$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/2ddb1419-5806-328e-baef-d46939f17218.roa File: 2ddb1419-5806-328e-baef-d46939f17218.roa (raw, json) Hash identifier: tSeq6MObNeFoSV5Be4gCp0tYMJm8902DfYpH9KWAkgE= Subject key identifier: 62:8A:BF:19:38:F9:D2:E7:17:96:A8:40:8C:19:6B:E7:5C:51:C6:33 Certificate issuer: /CN=748884b0-2456-4700-984f-d893a56dbcdd Certificate serial: 010D0C9F4328584B83820E16B30106DB87184BE0 Authority key identifier: E2:B1:73:CA:CC:4D:2F:9D:D2:C5:6A:A9:F8:AE:2A:E3:9F:12:60:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/2ddb1419-5806-328e-baef-d46939f17218.roa Signing time: Tue 14 Oct 2025 01:00:30 +0000 ROA not before: Tue 14 Oct 2025 01:00:30 +0000 ROA not after: Mon 12 Jan 2026 02:00:30 +0000 asID: 393844 IP address blocks: 192.24.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/748884b0-2456-4700-984f-d893a56dbcdd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/748884b0-2456-4700-984f-d893a56dbcdd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:83:82:0e:16:b3:01:06:db:87:18:4b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=748884b0-2456-4700-984f-d893a56dbcdd Validity Not Before: Oct 14 01:00:30 2025 GMT Not After : Jan 12 02:00:30 2026 GMT Subject: CN=530d7866-f63c-4561-9089-181a4597e3d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:09:88:5d:29:dd:90:32:89:91:5a:55:ac:fb: 46:bf:88:52:7a:f4:68:91:ec:d7:0e:b2:dd:34:8a: ad:6e:32:90:f9:ff:18:fb:4f:db:4d:e5:a4:77:e1: da:e3:34:09:8b:92:d9:8b:28:a0:41:2e:c9:aa:42: ea:5e:5a:35:58:8f:58:d9:ed:29:df:a3:3c:95:7d: 7f:ed:f6:4e:76:d4:e7:17:df:9f:8e:ab:52:5e:6b: e8:27:51:06:b7:79:94:59:b9:33:da:52:4b:14:ff: d2:11:6c:1e:21:8e:1d:49:3d:5d:7a:bb:ca:73:ff: 7b:20:d2:d1:12:cf:fc:a2:4f:49:f2:58:08:18:94: 1c:de:3d:2d:19:83:53:35:95:0c:4e:64:38:96:e4: 8c:ef:29:3d:9d:86:eb:11:63:82:74:25:d3:ad:33: a7:c4:6b:a1:72:71:cd:ea:52:2f:e5:45:1e:0e:a7: ba:68:1b:75:d5:44:27:b6:e7:31:1d:53:cd:a4:26: 6b:bd:04:28:a3:73:14:23:63:e4:03:a2:51:65:45: d4:13:92:68:e6:68:9a:5a:d2:06:b0:73:11:95:ce: d5:cd:f8:d4:0f:11:6b:d2:85:65:ee:b2:72:51:28: ae:53:01:43:92:03:5d:c9:b9:ca:20:7b:6a:75:1e: dc:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:8A:BF:19:38:F9:D2:E7:17:96:A8:40:8C:19:6B:E7:5C:51:C6:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/2ddb1419-5806-328e-baef-d46939f17218.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/748884b0-2456-4700-984f-d893a56dbcdd.crl X509v3 Authority Key Identifier: keyid:E2:B1:73:CA:CC:4D:2F:9D:D2:C5:6A:A9:F8:AE:2A:E3:9F:12:60:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd.cer sbgp-ipAddrBlock: critical IPv4: 192.24.