$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/dc634da6-c5be-3afb-bd3a-91eef923e2be.roa File: dc634da6-c5be-3afb-bd3a-91eef923e2be.roa (raw, json) Hash identifier: 5lXJsaczHkGbgYHieAU7LVmMVKIB2GYlu7QiAQZi8o8= Subject key identifier: B5:A9:B7:D9:55:CD:C8:FB:73:18:31:2A:C6:5A:D2:FC:80:D4:75:40 Certificate issuer: /CN=c6bc2da7-5b3b-4ff6-8bc2-59c42c901086 Certificate serial: 010D0C9F4328584B715CB7ACC843C3A04FD57400 Authority key identifier: 9D:66:1F:9F:23:E7:C7:B2:21:F2:E8:33:6C:7B:CE:AB:65:97:31:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/dc634da6-c5be-3afb-bd3a-91eef923e2be.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 18615 IP address blocks: 149.20.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:b7:ac:c8:43:c3:a0:4f:d5:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6bc2da7-5b3b-4ff6-8bc2-59c42c901086 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=dc669eb1-f544-4280-842f-cf232c0b146b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a8:39:12:b6:b6:83:b3:15:00:1f:fb:bb:f8: 3c:6b:3f:02:72:a3:2d:27:80:fa:95:0f:b9:0a:e3: de:76:a8:a3:f4:79:1e:54:af:84:08:82:47:57:c4: bd:e4:39:16:93:9e:03:27:25:47:d6:f7:94:c9:be: 45:b8:fe:37:21:dc:da:5a:ba:62:40:cd:42:b0:96: 44:24:e9:cb:c8:c5:0f:91:26:63:80:86:c1:7f:0e: 63:7e:c6:8e:8d:d1:48:94:5f:e5:93:80:32:0c:d4: 9a:9a:28:91:48:90:33:30:b4:99:cc:51:d6:62:15: ec:05:01:70:af:f8:d6:21:f5:88:a0:b7:b7:85:08: 5a:6c:b3:46:90:70:6c:9c:e9:f4:5f:a7:ec:24:35: 2e:91:be:4a:ef:a1:98:fb:b4:1d:8a:66:1a:ea:c2: bf:93:be:d6:87:44:8d:9e:e9:20:b2:9b:d0:53:25: ce:fe:55:a6:aa:b5:a5:58:b3:95:94:32:4f:16:b1: 14:69:19:76:6f:32:64:49:ef:4a:cb:06:bc:55:c8: ad:7a:cf:bf:ff:7c:5d:36:4e:d9:eb:76:ae:30:15: 14:86:2f:d4:d3:7d:c0:eb:7a:58:0f:cd:d5:e6:b4: 3b:c0:cd:d2:4c:02:3f:cc:9d:b1:d6:40:e8:d6:14: aa:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:A9:B7:D9:55:CD:C8:FB:73:18:31:2A:C6:5A:D2:FC:80:D4:75:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/dc634da6-c5be-3afb-bd3a-91eef923e2be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.crl X509v3 Authority Key Identifier: keyid:9D:66:1F:9F:23:E7:C7:B2:21:F2:E8:33:6C:7B:CE:AB:65:97:31:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.cer sbgp-ipAddrBlock: critical IPv4: 149.20.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:25:e5:87:82:af:da:95:82:0a:30:7c:e1:8e:e0:ce:12:9e: 0e:46:29:87:dd:85:70:93:84:ee:5c:89:c1:6d:35:e3:87:9b: 7e:d8:45:86:48:89:37:2f:1e:ad:e9:8d:f6:32:9e:8f:35:fd: 8b:02:15:9e:4b:56:3f:e1:b9:d6:fb:d8:29:19:f6:f9:21:e1: 28:45:a0:79:14:65:03:58:f4:d8:16:3d:19:6f:c2:1f:59:8b: 62:aa:69:1d:59:1f:0a:e6:7d:1d:d3:68:48:ec:18:6f:88:d1: f1:7f:b9:bf:94:63:1a:f3:8b:b1:10:16:87:dc:07:f6:07:b4: 49:e6:66:9a:30:14:5c:0e:1d:68:c4:04:ab:4c:30:2b:74:39: a3:15:0e:8a:9f:7d:29:ff:cd:1a:89:26:4c:b7:d9:a3:4f:1a: fa:c1:07:7b:3c:6b:36:79:8d:08:33:cf:97:9c:94:8d:8b:8e: 78:d9:52:dd:09:ec:0e:68:27:2f:90:58:f2:f4:0f:5f:bb:b8: ca:63:3d:a6:93:2f:05:a4:07:12:8d:3e:ac:a4:a4:0c:47:d2: c8:3e:ea:4e:e5:a7:36:1f:40:af:2a:13:3e:07:25:3a:91:5b: 76:12:90:ef:7a:59:f6:7d:95:88:24:22:23:34:ab:f3:d4:40: dd:e8:27:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXLesyEPDoE/VdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZiYzJkYTctNWIzYi00ZmY2LThiYzItNTljNDJjOTAx MDg2MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ZGM2NjllYjEtZjU0NC00MjgwLTg0MmYtY2YyMzJjMGIxNDZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qg5Era2g7MVAB/7u/g8az8CcqMtJ4D6lQ+5 CuPedqij9HkeVK+ECIJHV8S95DkWk54DJyVH1veUyb5FuP43IdzaWrpiQM1CsJZE JOnLyMUPkSZjgIbBfw5jfsaOjdFIlF/lk4AyDNSamiiRSJAzMLSZzFHWYhXsBQFw r/jWIfWIoLe3hQhabLNGkHBsnOn0X6fsJDUukb5K76GY+7QdimYa6sK/k77Wh0SN nukgspvQUyXO/lWmqrWlWLOVlDJPFrEUaRl2bzJkSe9Kywa8Vcites+//3xdNk7Z 63auMBUUhi/U033A63pYD83V5rQ7wM3STAI/zJ2x1kDo1hSqUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLWpt9lVzcj7cxgxKsZa0vyA1HVAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jNmJj MmRhNy01YjNiLTRmZjYtOGJjMi01OWM0MmM5MDEwODYvZGM2MzRkYTYtYzViZS0z YWZiLWJkM2EtOTFlZWY5MjNlMmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzZiYzJkYTctNWIzYi00ZmY2LThi YzItNTljNDJjOTAxMDg2L2M2YmMyZGE3LTViM2ItNGZmNi04YmMyLTU5YzQyYzkw MTA4Ni5jcmwwHwYDVR0jBBgwFoAUnWYfnyPnx7Ih8ugzbHvOq2WXMfIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jNmJjMmRhNy01YjNiLTRmZjYtOGJjMi01OWM0 MmM5MDEwODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlRT4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4l5YeCr9qVggowfOGO4M4Sng5GKYfdhXCThO5cicFtNeOHm37YRYZI iTcvHq3pjfYyno81/YsCFZ5LVj/hudb72CkZ9vkh4ShFoHkUZQNY9NgWPRlvwh9Z i2KqaR1ZHwrmfR3TaEjsGG+I0fF/ub+UYxrzi7EQFofcB/YHtEnmZpowFFwOHWjE BKtMMCt0OaMVDoqffSn/zRqJJky32aNPGvrBB3s8azZ5jQgzz5eclI2LjnjZUt0J 7A5oJy+QWPL0D1+7uMpjPaaTLwWkBxKNPqykpAxH0sg+6k7lpzYfQK8qEz4HJTqR W3YSkO96WfZ9lYgkIiM0q/PUQN3oJ6w= -----END CERTIFICATE-----Generated at Sat Oct 11 07:27:54 2025 by rpki-client