$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/49b9e7a2-ff04-3afa-95c4-8bf6043c3c85.roa File: 49b9e7a2-ff04-3afa-95c4-8bf6043c3c85.roa (raw, json) Hash identifier: wAl+4LeZbj9qaaLsf0ZiS6XZxxf/ytmLrc8+O1GKHx8= Subject key identifier: 06:04:D2:1A:35:D7:5E:2B:8B:7B:94:AB:03:EB:B5:19:E7:42:60:14 Certificate issuer: /CN=02ad5a58-3adf-41cb-9598-b3260591398c Certificate serial: 010D0C9F4328584AE4610C8AA63B6AFBD7D5DC00 Authority key identifier: 28:D5:F6:E6:7B:EE:87:BE:AD:EE:45:FF:5D:19:56:7C:5A:31:45:90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/49b9e7a2-ff04-3afa-95c4-8bf6043c3c85.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 12097 IP address blocks: 24.140.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/02ad5a58-3adf-41cb-9598-b3260591398c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/02ad5a58-3adf-41cb-9598-b3260591398c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:0c:8a:a6:3b:6a:fb:d7:d5:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02ad5a58-3adf-41cb-9598-b3260591398c Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=6a5f5334-7d11-469e-be45-ca32b941ea59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:71:59:42:e3:a8:5f:9f:87:c3:9f:03:3e:26: f1:0c:6f:80:b2:15:02:6c:80:cc:b3:24:9a:de:dc: ef:02:f3:ff:6b:79:19:9b:e5:95:24:6a:72:33:f7: ee:83:56:65:02:51:a9:31:93:11:fb:98:fa:16:d2: 06:d5:4e:70:c3:82:77:aa:8c:61:e2:8c:c0:96:02: fb:3f:71:22:2c:c8:fc:3e:2e:9d:45:3c:43:cb:61: 0b:0c:85:c9:bc:80:df:70:96:1d:d5:3f:7c:03:83: f4:fe:fb:d7:9c:7c:2f:00:5d:dd:ce:be:b3:de:4d: 98:3b:40:6b:52:7f:da:18:34:16:64:5f:f1:ef:c9: db:d3:13:6f:78:20:7d:31:e2:de:19:28:ac:0a:80: 80:a0:c8:12:18:97:aa:92:74:f3:d5:19:07:09:fa: 08:6e:44:c6:ea:c7:3c:5b:e0:80:ab:46:ac:79:c8: 0d:01:41:8f:45:78:48:90:58:9f:76:d0:37:75:e2: 5d:3c:f2:fd:73:c2:e8:05:e3:92:56:02:0f:1f:99: 83:75:c0:46:b9:24:97:55:b0:a0:9a:58:e4:3f:ab: c4:12:42:12:29:94:e8:bc:17:4a:ee:02:58:71:f1: a4:f5:e1:37:07:92:43:6b:12:05:ec:70:9f:4b:05: cc:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:04:D2:1A:35:D7:5E:2B:8B:7B:94:AB:03:EB:B5:19:E7:42:60:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/49b9e7a2-ff04-3afa-95c4-8bf6043c3c85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/02ad5a58-3adf-41cb-9598-b3260591398c.crl X509v3 Authority Key Identifier: keyid:28:D5:F6:E6:7B:EE:87:BE:AD:EE:45:FF:5D:19:56:7C:5A:31:45:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c.cer sbgp-ipAddrBlock: critical IPv4: 24.140.