$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e8d7b882-7582-345e-97c7-515a3d6c0d00.roa File: e8d7b882-7582-345e-97c7-515a3d6c0d00.roa (raw, json) Hash identifier: vRxMoSbffZCXv7RpJdSsar8Pu3ve+5f6Ej+erm/OCSo= Subject key identifier: 8F:CA:6D:F3:E9:0F:4B:0C:98:87:D8:E0:01:B1:E4:44:6A:E8:04:03 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFD5FA65F3102E2B2F56780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e8d7b882-7582-345e-97c7-515a3d6c0d00.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 13367 IP address blocks: 24.118.40.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fd:5f:a6:5f:31:02:e2:b2:f5:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=ac59276d-d5ec-4765-a00c-40f7f4d90340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:57:db:b7:83:41:f5:dc:2a:86:7c:b9:28:d0: 0e:a2:c3:4f:b9:20:ab:a1:06:39:2f:c7:f4:24:bd: 80:d3:25:0e:f7:c7:cf:97:b2:56:c3:2d:6c:f6:ec: b9:bb:09:e6:9e:72:17:03:23:00:61:3d:69:c7:a6: 8d:46:53:0f:a5:d0:78:1f:90:8f:90:b3:6e:fc:b9: 10:51:9e:6a:d8:3b:46:55:45:14:82:c1:3b:8f:54: 06:bd:73:6e:96:c1:3f:1c:35:b4:70:e3:3b:17:60: 63:c2:ac:26:3d:14:07:72:33:47:5e:fc:0f:75:09: 65:0f:94:c1:86:09:dc:04:26:7d:fb:fb:47:9f:d8: 09:c8:26:6f:4e:82:40:eb:63:03:d1:d0:9d:ea:e8: f4:0c:da:eb:0f:f5:3e:28:67:d5:10:0c:f6:38:1e: f4:90:6e:ae:d0:ca:ec:a1:bc:eb:32:87:2f:e9:dc: 24:cf:15:1c:cd:27:08:58:02:14:80:90:c6:e8:b5: 08:76:f8:d4:22:3c:39:f2:e4:96:23:b1:6d:a9:55: 7a:2a:18:17:51:32:00:e4:98:ca:64:53:fb:85:93: 48:a4:8a:93:5c:4c:7a:51:f6:74:b9:ad:61:80:6a: 88:44:b2:09:c2:70:8c:32:56:ef:f2:17:03:62:f4: e9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:CA:6D:F3:E9:0F:4B:0C:98:87:D8:E0:01:B1:E4:44:6A:E8:04:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e8d7b882-7582-345e-97c7-515a3d6c0d00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.118.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:ec:02:d6:21:38:07:39:c7:d3:4d:a7:1c:b9:0a:bd:3b:a0: 2f:80:03:28:13:72:81:04:26:65:33:47:51:9e:8c:b0:ea:3c: 52:d3:6f:23:ff:51:0c:0b:66:00:ae:8b:c6:e1:8e:e0:1f:a3: 25:58:c1:44:55:84:dd:2e:57:07:e0:b9:b4:5f:b2:0d:62:4e: 65:52:13:d9:63:4d:71:c3:da:41:d5:d3:f0:6d:56:8d:f0:fc: f5:b9:d0:ae:b9:8c:a8:47:8f:75:b5:96:88:16:35:66:bc:01: a3:31:7a:20:04:2b:8f:da:7f:16:d9:ba:80:ea:cf:8c:21:75: 28:df:68:5b:c3:c8:3a:e4:03:bb:b1:ee:71:cd:6a:af:5c:2e: fc:9a:1d:b3:4b:bf:ff:c2:54:52:e8:30:c4:38:8f:39:82:1d: 01:4b:c3:d0:f5:24:a6:df:5a:5f:86:8d:c2:47:f0:56:34:a3: 4a:91:40:41:db:0b:00:ec:03:e2:1e:0c:9a:ef:dd:fb:f9:87: 89:d1:58:fa:23:ac:e7:64:1a:32:61:e4:83:7f:16:b6:c6:23: 86:63:84:fa:12:ab:26:30:84:47:e4:19:36:1c:23:c8:0e:76: 49:90:b6:21:73:11:a3:d3:75:73:bf:6f:13:e8:f9:bd:de:80: ac:96:db:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/V+mXzEC4rL1Z4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk YWM1OTI3NmQtZDVlYy00NzY1LWEwMGMtNDBmN2Y0ZDkwMzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1fbt4NB9dwqhny5KNAOosNPuSCroQY5L8f0 JL2A0yUO98fPl7JWwy1s9uy5uwnmnnIXAyMAYT1px6aNRlMPpdB4H5CPkLNu/LkQ UZ5q2DtGVUUUgsE7j1QGvXNulsE/HDW0cOM7F2BjwqwmPRQHcjNHXvwPdQllD5TB hgncBCZ9+/tHn9gJyCZvToJA62MD0dCd6uj0DNrrD/U+KGfVEAz2OB70kG6u0Mrs obzrMocv6dwkzxUczScIWAIUgJDG6LUIdvjUIjw58uSWI7FtqVV6KhgXUTIA5JjK ZFP7hZNIpIqTXEx6UfZ0ua1hgGqIRLIJwnCMMlbv8hcDYvTpXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/KbfPpD0sMmIfY4AGx5ERq6AQDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZThkN2I4ODItNzU4Mi0z NDVlLTk3YzctNTE1YTNkNmMwZDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGHYoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK3sAtYhOAc5x9NNpxy5Cr07oC+AAygTcoEEJmUzR1GejLDqPFLTbyP/ UQwLZgCui8bhjuAfoyVYwURVhN0uVwfgubRfsg1iTmVSE9ljTXHD2kHV0/BtVo3w /PW50K65jKhHj3W1logWNWa8AaMxeiAEK4/afxbZuoDqz4whdSjfaFvDyDrkA7ux 7nHNaq9cLvyaHbNLv//CVFLoMMQ4jzmCHQFLw9D1JKbfWl+GjcJH8FY0o0qRQEHb CwDsA+IeDJrv3fv5h4nRWPojrOdkGjJh5IN/FrbGI4ZjhPoSqyYwhEfkGTYcI8gO dkmQtiFzEaPTdXO/bxPo+b3egKyW2+Y= -----END CERTIFICATE-----Generated at Sun Jul 20 17:29:52 2025 by rpki-client