$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/24a68f32-daa7-3aad-8188-2e9f416cd0b8.roa File: 24a68f32-daa7-3aad-8188-2e9f416cd0b8.roa (raw, json) Hash identifier: nJ2vKNFuzOaiqj69nQlzCWtvJpEtJ74txADzH9qe1AY= Subject key identifier: D7:A1:6B:E1:BD:52:C8:80:A1:17:D5:F7:D9:5F:C2:42:5C:FE:11:53 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584A90A0B12413A20CA827930580 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/24a68f32-daa7-3aad-8188-2e9f416cd0b8.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 202276 IP address blocks: 149.19.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:b1:24:13:a2:0c:a8:27:93:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=ac5276a0-5ac1-400f-990a-440e60fa3564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:07:bc:85:45:27:25:a1:70:18:28:c5:e2:92: bb:47:43:ea:71:fb:5f:61:67:18:ab:54:cb:85:03: 24:a0:3d:f8:1b:8d:37:34:fb:cc:a6:84:1e:1c:92: 3d:f8:bf:4b:5d:af:b6:27:97:7a:38:6e:1f:98:16: 39:41:c9:99:61:a8:af:01:0d:49:3a:df:bd:e3:18: d9:de:bd:bd:d6:16:84:a8:96:d9:43:02:48:77:23: fd:98:11:73:b5:10:3f:be:f0:a4:64:c3:f3:48:e9: 90:eb:51:48:64:4f:41:6f:4b:3f:8e:d4:4d:ed:2f: ae:08:a2:53:d5:40:86:ef:e8:15:e9:8c:2e:1a:cb: ce:f9:0f:01:56:94:38:14:bf:64:ab:30:21:6b:95: 34:d7:a7:cb:ba:15:80:b9:61:76:d5:e2:24:35:05: fe:7f:c1:c3:b1:7c:f7:ff:07:c3:68:ca:ed:8c:06: 64:fc:2b:35:74:dd:64:e9:e2:62:e3:35:b8:3e:58: 76:69:6c:fa:7e:c2:e3:43:ea:07:e6:9f:66:8b:e2: 4f:6b:78:79:ac:f8:10:11:e0:3c:cb:76:c5:72:68: 06:27:b0:b2:a0:63:25:bd:6b:8a:2b:1f:b5:c7:bc: 7f:a3:eb:50:e8:2b:30:49:f8:93:7f:e9:23:6f:8e: 04:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:A1:6B:E1:BD:52:C8:80:A1:17:D5:F7:D9:5F:C2:42:5C:FE:11:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/24a68f32-daa7-3aad-8188-2e9f416cd0b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 149.19.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:b9:22:50:1a:61:79:f8:e6:59:35:20:46:41:18:43:db:9e: 0d:89:ce:26:d0:26:d8:e1:49:b0:7e:8c:24:e4:e1:4b:10:00: 84:08:e4:8a:d2:20:27:d9:5f:f0:f4:ec:9c:5e:56:80:36:d8: 45:5f:c4:58:d7:fd:97:d7:f1:dd:ac:c6:76:e9:91:d1:71:f4: 23:ef:38:6e:b7:99:bb:f6:3d:02:5c:d6:1d:00:96:8a:87:1e: 4b:8b:f3:de:f2:be:10:2a:44:37:f2:85:cd:0c:dc:2f:0f:d6: 95:5a:7b:53:c9:dd:1c:b0:61:4c:ca:4a:dd:da:b0:e1:22:77: 4b:0e:06:ec:33:ab:30:fe:c4:49:aa:16:c9:c6:df:a7:4f:84: 49:5a:82:d9:ac:a8:93:30:ca:ec:ae:02:b6:bf:fb:36:68:a5: 50:74:7e:cf:14:d3:2b:c4:80:99:6a:11:78:aa:c8:dd:7c:6d: 15:34:9f:35:3b:9d:e5:e1:4a:34:d8:f1:34:c5:b1:a4:d5:d7: 1d:23:71:53:4e:6c:04:a5:36:56:7d:3a:ee:ec:84:7d:a7:c8: 06:14:a2:00:09:83:9e:04:fc:ed:52:25:01:fa:d0:41:d0:f9: 05:da:5d:27:91:4c:db:06:0a:6e:db:56:ff:6c:d6:df:9a:e5: 33:54:a2:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoLEkE6IMqCeTBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk YWM1Mjc2YTAtNWFjMS00MDBmLTk5MGEtNDQwZTYwZmEzNTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwe8hUUnJaFwGCjF4pK7R0PqcftfYWcYq1TL hQMkoD34G403NPvMpoQeHJI9+L9LXa+2J5d6OG4fmBY5QcmZYaivAQ1JOt+94xjZ 3r291haEqJbZQwJIdyP9mBFztRA/vvCkZMPzSOmQ61FIZE9Bb0s/jtRN7S+uCKJT 1UCG7+gV6YwuGsvO+Q8BVpQ4FL9kqzAha5U016fLuhWAuWF21eIkNQX+f8HDsXz3 /wfDaMrtjAZk/Cs1dN1k6eJi4zW4Plh2aWz6fsLjQ+oH5p9mi+JPa3h5rPgQEeA8 y3bFcmgGJ7CyoGMlvWuKKx+1x7x/o+tQ6CswSfiTf+kjb44E2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNeha+G9UsiAoRfV99lfwkJc/hFTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvMjRhNjhmMzItZGFhNy0z YWFkLTgxODgtMmU5ZjQxNmNkMGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRM4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADS5IlAaYXn45lk1IEZBGEPbng2JzibQJtjhSbB+jCTk4UsQAIQI5IrS ICfZX/D07JxeVoA22EVfxFjX/ZfX8d2sxnbpkdFx9CPvOG63mbv2PQJc1h0AloqH HkuL897yvhAqRDfyhc0M3C8P1pVae1PJ3RywYUzKSt3asOEid0sOBuwzqzD+xEmq FsnG36dPhElagtmsqJMwyuyuAra/+zZopVB0fs8U0yvEgJlqEXiqyN18bRU0nzU7 neXhSjTY8TTFsaTV1x0jcVNObASlNlZ9Ou7shH2nyAYUogAJg54E/O1SJQH60EHQ +QXaXSeRTNsGCm7bVv9s1t+a5TNUokA= -----END CERTIFICATE-----Generated at Wed Aug 6 00:42:45 2025 by rpki-client