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:53:f2:a9:4f:ed:c7:6f:a6:61:83:5f:13:81:a9:e8:e6:20: e1:14:24:8f:f5:15:ee:da:a2:ba:1d:72:4c:a5:0e:e7:1e:77: d4:1b:5c:6f:db:a6:5f:16:9f:ba:6e:b2:ce:21:7b:5f:12:be: 23:7b:62:b4:76:72:13:28:44:8f:f8:88:d8:38:db:cb:31:34: c1:7a:b9:3c:ec:7c:1d:52:f2:88:81:29:b3:06:6c:3a:68:e2: cc:ce:1b:12:1b:f2:6c:1e:91:6e:5d:e6:28:71:60:e2:f4:29: 6a:19:f5:78:04:7e:38:e5:80:03:bc:4b:97:c2:aa:9d:20:dd: 29:ce:f1:52:79:3d:9a:02:b5:db:73:36:d9:41:2a:ca:75:92: a0:63:47:eb:33:86:c2:59:8e:e6:e8:28:ed:5f:ce:f6:eb:8d: c9:1e:09:08:ea:7e:50:57:af:ff:ea:20:b8:c7:eb:66:27:bd: c3:8b:70:4d:da:6d:49:65:85:8b:0d:a6:54:99:04:28:12:39: f2:3e:23:7a:c4:93:26:66:24:91:ae:3d:9e:fa:05:38:c7:91: 8a:cb:49:89:1d:2c:08:f9:26:10:b4:d9:4d:7b:18:68:bb:ca: 4a:fd:02:80:e5:9c:64:62:3f:ea:50:1f:eb:4e:0b:41:07:82: 16:49:63:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYQyKpjtq+9fV3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDJhZDVhNTgtM2FkZi00MWNiLTk1OTgtYjMyNjA1OTEz OThjMB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk NmE1ZjUzMzQtN2QxMS00NjllLWJlNDUtY2EzMmI5NDFlYTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHFZQuOoX5+Hw58DPibxDG+AshUCbIDMsySa 3tzvAvP/a3kZm+WVJGpyM/fug1ZlAlGpMZMR+5j6FtIG1U5ww4J3qoxh4ozAlgL7 P3EiLMj8Pi6dRTxDy2ELDIXJvIDfcJYd1T98A4P0/vvXnHwvAF3dzr6z3k2YO0Br Un/aGDQWZF/x78nb0xNveCB9MeLeGSisCoCAoMgSGJeqknTz1RkHCfoIbkTG6sc8 W+CAq0asecgNAUGPRXhIkFifdtA3deJdPPL9c8LoBeOSVgIPH5mDdcBGuSSXVbCg mljkP6vEEkISKZTovBdK7gJYcfGk9eE3B5JDaxIF7HCfSwXMCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAYE0ho1114ri3uUqwPrtRnnQmAUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMmFk NWE1OC0zYWRmLTQxY2ItOTU5OC1iMzI2MDU5MTM5OGMvNDliOWU3YTItZmYwNC0z YWZhLTk1YzQtOGJmNjA0M2MzYzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDJhZDVhNTgtM2FkZi00MWNiLTk1 OTgtYjMyNjA1OTEzOThjLzAyYWQ1YTU4LTNhZGYtNDFjYi05NTk4LWIzMjYwNTkx Mzk4Yy5jcmwwHwYDVR0jBBgwFoAUKNX25nvuh76t7kX/XRlWfFoxRZAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMmFkNWE1OC0zYWRmLTQxY2ItOTU5OC1iMzI2 MDU5MTM5OGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGIyIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlT8qlP7cdvpmGDXxOBqejmIOEUJI/1Fe7aorodckylDuced9QbXG/b pl8Wn7puss4he18SviN7YrR2chMoRI/4iNg428sxNMF6uTzsfB1S8oiBKbMGbDpo 4szOGxIb8mwekW5d5ihxYOL0KWoZ9XgEfjjlgAO8S5fCqp0g3SnO8VJ5PZoCtdtz NtlBKsp1kqBjR+szhsJZjuboKO1fzvbrjckeCQjqflBXr//qILjH62YnvcOLcE3a bUllhYsNplSZBCgSOfI+I3rEkyZmJJGuPZ76BTjHkYrLSYkdLAj5JhC02U17GGi7 ykr9AoDlnGRiP+pQH+tOC0EHghZJY2w= -----END CERTIFICATE-----Generated at Sat Aug 23 18:03:02 2025 by rpki-client