$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/2223bf1b-4e49-3a32-be8e-f2210cdd7887.roa File: 2223bf1b-4e49-3a32-be8e-f2210cdd7887.roa (raw, json) Hash identifier: 2D9vJTcyMAaHc8akjaoIUHIQwY9bg4iZwEAuub9dBa8= Subject key identifier: 74:45:9F:5E:31:31:A2:22:5D:2F:FC:33:B4:12:D1:C4:05:84:B9:EC Certificate issuer: /CN=6fb18968-7aa5-41e5-96b6-c45c25a566e8 Certificate serial: 010D0C9F4328584B2BCE28B8D44AF0BC49C7EC00 Authority key identifier: C6:9F:AC:EA:70:7D:E0:51:AB:C5:1B:82:39:4D:0E:73:3A:A2:A1:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/2223bf1b-4e49-3a32-be8e-f2210cdd7887.roa Signing time: Fri 12 Sep 2025 15:02:51 +0000 ROA not before: Fri 12 Sep 2025 15:02:51 +0000 ROA not after: Thu 11 Dec 2025 16:02:51 +0000 asID: 11260 IP address blocks: 24.207.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/6fb18968-7aa5-41e5-96b6-c45c25a566e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/6fb18968-7aa5-41e5-96b6-c45c25a566e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2b:ce:28:b8:d4:4a:f0:bc:49:c7:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fb18968-7aa5-41e5-96b6-c45c25a566e8 Validity Not Before: Sep 12 15:02:51 2025 GMT Not After : Dec 11 16:02:51 2025 GMT Subject: CN=b9859828-d3fd-4684-adc7-d57bf7723a5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b9:95:95:64:66:a6:ec:82:05:f2:89:2a:de: b7:f7:d5:fe:fb:78:cf:49:33:ef:66:0a:c3:5b:70: 3d:60:7d:7a:5b:f9:75:56:e1:f9:06:dd:cc:82:aa: 1b:ec:cc:c9:d1:e7:8f:b9:e0:7d:d5:d9:bc:d8:bf: 3e:16:53:de:4a:e8:8f:d9:01:5a:7d:46:93:30:e7: 9e:f8:cd:43:b7:9c:14:41:cd:1f:2e:5b:ae:ea:34: 65:5a:c0:55:77:27:0e:95:e7:aa:9e:8c:97:17:08: 7b:9f:26:48:f6:5c:ea:aa:c5:a4:8c:42:02:e5:3a: de:71:3f:8c:b1:73:05:5b:2a:91:83:26:88:53:2c: a9:e2:e3:ee:f0:90:6c:eb:0f:ea:d2:b5:3a:67:9f: b3:03:7c:2d:f4:74:85:4a:c4:3d:9c:08:4e:49:c9: 19:5d:7a:83:ea:99:d8:b6:9b:cd:cf:12:af:2d:0a: 95:1f:02:51:9c:5d:af:04:11:3c:5d:21:08:87:78: 4f:7e:24:67:90:bb:69:40:17:59:ce:30:b4:68:79: 6b:b9:7b:55:84:b6:d9:4c:bd:83:80:cb:5c:22:e9: 51:0c:e6:66:e5:73:f7:65:a8:11:02:7f:c0:34:c4: a0:8c:1c:30:ab:f4:a7:89:ff:0a:e6:49:d9:87:a6: fd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:45:9F:5E:31:31:A2:22:5D:2F:FC:33:B4:12:D1:C4:05:84:B9:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/2223bf1b-4e49-3a32-be8e-f2210cdd7887.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/6fb18968-7aa5-41e5-96b6-c45c25a566e8.crl X509v3 Authority Key Identifier: keyid:C6:9F:AC:EA:70:7D:E0:51:AB:C5:1B:82:39:4D:0E:73:3A:A2:A1:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8.cer sbgp-ipAddrBlock: critical IPv4: 24.207.