$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/24799af8-2422-32ad-a2ff-c748c7beb85d.roa File: 24799af8-2422-32ad-a2ff-c748c7beb85d.roa (raw, json) Hash identifier: tSVIojZViy8bIMs3u66lJ3OhBi5vfXxYz6rskEKN5ww= Subject key identifier: E6:EA:E0:DA:D7:93:3F:35:86:B5:0B:0C:CA:98:FD:97:0F:B9:A9:EC Certificate issuer: /CN=73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef Certificate serial: 010D0C9F4328584AF3BBDE4BDC08D3B426D9F400 Authority key identifier: 04:F1:0E:DC:60:CF:00:7E:40:32:5E:77:15:99:D7:BE:05:F2:06:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/24799af8-2422-32ad-a2ff-c748c7beb85d.roa Signing time: Sat 23 Aug 2025 13:00:41 +0000 ROA not before: Sat 23 Aug 2025 13:00:41 +0000 ROA not after: Fri 21 Nov 2025 14:00:41 +0000 asID: 393545 IP address blocks: 65.49.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f3:bb:de:4b:dc:08:d3:b4:26:d9:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef Validity Not Before: Aug 23 13:00:41 2025 GMT Not After : Nov 21 14:00:41 2025 GMT Subject: CN=5f7a6cec-28de-4846-83b7-73bf24088607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ab:b7:74:17:07:e1:99:99:7a:ab:83:b4:7a: ba:20:59:02:f3:a2:52:72:ae:9a:95:e1:5e:00:bc: 13:70:33:4c:af:c4:ab:35:05:c7:1d:6f:bf:de:2d: 9c:0f:3f:a2:2f:93:90:56:e4:65:fa:13:94:e5:45: 3f:b7:ca:66:88:58:4c:d1:ef:19:66:c4:c7:b8:64: 6e:2f:eb:f0:91:32:59:be:98:67:e0:75:36:31:01: d4:3c:d6:e1:ac:90:55:20:97:ec:02:68:23:5a:d4: 5b:9a:e5:1d:da:6c:d1:34:01:a2:18:16:cd:ad:76: cb:9a:83:ac:0d:77:86:d9:be:4d:bb:26:2d:6a:4a: fa:b8:8b:88:a1:a5:0b:25:a1:2c:72:16:44:42:70: 4a:8c:40:1a:23:d4:20:57:fb:1e:6d:fb:fa:83:a4: 7f:94:5d:58:6a:1f:8a:74:95:86:f8:28:f5:9a:e4: c4:ff:de:5e:a1:f1:32:bd:6a:99:3b:83:d4:71:4c: 73:32:67:0a:e4:36:2d:b3:11:17:e7:d1:db:ac:2c: bd:78:37:0a:30:03:95:6d:10:c5:fc:2e:38:b9:0f: bf:70:7f:b8:47:51:9d:c1:f2:dd:f7:40:2f:5d:bc: c3:49:55:52:24:75:a9:ce:28:27:be:58:f4:1d:db: 40:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:EA:E0:DA:D7:93:3F:35:86:B5:0B:0C:CA:98:FD:97:0F:B9:A9:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/24799af8-2422-32ad-a2ff-c748c7beb85d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.crl X509v3 Authority Key Identifier: keyid:04:F1:0E:DC:60:CF:00:7E:40:32:5E:77:15:99:D7:BE:05:F2:06:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer sbgp-ipAddrBlock: critical IPv4: 65.49.