$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/2ddb1419-5806-328e-baef-d46939f17218.roa File: 2ddb1419-5806-328e-baef-d46939f17218.roa (raw, json) Hash identifier: fbj/Rq4v+I/SV0eLgKfdeQjMZ7SBtyCFOPOsznm7X4M= Subject key identifier: 9A:63:91:FD:1E:CA:6C:3E:D1:14:EB:8F:82:5D:CA:3C:62:3E:7F:5F Certificate issuer: /CN=748884b0-2456-4700-984f-d893a56dbcdd Certificate serial: 010D0C9F4328584AA2C64539A215F1250F8C9C00 Authority key identifier: E2:B1:73:CA:CC:4D:2F:9D:D2:C5:6A:A9:F8:AE:2A:E3:9F:12:60:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/2ddb1419-5806-328e-baef-d46939f17218.roa Signing time: Fri 25 Jul 2025 13:01:04 +0000 ROA not before: Fri 25 Jul 2025 13:01:04 +0000 ROA not after: Thu 23 Oct 2025 13:01:04 +0000 asID: 393844 IP address blocks: 192.24.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/748884b0-2456-4700-984f-d893a56dbcdd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/748884b0-2456-4700-984f-d893a56dbcdd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a2:c6:45:39:a2:15:f1:25:0f:8c:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=748884b0-2456-4700-984f-d893a56dbcdd Validity Not Before: Jul 25 13:01:04 2025 GMT Not After : Oct 23 13:01:04 2025 GMT Subject: CN=6d3d207f-44b4-4559-8722-01d6129afc85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:11:9f:a3:08:ab:4f:8c:20:94:3e:df:6a:74: 0a:a7:12:c5:27:b2:dd:5f:6a:e4:aa:f4:b6:4c:a2: 3f:2f:f2:c0:98:74:bb:f2:ed:b9:cb:f9:92:97:4a: fe:00:7b:87:01:6a:70:1f:67:c9:2d:f2:26:d4:02: 2d:3f:4c:25:b8:d9:ff:cb:0e:29:78:e4:c7:d6:fe: 31:85:23:4b:2d:86:7a:bf:a6:35:41:51:99:93:13: 46:1f:93:45:97:8a:a7:05:3c:bf:5c:ab:ff:39:77: 83:94:fc:b0:0f:66:07:8b:9c:f5:a6:37:ec:d9:28: 0f:44:ff:c8:45:62:61:0d:44:5d:92:fd:38:c2:bb: 79:0d:eb:54:bb:c4:a4:2f:62:f0:2c:ec:fd:fd:24: 15:62:6c:03:02:a0:fc:6b:9b:11:34:86:a7:8c:75: 40:85:76:c0:d4:7b:9a:ba:5b:f0:93:19:33:7b:22: f1:52:e9:b4:a8:2b:58:a6:8c:81:ab:7e:fc:17:1b: 72:47:31:25:4e:00:3e:b1:b5:b3:b4:03:9c:df:f0: 91:c0:14:99:51:51:27:ef:cd:5e:f3:5f:1d:59:c3: 76:e7:ba:2e:cb:6f:c8:d4:1c:3c:56:00:3b:c0:35: 40:59:b7:9f:a6:65:20:ff:ef:64:06:cb:7b:7c:39: dc:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:63:91:FD:1E:CA:6C:3E:D1:14:EB:8F:82:5D:CA:3C:62:3E:7F:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/2ddb1419-5806-328e-baef-d46939f17218.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/748884b0-2456-4700-984f-d893a56dbcdd.crl X509v3 Authority Key Identifier: keyid:E2:B1:73:CA:CC:4D:2F:9D:D2:C5:6A:A9:F8:AE:2A:E3:9F:12:60:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd.cer sbgp-ipAddrBlock: critical IPv4: 192.24.