$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/24b48ff0-be7b-3444-a170-06a462458845.roa File: 24b48ff0-be7b-3444-a170-06a462458845.roa (raw, json) Hash identifier: V4O/i/hxirnju5Eo/MbuhXtfXBYlpf2RlrKOX2L5kvA= Subject key identifier: B1:86:6E:EE:94:71:BE:D8:34:3C:C2:DD:78:C1:E2:76:FA:12:F9:34 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEB440C23A46E8FE59BEC2A00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/24b48ff0-be7b-3444-a170-06a462458845.roa Signing time: Wed 20 Aug 2025 12:12:50 +0000 ROA not before: Wed 20 Aug 2025 12:12:50 +0000 ROA not after: Tue 18 Nov 2025 13:12:50 +0000 asID: 31898 IP address blocks: 136.248.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:44:0c:23:a4:6e:8f:e5:9b:ec:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 20 12:12:50 2025 GMT Not After : Nov 18 13:12:50 2025 GMT Subject: CN=0b14ab3a-7123-4681-90c2-871ff6e2ae14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:54:c7:6b:70:e0:3a:f7:aa:32:fb:c6:93:c6: de:b2:73:06:dd:49:6f:91:dd:12:44:c0:12:81:91: 80:6e:4e:e6:52:47:d8:ea:77:37:a1:6f:7e:7c:5e: 66:f5:85:4a:95:09:35:44:22:b0:7c:d2:fb:a6:94: f7:59:ea:8a:6f:0b:15:10:1c:ef:1d:f2:86:a5:11: 00:27:e7:b4:de:01:b1:63:8a:47:89:89:f6:ce:a3: 2d:6c:bb:9f:0d:8e:7a:82:06:99:1e:25:0c:27:7d: a5:3c:81:23:17:26:29:b9:d6:23:ba:23:b0:06:84: b0:89:f8:15:92:5a:1d:c8:89:aa:5b:a5:44:09:7f: 76:84:c1:1f:6b:55:e4:0e:ed:ef:f0:56:ca:4c:10: 01:8f:91:1c:56:7c:9c:9a:fc:2b:cc:9d:a0:35:d3: 85:a3:47:9b:56:35:3e:60:b0:64:96:77:4c:6c:98: a6:89:bf:42:81:1e:e0:cc:61:ce:e4:6f:50:54:9d: 12:f1:60:c8:6e:72:c8:0a:6c:64:d2:0c:17:71:8d: ff:f4:e5:7b:93:30:58:50:8d:ed:31:60:79:14:4f: 32:65:a0:03:c9:33:58:27:7f:98:3e:c3:9c:92:d9: 5e:9c:9f:da:4d:8d:8a:60:98:a9:ec:39:31:af:52: a7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:86:6E:EE:94:71:BE:D8:34:3C:C2:DD:78:C1:E2:76:FA:12:F9:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/24b48ff0-be7b-3444-a170-06a462458845.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 136.248.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:20:4c:df:17:ef:98:d3:6b:70:e2:06:1b:98:dc:b2:7e:9a: 39:e4:15:f3:ef:af:b6:08:b8:08:ed:93:2c:e8:2d:3a:be:2a: 57:7b:e2:15:d8:04:5c:6e:26:a4:93:1c:46:d7:ee:4d:b7:3f: 5c:52:a8:b4:94:a7:be:88:1d:3a:5f:2c:82:46:ea:5d:3d:85: 9e:5f:4f:74:e2:70:ce:0f:73:82:20:2b:67:3e:27:9a:e5:8f: 76:44:73:67:9a:46:71:6a:74:01:30:e8:25:1e:62:2d:79:07: c1:68:97:09:db:13:f7:c5:18:f1:a1:2f:21:8b:52:96:6d:d0: 2e:ba:1d:00:6a:48:ac:b2:3a:16:51:ca:c1:d8:c6:1e:cf:d7: 2f:96:88:5f:32:97:80:ce:9a:f5:1b:60:26:32:c0:77:28:63: 5b:c8:21:cf:69:53:7c:7c:00:75:64:76:f2:86:dc:cb:89:eb: 53:17:47:44:e2:95:28:eb:2c:b9:1c:ce:f8:84:73:16:49:9f: 1b:5f:56:eb:9b:80:73:6d:21:45:57:fc:a5:16:d7:b7:11:19: 57:8b:0a:6b:e6:5d:79:d2:4c:67:17:52:2b:08:2e:ce:c7:ea: 8d:d0:90:e8:c4:03:36:0c:49:73:35:75:19:44:98:1a:86:d8: 40:bc:5c:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErrRAwjpG6P5ZvsKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMDEyMTI1MFoXDTI1MTExODEzMTI1MFowLzEtMCsGA1UEAxMk MGIxNGFiM2EtNzEyMy00NjgxLTkwYzItODcxZmY2ZTJhZTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilTHa3DgOveqMvvGk8besnMG3Ulvkd0SRMAS gZGAbk7mUkfY6nc3oW9+fF5m9YVKlQk1RCKwfNL7ppT3WeqKbwsVEBzvHfKGpREA J+e03gGxY4pHiYn2zqMtbLufDY56ggaZHiUMJ32lPIEjFyYpudYjuiOwBoSwifgV klodyImqW6VECX92hMEfa1XkDu3v8FbKTBABj5EcVnycmvwrzJ2gNdOFo0ebVjU+ YLBklndMbJimib9CgR7gzGHO5G9QVJ0S8WDIbnLICmxk0gwXcY3/9OV7kzBYUI3t MWB5FE8yZaADyTNYJ3+YPsOcktlenJ/aTY2KYJip7Dkxr1KnSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLGGbu6Ucb7YNDzC3XjB4nb6Evk0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjRiNDhmZjAtYmU3Yi0z NDQ0LWExNzAtMDZhNDYyNDU4ODQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDiPjgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwgTN8X75jTa3DiBhuY3LJ+mjnkFfPvr7YIuAjtkyzoLTq+Kld74hXY BFxuJqSTHEbX7k23P1xSqLSUp76IHTpfLIJG6l09hZ5fT3TicM4Pc4IgK2c+J5rl j3ZEc2eaRnFqdAEw6CUeYi15B8FolwnbE/fFGPGhLyGLUpZt0C66HQBqSKyyOhZR ysHYxh7P1y+WiF8yl4DOmvUbYCYywHcoY1vIIc9pU3x8AHVkdvKG3MuJ61MXR0Ti lSjrLLkczviEcxZJnxtfVuubgHNtIUVX/KUW17cRGVeLCmvmXXnSTGcXUisILs7H 6o3QkOjEAzYMSXM1dRlEmBqG2EC8XDE= -----END CERTIFICATE-----Generated at Sat Aug 23 17:50:13 2025 by rpki-client