$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/5889b020-d1dc-309e-a3d6-83b0d8a04571.roa File: 5889b020-d1dc-309e-a3d6-83b0d8a04571.roa (raw, json) Hash identifier: adFKOUQLFZYYjhnfxGscWzNrhTORZAj6Je1nQkzwTko= Subject key identifier: E0:00:BF:E6:24:D6:8A:9C:BD:54:A9:52:F5:19:78:A2:7D:3C:CF:30 Certificate issuer: /CN=f32f1d23-2c4c-4ef5-bab1-559dcb491291 Certificate serial: 010D0C9F4328584AA160DB1907DB60BE61972380 Authority key identifier: C0:EF:2A:9B:67:F2:5B:7F:90:08:7E:AD:DD:04:95:C0:A7:D7:D4:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/5889b020-d1dc-309e-a3d6-83b0d8a04571.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 400136 IP address blocks: 24.149.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/f32f1d23-2c4c-4ef5-bab1-559dcb491291.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/f32f1d23-2c4c-4ef5-bab1-559dcb491291.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:db:19:07:db:60:be:61:97:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f32f1d23-2c4c-4ef5-bab1-559dcb491291 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=e6445cb5-404b-48c2-a5f0-a1aec2515bf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:31:de:78:09:d5:63:27:a2:c4:02:18:d8:10: 6b:30:3a:91:b4:5d:3e:6b:73:28:b3:63:6f:eb:6b: 18:f1:bd:e1:62:42:79:3a:c7:6e:1f:e3:90:c7:a6: 3f:9c:2e:b6:4e:90:d9:43:4d:19:a9:17:bf:ed:0d: f9:8f:be:6e:97:af:c6:d0:71:25:2d:5b:33:2d:8c: 5b:f3:4d:fa:27:62:ce:2f:77:17:b1:22:6b:96:61: eb:ce:56:1e:f3:76:f5:8a:f7:8f:37:11:c1:8e:b2: 10:06:51:ec:f7:66:91:f1:04:cc:a1:c6:53:7c:2f: 44:6c:24:b3:c0:42:3f:8f:9b:f3:45:1c:46:de:3f: 07:77:3d:c2:be:75:25:91:fd:e7:b5:14:80:b0:9b: ce:7f:3a:ba:8a:05:2a:57:e5:df:58:c5:d8:e6:42: d8:72:36:bc:66:5d:00:99:65:79:5b:27:6c:2f:fe: 48:a4:74:66:f4:96:97:aa:a9:32:b5:bb:bd:27:4d: 74:03:ec:ad:4c:d6:23:d6:bd:a2:9c:30:40:0f:b5: 3b:e4:2d:40:6b:cb:18:80:fc:f9:60:89:b6:bd:e2: c1:fe:74:89:94:88:75:a2:f0:f9:15:c3:88:b6:ad: d7:a6:f7:fa:e4:37:22:01:0c:7f:a1:97:d8:14:c6: 51:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:00:BF:E6:24:D6:8A:9C:BD:54:A9:52:F5:19:78:A2:7D:3C:CF:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/5889b020-d1dc-309e-a3d6-83b0d8a04571.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/f32f1d23-2c4c-4ef5-bab1-559dcb491291.crl X509v3 Authority Key Identifier: keyid:C0:EF:2A:9B:67:F2:5B:7F:90:08:7E:AD:DD:04:95:C0:A7:D7:D4:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291.cer sbgp-ipAddrBlock: critical IPv4: 24.149.