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:7d:21:b5:bf:ad:21:67:27:58:b9:ee:9b:47:a5:c2:15:dd: 10:85:64:18:e9:c7:b0:6e:0e:4b:e3:90:80:f8:f3:28:76:ee: 3e:95:23:34:45:50:d6:cf:6a:bb:3d:dd:9b:63:d5:e6:18:5a: 1c:25:c1:a3:16:31:2e:e0:28:dc:a2:f0:48:3d:fc:35:cf:64: f6:f6:18:1c:64:ac:89:5f:6c:63:7b:3e:ce:73:0b:a9:15:9c: d9:63:13:5e:86:3a:d2:c1:fa:82:47:2b:13:e3:6c:79:88:e0: 42:c5:99:e7:a1:42:7d:99:e9:5a:63:ef:ab:f7:48:32:ac:ae: d0:7d:90:f9:81:00:79:7a:7f:63:e9:fa:14:7a:f0:cf:7c:3f: 76:26:c3:03:a2:87:50:cf:5c:72:59:8c:c9:75:56:82:9e:ca: 31:5e:da:5c:61:0f:28:a4:84:6e:39:ad:1b:3e:27:e3:95:09: ef:42:94:bc:52:aa:92:7f:6f:f2:a4:6a:f4:6f:a6:83:e8:70: 42:a6:de:d4:08:86:f9:41:ad:e1:53:f9:60:42:f9:7d:b0:0b: b5:8d:11:39:23:8f:63:d1:b0:3a:22:34:82:d2:0f:84:53:29: f1:db:25:61:8e:4f:3a:5c:bf:5c:6b:0b:0a:a6:70:42:9a:a2: 48:58:01:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqixkU5ohXxJQ+MnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ4ODg0YjAtMjQ1Ni00NzAwLTk4NGYtZDg5M2E1NmRi Y2RkMB4XDTI1MDcyNTEzMDEwNFoXDTI1MTAyMzEzMDEwNFowLzEtMCsGA1UEAxMk NmQzZDIwN2YtNDRiNC00NTU5LTg3MjItMDFkNjEyOWFmYzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxGfowirT4wglD7fanQKpxLFJ7LdX2rkqvS2 TKI/L/LAmHS78u25y/mSl0r+AHuHAWpwH2fJLfIm1AItP0wluNn/yw4peOTH1v4x hSNLLYZ6v6Y1QVGZkxNGH5NFl4qnBTy/XKv/OXeDlPywD2YHi5z1pjfs2SgPRP/I RWJhDURdkv04wrt5DetUu8SkL2LwLOz9/SQVYmwDAqD8a5sRNIanjHVAhXbA1Hua ulvwkxkzeyLxUum0qCtYpoyBq378FxtyRzElTgA+sbWztAOc3/CRwBSZUVEn781e 818dWcN257ouy2/I1Bw8VgA7wDVAWbefpmUg/+9kBst7fDnc0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpjkf0eymw+0RTrj4JdyjxiPn9fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83NDg4 ODRiMC0yNDU2LTQ3MDAtOTg0Zi1kODkzYTU2ZGJjZGQvMmRkYjE0MTktNTgwNi0z MjhlLWJhZWYtZDQ2OTM5ZjE3MjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzQ4ODg0YjAtMjQ1Ni00NzAwLTk4 NGYtZDg5M2E1NmRiY2RkLzc0ODg4NGIwLTI0NTYtNDcwMC05ODRmLWQ4OTNhNTZk YmNkZC5jcmwwHwYDVR0jBBgwFoAU4rFzysxNL53SxWqp+K4q458SYKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83NDg4ODRiMC0yNDU2LTQ3MDAtOTg0Zi1kODkz YTU2ZGJjZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwBgQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJ9IbW/rSFnJ1i57ptHpcIV3RCFZBjpx7BuDkvjkID48yh27j6VIzRF UNbPars93Ztj1eYYWhwlwaMWMS7gKNyi8Eg9/DXPZPb2GBxkrIlfbGN7Ps5zC6kV nNljE16GOtLB+oJHKxPjbHmI4ELFmeehQn2Z6Vpj76v3SDKsrtB9kPmBAHl6f2Pp +hR68M98P3YmwwOih1DPXHJZjMl1VoKeyjFe2lxhDyikhG45rRs+J+OVCe9ClLxS qpJ/b/KkavRvpoPocEKm3tQIhvlBreFT+WBC+X2wC7WNETkjj2PRsDoiNILSD4RT KfHbJWGOTzpcv1xrCwqmcEKaokhYAec= -----END CERTIFICATE-----Generated at Sat Aug 9 10:46:29 2025 by rpki-client