$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/c2186dfa-3aa6-379a-ac86-2c332db54c79.roa File: c2186dfa-3aa6-379a-ac86-2c332db54c79.roa (raw, json) Hash identifier: iEwhbLKDbyqEmbI83hNX9A3malBHX/1iPFQqJd0yPPg= Subject key identifier: DD:C7:5F:D7:AD:0B:CD:E2:44:67:BD:27:C4:9E:16:17:5A:9A:14:74 Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109 Certificate serial: 010D0C9F4328584B047C182AAF4CECA063EE1A40 Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/c2186dfa-3aa6-379a-ac86-2c332db54c79.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 4922 IP address blocks: 24.49.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:18:2a:af:4c:ec:a0:63:ee:1a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=5ba5d1c7-7764-4b1d-858e-42e1ec534e5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d2:4e:92:44:07:87:c9:fb:4b:0d:b4:e2:34: cd:08:4d:42:35:de:77:8c:c4:39:46:a0:ad:5b:79: a0:05:5a:8d:7e:83:d5:d8:70:fe:4a:d3:15:c7:96: 1e:0e:fa:2b:88:0d:32:a7:50:0d:a3:14:1a:ce:ea: 10:9e:e6:f6:d1:58:a1:a3:7c:70:85:ee:25:91:9b: d9:1e:7f:e4:45:94:5d:64:74:bb:83:f6:06:ec:6a: e2:dc:b3:ff:3e:ce:f8:7f:00:c7:c3:e6:8d:4c:6d: c9:03:f4:2a:56:90:eb:2c:f3:5d:46:a1:5a:ea:95: f7:a6:65:c3:cd:d8:bf:39:60:df:be:ab:73:f1:72: c6:30:72:d2:85:66:65:fb:96:b0:41:0f:8d:a9:e8: 8e:a2:3a:26:e9:0f:77:79:de:18:a0:3c:86:5d:8d: 51:7b:3a:d5:53:a0:c2:98:7f:c8:39:1a:79:97:62: 40:bc:09:d3:11:7f:42:9f:59:06:24:6f:43:64:ed: 21:03:87:60:f1:24:22:93:fc:74:5b:3c:ea:1f:05: 21:a2:9b:99:80:a7:5b:d2:70:b7:e9:28:ad:d0:a0: a6:ef:2e:c1:7e:f9:6e:5b:18:b7:8a:b1:b0:a1:32: d2:93:0b:a7:76:77:ee:11:2a:71:a9:6c:47:da:36: 26:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C7:5F:D7:AD:0B:CD:E2:44:67:BD:27:C4:9E:16:17:5A:9A:14:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/c2186dfa-3aa6-379a-ac86-2c332db54c79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl X509v3 Authority Key Identifier: keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer sbgp-ipAddrBlock: critical IPv4: 24.49.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:28:bb:d1:18:48:4e:03:b8:c8:ed:04:3e:1f:13:39:0d:cb: 3c:1a:5b:cd:b0:49:7b:39:4e:00:0d:d2:13:e3:e6:91:fe:78: 64:8d:eb:c7:be:fa:de:8e:f8:b5:ed:f1:d9:cb:50:9e:31:7a: c8:15:8c:c6:3c:34:4c:37:1a:07:e1:60:4c:c6:cd:73:e7:58: 0c:3d:0b:f3:12:6f:a5:a9:d8:ca:78:e3:5e:ca:9f:db:18:b5: 60:57:c1:9e:ba:62:3b:70:d9:25:82:d6:f7:0c:72:f3:f6:72: 4a:39:5c:8a:17:97:ef:a3:12:e4:9e:3e:bb:65:a3:43:b6:53: 01:9a:e5:7f:3f:c9:b3:b5:cd:6a:40:6c:5b:24:ac:dc:aa:1d: da:93:84:04:e0:65:30:9f:82:0e:25:51:d0:cd:3b:dd:50:cb: 30:76:66:57:b0:da:49:56:37:60:e4:b1:7f:0f:f3:10:cd:3a: d9:cc:07:27:1a:0c:e4:b1:e8:bf:c3:dc:5e:64:5f:55:03:a1: 60:3d:ef:db:4b:35:e5:dc:8b:35:c2:4b:14:d3:2a:89:2a:d7: 8f:cd:6b:bb:9e:97:ae:5c:6d:34:2a:a0:03:dc:1f:14:92:9d: f8:0f:ea:37:2b:8b:4a:5c:2c:03:93:59:09:18:cb:04:ae:41: c9:56:49:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfBgqr0zsoGPuGkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI2ZjIyZjktM2ViNi00NTM0LWFmNWUtOWQ1NzE1ZWEz MTA5MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk NWJhNWQxYzctNzc2NC00YjFkLTg1OGUtNDJlMWVjNTM0ZTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdJOkkQHh8n7Sw204jTNCE1CNd53jMQ5RqCt W3mgBVqNfoPV2HD+StMVx5YeDvoriA0yp1ANoxQazuoQnub20Viho3xwhe4lkZvZ Hn/kRZRdZHS7g/YG7Gri3LP/Ps74fwDHw+aNTG3JA/QqVpDrLPNdRqFa6pX3pmXD zdi/OWDfvqtz8XLGMHLShWZl+5awQQ+NqeiOojom6Q93ed4YoDyGXY1RezrVU6DC mH/IORp5l2JAvAnTEX9Cn1kGJG9DZO0hA4dg8SQik/x0WzzqHwUhopuZgKdb0nC3 6Sit0KCm7y7BfvluWxi3irGwoTLSkwundnfuESpxqWxH2jYmuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3HX9etC83iRGe9J8SeFhdamhR0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YjZm MjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3MTVlYTMxMDkvYzIxODZkZmEtM2FhNi0z NzlhLWFjODYtMmMzMzJkYjU0Yzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGI2ZjIyZjktM2ViNi00NTM0LWFm NWUtOWQ1NzE1ZWEzMTA5LzhiNmYyMmY5LTNlYjYtNDUzNC1hZjVlLTlkNTcxNWVh MzEwOS5jcmwwHwYDVR0jBBgwFoAUZlnDfJtBAob0x8/CZoobNxbE1hUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84YjZmMjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3 MTVlYTMxMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGDEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQou9EYSE4DuMjtBD4fEzkNyzwaW82wSXs5TgAN0hPj5pH+eGSN68e+ +t6O+LXt8dnLUJ4xesgVjMY8NEw3GgfhYEzGzXPnWAw9C/MSb6Wp2Mp4417Kn9sY tWBXwZ66Yjtw2SWC1vcMcvP2cko5XIoXl++jEuSePrtlo0O2UwGa5X8/ybO1zWpA bFskrNyqHdqThATgZTCfgg4lUdDNO91QyzB2Zlew2klWN2DksX8P8xDNOtnMByca DOSx6L/D3F5kX1UDoWA979tLNeXcizXCSxTTKokq14/Na7uel65cbTQqoAPcHxSS nfgP6jcri0pcLAOTWQkYywSuQclWSdI= -----END CERTIFICATE-----Generated at Fri Oct 10 22:32:48 2025 by rpki-client