$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/2dc0ccb2-daaa-3b17-9cab-7349b5d1a295.roa File: 2dc0ccb2-daaa-3b17-9cab-7349b5d1a295.roa (raw, json) Hash identifier: uYivxpVohqCYKHO+JTjRUr1Mx5LkDqwT25A/vGHs8Ao= Subject key identifier: F4:BC:70:27:D1:98:0C:07:A7:35:E8:26:BD:B4:A9:F8:01:A8:8D:48 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584B0B76BE093ED6EC03A94D1BE0 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/2dc0ccb2-daaa-3b17-9cab-7349b5d1a295.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 11404 IP address blocks: 24.113.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:be:09:3e:d6:ec:03:a9:4d:1b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=aa482e0f-168e-431d-b834-58763996488b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:47:0d:76:6f:be:a2:c4:b0:d9:97:99:4d:2b: 3e:c9:80:70:1c:d6:a5:77:cd:0f:86:b8:c8:5c:aa: bc:a5:6c:2b:b4:b1:38:e0:24:ad:69:e9:29:eb:47: ec:22:1c:c9:79:3c:9c:1f:ed:9a:f4:b2:90:58:b1: 9e:b5:6b:8a:cc:2f:41:09:1c:2d:6f:20:6c:bc:b7: 9e:d8:19:0e:e5:77:d0:27:b7:29:62:b7:59:e9:9d: 83:73:15:91:43:b2:6a:af:2a:7d:24:a9:8c:a2:8e: 77:5c:e8:95:04:85:04:16:87:a6:c8:3c:83:73:52: e4:81:c5:cf:19:b3:8a:06:63:33:3a:1c:bb:f2:15: 4b:52:4f:6a:4b:de:f0:05:59:62:a6:53:54:98:fc: e3:0b:82:d2:74:61:a1:68:16:26:b5:c9:ee:6a:7f: 91:c7:11:1a:3f:1c:9f:3f:e9:d5:f1:54:91:31:6c: d2:e9:9a:66:83:61:f3:16:05:7e:88:bc:6d:e2:41: 86:e0:06:0f:26:21:06:f6:05:0d:cb:1e:ee:cc:b4: d5:65:21:07:98:b2:93:79:df:b5:e5:8c:10:fb:6c: 01:4d:95:2e:50:8e:ac:86:be:a0:0b:f9:1a:38:c2: ea:00:57:34:98:ca:f8:4f:bb:a4:07:64:48:56:a8: ee:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:BC:70:27:D1:98:0C:07:A7:35:E8:26:BD:B4:A9:F8:01:A8:8D:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/2dc0ccb2-daaa-3b17-9cab-7349b5d1a295.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 24.113.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:64:16:e3:78:36:d9:f4:30:c2:29:ea:0f:09:83:34:c6:44: 67:c3:1f:c6:26:5d:ce:36:8d:63:ac:36:00:8c:66:93:40:aa: ca:71:13:8d:00:57:4d:e9:e0:57:7c:c1:24:4d:e6:70:48:61: e2:c7:0b:21:46:b5:41:61:ca:26:4b:52:a3:b0:4d:7f:e3:81: 73:ba:cb:4d:be:9d:3e:a2:88:7c:91:bc:16:60:8a:db:1d:e8: ab:a8:a7:44:75:8f:71:3a:a7:6a:09:03:3a:75:58:64:d8:5f: 62:42:a2:39:65:a5:d0:4f:3d:f5:65:a6:77:f0:23:39:12:ba: 78:ff:25:1f:6f:45:e2:84:e6:6d:ff:e2:44:9b:db:cf:a2:39: f7:bd:25:d6:92:84:2f:1a:05:b8:67:42:37:ae:99:17:ec:cf: 8a:d6:78:22:6a:90:1c:2e:a1:f7:89:83:7d:39:e9:30:f9:78: 67:c0:13:ea:c7:67:66:42:97:83:2b:cf:4a:ad:26:cf:19:f9: e8:cf:44:40:20:19:a8:fb:d6:69:ec:f6:c8:0e:cc:a6:3c:2e: b3:62:9c:a9:d1:c4:50:29:10:d5:a8:f1:9f:b5:d2:1e:1e:4a: ef:92:7e:cf:c9:61:55:00:3e:d3:22:bb:0b:fc:80:76:f0:f9: 12:a9:aa:b4 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEsLdr4JPtbsA6lNG+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk YWE0ODJlMGYtMTY4ZS00MzFkLWI4MzQtNTg3NjM5OTY0ODhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEcNdm++osSw2ZeZTSs+yYBwHNald80PhrjI XKq8pWwrtLE44CStaekp60fsIhzJeTycH+2a9LKQWLGetWuKzC9BCRwtbyBsvLee 2BkO5XfQJ7cpYrdZ6Z2DcxWRQ7Jqryp9JKmMoo53XOiVBIUEFoemyDyDc1LkgcXP GbOKBmMzOhy78hVLUk9qS97wBVliplNUmPzjC4LSdGGhaBYmtcnuan+RxxEaPxyf P+nV8VSRMWzS6Zpmg2HzFgV+iLxt4kGG4AYPJiEG9gUNyx7uzLTVZSEHmLKTed+1 5YwQ+2wBTZUuUI6shr6gC/kaOMLqAFc0mMr4T7ukB2RIVqjuuwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFPS8cCfRmAwHpzXoJr20qfgBqI1IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvMmRjMGNjYjItZGFhYS0z YjE3LTljYWItNzM0OWI1ZDFhMjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAGHEwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAgWQW43g22fQwwinqDwmDNMZEZ8MfxiZdzjaNY6w2AIxmk0CqynETjQBX TengV3zBJE3mcEhh4scLIUa1QWHKJktSo7BNf+OBc7rLTb6dPqKIfJG8FmCK2x3o q6inRHWPcTqnagkDOnVYZNhfYkKiOWWl0E899WWmd/AjORK6eP8lH29F4oTmbf/i RJvbz6I5970l1pKELxoFuGdCN66ZF+zPitZ4ImqQHC6h94mDfTnpMPl4Z8AT6sdn ZkKXgyvPSq0mzxn56M9EQCAZqPvWaez2yA7Mpjwus2KcqdHEUCkQ1ajxn7XSHh5K 75J+z8lhVQA+0yK7C/yAdvD5EqmqtA== -----END CERTIFICATE-----Generated at Sat Sep 6 23:53:39 2025 by rpki-client