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:56:12:28:1b:cb:2b:82:09:bb:02:9b:b0:c4:ac:1d:92:2b: 5d:19:f5:f6:1a:3f:c6:b8:8f:b4:a0:7b:7d:a2:c4:06:7d:6b: db:9c:d4:f1:c0:1e:a3:3a:57:5b:9a:cf:3d:ab:aa:5e:cb:d9: 00:15:2c:a8:dd:d9:e7:f7:ac:a8:9e:93:c3:b8:dc:a2:cf:1e: 12:c9:7e:62:d3:5b:0f:4d:71:2b:d9:0a:f3:12:6d:54:00:0a: 0b:6d:d1:95:c1:8e:85:21:49:c2:22:4f:a4:d3:98:ab:2f:87: 14:1d:72:44:38:78:e5:1f:28:46:39:27:43:60:4e:27:71:dd: de:63:2f:a1:f9:36:4c:58:5f:53:9b:48:92:fe:f5:e8:b7:34: 69:0e:87:51:32:54:7a:0d:cd:df:80:13:da:e6:a0:cd:94:6b: f2:ac:a2:b6:a0:3c:24:1a:ad:14:a4:a6:f6:c3:5e:e1:39:62: e3:3a:f9:8f:6d:2c:0d:03:99:cd:3f:30:2e:f8:7f:81:96:52: 1b:33:97:09:f5:2a:54:1c:74:13:fb:c7:81:55:b8:0b:b5:71: 74:3f:dc:80:eb:bd:f9:db:5e:cc:15:a5:fe:15:b4:63:c0:89: 19:41:17:6b:cb:3a:39:8a:3c:4f:9c:8d:24:36:32:cf:f1:d1: 47:9c:4f:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYNsZB9tgvmGXI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjMyZjFkMjMtMmM0Yy00ZWY1LWJhYjEtNTU5ZGNiNDkx MjkxMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk ZTY0NDVjYjUtNDA0Yi00OGMyLWE1ZjAtYTFhZWMyNTE1YmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTHeeAnVYyeixAIY2BBrMDqRtF0+a3Mos2Nv 62sY8b3hYkJ5OsduH+OQx6Y/nC62TpDZQ00ZqRe/7Q35j75ul6/G0HElLVszLYxb 8036J2LOL3cXsSJrlmHrzlYe83b1ivePNxHBjrIQBlHs92aR8QTMocZTfC9EbCSz wEI/j5vzRRxG3j8Hdz3CvnUlkf3ntRSAsJvOfzq6igUqV+XfWMXY5kLYcja8Zl0A mWV5WydsL/5IpHRm9JaXqqkytbu9J010A+ytTNYj1r2inDBAD7U75C1Aa8sYgPz5 YIm2veLB/nSJlIh1ovD5FcOItq3Xpvf65DciAQx/oZfYFMZR1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOAAv+Yk1oqcvVSpUvUZeKJ9PM8wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mMzJm MWQyMy0yYzRjLTRlZjUtYmFiMS01NTlkY2I0OTEyOTEvNTg4OWIwMjAtZDFkYy0z MDllLWEzZDYtODNiMGQ4YTA0NTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjMyZjFkMjMtMmM0Yy00ZWY1LWJh YjEtNTU5ZGNiNDkxMjkxL2YzMmYxZDIzLTJjNGMtNGVmNS1iYWIxLTU1OWRjYjQ5 MTI5MS5jcmwwHwYDVR0jBBgwFoAUwO8qm2fyW3+QCH6t3QSVwKfX1PcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9mMzJmMWQyMy0yYzRjLTRlZjUtYmFiMS01NTlk Y2I0OTEyOTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGJUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVWEigbyyuCCbsCm7DErB2SK10Z9fYaP8a4j7Sge32ixAZ9a9uc1PHA HqM6V1uazz2rql7L2QAVLKjd2ef3rKiek8O43KLPHhLJfmLTWw9NcSvZCvMSbVQA Cgtt0ZXBjoUhScIiT6TTmKsvhxQdckQ4eOUfKEY5J0NgTidx3d5jL6H5NkxYX1Ob SJL+9ei3NGkOh1EyVHoNzd+AE9rmoM2Ua/KsoragPCQarRSkpvbDXuE5YuM6+Y9t LA0Dmc0/MC74f4GWUhszlwn1KlQcdBP7x4FVuAu1cXQ/3IDrvfnbXswVpf4VtGPA iRlBF2vLOjmKPE+cjSQ2Ms/x0UecTxM= -----END CERTIFICATE-----Generated at Sun Aug 24 05:20:27 2025 by rpki-client