$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/24a68f32-daa7-3aad-8188-2e9f416cd0b8.roa File: 24a68f32-daa7-3aad-8188-2e9f416cd0b8.roa (raw, json) Hash identifier: XR0Pxlk7vX+U4bi2gyekANSfvtjW3AroDK8leQf8G5c= Subject key identifier: E6:74:E1:08:4D:0C:B1:58:DC:77:FE:C3:5F:0F:F5:73:8A:49:43:E6 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584B715CA4FA8BE53926678460C0 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/24a68f32-daa7-3aad-8188-2e9f416cd0b8.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 202276 IP address blocks: 149.19.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:a4:fa:8b:e5:39:26:67:84:60:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=5609c2b2-1394-4576-963c-f7676ce15332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:98:eb:33:1d:a7:3b:e5:2d:9d:3c:2f:36:b5: 68:3d:dd:73:95:09:ae:70:3b:f0:77:16:dc:b2:e8: bb:76:ef:31:33:03:e7:fc:f6:1a:e5:ff:08:d3:98: c7:2c:9e:ca:3f:50:b8:a1:0d:1e:fc:ba:c8:96:ef: 57:0e:f2:07:be:f0:fc:80:db:a8:df:97:09:e9:67: 9d:47:35:44:83:f4:d2:90:e0:9a:6b:28:31:12:2f: e5:90:cc:25:25:a0:e1:bf:65:02:91:86:58:04:30: 95:6f:21:f9:ca:20:50:d6:0a:3a:09:25:b1:50:a2: 5e:31:07:76:d7:e2:16:24:a1:89:26:13:ba:59:27: 6d:0c:38:0c:b8:dd:a5:1e:fd:a2:ec:0e:f4:75:6d: 10:da:1d:54:0e:fb:45:eb:ed:5b:d1:d7:2a:02:58: 87:8f:e2:a6:55:4e:80:65:be:e5:a1:fd:b7:83:cb: 5c:99:ad:fe:97:c3:11:f2:67:60:be:39:f7:f1:37: da:e2:83:68:98:01:19:4b:af:6f:f3:13:39:39:7e: 86:db:d6:1e:27:0a:ad:8e:6a:72:7f:7f:04:77:54: 54:00:7e:54:7d:90:1d:97:88:84:2a:57:6c:f2:21: 02:c9:ba:02:70:49:35:5f:fd:02:5d:df:d0:5e:6d: 7a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:74:E1:08:4D:0C:B1:58:DC:77:FE:C3:5F:0F:F5:73:8A:49:43:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/24a68f32-daa7-3aad-8188-2e9f416cd0b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 149.19.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:ed:1a:81:7f:06:85:0a:f1:86:13:86:ab:9e:e8:bf:9c:86: 6d:b4:da:40:69:e6:d6:3a:da:f6:1a:fa:5b:1e:22:ce:3b:f5: 02:9a:f7:db:49:06:88:42:d3:38:f1:d6:32:61:7b:86:7e:0e: 70:c1:7e:ac:0f:62:fe:cc:35:f2:6d:64:dc:94:84:b8:0a:ed: 5d:4b:63:42:5e:b4:4a:28:d1:89:a3:2d:26:bf:b8:7f:4d:e1: bd:b2:2e:fb:e6:10:6e:08:50:e4:96:b1:f2:b0:f0:85:37:98: 5c:22:7d:81:7f:61:49:79:cd:d5:2c:48:24:4b:8f:61:58:cd: f5:35:eb:57:00:97:9c:53:36:63:0d:e7:8d:a6:4d:18:75:3f: 80:21:61:c6:9a:8f:30:4b:50:ae:92:67:81:92:d8:cd:26:ea: d5:1b:ba:60:9f:03:69:8f:4a:4a:e4:ac:5a:1a:fa:f4:06:6c: be:5c:93:01:3b:38:a1:33:30:44:a9:fb:60:2c:9a:bb:0e:dd: c7:65:aa:7e:ab:f1:e8:e8:d3:85:a3:5c:27:89:8b:41:45:06: 11:d0:a9:37:56:4d:64:46:15:30:16:c6:45:38:4b:d8:1b:96: 51:b7:de:93:18:2b:58:31:da:f4:46:2f:28:8b:2d:d9:a7:e1: 87:44:cb:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXKT6i+U5JmeEYMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NTYwOWMyYjItMTM5NC00NTc2LTk2M2MtZjc2NzZjZTE1MzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJjrMx2nO+UtnTwvNrVoPd1zlQmucDvwdxbc sui7du8xMwPn/PYa5f8I05jHLJ7KP1C4oQ0e/LrIlu9XDvIHvvD8gNuo35cJ6Wed RzVEg/TSkOCaaygxEi/lkMwlJaDhv2UCkYZYBDCVbyH5yiBQ1go6CSWxUKJeMQd2 1+IWJKGJJhO6WSdtDDgMuN2lHv2i7A70dW0Q2h1UDvtF6+1b0dcqAliHj+KmVU6A Zb7lof23g8tcma3+l8MR8mdgvjn38Tfa4oNomAEZS69v8xM5OX6G29YeJwqtjmpy f38Ed1RUAH5UfZAdl4iEKlds8iECyboCcEk1X/0CXd/QXm16XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOZ04QhNDLFY3Hf+w18P9XOKSUPmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvMjRhNjhmMzItZGFhNy0z YWFkLTgxODgtMmU5ZjQxNmNkMGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRM4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDtGoF/BoUK8YYThque6L+chm202kBp5tY62vYa+lseIs479QKa99tJ BohC0zjx1jJhe4Z+DnDBfqwPYv7MNfJtZNyUhLgK7V1LY0JetEoo0YmjLSa/uH9N 4b2yLvvmEG4IUOSWsfKw8IU3mFwifYF/YUl5zdUsSCRLj2FYzfU161cAl5xTNmMN 542mTRh1P4AhYcaajzBLUK6SZ4GS2M0m6tUbumCfA2mPSkrkrFoa+vQGbL5ckwE7 OKEzMESp+2AsmrsO3cdlqn6r8ejo04WjXCeJi0FFBhHQqTdWTWRGFTAWxkU4S9gb llG33pMYK1gx2vRGLyiLLdmn4YdEy/8= -----END CERTIFICATE-----Generated at Tue Oct 21 03:57:13 2025 by rpki-client