$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/5889b020-d1dc-309e-a3d6-83b0d8a04571.roa File: 5889b020-d1dc-309e-a3d6-83b0d8a04571.roa (raw, json) Hash identifier: IVbtWaF7960wpGsufT6pSoyJv/DKDZ6/l6TwTmsJAeY= Subject key identifier: 34:F3:B9:07:0D:4B:58:68:2B:6A:E4:4A:D6:A5:10:8A:3D:D3:46:B1 Certificate issuer: /CN=f32f1d23-2c4c-4ef5-bab1-559dcb491291 Certificate serial: 010D0C9F4328584B821CCF7224A5F3A3F7ECDE40 Authority key identifier: C0:EF:2A:9B:67:F2:5B:7F:90:08:7E:AD:DD:04:95:C0:A7:D7:D4:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/5889b020-d1dc-309e-a3d6-83b0d8a04571.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 400136 IP address blocks: 24.149.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/f32f1d23-2c4c-4ef5-bab1-559dcb491291.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/f32f1d23-2c4c-4ef5-bab1-559dcb491291.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:cf:72:24:a5:f3:a3:f7:ec:de:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f32f1d23-2c4c-4ef5-bab1-559dcb491291 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=dc69b52f-7052-49f1-afe5-e843d9ec3f43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:6e:7a:f4:29:f8:8c:b4:90:2c:d0:6c:fe:0d: f1:27:93:31:99:4f:d9:51:51:03:32:83:ed:c6:02: 8e:11:f6:23:41:5e:41:de:12:9b:c0:8a:f6:a2:27: 04:24:0a:c0:b7:c4:42:2d:a6:10:27:36:d9:74:ad: b0:39:d9:ae:df:9a:80:be:2e:0d:b2:6b:d7:4b:6b: c9:34:cc:30:79:63:a5:5c:09:4d:b4:e7:bd:c6:a9: 55:e3:a7:79:42:9a:47:c8:c4:8d:e5:34:38:58:39: 75:46:a5:de:a0:69:79:4c:67:8c:62:ca:ef:3c:ed: 99:87:0f:b6:92:2c:46:5f:3e:34:a4:64:60:a6:76: b9:9f:24:3d:c6:3b:5b:4c:fb:83:bc:0d:d2:0d:8b: 97:a4:1c:72:8d:3e:7d:57:de:63:4b:2e:8b:c0:24: d8:5a:e7:16:79:f7:a8:5b:77:60:f0:a3:d1:e1:8a: 6e:2b:e8:d5:de:1c:a8:9c:48:6b:25:d0:1f:cf:bc: 81:83:3e:e3:48:bb:4e:05:3a:f2:e2:72:3b:71:f5: 42:e4:1c:1b:77:db:bc:90:a5:34:57:c8:9e:c4:2d: b2:46:2a:68:4f:3a:49:28:05:ae:9e:13:86:1b:2c: 4f:8e:d0:6d:46:d8:41:b2:a1:2e:c5:14:d1:43:88: 17:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F3:B9:07:0D:4B:58:68:2B:6A:E4:4A:D6:A5:10:8A:3D:D3:46:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/5889b020-d1dc-309e-a3d6-83b0d8a04571.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/f32f1d23-2c4c-4ef5-bab1-559dcb491291.crl X509v3 Authority Key Identifier: keyid:C0:EF:2A:9B:67:F2:5B:7F:90:08:7E:AD:DD:04:95:C0:A7:D7:D4:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291.cer sbgp-ipAddrBlock: critical IPv4: 24.149.