$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/e8c83e5e-3160-3da3-9508-5decf5e3c0b7.roa File: e8c83e5e-3160-3da3-9508-5decf5e3c0b7.roa (raw, json) Hash identifier: UXlVfJh7jX7GtZWYIEhLHO7jC9N6CDH0GX/XbHt1UJ8= Subject key identifier: F6:A9:97:4A:07:B8:E5:5C:E0:66:7A:25:AF:E8:A1:FF:23:AE:9D:E2 Certificate issuer: /CN=79b1fe7a-eca9-422f-9043-5a93ca5145c8 Certificate serial: 010D0C9F4328584B4E771609FC3404CFF4D9B620 Authority key identifier: 0C:61:A1:93:6A:44:3C:E2:11:31:FA:40:42:68:F7:A6:E7:34:84:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/e8c83e5e-3160-3da3-9508-5decf5e3c0b7.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 14618 IP address blocks: 149.48.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/79b1fe7a-eca9-422f-9043-5a93ca5145c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/79b1fe7a-eca9-422f-9043-5a93ca5145c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:16:09:fc:34:04:cf:f4:d9:b6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79b1fe7a-eca9-422f-9043-5a93ca5145c8 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=d48ce524-df2e-4ff1-b3e5-a419c6ed4d06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3a:13:db:fa:30:23:16:ff:dc:fd:9d:11:61: a2:ef:ba:0c:ca:7b:b2:ec:ee:01:62:56:9b:a9:3b: 17:cf:d5:08:b0:1a:5b:18:75:f6:18:47:a2:bd:8a: 9e:54:03:f1:0b:42:67:1f:b8:37:03:dd:88:73:7c: 43:b5:d9:af:c0:8c:5f:51:4d:f0:6c:86:fd:19:b8: 0c:80:23:2f:23:90:af:43:bb:5e:63:a4:62:b5:e4: 44:23:4b:21:d5:a1:4f:85:2e:0d:34:b2:51:0b:65: 0b:c5:e3:18:bd:ea:d6:07:06:4a:99:92:7f:81:5e: 3a:c1:5e:c5:88:2c:dc:d5:9c:ad:dc:6a:b8:b9:05: dd:df:e2:46:ea:d1:55:cd:fb:82:c5:5c:00:92:81: 81:c3:2b:01:41:25:9f:ac:7c:87:5d:b6:2f:43:84: 89:93:9b:6c:72:d3:52:d6:e1:ac:ec:31:31:e7:97: e9:c2:2d:af:ff:ef:39:49:70:9f:ad:77:db:e5:ac: 1d:8c:23:fe:db:3f:a0:a2:78:f5:cf:94:d8:a9:8d: 83:eb:fa:fa:9d:f2:a2:22:3d:1e:4a:5f:ef:1f:a6: 11:39:d1:a7:33:87:33:ba:73:b4:cb:90:e1:4b:b5: a0:b8:9c:53:3c:74:57:dd:a9:a8:3f:05:0b:d3:e2: 38:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:A9:97:4A:07:B8:E5:5C:E0:66:7A:25:AF:E8:A1:FF:23:AE:9D:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/e8c83e5e-3160-3da3-9508-5decf5e3c0b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/79b1fe7a-eca9-422f-9043-5a93ca5145c8.crl X509v3 Authority Key Identifier: keyid:0C:61:A1:93:6A:44:3C:E2:11:31:FA:40:42:68:F7:A6:E7:34:84:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8.cer sbgp-ipAddrBlock: critical IPv4: 149.48.