$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/894b6866-3a19-3c26-9b99-d25c3c417e70.roa File: 894b6866-3a19-3c26-9b99-d25c3c417e70.roa (raw, json) Hash identifier: o/RG0Vy6kzLJsFjNDZEe0D9vXPqukafriO/9qaSspaw= Subject key identifier: 94:A7:C7:17:D7:C9:A8:74:F1:56:A0:53:74:75:26:8E:00:77:D9:E4 Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109 Certificate serial: 010D0C9F4328584B047C0D54C78AF36DEB4E5200 Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/894b6866-3a19-3c26-9b99-d25c3c417e70.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 4922 IP address blocks: 24.149.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:0d:54:c7:8a:f3:6d:eb:4e:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=0364d61a-bcf6-4a03-a99c-f189e1780ac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:95:65:f6:24:3a:a3:12:b0:72:62:4d:df:4e: 63:1a:c3:42:89:42:e6:e2:31:87:c2:c6:e1:c7:01: 78:72:44:8c:98:d6:f4:cc:d2:2a:67:62:25:e6:d8: 11:62:69:b5:1c:6b:7a:d0:1e:6f:02:d1:56:bd:f9: a1:46:e3:3a:08:4c:ce:8b:35:a9:7f:e0:fb:b3:94: 08:5f:bd:a8:7a:66:48:19:2d:9b:06:30:03:10:80: be:16:a2:3e:e4:c2:dc:f4:8a:3c:dc:ac:e4:a4:46: 1f:01:75:a1:0c:f9:86:13:bf:ee:e1:8b:8f:b3:e7: b3:a3:8a:eb:85:b7:5d:b4:5b:97:a4:14:f6:ac:cb: 1c:eb:80:ce:8c:0b:40:b2:f1:69:a1:f2:c6:5d:bd: c2:2c:0b:65:f2:97:a9:bf:72:46:bd:fe:c9:61:5c: 3b:e5:51:c5:b5:eb:8c:e0:07:12:26:1a:7d:82:61: 5f:1c:60:29:27:e7:6e:4c:f3:a1:a5:e2:3a:dc:5b: 48:44:ac:1c:fa:c0:31:11:be:6e:af:81:3b:2d:36: 65:36:56:83:a2:e0:06:86:08:e1:7a:97:04:3b:6c: 69:67:a6:a6:af:36:57:61:49:c0:a5:65:c7:f8:74: 7a:b8:8d:c2:3b:9d:ba:57:79:a3:80:00:b9:4e:a7: 02:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:A7:C7:17:D7:C9:A8:74:F1:56:A0:53:74:75:26:8E:00:77:D9:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/894b6866-3a19-3c26-9b99-d25c3c417e70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl X509v3 Authority Key Identifier: keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer sbgp-ipAddrBlock: critical IPv4: 24.149.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:d4:86:c8:09:86:65:9f:68:52:8b:ff:31:8b:a7:73:f8:6c: b7:28:62:11:bf:12:e8:46:f0:44:32:db:26:3a:a4:fc:92:da: 1d:ae:40:81:fe:cc:a8:f5:d4:26:9e:03:0b:c8:65:87:79:4c: 82:b0:23:aa:4d:38:b8:45:ca:7d:bf:cb:51:08:6f:ea:f4:88: b4:ee:65:a0:32:1a:e6:03:68:e7:b6:87:a2:df:36:eb:29:2e: ca:4d:c0:2b:fb:1b:3d:96:fa:63:1e:f0:af:cd:a1:ce:0a:07: 6b:6f:78:03:32:d9:46:f1:2d:18:da:78:37:e0:00:e1:d0:9b: 37:73:03:c7:8c:69:08:e6:88:2b:04:55:a3:c1:be:89:f5:4e: 0b:96:17:03:3c:6a:a5:b5:51:5f:d0:0f:6f:bd:a9:3b:3c:34: af:9a:af:a4:0a:45:20:ff:ed:fc:bf:c0:71:92:68:41:4c:a2: 49:8a:09:f3:3c:41:70:ea:72:0a:ad:99:14:08:33:fb:f4:cb: 7c:68:da:4f:60:b6:88:0d:28:51:0d:98:94:95:00:48:ec:d0: e0:e5:4b:6c:6f:11:d4:0d:2c:2b:9f:d2:42:3f:5c:91:19:75: 31:70:9e:0a:e3:d9:69:24:f3:1c:31:b0:1e:19:28:06:bd:38: ac:54:9d:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfA1Ux4rzbetOUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI2ZjIyZjktM2ViNi00NTM0LWFmNWUtOWQ1NzE1ZWEz MTA5MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk MDM2NGQ2MWEtYmNmNi00YTAzLWE5OWMtZjE4OWUxNzgwYWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5Vl9iQ6oxKwcmJN305jGsNCiULm4jGHwsbh xwF4ckSMmNb0zNIqZ2Il5tgRYmm1HGt60B5vAtFWvfmhRuM6CEzOizWpf+D7s5QI X72oemZIGS2bBjADEIC+FqI+5MLc9Io83KzkpEYfAXWhDPmGE7/u4YuPs+ezo4rr hbddtFuXpBT2rMsc64DOjAtAsvFpofLGXb3CLAtl8pepv3JGvf7JYVw75VHFteuM 4AcSJhp9gmFfHGApJ+duTPOhpeI63FtIRKwc+sAxEb5ur4E7LTZlNlaDouAGhgjh epcEO2xpZ6amrzZXYUnApWXH+HR6uI3CO526V3mjgAC5TqcCiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJSnxxfXyah08VagU3R1Jo4Ad9nkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YjZm MjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3MTVlYTMxMDkvODk0YjY4NjYtM2ExOS0z YzI2LTliOTktZDI1YzNjNDE3ZTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGI2ZjIyZjktM2ViNi00NTM0LWFm NWUtOWQ1NzE1ZWEzMTA5LzhiNmYyMmY5LTNlYjYtNDUzNC1hZjVlLTlkNTcxNWVh MzEwOS5jcmwwHwYDVR0jBBgwFoAUZlnDfJtBAob0x8/CZoobNxbE1hUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84YjZmMjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3 MTVlYTMxMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGJVWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbUhsgJhmWfaFKL/zGLp3P4bLcoYhG/EuhG8EQy2yY6pPyS2h2uQIH+ zKj11CaeAwvIZYd5TIKwI6pNOLhFyn2/y1EIb+r0iLTuZaAyGuYDaOe2h6LfNusp LspNwCv7Gz2W+mMe8K/Noc4KB2tveAMy2UbxLRjaeDfgAOHQmzdzA8eMaQjmiCsE VaPBvon1TguWFwM8aqW1UV/QD2+9qTs8NK+ar6QKRSD/7fy/wHGSaEFMokmKCfM8 QXDqcgqtmRQIM/v0y3xo2k9gtogNKFENmJSVAEjs0ODlS2xvEdQNLCuf0kI/XJEZ dTFwngrj2Wkk8xwxsB4ZKAa9OKxUnZE= -----END CERTIFICATE-----Generated at Wed Nov 5 23:52:34 2025 by rpki-client