$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/7e749191-2e43-3084-ab33-137f842ac4e4.roa File: 7e749191-2e43-3084-ab33-137f842ac4e4.roa (raw, json) Hash identifier: bVMihVLbyCCbnX84KIVuFWyuGYKNDF0aoO3GTCFqHpU= Subject key identifier: 98:82:21:A5:45:08:83:5E:51:6F:60:12:FD:69:02:26:72:14:63:64 Certificate issuer: /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Certificate serial: 010D0C9F4328584B047C02EDF45860D53B886800 Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/7e749191-2e43-3084-ab33-137f842ac4e4.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 13807 IP address blocks: 24.223.112.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:02:ed:f4:58:60:d5:3b:88:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=1dd76130-9b54-4e12-bb9f-fbf06bbd7e3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f1:59:96:9a:ec:25:97:85:0f:16:bb:78:7b: c2:0e:7e:54:59:e7:d5:c8:58:bb:25:e0:8a:c2:7f: f8:b9:b6:32:6f:05:e1:c9:43:c3:fb:a3:71:96:bd: 3f:9e:ae:4e:f9:5a:30:9b:b0:b8:52:90:47:83:c5: c5:8d:ed:03:c9:05:e0:32:b4:78:e9:72:25:50:fe: 9d:81:77:44:77:ce:76:6d:8e:0c:90:ca:5b:b5:eb: 17:00:e2:ea:96:bf:8a:c4:c5:01:98:35:33:2a:2b: 4e:c7:c1:04:0d:4c:3c:ff:91:2a:35:66:21:38:28: 64:ca:82:83:f5:65:89:73:e0:72:7c:52:1b:65:29: 82:08:19:38:00:85:62:37:1d:77:70:07:ed:24:3c: 74:56:78:08:66:25:16:89:e8:5a:8c:e1:38:d1:5f: a8:4d:e0:52:b1:83:95:9c:d8:79:7f:ff:21:08:41: d8:a2:e5:34:c1:f1:2b:9b:7f:5c:37:ba:d2:db:37: 82:bf:64:53:46:46:f8:ed:7a:fa:1c:b4:f8:f9:92: bd:85:66:0f:8e:3c:a2:78:de:19:10:76:4d:05:a2: 46:f5:04:66:cb:42:26:7e:82:b3:d6:e1:26:57:da: 66:37:15:48:d9:3a:10:75:8a:1d:da:24:da:3b:7f: 88:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:82:21:A5:45:08:83:5E:51:6F:60:12:FD:69:02:26:72:14:63:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/7e749191-2e43-3084-ab33-137f842ac4e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl X509v3 Authority Key Identifier: keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer sbgp-ipAddrBlock: critical IPv4: 24.223.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:4a:ea:b5:46:de:00:fd:17:63:d6:7f:c1:75:51:90:14:e9: 55:94:3e:13:d4:86:47:af:0e:41:f1:6f:69:0a:a7:47:93:c2: 35:1a:af:cf:8a:50:95:10:2c:cb:cd:00:1c:7e:96:7e:b1:28: 1d:f1:60:43:ca:69:33:91:8d:6e:6d:36:28:39:e0:0b:3b:1b: 5c:07:39:39:ee:86:fe:59:85:06:c4:20:b6:ca:22:c5:18:c0: c8:af:09:8f:25:b4:e2:4b:e7:70:35:ad:fc:13:af:10:83:0f: 8f:b9:6f:74:86:2a:95:44:39:3f:c0:e5:2d:6d:6b:72:eb:13: 19:b9:76:08:3a:13:a1:77:61:68:ae:1f:3c:8d:dc:7c:ff:20: a6:ef:a4:71:b5:a1:00:3e:69:5f:31:f8:2c:6b:ac:c9:90:f3: 3d:cd:64:3c:52:14:35:39:6f:ae:84:b2:d8:02:c1:31:e2:6a: 10:35:7a:0a:af:e7:a7:25:30:4a:da:ed:be:90:0f:cc:e6:d0: a4:86:91:bf:33:a3:70:c4:20:89:ea:27:83:44:26:d5:88:c5: c3:40:f0:bd:57:c7:4e:88:b8:32:d0:01:cb:4a:3f:28:74:bd: 60:fb:50:d8:ff:31:35:11:cb:30:25:4f:6e:f7:34:36:22:15: 88:48:ea:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfALt9Fhg1TuIaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3OWItZmU3YWVlMGMw NTM2MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk MWRkNzYxMzAtOWI1NC00ZTEyLWJiOWYtZmJmMDZiYmQ3ZTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPFZlprsJZeFDxa7eHvCDn5UWefVyFi7JeCK wn/4ubYybwXhyUPD+6Nxlr0/nq5O+Vowm7C4UpBHg8XFje0DyQXgMrR46XIlUP6d gXdEd852bY4MkMpbtesXAOLqlr+KxMUBmDUzKitOx8EEDUw8/5EqNWYhOChkyoKD 9WWJc+ByfFIbZSmCCBk4AIViNx13cAftJDx0VngIZiUWiehajOE40V+oTeBSsYOV nNh5f/8hCEHYouU0wfErm39cN7rS2zeCv2RTRkb47Xr6HLT4+ZK9hWYPjjyieN4Z EHZNBaJG9QRmy0ImfoKz1uEmV9pmNxVI2ToQdYod2iTaO3+ISQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJiCIaVFCINeUW9gEv1pAiZyFGNkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBm MzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdhZWUwYzA1MzYvN2U3NDkxOTEtMmU0My0z MDg0LWFiMzMtMTM3Zjg0MmFjNGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3 OWItZmU3YWVlMGMwNTM2L2NmMGYzMWI2LWVmNjItNGRkNS04NzliLWZlN2FlZTBj MDUzNi5jcmwwHwYDVR0jBBgwFoAUuVDNlGKpSLvXorEAEC5ORYttZHswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBmMzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdh ZWUwYzA1MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGN9wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxK6rVG3gD9F2PWf8F1UZAU6VWUPhPUhkevDkHxb2kKp0eTwjUar8+K UJUQLMvNABx+ln6xKB3xYEPKaTORjW5tNig54As7G1wHOTnuhv5ZhQbEILbKIsUY wMivCY8ltOJL53A1rfwTrxCDD4+5b3SGKpVEOT/A5S1ta3LrExm5dgg6E6F3YWiu HzyN3Hz/IKbvpHG1oQA+aV8x+CxrrMmQ8z3NZDxSFDU5b66EstgCwTHiahA1egqv 56clMEra7b6QD8zm0KSGkb8zo3DEIInqJ4NEJtWIxcNA8L1Xx06IuDLQActKPyh0 vWD7UNj/MTURyzAlT273NDYiFYhI6r8= -----END CERTIFICATE-----Generated at Thu Oct 16 13:53:57 2025 by rpki-client