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:d0:af:4f:2c:c1:c7:2b:1a:09:5c:42:0e:f6:7c:28:62:16: d8:75:7c:f0:58:2a:30:3b:a7:67:05:6f:38:31:39:38:e4:87: cd:6b:1a:f2:69:76:c0:33:c3:0b:a8:95:77:43:d2:56:85:d0: d8:ad:c4:45:8b:f1:fe:15:97:8e:a8:be:d9:11:95:65:dd:7e: cb:a3:62:19:c1:f0:14:3e:c2:4a:b1:5b:57:ed:b3:8b:fd:43: 4e:e2:63:30:d7:dc:a0:e3:fb:cc:69:4c:54:d5:0c:45:3e:d8: 2f:87:ef:1b:fc:02:1f:90:34:62:68:0c:db:26:7a:71:55:35: d2:fc:5b:36:83:a7:00:75:b8:b2:81:7d:c8:28:58:13:44:d2: 47:f7:a5:5e:cd:15:33:6e:f7:08:7e:07:7a:87:d5:48:f1:f3: c7:a7:e0:25:91:a4:f9:1b:b0:23:36:9a:67:15:0d:8a:1d:f6: 3d:3a:a3:f4:d3:15:5c:9d:1a:8f:d3:8a:0c:54:96:fa:07:d1: 77:a3:92:bc:66:e5:42:82:cf:43:e1:88:a7:1c:3f:f3:90:53: e8:01:21:be:68:8a:b2:63:ae:f0:0d:a5:96:07:ec:7e:a5:54: 31:90:b1:00:44:32:9c:8d:37:fb:56:07:79:5c:c4:59:d7:2a: 47:97:84:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsrzii41ErwvEnH7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmZiMTg5NjgtN2FhNS00MWU1LTk2YjYtYzQ1YzI1YTU2 NmU4MB4XDTI1MDkxMjE1MDI1MVoXDTI1MTIxMTE2MDI1MVowLzEtMCsGA1UEAxMk Yjk4NTk4MjgtZDNmZC00Njg0LWFkYzctZDU3YmY3NzIzYTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrmVlWRmpuyCBfKJKt6399X++3jPSTPvZgrD W3A9YH16W/l1VuH5Bt3Mgqob7MzJ0eePueB91dm82L8+FlPeSuiP2QFafUaTMOee +M1Dt5wUQc0fLluu6jRlWsBVdycOleeqnoyXFwh7nyZI9lzqqsWkjEIC5TrecT+M sXMFWyqRgyaIUyyp4uPu8JBs6w/q0rU6Z5+zA3wt9HSFSsQ9nAhOSckZXXqD6pnY tpvNzxKvLQqVHwJRnF2vBBE8XSEIh3hPfiRnkLtpQBdZzjC0aHlruXtVhLbZTL2D gMtcIulRDOZm5XP3ZagRAn/ANMSgjBwwq/Snif8K5knZh6b9MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHRFn14xMaIiXS/8M7QS0cQFhLnsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZmIx ODk2OC03YWE1LTQxZTUtOTZiNi1jNDVjMjVhNTY2ZTgvMjIyM2JmMWItNGU0OS0z YTMyLWJlOGUtZjIyMTBjZGQ3ODg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmZiMTg5NjgtN2FhNS00MWU1LTk2 YjYtYzQ1YzI1YTU2NmU4LzZmYjE4OTY4LTdhYTUtNDFlNS05NmI2LWM0NWMyNWE1 NjZlOC5jcmwwHwYDVR0jBBgwFoAUxp+s6nB94FGrxRuCOU0OczqioQMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZmIxODk2OC03YWE1LTQxZTUtOTZiNi1jNDVj MjVhNTY2ZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGM8YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzQr08swccrGglcQg72fChiFth1fPBYKjA7p2cFbzgxOTjkh81rGvJp dsAzwwuolXdD0laF0NitxEWL8f4Vl46ovtkRlWXdfsujYhnB8BQ+wkqxW1fts4v9 Q07iYzDX3KDj+8xpTFTVDEU+2C+H7xv8Ah+QNGJoDNsmenFVNdL8WzaDpwB1uLKB fcgoWBNE0kf3pV7NFTNu9wh+B3qH1Ujx88en4CWRpPkbsCM2mmcVDYod9j06o/TT FVydGo/TigxUlvoH0Xejkrxm5UKCz0PhiKccP/OQU+gBIb5oirJjrvANpZYH7H6l VDGQsQBEMpyNN/tWB3lcxFnXKkeXhCI= -----END CERTIFICATE-----Generated at Fri Oct 10 20:10:48 2025 by rpki-client