$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/0ed8f50b-70f5-35e7-b706-77411b691954.roa File: 0ed8f50b-70f5-35e7-b706-77411b691954.roa (raw, json) Hash identifier: kydpCZ62RDpcUXUjv4t6JCmqFPeKt9gfwVFnMT736R0= Subject key identifier: FE:F1:08:E5:67:66:79:F5:28:C6:7D:54:01:9F:9D:1C:9D:13:2B:9E Certificate issuer: /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Certificate serial: 010D0C9F4328584B1D9C2CAB3EE868DA5DBBEE00 Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/0ed8f50b-70f5-35e7-b706-77411b691954.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 26548 IP address blocks: 207.174.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:2c:ab:3e:e8:68:da:5d:bb:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=6dbd40e8-a917-44c9-a98b-c9cacd7520e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:86:12:30:7c:ea:8f:93:79:d5:b6:67:97:05: 51:8f:ca:09:71:ce:49:79:6d:9a:90:6f:7c:c8:eb: ad:18:97:47:e5:dd:c6:e1:1e:b8:2a:fc:27:98:9c: 4f:04:1d:4d:9d:85:21:f6:01:57:e3:99:ba:71:b8: 80:54:7e:4c:34:88:d9:48:41:f1:6e:21:6b:18:d1: 95:40:44:77:9f:18:80:5f:6b:15:b7:a3:fc:80:f9: c1:90:7b:0b:58:39:75:8b:b8:c0:69:e7:b3:c1:a3: 9f:56:1e:94:87:ed:7e:88:37:0e:c5:68:bc:b1:82: 42:2c:6b:cd:19:1f:13:24:cd:60:cf:cf:6e:2d:fd: 11:1e:20:41:e7:00:86:c1:cc:61:00:4e:1a:6d:f1: af:74:39:b2:bf:b7:fd:c7:6b:c5:0f:70:9c:79:ce: ce:42:90:8e:68:a6:67:db:0a:4b:0d:79:29:0d:a7: b0:54:2e:cc:f0:9c:8a:c6:de:c8:36:7f:37:d4:2f: 01:72:5b:47:c8:21:c6:92:6e:f9:0d:49:4c:18:33: ce:8a:56:64:94:a7:b4:0d:b4:25:72:1f:dd:f4:81: 1f:58:35:5f:d8:99:76:8c:46:2d:cc:d6:b5:8c:a2: 14:47:91:cd:83:c5:b1:96:a4:8d:12:4b:3a:5f:6b: e8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F1:08:E5:67:66:79:F5:28:C6:7D:54:01:9F:9D:1C:9D:13:2B:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/0ed8f50b-70f5-35e7-b706-77411b691954.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl X509v3 Authority Key Identifier: keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer sbgp-ipAddrBlock: critical IPv4: 207.174.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:b1:e2:37:8d:c0:8f:88:fb:a1:41:f9:16:bb:6e:3f:ea:99: 3c:06:07:9e:ba:12:64:24:c5:77:54:c5:de:28:88:19:dc:3d: 85:ed:0c:40:3d:10:be:22:4c:be:83:17:69:b5:22:bb:8e:3e: 99:bc:97:87:a8:0e:fc:06:37:77:90:49:80:1d:3f:c3:cc:ac: 87:9a:16:1e:eb:e6:83:72:26:72:d2:e1:3e:f5:96:b8:3b:10: a3:ef:cf:a0:c0:71:9f:b6:09:78:cd:eb:f0:cc:b3:3d:f3:1a: e4:32:a5:c6:2a:af:34:fd:64:a9:d2:6e:4e:29:64:e9:7f:d2: e4:92:9c:b5:28:a0:24:80:ee:ac:21:35:1e:dc:26:d4:b0:dd: 41:8b:6e:58:5d:b9:75:90:fb:e9:4d:1d:7b:2e:9f:7f:bd:47: 87:44:fa:32:13:69:fd:24:35:8f:a3:7d:1c:d7:3d:7e:7d:da: 97:5d:19:b4:92:be:31:e6:47:3b:3c:db:ad:0f:2f:21:ac:f9: 45:4a:64:7d:17:6a:d5:9f:c9:90:ef:54:8f:7b:5d:04:ff:24: 92:83:dd:0a:16:1f:01:36:ae:a9:cd:e3:d4:36:0c:be:42:6b: 3e:28:fc:ed:c0:92:1d:fd:76:c1:47:d7:1f:e8:d4:55:87:83: b5:52:00:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnCyrPuho2l277gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz MmIzMB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk NmRiZDQwZTgtYTkxNy00NGM5LWE5OGItYzljYWNkNzUyMGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoYSMHzqj5N51bZnlwVRj8oJcc5JeW2akG98 yOutGJdH5d3G4R64KvwnmJxPBB1NnYUh9gFX45m6cbiAVH5MNIjZSEHxbiFrGNGV QER3nxiAX2sVt6P8gPnBkHsLWDl1i7jAaeezwaOfVh6Uh+1+iDcOxWi8sYJCLGvN GR8TJM1gz89uLf0RHiBB5wCGwcxhAE4abfGvdDmyv7f9x2vFD3Ccec7OQpCOaKZn 2wpLDXkpDaewVC7M8JyKxt7INn831C8BcltHyCHGkm75DUlMGDPOilZklKe0DbQl ch/d9IEfWDVf2Jl2jEYtzNa1jKIUR5HNg8WxlqSNEks6X2voNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP7xCOVnZnn1KMZ9VAGfnRydEyueMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5 YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvMGVkOGY1MGItNzBmNS0z NWU3LWI3MDYtNzc0MTFiNjkxOTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0 ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh ZjhjMTMyYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz64YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMux4jeNwI+I+6FB+Ra7bj/qmTwGB566EmQkxXdUxd4oiBncPYXtDEA9 EL4iTL6DF2m1IruOPpm8l4eoDvwGN3eQSYAdP8PMrIeaFh7r5oNyJnLS4T71lrg7 EKPvz6DAcZ+2CXjN6/DMsz3zGuQypcYqrzT9ZKnSbk4pZOl/0uSSnLUooCSA7qwh NR7cJtSw3UGLblhduXWQ++lNHXsun3+9R4dE+jITaf0kNY+jfRzXPX592pddGbSS vjHmRzs8260PLyGs+UVKZH0XatWfyZDvVI97XQT/JJKD3QoWHwE2rqnN49Q2DL5C az4o/O3Akh39dsFH1x/o1FWHg7VSAFc= -----END CERTIFICATE-----Generated at Mon Oct 20 04:38:54 2025 by rpki-client