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:54:21:d6:76:80:ff:54:8d:fe:d4:ba:28:51:66:f9:03:0f: 1a:92:16:3a:9f:88:c5:b1:66:12:6f:57:56:a7:14:a4:1d:40: af:bd:d9:6c:3c:de:c8:90:ce:b0:7f:91:e2:d3:04:47:33:51: bc:6f:a1:9b:4b:2f:f0:5e:59:69:37:bf:d5:f7:6c:fc:5a:89: 5a:ce:92:89:6c:e0:7a:93:d0:e1:11:95:de:bf:b1:85:9d:97: 42:64:96:56:6f:96:e6:d7:8e:03:b9:6f:00:c7:af:45:5a:eb: 9a:3f:62:c2:35:b9:3c:09:55:cb:38:31:f5:37:20:78:40:3b: 1d:7f:41:1b:3a:dd:0c:12:79:5d:4a:44:f1:2b:e2:78:63:4c: cc:7b:4f:49:9a:84:61:99:36:16:14:ff:a6:76:6c:f4:07:58: 5d:3a:35:d6:1e:bb:62:48:f7:54:55:bd:fa:80:77:ee:11:e6: f3:b6:7c:f6:69:01:29:4b:e6:f7:41:4f:e2:7e:17:e2:7b:c1: a2:9b:a7:a3:c2:9c:33:59:0b:eb:cf:cd:15:6a:c3:09:09:16: 04:25:fc:10:3d:f7:f4:92:ef:91:da:dc:ef:2f:d2:41:92:fe: 79:7e:2f:1c:cf:c0:0a:2e:2c:1f:a7:8b:84:a2:95:a4:9a:5f: 9a:76:bd:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdxYJ/DQEz/TZtiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzliMWZlN2EtZWNhOS00MjJmLTkwNDMtNWE5M2NhNTE0 NWM4MB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk ZDQ4Y2U1MjQtZGYyZS00ZmYxLWIzZTUtYTQxOWM2ZWQ0ZDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ToT2/owIxb/3P2dEWGi77oMynuy7O4BYlab qTsXz9UIsBpbGHX2GEeivYqeVAPxC0JnH7g3A92Ic3xDtdmvwIxfUU3wbIb9GbgM gCMvI5CvQ7teY6RiteREI0sh1aFPhS4NNLJRC2ULxeMYverWBwZKmZJ/gV46wV7F iCzc1Zyt3Gq4uQXd3+JG6tFVzfuCxVwAkoGBwysBQSWfrHyHXbYvQ4SJk5tsctNS 1uGs7DEx55fpwi2v/+85SXCfrXfb5awdjCP+2z+gonj1z5TYqY2D6/r6nfKiIj0e Sl/vH6YROdGnM4czunO0y5DhS7WguJxTPHRX3amoPwUL0+I4QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPapl0oHuOVc4GZ6Ja/oof8jrp3iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83OWIx ZmU3YS1lY2E5LTQyMmYtOTA0My01YTkzY2E1MTQ1YzgvZThjODNlNWUtMzE2MC0z ZGEzLTk1MDgtNWRlY2Y1ZTNjMGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNzliMWZlN2EtZWNhOS00MjJmLTkw NDMtNWE5M2NhNTE0NWM4Lzc5YjFmZTdhLWVjYTktNDIyZi05MDQzLTVhOTNjYTUx NDVjOC5jcmwwHwYDVR0jBBgwFoAUDGGhk2pEPOIRMfpAQmj3puc0hBQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi83OWIxZmU3YS1lY2E5LTQyMmYtOTA0My01YTkz Y2E1MTQ1YzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlTCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNUIdZ2gP9Ujf7UuihRZvkDDxqSFjqfiMWxZhJvV1anFKQdQK+92Ww8 3siQzrB/keLTBEczUbxvoZtLL/BeWWk3v9X3bPxaiVrOkols4HqT0OERld6/sYWd l0JkllZvlubXjgO5bwDHr0Va65o/YsI1uTwJVcs4MfU3IHhAOx1/QRs63QwSeV1K RPEr4nhjTMx7T0mahGGZNhYU/6Z2bPQHWF06NdYeu2JI91RVvfqAd+4R5vO2fPZp ASlL5vdBT+J+F+J7waKbp6PCnDNZC+vPzRVqwwkJFgQl/BA99/SS75Ha3O8v0kGS /nl+LxzPwAouLB+ni4SilaSaX5p2vU8= -----END CERTIFICATE-----Generated at Wed Oct 8 19:42:12 2025 by rpki-client