$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/bc371c38-7917-3988-a5f6-0263a408b6ba.roa File: bc371c38-7917-3988-a5f6-0263a408b6ba.roa (raw, json) Hash identifier: N1e3B7SitJ/LhqzA2k/kLDF8xHgkxIsnKuy32Oz1pY0= Subject key identifier: 6F:E3:AA:EA:70:C2:41:0F:08:CF:8C:58:A1:AA:72:30:81:BE:0D:65 Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F4328584B1806E79C8D16FBF27A9FFD40 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/bc371c38-7917-3988-a5f6-0263a408b6ba.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 11232 IP address blocks: 24.56.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:e7:9c:8d:16:fb:f2:7a:9f:fd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=29c1cf8e-ff9e-4fbd-9027-fff1ff87d29a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:cf:f5:1b:8c:f1:d3:95:41:ae:66:42:f5:f0: 99:02:41:7a:58:16:76:fe:06:cf:33:43:16:07:28: 09:c0:34:a1:7b:74:25:46:eb:95:6f:21:b8:61:8f: 88:b3:72:e3:e7:c8:ac:94:d7:89:bc:15:94:f2:fe: ff:6f:d2:65:ba:27:44:44:1e:17:76:f8:16:68:2e: bd:7a:b0:28:a1:1b:54:17:92:b0:56:c5:ef:b4:e8: 1e:6b:1b:65:80:43:1a:23:2f:00:32:5d:4f:bf:a3: c1:8f:07:93:a6:b9:d7:3b:2f:11:db:ac:57:a6:0d: e1:cc:66:5e:07:fc:cf:05:b0:56:e2:24:f3:72:39: 19:7a:3f:6b:a7:42:ee:9b:6a:07:ce:90:8c:64:c7: f0:a6:dd:40:24:53:80:8d:69:67:91:f6:73:16:db: 0c:3a:ce:14:5b:4b:6d:a8:ec:9b:da:ab:0f:10:c6: 75:1f:4d:aa:cd:0c:9b:7e:01:64:3f:09:95:67:63: ec:bb:a3:10:3d:6c:15:72:b1:8d:de:41:1f:88:6a: a4:25:8c:2f:8f:ce:31:fb:68:7e:f4:83:01:72:58: 62:a3:db:28:f0:3b:1f:57:cd:4b:d6:80:9f:12:cf: 58:b1:d6:d0:95:1c:ab:3b:a7:00:a0:82:ab:ec:10: 50:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:E3:AA:EA:70:C2:41:0F:08:CF:8C:58:A1:AA:72:30:81:BE:0D:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/bc371c38-7917-3988-a5f6-0263a408b6ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 24.56.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:26:cb:b6:e3:aa:71:10:ef:2d:1b:86:64:18:e5:a6:54:53: 38:ba:10:0d:38:88:02:d4:10:96:6f:9f:06:0c:37:a6:b1:60: d5:5f:a5:9c:3f:ae:cc:87:19:cb:68:fb:fa:f9:c8:1b:c9:8e: 18:24:97:c7:8b:1c:c1:74:c6:4b:cf:2d:13:46:48:0f:90:da: 86:87:bb:67:c3:fa:cc:0d:02:55:82:65:35:0d:b4:10:8e:96: 99:08:6e:83:9b:31:56:27:6d:69:65:7e:df:51:04:5d:a9:14: 27:cb:42:c3:8f:28:f2:a3:d3:45:2b:b6:fd:97:e2:4e:60:9a: 4c:84:2a:11:2a:06:48:65:e9:66:56:3e:74:63:b8:15:87:06: 4b:7b:c9:e3:8d:8f:d8:c6:8c:2a:36:5f:d8:00:d4:08:22:39: da:76:19:be:86:d2:d3:e6:52:b8:26:8d:ec:f3:ab:75:86:7d: e1:73:d4:6b:77:d1:67:55:d0:71:f7:11:5c:77:11:3a:36:50: 8f:21:ba:01:72:4d:6a:5a:fe:aa:0a:12:9a:d0:75:89:9a:e9: a5:43:f2:7a:5a:1f:b3:72:fc:89:01:87:3b:e9:0b:86:6a:c6: 4f:70:62:48:e3:fd:53:15:d7:16:7d:7c:28:de:4a:5f:b5:4a: 37:57:00:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBuecjRb78nqf/UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk MjljMWNmOGUtZmY5ZS00ZmJkLTkwMjctZmZmMWZmODdkMjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9c/1G4zx05VBrmZC9fCZAkF6WBZ2/gbPM0MW BygJwDShe3QlRuuVbyG4YY+Is3Lj58islNeJvBWU8v7/b9JluidERB4XdvgWaC69 erAooRtUF5KwVsXvtOgeaxtlgEMaIy8AMl1Pv6PBjweTprnXOy8R26xXpg3hzGZe B/zPBbBW4iTzcjkZej9rp0Lum2oHzpCMZMfwpt1AJFOAjWlnkfZzFtsMOs4UW0tt qOyb2qsPEMZ1H02qzQybfgFkPwmVZ2Psu6MQPWwVcrGN3kEfiGqkJYwvj84x+2h+ 9IMBclhio9so8DsfV81L1oCfEs9YsdbQlRyrO6cAoIKr7BBQGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG/jqupwwkEPCM+MWKGqcjCBvg1lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvYmMzNzFjMzgtNzkxNy0z OTg4LWE1ZjYtMDI2M2E0MDhiNmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGDioMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKImy7bjqnEQ7y0bhmQY5aZUUzi6EA04iALUEJZvnwYMN6axYNVfpZw/ rsyHGcto+/r5yBvJjhgkl8eLHMF0xkvPLRNGSA+Q2oaHu2fD+swNAlWCZTUNtBCO lpkIboObMVYnbWllft9RBF2pFCfLQsOPKPKj00Urtv2X4k5gmkyEKhEqBkhl6WZW PnRjuBWHBkt7yeONj9jGjCo2X9gA1AgiOdp2Gb6G0tPmUrgmjezzq3WGfeFz1Gt3 0WdV0HH3EVx3ETo2UI8hugFyTWpa/qoKEprQdYma6aVD8npaH7Ny/IkBhzvpC4Zq xk9wYkjj/VMV1xZ9fCjeSl+1SjdXAPo= -----END CERTIFICATE-----Generated at Sat Sep 20 00:42:33 2025 by rpki-client