$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f5e84d2-a2b1-34ef-860b-ae8c4d288d80.roa File: 1f5e84d2-a2b1-34ef-860b-ae8c4d288d80.roa (raw, json) Hash identifier: 07UZr61bfOfxLKW2PsDgfWsOelL+DMyPrNcXmfHJPx8= Subject key identifier: 4D:0E:EF:C8:30:65:EC:0A:50:C2:9C:55:8C:1A:42:F2:B2:34:0A:27 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFBFC1B9B3D5A191CA3DC00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f5e84d2-a2b1-34ef-860b-ae8c4d288d80.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 13367 IP address blocks: 24.118.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:fc:1b:9b:3d:5a:19:1c:a3:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=0b722c56-2be9-48df-9ae3-3b7b1c3cbcb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e5:b3:f9:a1:39:af:a7:b1:f4:59:a0:d9:c7: 45:1d:d6:9b:ae:82:7e:f7:6c:39:f3:56:7a:0c:8f: cd:b6:59:55:6e:b5:e6:9a:fd:d9:f6:bc:42:89:34: 57:df:6a:b6:7d:18:71:e1:0b:3e:76:78:c7:4a:d7: 42:81:20:dd:dd:7d:3d:45:99:49:b2:a1:4d:85:42: 5f:ef:98:86:3f:ae:03:fa:a3:8c:dc:42:a3:70:fc: 45:5c:fb:79:33:ed:44:44:3e:69:f6:d3:7b:01:59: 80:cc:3b:2e:c9:bb:f4:2a:2d:40:c5:ad:f4:6d:dd: fb:d7:32:65:1a:49:81:53:c1:ab:8a:bc:63:29:9e: 2c:5f:ef:39:14:b2:11:04:57:ee:aa:72:79:75:af: 14:55:e7:5d:3d:0e:11:b9:79:1e:ec:a8:81:8f:cd: e0:e8:fb:6b:54:b6:23:cc:8c:9e:86:0d:f3:4f:84: f3:ab:69:a4:6c:a6:43:1e:01:63:9d:af:ef:b6:0f: 3e:4a:aa:30:15:5f:67:a5:0f:05:dc:e4:7e:47:4f: 35:e1:06:1d:55:2c:4d:5a:4d:53:a3:4a:ab:fb:2b: 5c:43:ec:d0:30:29:de:a8:10:87:d3:6e:6d:00:e7: 61:5b:62:56:96:fc:d5:93:35:1f:4e:0a:c5:16:e1: fd:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:0E:EF:C8:30:65:EC:0A:50:C2:9C:55:8C:1A:42:F2:B2:34:0A:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f5e84d2-a2b1-34ef-860b-ae8c4d288d80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.118.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:28:3d:c1:8e:20:f3:8a:79:b1:76:c8:47:30:93:ea:56:76: 9d:ed:d7:b0:09:7b:0e:e1:f8:a4:ce:63:bd:70:f9:de:8d:f8: ef:cb:a7:03:cc:47:26:89:03:dd:c3:90:ac:20:0c:70:dc:9c: 46:4c:0c:88:a1:67:84:fe:1a:99:b7:1b:95:16:cb:a5:52:d0: 42:c2:31:43:08:7d:f3:91:ef:6e:3e:06:74:14:a4:23:83:e9: bd:dd:5d:06:01:26:4b:04:79:3b:f7:42:9b:ed:65:ed:43:14: 82:49:ff:94:c3:09:06:03:f7:9a:43:3e:a0:67:62:78:27:ba: 18:da:e2:7e:2b:44:8f:0c:51:f3:c1:0c:f6:6a:84:3d:2a:77: d7:9c:3b:bc:80:28:c7:5d:40:34:ac:2c:0d:06:5a:a6:63:5c: ba:c4:a3:7d:e5:9e:79:b6:4d:23:d3:62:21:74:5d:ce:29:80: b9:e3:e5:02:da:19:33:3e:7f:d8:df:98:1f:f1:7b:42:ed:b1: 0d:99:70:9f:ba:f8:c8:90:df:38:39:87:0d:ab:3b:d1:3f:1d: 0e:2c:4a:ba:09:ca:b4:17:26:40:dc:fe:ef:70:47:da:b3:2a: 28:5b:a5:e3:2a:57:2f:98:b1:87:c3:31:a9:4a:78:55:69:3e: af:6d:d6:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+/wbmz1aGRyj3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk MGI3MjJjNTYtMmJlOS00OGRmLTlhZTMtM2I3YjFjM2NiY2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOWz+aE5r6ex9Fmg2cdFHdabroJ+92w581Z6 DI/NtllVbrXmmv3Z9rxCiTRX32q2fRhx4Qs+dnjHStdCgSDd3X09RZlJsqFNhUJf 75iGP64D+qOM3EKjcPxFXPt5M+1ERD5p9tN7AVmAzDsuybv0Ki1Axa30bd371zJl GkmBU8GrirxjKZ4sX+85FLIRBFfuqnJ5da8UVeddPQ4RuXke7KiBj83g6PtrVLYj zIyehg3zT4Tzq2mkbKZDHgFjna/vtg8+SqowFV9npQ8F3OR+R0814QYdVSxNWk1T o0qr+ytcQ+zQMCneqBCH025tAOdhW2JWlvzVkzUfTgrFFuH9DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE0O78gwZewKUMKcVYwaQvKyNAonMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWY1ZTg0ZDItYTJiMS0z NGVmLTg2MGItYWU4YzRkMjg4ZDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGHa4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcoPcGOIPOKebF2yEcwk+pWdp3t17AJew7h+KTOY71w+d6N+O/LpwPM RyaJA93DkKwgDHDcnEZMDIihZ4T+Gpm3G5UWy6VS0ELCMUMIffOR724+BnQUpCOD 6b3dXQYBJksEeTv3QpvtZe1DFIJJ/5TDCQYD95pDPqBnYngnuhja4n4rRI8MUfPB DPZqhD0qd9ecO7yAKMddQDSsLA0GWqZjXLrEo33lnnm2TSPTYiF0Xc4pgLnj5QLa GTM+f9jfmB/xe0LtsQ2ZcJ+6+MiQ3zg5hw2rO9E/HQ4sSroJyrQXJkDc/u9wR9qz KihbpeMqVy+YsYfDMalKeFVpPq9t1lI= -----END CERTIFICATE-----Generated at Sun Jul 20 21:18:27 2025 by rpki-client