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:a9:1c:6a:a1:32:15:36:d4:7d:a2:40:a9:16:2d:ca:57:5e: c5:2e:9d:a4:fb:f5:84:f9:91:1d:18:95:e6:86:3d:be:c0:05: 07:89:76:6d:e6:d7:d0:30:84:08:96:b7:73:60:fe:e1:b2:c9: b9:df:23:cc:7d:f6:1f:4e:0d:2c:c8:6a:8f:07:eb:70:54:58: 8b:df:50:d2:e2:da:8c:27:d5:d8:1e:92:13:fa:ee:55:60:f9: d2:ff:08:33:9b:a2:a2:8f:fc:ca:13:fa:03:2e:61:f5:ef:18: ab:3a:a0:99:6b:7d:be:40:72:0a:f2:7b:f1:4c:0c:fb:82:de: 54:01:3c:f3:0f:68:61:04:dc:50:32:46:5a:3f:47:0b:43:6c: 68:ba:0b:1c:e7:16:37:b9:51:75:a7:9f:70:78:3a:82:f9:c0: d5:48:e7:a9:15:e3:f1:1e:26:4e:6b:cb:0a:ad:72:73:9f:21: 28:31:80:1e:b0:bd:a3:fd:eb:64:79:b6:b7:9a:66:27:36:d9: 8a:08:31:ba:aa:c6:df:5e:91:6a:e2:14:1e:f6:d6:05:39:da: 45:8a:35:7f:69:ab:b3:49:31:69:f5:c6:b6:f4:45:ff:1d:10: 19:f1:31:d7:fa:60:e0:31:b0:fe:49:1c:50:51:e8:69:64:7f: 72:13:12:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErzu95L3AjTtCbZ9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNkMmRiYWUtM2YxYS00ZDllLTllMDEtZjdlZjI1MGY1 NWVmMB4XDTI1MDgyMzEzMDA0MVoXDTI1MTEyMTE0MDA0MVowLzEtMCsGA1UEAxMk NWY3YTZjZWMtMjhkZS00ODQ2LTgzYjctNzNiZjI0MDg4NjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqu3dBcH4ZmZequDtHq6IFkC86JScq6aleFe ALwTcDNMr8SrNQXHHW+/3i2cDz+iL5OQVuRl+hOU5UU/t8pmiFhM0e8ZZsTHuGRu L+vwkTJZvphn4HU2MQHUPNbhrJBVIJfsAmgjWtRbmuUd2mzRNAGiGBbNrXbLmoOs DXeG2b5NuyYtakr6uIuIoaULJaEschZEQnBKjEAaI9QgV/sebfv6g6R/lF1Yah+K dJWG+Cj1muTE/95eofEyvWqZO4PUcUxzMmcK5DYtsxEX59HbrCy9eDcKMAOVbRDF /C44uQ+/cH+4R1GdwfLd90AvXbzDSVVSJHWpzignvlj0HdtAhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFObq4NrXkz81hrULDMqY/ZcPuansMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83M2Qy ZGJhZS0zZjFhLTRkOWUtOWUwMS1mN2VmMjUwZjU1ZWYvMjQ3OTlhZjgtMjQyMi0z MmFkLWEyZmYtYzc0OGM3YmViODVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzNkMmRiYWUtM2YxYS00ZDllLTll MDEtZjdlZjI1MGY1NWVmLzczZDJkYmFlLTNmMWEtNGQ5ZS05ZTAxLWY3ZWYyNTBm NTVlZi5jcmwwHwYDVR0jBBgwFoAUBPEO3GDPAH5AMl53FZnXvgXyBg4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83M2QyZGJhZS0zZjFhLTRkOWUtOWUwMS1mN2Vm MjUwZjU1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQTGVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJupHGqhMhU21H2iQKkWLcpXXsUunaT79YT5kR0YleaGPb7ABQeJdm3m 19AwhAiWt3Ng/uGyybnfI8x99h9ODSzIao8H63BUWIvfUNLi2own1dgekhP67lVg +dL/CDOboqKP/MoT+gMuYfXvGKs6oJlrfb5Acgrye/FMDPuC3lQBPPMPaGEE3FAy Rlo/RwtDbGi6CxznFje5UXWnn3B4OoL5wNVI56kV4/EeJk5rywqtcnOfISgxgB6w vaP962R5treaZic22YoIMbqqxt9ekWriFB721gU52kWKNX9pq7NJMWn1xrb0Rf8d EBnxMdf6YOAxsP5JHFBR6Glkf3ITEpM= -----END CERTIFICATE-----Generated at Sun Aug 24 01:16:32 2025 by rpki-client