$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/9767f7aa-c0a5-39f6-9881-91a15c53e053.roa File: 9767f7aa-c0a5-39f6-9881-91a15c53e053.roa (raw, json) Hash identifier: 2fF+/8YULDLjPCf0GnM3DPw2LxBhrGNNFz64Lrvzt3o= Subject key identifier: F8:6B:73:93:03:F9:61:52:E0:F9:99:F7:7B:EA:3C:86:62:AC:00:FD Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Certificate serial: 010D0C9F4328584A9900C6ECCD8BA9113E540400 Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/9767f7aa-c0a5-39f6-9881-91a15c53e053.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 5645 IP address blocks: 24.212.128.0/17 maxlen: 17 24.212.240.0/21 maxlen: 21 24.212.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:c6:ec:cd:8b:a9:11:3e:54:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=9740dc81-de92-42ff-8596-5b2276f89235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1e:e9:b0:37:f8:e2:83:a2:c8:12:95:fd:a0: 55:a7:3a:b1:e0:c6:3d:b2:ca:b3:03:e8:bf:73:09: 93:64:d7:b3:ef:e0:19:db:25:f2:ab:92:08:72:5c: 43:12:e6:fa:8c:c0:74:4c:f5:ec:26:ea:52:0f:0d: 52:17:d2:6b:b7:43:88:1a:66:22:83:c3:e5:5d:9d: 71:40:ad:93:93:76:83:d4:05:dc:2d:6f:ba:67:1f: 7c:31:f9:94:d3:39:7e:f9:3b:1b:ec:a5:f9:35:3b: 9e:2c:6e:10:38:7c:89:b9:c5:10:bb:80:2e:30:57: 4d:d0:aa:08:38:58:8a:29:c6:3d:23:eb:c3:be:e8: a9:f0:60:dc:2f:6e:e5:c2:fc:51:de:70:26:72:d0: 48:4e:fd:bf:b1:36:f7:14:43:5e:18:c4:d5:42:ce: f5:9c:7f:74:57:93:34:6c:16:63:74:d3:34:56:8a: 91:2c:b6:a7:09:53:ed:68:88:13:66:50:e6:e7:75: 5f:d7:5c:82:c2:54:ed:80:eb:30:35:32:39:67:95: d9:7f:7b:0f:fc:af:55:86:3e:b5:26:a4:ae:15:1d: c4:86:c0:6b:c2:75:e7:e2:ce:15:aa:de:02:ce:61: 6c:45:e1:25:00:4b:9a:15:7c:61:13:bc:c8:c2:92: 31:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:6B:73:93:03:F9:61:52:E0:F9:99:F7:7B:EA:3C:86:62:AC:00:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/9767f7aa-c0a5-39f6-9881-91a15c53e053.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl X509v3 Authority Key Identifier: keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer sbgp-ipAddrBlock: critical IPv4: 24.212.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:68:87:ae:f4:cb:91:7c:4d:03:8f:cb:83:7f:22:79:4b:ff: b2:8a:ff:a3:a6:e4:1b:5c:a5:bb:0e:ef:0b:e2:8a:a7:fc:2e: 48:01:81:92:e5:7b:0e:29:86:10:9a:7f:ba:f2:e0:a4:4c:83: 32:05:92:97:b1:f8:10:f3:47:dc:8e:2b:a5:22:24:b4:e7:18: 8e:36:43:b8:96:0e:43:96:1b:01:fe:15:db:d0:e2:8a:82:81: 6b:92:87:d2:ae:e6:70:e1:23:98:f6:2e:c7:be:f1:7d:6b:4f: aa:9a:50:06:85:50:34:38:92:fe:05:ba:df:c3:bb:82:14:63: 1d:2b:01:f7:2d:e4:e5:bf:a8:4e:25:74:ec:6d:ed:d2:10:99: 3d:5f:9e:1c:78:4e:a5:f6:d3:16:a7:a0:a0:68:46:c2:de:61: 3f:ef:04:bf:82:39:2a:6d:76:e2:ab:63:97:5f:50:b9:d8:84: d4:3c:d3:c2:ce:b2:3f:02:b3:58:85:cf:4e:17:5d:df:b3:41: 34:e7:ce:8b:ae:91:86:00:57:1c:ea:64:32:fc:8f:41:8d:d2: b4:b4:85:c9:2e:56:95:40:71:ed:2b:44:37:e9:97:ef:f1:96: e6:d0:9d:d2:06:ec:40:d5:15:6e:8a:f3:2f:9b:22:4f:71:d5: eb:d3:76:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAMbszYupET5UBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi MWNjMB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk OTc0MGRjODEtZGU5Mi00MmZmLTg1OTYtNWIyMjc2Zjg5MjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAih7psDf44oOiyBKV/aBVpzqx4MY9ssqzA+i/ cwmTZNez7+AZ2yXyq5IIclxDEub6jMB0TPXsJupSDw1SF9Jrt0OIGmYig8PlXZ1x QK2Tk3aD1AXcLW+6Zx98MfmU0zl++Tsb7KX5NTueLG4QOHyJucUQu4AuMFdN0KoI OFiKKcY9I+vDvuip8GDcL27lwvxR3nAmctBITv2/sTb3FENeGMTVQs71nH90V5M0 bBZjdNM0VoqRLLanCVPtaIgTZlDm53Vf11yCwlTtgOswNTI5Z5XZf3sP/K9Vhj61 JqSuFR3EhsBrwnXn4s4Vqt4CzmFsReElAEuaFXxhE7zIwpIxpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhrc5MD+WFS4PmZ93vqPIZirAD9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvOTc2N2Y3YWEtYzBhNS0z OWY2LTk4ODEtOTFhMTVjNTNlMDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3 NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh ZTZlZmIxY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHGNSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALdoh670y5F8TQOPy4N/InlL/7KK/6Om5BtcpbsO7wviiqf8LkgBgZLl ew4phhCaf7ry4KRMgzIFkpex+BDzR9yOK6UiJLTnGI42Q7iWDkOWGwH+FdvQ4oqC gWuSh9Ku5nDhI5j2Lse+8X1rT6qaUAaFUDQ4kv4Fut/Du4IUYx0rAfct5OW/qE4l dOxt7dIQmT1fnhx4TqX20xanoKBoRsLeYT/vBL+COSptduKrY5dfULnYhNQ808LO sj8Cs1iFz04XXd+zQTTnzouukYYAVxzqZDL8j0GN0rS0hckuVpVAce0rRDfpl+/x lubQndIG7EDVFW6K8y+bIk9x1evTdg0= -----END CERTIFICATE-----Generated at Mon Jul 28 22:13:35 2025 by rpki-client