$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/c10d4b9b-c78f-36e1-a200-e30e3ab77061.roa File: c10d4b9b-c78f-36e1-a200-e30e3ab77061.roa (raw, json) Hash identifier: L4Z4bYv0czkPXzPS6fsbZEZwhDn+nxGjz2Z6w8yNN7s= Subject key identifier: 6A:76:6C:F9:B7:0D:2D:5B:F6:C0:B9:D4:21:21:09:BB:A1:05:23:DC Certificate issuer: /CN=df5adac7-ed86-4b24-911d-716f2c94711d Certificate serial: 010D0C9F4328584A9206353FBD0FE71E11EC9280 Authority key identifier: 65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/c10d4b9b-c78f-36e1-a200-e30e3ab77061.roa Signing time: Sat 19 Jul 2025 13:01:04 +0000 ROA not before: Sat 19 Jul 2025 13:01:04 +0000 ROA not after: Fri 17 Oct 2025 13:01:04 +0000 asID: 153371 IP address blocks: 149.112.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:92:06:35:3f:bd:0f:e7:1e:11:ec:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df5adac7-ed86-4b24-911d-716f2c94711d Validity Not Before: Jul 19 13:01:04 2025 GMT Not After : Oct 17 13:01:04 2025 GMT Subject: CN=24d997de-1629-426a-ab21-3755dd3c7bc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:54:cd:e8:2a:9c:59:ed:8e:16:ec:7b:24:b6: 9c:25:1d:cb:ea:5d:c8:41:f0:37:63:64:55:63:7b: 70:d8:95:89:db:ec:44:e3:02:22:ac:8b:19:42:a8: 59:bd:e7:de:4d:ce:0d:fc:1b:61:20:0e:a8:a0:d3: a3:3f:4d:f7:1a:2a:ae:fe:10:9e:db:c7:ce:29:a6: 5f:e0:bf:46:43:59:f4:84:2e:d1:d1:db:7c:79:2f: 12:48:b8:02:4a:85:4a:e1:7f:97:69:ba:73:4b:22: 97:b6:cf:98:15:2b:3a:83:67:97:8f:96:de:6d:f8: 45:6e:32:7f:41:18:1c:50:b4:a0:1f:7a:9c:85:e2: 28:64:28:e7:7f:d3:03:e8:aa:d0:25:00:73:44:c6: 05:45:8d:c3:35:85:36:09:53:78:54:91:08:5a:ee: 9a:28:4a:db:da:78:d3:de:4b:3d:1a:5d:da:95:a7: 15:a4:71:d9:0a:5f:1d:e2:1c:31:98:d1:b4:1e:f8: b4:27:05:b7:e4:ec:2b:6d:ba:f5:ae:28:16:47:59: 6c:34:3c:04:2e:21:af:b0:85:52:24:13:68:f1:29: a8:84:b5:2a:d8:f7:35:d1:a4:2b:35:32:1a:f8:88: ce:b0:bf:f9:c8:b0:b2:39:9e:d3:14:1d:ce:d3:fd: 48:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:76:6C:F9:B7:0D:2D:5B:F6:C0:B9:D4:21:21:09:BB:A1:05:23:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/c10d4b9b-c78f-36e1-a200-e30e3ab77061.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.crl X509v3 Authority Key Identifier: keyid:65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer sbgp-ipAddrBlock: critical IPv4: 149.112.