$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/daa2fabc-9c56-318e-90b1-cadec688c590.roa File: daa2fabc-9c56-318e-90b1-cadec688c590.roa (raw, json) Hash identifier: Zc9I7QGrezsawCaiPM64BjWWE0W6TOukuWDDHcpbCMI= Subject key identifier: B2:16:F5:4D:BA:17:56:E7:09:4A:18:EB:9C:A1:81:B1:40:1F:21:D7 Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Certificate serial: 010D0C9F4328584A9900C6FE27902F1FAAF6A680 Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/daa2fabc-9c56-318e-90b1-cadec688c590.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 5645 IP address blocks: 24.246.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:c6:fe:27:90:2f:1f:aa:f6:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=ef1de78b-ac62-470b-8775-3039c380234e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:41:47:01:54:2b:b9:25:a8:98:9b:e5:b9:be: 5c:4b:45:9c:de:73:1d:7e:5a:aa:22:4f:95:bb:27: 46:c1:19:85:aa:4f:46:59:2e:7c:67:05:02:e2:5e: a6:cd:fb:ec:ff:9f:14:1d:27:a7:3e:bf:99:71:45: fa:0e:38:af:44:40:2a:97:c9:ab:5b:89:1a:77:88: ae:f9:59:c4:f5:25:8e:61:83:d5:68:af:9b:d0:85: 27:d7:13:97:00:5b:7b:b0:97:ad:3c:fd:b3:2f:91: 9d:45:4a:fb:f1:81:0d:dd:63:34:84:22:9c:96:e4: 13:b8:c9:30:da:d5:ad:f7:d3:d7:c0:cd:0e:6c:e1: 4e:06:79:f0:96:57:9f:e1:4f:72:9d:26:a9:74:f3: 4b:78:90:2f:16:e7:a0:34:e0:dd:64:ae:26:0c:24: c4:37:d2:79:f5:15:a4:c2:01:7d:37:ca:33:3f:63: f5:a5:52:db:ce:df:91:09:ea:0e:86:65:a0:e1:1b: c8:8f:9b:6a:ba:78:6d:b2:58:72:19:24:3d:fd:3b: 50:9c:14:e7:21:f7:3f:b2:ad:06:09:14:90:df:af: 76:bc:40:b5:0a:17:3e:01:d0:ac:05:15:a4:71:35: 59:2e:2a:f6:50:18:c9:0b:69:df:0e:e0:83:8e:da: f2:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:16:F5:4D:BA:17:56:E7:09:4A:18:EB:9C:A1:81:B1:40:1F:21:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/daa2fabc-9c56-318e-90b1-cadec688c590.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl X509v3 Authority Key Identifier: keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer sbgp-ipAddrBlock: critical IPv4: 24.246.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:ce:8f:62:2e:2b:ba:71:2d:8d:c7:bd:a2:ad:6e:7b:b3:31: f9:dd:18:c6:8b:65:59:59:1c:d1:05:c2:c0:cb:0f:bc:b2:4a: 4b:e3:fc:f5:5f:f0:d7:47:b9:07:9b:48:7a:fc:80:43:ac:2e: f3:ce:5d:dc:86:0f:d8:84:f8:92:09:b7:9c:f4:13:05:9a:c5: 20:83:e5:a6:4d:29:db:09:d3:30:e6:d2:95:dc:84:2a:82:1e: 70:9e:81:21:75:da:3c:02:8a:0d:b5:a0:ee:6d:46:cb:53:48: fd:ff:50:c9:37:42:c8:b6:79:43:bb:72:04:f9:ae:d6:a2:2f: 97:c5:7b:2b:90:78:93:a3:38:ef:b1:d3:fb:3c:a4:b3:20:a2: d5:95:8c:44:be:5c:73:15:e0:9f:77:0b:56:f2:e2:c2:33:37: 3d:a6:97:3f:79:d7:18:59:6d:b9:c9:6d:de:2b:32:2c:6c:4e: ad:13:db:f4:84:34:31:e4:9e:7d:e0:14:47:5e:16:fa:86:a3: 37:fe:97:f5:5c:a0:03:db:dd:f0:6e:54:fc:a9:16:63:55:c8: 60:91:5d:d0:c4:a8:af:db:72:4a:1c:5f:1d:da:0c:88:b7:04: 4d:cd:cd:47:3b:d4:54:77:ee:ff:eb:5f:dd:2e:2e:fa:00:11: 1a:29:81:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAMb+J5AvH6r2poAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi MWNjMB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk ZWYxZGU3OGItYWM2Mi00NzBiLTg3NzUtMzAzOWMzODAyMzRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0FHAVQruSWomJvlub5cS0Wc3nMdflqqIk+V uydGwRmFqk9GWS58ZwUC4l6mzfvs/58UHSenPr+ZcUX6DjivREAql8mrW4kad4iu +VnE9SWOYYPVaK+b0IUn1xOXAFt7sJetPP2zL5GdRUr78YEN3WM0hCKcluQTuMkw 2tWt99PXwM0ObOFOBnnwllef4U9ynSapdPNLeJAvFuegNODdZK4mDCTEN9J59RWk wgF9N8ozP2P1pVLbzt+RCeoOhmWg4RvIj5tqunhtslhyGSQ9/TtQnBTnIfc/sq0G CRSQ3692vEC1Chc+AdCsBRWkcTVZLir2UBjJC2nfDuCDjtryeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIW9U26F1bnCUoY65yhgbFAHyHXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvZGFhMmZhYmMtOWM1Ni0z MThlLTkwYjEtY2FkZWM2ODhjNTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3 NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh ZTZlZmIxY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGGPYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHOj2IuK7pxLY3HvaKtbnuzMfndGMaLZVlZHNEFwsDLD7yySkvj/PVf 8NdHuQebSHr8gEOsLvPOXdyGD9iE+JIJt5z0EwWaxSCD5aZNKdsJ0zDm0pXchCqC HnCegSF12jwCig21oO5tRstTSP3/UMk3Qsi2eUO7cgT5rtaiL5fFeyuQeJOjOO+x 0/s8pLMgotWVjES+XHMV4J93C1by4sIzNz2mlz951xhZbbnJbd4rMixsTq0T2/SE NDHknn3gFEdeFvqGozf+l/VcoAPb3fBuVPypFmNVyGCRXdDEqK/bckocXx3aDIi3 BE3NzUc71FR37v/rX90uLvoAERopgQk= -----END CERTIFICATE-----Generated at Mon Jul 28 22:16:29 2025 by rpki-client