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ce:2d:22:e1:dc:51:63:23:08:02:98:c2:69:13:55:9d:13:e3: 8c:2b:01:b6:5b:9b:3a:14:5f:38:e8:58:cf:e9:78:d3:93:7c: 4f:64:22:0b:d2:63:a1:f0:05:fd:af:db:59:91:74:05:97:cb: ae:03:75:b0:5d:60:16:86:7e:f9:bf:48:c2:9a:d1:08:cb:ef: 4a:4f:c6:89:26:bf:f3:96:4e:18:d8:61:3f:45:f1:5e:a0:c7: c5:26:dc:ef:68:5b:9f:0b:90:13:e2:e2:0d:d8:59:04:c1:b3: 40:8d:5c:80:9a:57:28:b0:23:32:06:ce:cb:3b:f1:29:f4:6c: c4:7a:8a:ce:c4:b1:8d:85:2e:c5:1f:3d:a1:c0:16:02:59:7c: 7a:13:60:73:f4:51:61:20:aa:a6:d1:50:1b:99:06:69:35:14: 44:d7:e5:69:19:6d:d4:d4:ff:22:3f:4f:d8:f2:b7:be:ce:89: 0c:ee:06:8a:49:2b:86:95:6a:67:2e:26:5d:47:9c:8d:5e:2f: e1:0d:4c:e2:4c:a2:b4:c9:bc:75:bc:bb:df:72:d7:07:db:00: 62:79:24:c2:11:d5:a5:a5:ed:82:7e:38:10:93:30:16:b2:ad: e9:32:d4:3b:e8:39:ee:f3:88:67:d9:2e:8f:8f:b9:cd:fd:26: 77:b4:e5:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHM9yJKXzo/fs3kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjMyZjFkMjMtMmM0Yy00ZWY1LWJhYjEtNTU5ZGNiNDkx MjkxMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk ZGM2OWI1MmYtNzA1Mi00OWYxLWFmZTUtZTg0M2Q5ZWMzZjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgW569Cn4jLSQLNBs/g3xJ5MxmU/ZUVEDMoPt xgKOEfYjQV5B3hKbwIr2oicEJArAt8RCLaYQJzbZdK2wOdmu35qAvi4NsmvXS2vJ NMwweWOlXAlNtOe9xqlV46d5QppHyMSN5TQ4WDl1RqXeoGl5TGeMYsrvPO2Zhw+2 kixGXz40pGRgpna5nyQ9xjtbTPuDvA3SDYuXpBxyjT59V95jSy6LwCTYWucWefeo W3dg8KPR4YpuK+jV3hyonEhrJdAfz7yBgz7jSLtOBTry4nI7cfVC5Bwbd9u8kKU0 V8iexC2yRipoTzpJKAWunhOGGyxPjtBtRthBsqEuxRTRQ4gXiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTzuQcNS1hoK2rkStalEIo900axMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mMzJm MWQyMy0yYzRjLTRlZjUtYmFiMS01NTlkY2I0OTEyOTEvNTg4OWIwMjAtZDFkYy0z MDllLWEzZDYtODNiMGQ4YTA0NTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjMyZjFkMjMtMmM0Yy00ZWY1LWJh YjEtNTU5ZGNiNDkxMjkxL2YzMmYxZDIzLTJjNGMtNGVmNS1iYWIxLTU1OWRjYjQ5 MTI5MS5jcmwwHwYDVR0jBBgwFoAUwO8qm2fyW3+QCH6t3QSVwKfX1PcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9mMzJmMWQyMy0yYzRjLTRlZjUtYmFiMS01NTlk Y2I0OTEyOTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGJUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM4tIuHcUWMjCAKYwmkTVZ0T44wrAbZbmzoUXzjoWM/peNOTfE9kIgvS Y6HwBf2v21mRdAWXy64DdbBdYBaGfvm/SMKa0QjL70pPxokmv/OWThjYYT9F8V6g x8Um3O9oW58LkBPi4g3YWQTBs0CNXICaVyiwIzIGzss78Sn0bMR6is7EsY2FLsUf PaHAFgJZfHoTYHP0UWEgqqbRUBuZBmk1FETX5WkZbdTU/yI/T9jyt77OiQzuBopJ K4aVamcuJl1HnI1eL+ENTOJMorTJvHW8u99y1wfbAGJ5JMIR1aWl7YJ+OBCTMBay reky1DvoOe7ziGfZLo+Puc39Jne05dI= -----END CERTIFICATE-----Generated at Mon Oct 20 05:22:53 2025 by rpki-client