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:0e:11:72:ff:96:ba:46:32:d6:7d:0e:ae:45:63:0b:22:17: f4:b6:6e:ec:32:40:69:e2:49:31:f1:42:15:d7:72:64:68:82: 70:d6:8f:e3:99:b2:13:03:1f:30:14:ca:4c:a0:d4:45:b6:c0: 31:4e:6f:95:fa:6b:25:5b:af:6d:ad:06:60:99:a6:a4:e8:c4: d7:25:6c:51:38:c2:ca:b3:89:1a:33:80:db:65:6b:c3:78:06: f0:d2:79:d7:c3:35:d8:50:b7:01:76:b3:4b:6f:ba:34:5b:40: 83:94:fa:e2:3c:c4:c8:c5:69:68:d2:ff:f8:53:22:75:de:d6: 3a:4a:b1:5d:32:fb:33:67:08:8b:cd:91:c8:55:de:d7:32:10: e1:b9:a8:c8:f5:cb:0c:e7:79:61:e8:25:ed:0c:3b:29:e8:80: 0a:48:be:e4:66:fd:7d:1e:56:6f:f8:19:69:81:74:4d:ef:38: 1d:73:6b:62:92:97:66:81:ea:e6:ec:aa:2f:b0:1c:6c:b6:b5: a9:da:42:23:b5:af:82:33:79:a1:7b:7b:8c:c7:be:44:9f:37: 20:e7:f8:37:a5:49:d3:5e:41:4a:c8:7b:e7:ef:e1:58:5a:04: 21:11:04:5d:b5:e2:9a:12:9c:fc:19:77:dc:92:34:18:33:a3: 4f:68:c2:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqSBjU/vQ/nHhHskoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY1YWRhYzctZWQ4Ni00YjI0LTkxMWQtNzE2ZjJjOTQ3 MTFkMB4XDTI1MDcxOTEzMDEwNFoXDTI1MTAxNzEzMDEwNFowLzEtMCsGA1UEAxMk MjRkOTk3ZGUtMTYyOS00MjZhLWFiMjEtMzc1NWRkM2M3YmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVTN6CqcWe2OFux7JLacJR3L6l3IQfA3Y2RV Y3tw2JWJ2+xE4wIirIsZQqhZvefeTc4N/BthIA6ooNOjP033Giqu/hCe28fOKaZf 4L9GQ1n0hC7R0dt8eS8SSLgCSoVK4X+XabpzSyKXts+YFSs6g2eXj5bebfhFbjJ/ QRgcULSgH3qcheIoZCjnf9MD6KrQJQBzRMYFRY3DNYU2CVN4VJEIWu6aKErb2njT 3ks9Gl3alacVpHHZCl8d4hwxmNG0Hvi0JwW35Owrbbr1rigWR1lsNDwELiGvsIVS JBNo8SmohLUq2Pc10aQrNTIa+IjOsL/5yLCyOZ7TFB3O0/1IVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGp2bPm3DS1b9sC51CEhCbuhBSPcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kZjVh ZGFjNy1lZDg2LTRiMjQtOTExZC03MTZmMmM5NDcxMWQvYzEwZDRiOWItYzc4Zi0z NmUxLWEyMDAtZTMwZTNhYjc3MDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZGY1YWRhYzctZWQ4Ni00YjI0LTkx MWQtNzE2ZjJjOTQ3MTFkL2RmNWFkYWM3LWVkODYtNGIyNC05MTFkLTcxNmYyYzk0 NzExZC5jcmwwHwYDVR0jBBgwFoAUZYTA+4uOlUw5iwUkbJv3KvYU7kIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kZjVhZGFjNy1lZDg2LTRiMjQtOTExZC03MTZm MmM5NDcxMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXB1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgOEXL/lrpGMtZ9Dq5FYwsiF/S2buwyQGniSTHxQhXXcmRognDWj+OZ shMDHzAUykyg1EW2wDFOb5X6ayVbr22tBmCZpqToxNclbFE4wsqziRozgNtla8N4 BvDSedfDNdhQtwF2s0tvujRbQIOU+uI8xMjFaWjS//hTInXe1jpKsV0y+zNnCIvN kchV3tcyEOG5qMj1ywzneWHoJe0MOynogApIvuRm/X0eVm/4GWmBdE3vOB1za2KS l2aB6ubsqi+wHGy2tanaQiO1r4IzeaF7e4zHvkSfNyDn+DelSdNeQUrIe+fv4Vha BCERBF214poSnPwZd9ySNBgzo09owrA= -----END CERTIFICATE-----Generated at Mon Jul 21 23:24:55 2025 by rpki-client