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:82:0a:7e:2e:36:20:e3:49:46:9a:b2:6d:c3:95:ce:c8:53: d5:8b:70:21:6c:95:9a:9a:49:ce:85:97:c4:37:31:c0:0d:ee: 4a:c4:2b:8f:df:ec:59:8a:d2:11:91:c0:9c:37:53:d1:e1:48: 23:be:cd:b7:39:0c:be:49:21:b7:3e:1d:06:ec:05:26:f4:6e: c4:33:a4:21:2a:8e:b2:c2:69:68:0a:85:e8:b1:94:ea:cc:76: 78:0c:ad:7d:8d:6c:7c:fb:5b:53:d4:45:b4:30:d6:fa:0d:0c: df:ef:d4:b7:9b:31:03:0c:27:f8:db:be:b2:b5:74:95:b8:28: 14:27:e7:59:3d:b9:38:18:63:2a:13:b9:19:62:52:82:17:53: 97:dd:97:83:26:b8:63:ad:87:9e:9f:9c:d7:61:46:27:9d:9d: 34:0d:41:8c:ee:8c:7e:f2:83:c2:0b:32:da:47:d6:89:06:a4: e1:d1:53:72:ad:7f:58:18:23:bd:64:c5:be:d4:d8:66:62:0b: 40:d1:4d:8a:d4:a8:bc:32:91:27:e9:9e:ad:92:29:a0:7c:aa: 9d:cc:c7:90:df:33:a1:1f:73:6c:8b:fa:d5:5e:bc:6d:70:d2: 4f:39:fd:c2:c6:6d:01:53:c3:00:2f:3e:a8:b8:ad:46:0a:36: 52:02:1b:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuDgg4WswEG24cYS+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ4ODg0YjAtMjQ1Ni00NzAwLTk4NGYtZDg5M2E1NmRi Y2RkMB4XDTI1MTAxNDAxMDAzMFoXDTI2MDExMjAyMDAzMFowLzEtMCsGA1UEAxMk NTMwZDc4NjYtZjYzYy00NTYxLTkwODktMTgxYTQ1OTdlM2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogmIXSndkDKJkVpVrPtGv4hSevRokezXDrLd NIqtbjKQ+f8Y+0/bTeWkd+Ha4zQJi5LZiyigQS7JqkLqXlo1WI9Y2e0p36M8lX1/ 7fZOdtTnF9+fjqtSXmvoJ1EGt3mUWbkz2lJLFP/SEWweIY4dST1dervKc/97INLR Es/8ok9J8lgIGJQc3j0tGYNTNZUMTmQ4luSM7yk9nYbrEWOCdCXTrTOnxGuhcnHN 6lIv5UUeDqe6aBt11UQntucxHVPNpCZrvQQoo3MUI2PkA6JRZUXUE5Jo5miaWtIG sHMRlc7VzfjUDxFr0oVl7rJyUSiuUwFDkgNdybnKIHtqdR7cOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGKKvxk4+dLnF5aoQIwZa+dcUcYzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83NDg4 ODRiMC0yNDU2LTQ3MDAtOTg0Zi1kODkzYTU2ZGJjZGQvMmRkYjE0MTktNTgwNi0z MjhlLWJhZWYtZDQ2OTM5ZjE3MjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzQ4ODg0YjAtMjQ1Ni00NzAwLTk4 NGYtZDg5M2E1NmRiY2RkLzc0ODg4NGIwLTI0NTYtNDcwMC05ODRmLWQ4OTNhNTZk YmNkZC5jcmwwHwYDVR0jBBgwFoAU4rFzysxNL53SxWqp+K4q458SYKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83NDg4ODRiMC0yNDU2LTQ3MDAtOTg0Zi1kODkz YTU2ZGJjZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwBgQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGCCn4uNiDjSUaasm3Dlc7IU9WLcCFslZqaSc6Fl8Q3McAN7krEK4/f 7FmK0hGRwJw3U9HhSCO+zbc5DL5JIbc+HQbsBSb0bsQzpCEqjrLCaWgKheixlOrM dngMrX2NbHz7W1PURbQw1voNDN/v1LebMQMMJ/jbvrK1dJW4KBQn51k9uTgYYyoT uRliUoIXU5fdl4MmuGOth56fnNdhRiednTQNQYzujH7yg8ILMtpH1okGpOHRU3Kt f1gYI71kxb7U2GZiC0DRTYrUqLwykSfpnq2SKaB8qp3Mx5DfM6Efc2yL+tVevG1w 0k85/cLGbQFTwwAvPqi4rUYKNlICG5o= -----END CERTIFICATE-----Generated at Mon Oct 20 12:44:40 2025 by rpki-client