$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/a3b62f02-34bf-3f70-aa2d-97d2fa3a388b.roa File: a3b62f02-34bf-3f70-aa2d-97d2fa3a388b.roa (raw, json) Hash identifier: axXTMqTHeR7jwy0jc1tbIBieJgEvD2a9VPVdUCPMh1o= Subject key identifier: 2E:DB:66:B2:D2:BD:2C:DC:3E:03:8F:93:89:80:FC:E1:65:55:DD:F7 Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F4328584B0CDC2085F3AC3E61799AD590 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/a3b62f02-34bf-3f70-aa2d-97d2fa3a388b.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 11232 IP address blocks: 24.124.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:20:85:f3:ac:3e:61:79:9a:d5:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=54560c60-3058-44d1-a026-fe1a849753ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:8f:74:f2:54:bd:82:25:a3:69:c0:a6:ee:ab: e7:b2:ae:cf:e0:e0:d2:23:91:77:92:b8:82:6c:18: 3d:92:5c:bd:bd:a4:da:de:35:ec:08:62:18:ea:0f: 89:99:18:8a:0f:1e:60:05:59:f5:13:63:86:a5:19: c5:b3:ef:57:cf:d6:5f:75:e6:13:61:02:ac:6d:11: e5:88:1d:62:5b:58:17:2e:29:b7:7f:ac:2b:8b:5d: e8:bb:a7:44:e5:85:22:d9:98:e8:f9:12:bb:2c:1a: 89:4b:cd:31:b1:ca:70:79:b4:bc:39:a7:f0:81:5d: 73:13:60:03:4b:95:74:fc:ad:d2:ee:71:d8:05:87: 83:82:90:80:f6:b3:17:25:bb:f5:6f:ab:f7:d9:b6: 9c:07:2a:a6:27:10:5b:cf:a3:fe:15:66:19:9f:4f: 96:b0:37:fc:9d:2b:7b:ad:b9:b0:b5:aa:61:01:2b: fc:f2:8b:ad:d6:d4:06:5c:d7:04:c8:62:04:63:f3: 08:5d:04:3c:2b:90:fa:f2:f4:51:12:a7:cf:96:5f: cc:b1:ce:49:fe:02:a5:86:4b:c3:34:63:c8:b6:10: aa:51:3e:b9:a3:b6:54:34:cc:22:fa:cd:14:0d:b3: f6:66:2e:0f:12:c2:d1:a4:61:eb:eb:8a:7d:a0:ac: 95:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:DB:66:B2:D2:BD:2C:DC:3E:03:8F:93:89:80:FC:E1:65:55:DD:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/a3b62f02-34bf-3f70-aa2d-97d2fa3a388b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 24.124.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:3a:9e:09:d0:ff:c7:16:44:f5:61:d9:85:34:d4:27:f5:59: dc:31:88:9a:29:65:1d:5b:33:93:dd:16:6c:e4:28:78:69:e2: c3:87:83:6b:4d:5c:8e:43:66:57:d1:29:00:4a:a3:4b:88:38: 66:ff:3a:cb:bd:82:c4:fc:69:c9:81:88:61:ff:f9:7a:ee:95: fa:1c:86:9b:dc:3b:0a:ef:bb:0e:83:c3:c5:1c:2c:75:1d:dd: 52:23:51:41:72:70:b4:d1:47:43:67:af:c3:f3:ca:34:6c:9d: 8d:0d:5e:9b:57:c9:c2:25:f5:43:cc:cd:83:44:bf:8d:bc:90: da:da:47:15:80:d5:5c:bd:1e:0d:3c:21:a8:80:b1:f7:3d:6e: e2:89:3a:d4:19:35:0f:97:62:65:33:1b:06:86:df:94:bb:3a: 4c:ec:c1:a0:22:6e:62:4b:04:c1:85:ff:bd:08:aa:1c:97:32: a6:a5:75:4b:c2:55:de:5d:79:3a:cf:5f:5f:25:ce:04:10:84: c7:a9:e0:3f:a0:92:80:8a:5a:06:38:11:8e:66:57:c1:b1:83: 34:f4:4d:9b:67:ef:96:fd:ee:35:42:11:9a:96:07:d2:16:04: 45:e1:7b:84:4a:e7:7d:d3:9b:3e:49:5b:20:b0:a2:d7:07:c2: 35:1d:12:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3CCF86w+YXma1ZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk NTQ1NjBjNjAtMzA1OC00NGQxLWEwMjYtZmUxYTg0OTc1M2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3o908lS9giWjacCm7qvnsq7P4ODSI5F3kriC bBg9kly9vaTa3jXsCGIY6g+JmRiKDx5gBVn1E2OGpRnFs+9Xz9ZfdeYTYQKsbRHl iB1iW1gXLim3f6wri13ou6dE5YUi2Zjo+RK7LBqJS80xscpwebS8OafwgV1zE2AD S5V0/K3S7nHYBYeDgpCA9rMXJbv1b6v32bacByqmJxBbz6P+FWYZn0+WsDf8nSt7 rbmwtaphASv88out1tQGXNcEyGIEY/MIXQQ8K5D68vRREqfPll/Msc5J/gKlhkvD NGPIthCqUT65o7ZUNMwi+s0UDbP2Zi4PEsLRpGHr64p9oKyV+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7bZrLSvSzcPgOPk4mA/OFlVd33MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvYTNiNjJmMDItMzRiZi0z ZjcwLWFhMmQtOTdkMmZhM2EzODhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGHwwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC86ngnQ/8cWRPVh2YU01Cf1WdwxiJopZR1bM5PdFmzkKHhp4sOHg2tN XI5DZlfRKQBKo0uIOGb/Osu9gsT8acmBiGH/+XrulfochpvcOwrvuw6Dw8UcLHUd 3VIjUUFycLTRR0Nnr8PzyjRsnY0NXptXycIl9UPMzYNEv428kNraRxWA1Vy9Hg08 IaiAsfc9buKJOtQZNQ+XYmUzGwaG35S7OkzswaAibmJLBMGF/70IqhyXMqaldUvC Vd5deTrPX18lzgQQhMep4D+gkoCKWgY4EY5mV8GxgzT0TZtn75b97jVCEZqWB9IW BEXhe4RK533Tmz5JWyCwotcHwjUdEv8= -----END CERTIFICATE-----Generated at Fri Sep 19 19:41:35 2025 by rpki-client