47:89:7c:aa:cd:85:32:cc:e7: 09:b2:9a:ed:ad:7c:92:4c:fd:ad:b1:40:6d:9c:d6:6a:94:15: e2:3d:d0:7e:b7:92:d2:43:74:a9:37:a0:8e:be:b6:ab:e3:c1: dc:16:b1:3b:5f:09:9c:e2:6a:26:7b:c2:d7:ec:dd:33:fd:b1: 7d:60:96:b3:85:9a:10:05:59:27:2b:17:b4:8b:2c:ff:a4:e9: 9c:3b:4f:69:85:59:90:2d:32:6c:89:15:00:9c:b0:cd:55:43: 5b:74:ae:ad:94:82:67:c7:72:9a:8d:68:b3:a3:74:e1:f6:df: 2f:02:62:3c:78:25:58:23:58:47:23:d6:60:f9:3a:c0:8c:a4: a5:e5:37:f6:b1:96:05:bf:db:2f:9b:ef:64:a5:e5:c1:9c:a6: 9c:04:9a:23:7d:cc:1f:0d:a4:61:c6:4f:97:6b:66:a3:f7:24: c6:ea:08:9e:3e:80:7a:b7:95:a2:17:fc:2d:21:7b:50:64:4d: 51:6e:55:1f:e0:f5:06:41:d3:96:4b:cb:1b:97:65:2a:d8:50: 73:33:3a:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYOJoXoQKfPvJHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk YjA1MTA0M2UtMmM0Ni00YzgyLWEyYTQtMzc3ZDk3NjMzYWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4YNotJQ4FU7VY3am48+GSXGyc4IwvqdlbD/ nYqAGghOAABojVB/7K0ZPw1dsoXPmiMGmAtUe+zN4woAPQTb7Ot8FHHW7JxFOZeo FhhpDgn5dT+Bc1kttsdBtqLBbeakbGGymwEBPLFImBeo7sU9uMLS9g7V717/DbWa x+K0vFSMIDgmtCZrI4paTE2iMt2fYAFLKqI1+6kJH+LmfIc3eSoN6Vd4FvB/MUtN CH1pETGflcTmBT/YJ8RyBFgmm1d0TVG8ozJf5Zo0Wag8+vGc1s5NvIoSU6DoNuyH ZpBbMN09xHXUXUMcjMXDGjM9v/5ZfPaKiFQLaSib0NX3ZAU4dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHyn+voijV/E596Zhj0N86snvPwSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvYzEzMzdlZjAtZjdlNi0z ODRmLWEzNDktNTJiN2FiM2FmOWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGNVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANNxn4ZejVmcxyfuBtsmHdOaB16zDqIsDtIeTyDkprM7baUPAf4XPTtA TiM5z0eJfKrNhTLM5wmymu2tfJJM/a2xQG2c1mqUFeI90H63ktJDdKk3oI6+tqvj wdwWsTtfCZziaiZ7wtfs3TP9sX1glrOFmhAFWScrF7SLLP+k6Zw7T2mFWZAtMmyJ FQCcsM1VQ1t0rq2UgmfHcpqNaLOjdOH23y8CYjx4JVgjWEcj1mD5OsCMpKXlN/ax lgW/2y+b72Sl5cGcppwEmiN9zB8NpGHGT5drZqP3JMbqCJ4+gHq3laIX/C0he1Bk TVFuVR/g9QZB05ZLyxuXZSrYUHMzOjQ= -----END CERTIFICATE-----Generated at Sat Aug 9 22:35:46 2025 by rpki-client