$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ce8f4ab5-204c-3e32-a923-b8780e1dd302.roa File: ce8f4ab5-204c-3e32-a923-b8780e1dd302.roa (raw, json) Hash identifier: MIX7JX9lFQ6ecQ1m05f8f/09wyiKkdrzWHqlZnkliQU= Subject key identifier: D9:21:AE:BE:5B:C8:7E:7B:2A:4F:43:5C:94:82:74:31:19:5D:5E:ED Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A71EB649ACCED4BD9F498FF00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ce8f4ab5-204c-3e32-a923-b8780e1dd302.roa Signing time: Tue 08 Jul 2025 01:00:51 +0000 ROA not before: Tue 08 Jul 2025 01:00:51 +0000 ROA not after: Mon 06 Oct 2025 01:00:51 +0000 asID: 33651 IP address blocks: 24.7.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:eb:64:9a:cc:ed:4b:d9:f4:98:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 8 01:00:51 2025 GMT Not After : Oct 6 01:00:51 2025 GMT Subject: CN=cd609c56-d920-477d-92d8-0065df970ba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:3d:fb:54:0a:89:a6:b6:0b:e7:26:1d:c8:32: 32:e4:3d:18:2f:b3:33:75:49:31:e5:e6:3a:f7:b1: 8e:6f:22:64:90:89:db:b7:bb:5d:85:a1:f2:ca:54: 2a:04:9b:72:93:29:b7:ca:66:c4:2a:08:1a:90:ed: 54:83:61:60:4c:8f:c2:4d:be:59:30:5b:43:f2:d7: d3:c9:61:af:81:1a:eb:d6:a7:97:73:b5:80:5d:d6: 57:6e:12:2e:ce:39:6f:24:90:81:f2:87:12:0e:b4: a8:da:a6:8a:48:31:27:5f:65:de:3a:af:fd:3f:99: 23:fc:04:44:d7:a5:46:77:21:23:8b:5e:2c:d0:89: cf:fb:e9:9c:ce:6d:27:82:41:75:e0:ed:e0:8b:f6: 72:86:c3:32:a4:99:42:56:37:14:4b:58:b0:be:66: 03:35:ce:d1:08:5e:94:18:6f:21:33:4e:5b:c5:9c: 8c:90:0b:13:b6:67:2a:ba:96:21:23:fa:f3:f0:47: 93:75:a2:b0:7b:22:10:e0:47:17:bf:74:27:ab:5e: e9:0a:8e:0d:bd:a6:23:ae:84:d2:be:12:e7:ed:9b: de:a5:30:f3:45:20:a8:22:71:9a:9d:e5:6f:dd:27: d1:0e:15:2b:f6:a3:dc:36:b9:d7:4b:ed:c8:64:2a: ba:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:21:AE:BE:5B:C8:7E:7B:2A:4F:43:5C:94:82:74:31:19:5D:5E:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ce8f4ab5-204c-3e32-a923-b8780e1dd302.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.7.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:ad:84:fa:03:99:61:7a:a7:31:5b:18:8c:29:4a:27:a1:d8: d3:2f:43:e8:9e:92:94:31:97:59:fe:89:57:58:bb:ae:c8:7c: 00:0e:9d:4d:f0:a7:c3:53:f8:a1:49:76:d5:82:ae:54:66:e8: 64:93:59:78:f7:97:0a:db:e3:70:48:1a:11:a3:c9:b3:d1:49: 26:4d:2a:7d:df:45:9b:4b:e2:01:6d:0c:09:03:ca:d1:a7:99: 9e:ce:80:58:2d:d3:fa:7f:7c:2f:03:ab:48:20:53:a4:fe:f9: 6d:ae:b4:19:4a:16:57:dc:4f:fa:1f:f7:b6:19:55:5e:9e:49: ee:65:9e:cc:10:c8:0f:18:1a:00:04:14:7d:75:0a:f9:d2:27: a2:44:d9:2d:ec:e2:bf:e1:0d:e1:a2:c4:2c:b1:23:42:b2:89: 4c:e6:c2:a6:44:4b:ce:73:e0:0d:5e:a3:f0:67:07:eb:46:cd: 7c:7d:72:ea:c8:4b:6b:29:13:24:63:a6:24:85:11:29:67:0f: dc:c4:f6:ce:7c:c9:66:c8:3d:ff:cc:e1:2e:b9:90:2d:9f:11: 10:74:fa:81:61:46:b5:97:d4:f7:f9:14:be:36:2f:8b:0e:bb: 26:d3:2e:bb:94:00:09:bf:40:b0:75:56:cf:e0:ca:f9:32:0a: f2:74:0e:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpx62SazO1L2fSY/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk Y2Q2MDljNTYtZDkyMC00NzdkLTkyZDgtMDA2NWRmOTcwYmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhT37VAqJprYL5yYdyDIy5D0YL7MzdUkx5eY6 97GObyJkkInbt7tdhaHyylQqBJtykym3ymbEKggakO1Ug2FgTI/CTb5ZMFtD8tfT yWGvgRrr1qeXc7WAXdZXbhIuzjlvJJCB8ocSDrSo2qaKSDEnX2XeOq/9P5kj/ARE 16VGdyEji14s0InP++mczm0ngkF14O3gi/ZyhsMypJlCVjcUS1iwvmYDNc7RCF6U GG8hM05bxZyMkAsTtmcqupYhI/rz8EeTdaKweyIQ4EcXv3Qnq17pCo4NvaYjroTS vhLn7ZvepTDzRSCoInGaneVv3SfRDhUr9qPcNrnXS+3IZCq6MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNkhrr5byH57Kk9DXJSCdDEZXV7tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2U4ZjRhYjUtMjA0Yy0z ZTMyLWE5MjMtYjg3ODBlMWRkMzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGAcUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL2thPoDmWF6pzFbGIwpSieh2NMvQ+iekpQxl1n+iVdYu67IfAAOnU3w p8NT+KFJdtWCrlRm6GSTWXj3lwrb43BIGhGjybPRSSZNKn3fRZtL4gFtDAkDytGn mZ7OgFgt0/p/fC8Dq0ggU6T++W2utBlKFlfcT/of97YZVV6eSe5lnswQyA8YGgAE FH11CvnSJ6JE2S3s4r/hDeGixCyxI0KyiUzmwqZES85z4A1eo/BnB+tGzXx9curI S2spEyRjpiSFESlnD9zE9s58yWbIPf/M4S65kC2fERB0+oFhRrWX1Pf5FL42L4sO uybTLruUAAm/QLB1Vs/gyvkyCvJ0DoE= -----END CERTIFICATE-----Generated at Sun Jul 20 17:10:29 2025 by rpki-client