$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/2421dec5-04d3-30ff-818e-e76275542a78.roa File: 2421dec5-04d3-30ff-818e-e76275542a78.roa (raw, json) Hash identifier: k7T1vFEPr6NgM+GbrfPmXn9CWbNzDBhXfer0SNFEOQc= Subject key identifier: E0:C5:78:05:87:11:9A:13:19:2D:96:A9:85:FE:41:19:7E:4C:17:5D Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F4328584B0CDC20F3FFFAA9EBC1FFE4F0 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/2421dec5-04d3-30ff-818e-e76275542a78.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 11232 IP address blocks: 24.124.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:20:f3:ff:fa:a9:eb:c1:ff:e4:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=f3e12cd8-fb20-4f48-ab3d-dcf063327634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d2:6b:87:a1:0e:54:e1:55:25:6e:90:f0:aa: bd:4e:63:54:84:b6:e8:1c:3f:95:83:2a:bc:68:8e: 5a:35:6f:1c:b7:8c:93:88:6f:01:5e:e7:88:f7:36: 96:72:04:57:b7:8a:a0:80:ec:c4:4d:ff:05:d5:20: 20:74:cb:98:0e:80:33:c4:8a:25:29:ee:40:a1:49: d5:49:ea:9d:5c:08:22:e5:86:e4:cd:7b:ae:a3:cf: a8:60:1e:5b:90:54:40:4f:8b:e2:37:be:90:23:c6: 60:dc:0b:5e:8b:e9:88:cb:0e:8c:6c:b7:e9:de:2b: 93:23:66:ce:5a:76:86:e6:49:21:7a:45:43:3d:d1: db:bb:98:00:9f:73:2b:0e:66:28:1b:46:c7:d9:0d: 29:a4:1f:76:6f:17:cf:96:0d:54:dc:8b:2e:99:8a: 9d:4f:79:03:e1:a5:e0:a9:60:fd:6d:e3:f1:b2:c0: 23:49:bd:51:df:54:b3:16:a8:93:01:90:eb:c8:a1: e1:a9:70:b6:cf:64:09:27:50:6f:fd:49:51:bf:b2: 2f:0a:7c:c7:21:30:09:83:3b:66:57:1b:5c:31:c6: 15:c5:9f:79:d2:0d:1e:1c:8d:30:f7:b1:c1:56:1c: 5d:81:19:f5:00:0f:75:75:dd:f5:68:ae:2c:e7:35: a0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:C5:78:05:87:11:9A:13:19:2D:96:A9:85:FE:41:19:7E:4C:17:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/2421dec5-04d3-30ff-818e-e76275542a78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 24.124.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:f1:42:95:83:d5:16:92:41:21:2f:74:66:bb:18:5b:16:d2: f1:6f:3d:fa:69:fc:fb:cc:7c:2a:9a:dc:d5:66:19:1c:18:cf: 36:25:09:e0:a6:6c:0e:87:95:f6:83:3b:c0:a6:9e:d1:d2:1c: e6:5a:c9:df:c7:c6:27:56:4e:7b:2b:3e:92:63:7a:2a:36:b4: b7:0b:a4:0f:9d:b1:29:7c:3e:43:6b:62:46:e4:c4:3d:84:5b: 26:cc:b9:7e:0f:32:ed:91:6b:1c:b8:bf:aa:21:0e:fc:18:58: d7:3a:30:e4:1e:d1:cd:e8:b5:c1:2e:a3:3d:8e:ea:de:6e:07: eb:f5:e5:36:56:ed:71:3f:0d:19:37:ce:ce:ba:c7:95:9d:aa: ff:bd:25:9c:a5:56:78:28:74:71:bd:91:f8:10:4f:a2:a4:21: 0c:67:5a:81:ca:1c:b4:94:d9:32:f5:c9:00:eb:e1:3e:01:eb: 4c:c5:1d:66:07:f4:69:dd:0f:5c:ee:8f:13:b0:0d:4b:2d:6c: 73:cc:e0:58:c6:6b:11:6a:08:1a:8e:43:68:e4:16:9b:1e:b3: 6b:b9:58:82:4a:43:3d:30:da:02:90:c1:a9:47:d2:4f:f4:70: b3:fc:3a:ce:bb:ed:0f:31:50:3b:6c:9f:d5:a8:65:46:39:2a: 76:68:96:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3CDz//qp68H/5PAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk ZjNlMTJjZDgtZmIyMC00ZjQ4LWFiM2QtZGNmMDYzMzI3NjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdJrh6EOVOFVJW6Q8Kq9TmNUhLboHD+Vgyq8 aI5aNW8ct4yTiG8BXueI9zaWcgRXt4qggOzETf8F1SAgdMuYDoAzxIolKe5AoUnV SeqdXAgi5YbkzXuuo8+oYB5bkFRAT4viN76QI8Zg3Atei+mIyw6MbLfp3iuTI2bO WnaG5kkhekVDPdHbu5gAn3MrDmYoG0bH2Q0ppB92bxfPlg1U3IsumYqdT3kD4aXg qWD9bePxssAjSb1R31SzFqiTAZDryKHhqXC2z2QJJ1Bv/UlRv7IvCnzHITAJgztm VxtcMcYVxZ950g0eHI0w97HBVhxdgRn1AA91dd31aK4s5zWgWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFODFeAWHEZoTGS2WqYX+QRl+TBddMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvMjQyMWRlYzUtMDRkMy0z MGZmLTgxOGUtZTc2Mjc1NTQyYTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGHxwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfxQpWD1RaSQSEvdGa7GFsW0vFvPfpp/PvMfCqa3NVmGRwYzzYlCeCm bA6HlfaDO8CmntHSHOZayd/HxidWTnsrPpJjeio2tLcLpA+dsSl8PkNrYkbkxD2E WybMuX4PMu2Raxy4v6ohDvwYWNc6MOQe0c3otcEuoz2O6t5uB+v15TZW7XE/DRk3 zs66x5Wdqv+9JZylVngodHG9kfgQT6KkIQxnWoHKHLSU2TL1yQDr4T4B60zFHWYH 9GndD1zujxOwDUstbHPM4FjGaxFqCBqOQ2jkFpses2u5WIJKQz0w2gKQwalH0k/0 cLP8Os677Q8xUDtsn9WoZUY5KnZolrc= -----END CERTIFICATE-----Generated at Sat Sep 20 04:13:45 2025 by rpki-client