$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b1a0e12f-8b71-3058-b6a6-87e4aac658a7.roa File: b1a0e12f-8b71-3058-b6a6-87e4aac658a7.roa (raw, json) Hash identifier: /bjRrZm8NNpNV+NzkbEDKNT+JGtJhn1GiEFDGwWXh+Y= Subject key identifier: CB:79:9B:A8:57:16:81:90:C8:46:EA:7C:82:B5:B8:91:4C:06:7A:54 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B77697DA6673CA09C676B9500 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b1a0e12f-8b71-3058-b6a6-87e4aac658a7.roa Signing time: Thu 09 Oct 2025 17:01:27 +0000 ROA not before: Thu 09 Oct 2025 17:01:27 +0000 ROA not after: Wed 07 Jan 2026 18:01:27 +0000 asID: 208972 IP address blocks: 149.86.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:77:69:7d:a6:67:3c:a0:9c:67:6b:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 9 17:01:27 2025 GMT Not After : Jan 7 18:01:27 2026 GMT Subject: CN=449eee4f-2954-41bd-ad11-482dfffb1268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c4:39:fc:5f:02:87:9d:be:14:af:f3:8f:ef: 91:87:3c:91:f1:66:8e:12:ae:32:01:bf:f0:91:fe: 31:cd:2a:0d:55:3b:9f:b0:54:66:62:58:32:12:be: 40:d3:24:ef:84:66:a7:3c:0e:a9:22:e7:d4:0c:ad: c5:a8:30:e8:51:be:45:bc:f4:67:56:4b:97:fc:35: 66:68:43:f0:6b:db:c3:45:db:69:71:fb:cd:28:45: 3d:47:2d:e5:5a:21:35:2b:ca:57:56:5b:e1:e3:a4: 04:0e:50:f9:66:79:94:2a:c8:fa:fe:2a:a8:07:06: 0b:96:73:62:7f:ac:d2:a3:04:5c:b2:9b:5f:6f:b7: df:34:a8:59:7e:46:c2:63:eb:9f:20:7f:dc:1d:97: 8f:74:98:8d:d1:f7:02:2c:f7:79:c6:0d:73:8a:22: 77:68:9d:d5:a6:e7:a9:d7:e7:80:45:93:1a:3a:c5: ca:d7:a4:66:e8:3e:f9:4e:12:9a:e5:75:be:6d:38: 6e:0a:4e:06:71:a1:16:3e:5b:8c:16:59:21:2d:77: fc:a3:d4:87:c9:59:52:94:06:2b:38:a1:2b:69:5f: 79:5c:d0:8b:46:67:53:d1:c4:92:86:77:c1:21:bf: 1e:17:ce:44:9f:c6:69:7c:59:7e:22:08:39:59:a6: a8:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:79:9B:A8:57:16:81:90:C8:46:EA:7C:82:B5:B8:91:4C:06:7A:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b1a0e12f-8b71-3058-b6a6-87e4aac658a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 149.86.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:6c:f8:69:04:89:4f:47:1f:2c:79:53:38:72:f8:74:ae:93: 43:91:42:58:39:38:1d:7e:12:55:83:ba:e2:15:1e:21:f0:9d: bc:a7:39:1f:80:de:13:7d:25:5e:82:5e:0f:26:f7:6d:c9:40: 23:5e:0e:45:59:b7:31:65:83:55:ed:8f:f0:1b:28:4e:9e:dc: 42:b5:5b:14:2a:6e:85:61:78:73:20:25:2e:fb:06:6e:5a:2c: 1e:01:4c:b2:93:4e:51:2f:34:de:1d:c3:a1:40:2b:ff:67:15: a6:a9:e0:eb:42:db:f0:d5:47:1d:72:2c:1b:22:76:f5:7b:b0: 01:bd:2b:ea:56:79:b5:da:01:99:f5:50:ac:6f:7e:1e:12:fc: 36:d9:1e:e3:50:57:a2:17:47:56:27:06:68:aa:a9:c9:5e:1e: 20:eb:27:9b:2d:0f:1c:ba:36:5f:7a:01:12:9c:db:53:90:10: ca:e9:a5:70:89:13:4c:2f:76:ab:9c:1b:f1:61:c6:74:63:78: 5d:43:0c:81:77:5e:7f:58:d7:f5:7c:14:54:43:95:0f:ec:e9: 81:16:6d:d1:33:e6:a3:92:6b:47:d9:7d:94:eb:c0:3b:01:81: b6:2d:48:06:e9:2e:88:09:91:f2:73:59:3f:f1:0c:2b:9e:9f: 74:ad:50:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt3aX2mZzygnGdrlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAwOTE3MDEyN1oXDTI2MDEwNzE4MDEyN1owLzEtMCsGA1UEAxMk NDQ5ZWVlNGYtMjk1NC00MWJkLWFkMTEtNDgyZGZmZmIxMjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8Q5/F8Ch52+FK/zj++RhzyR8WaOEq4yAb/w kf4xzSoNVTufsFRmYlgyEr5A0yTvhGanPA6pIufUDK3FqDDoUb5FvPRnVkuX/DVm aEPwa9vDRdtpcfvNKEU9Ry3lWiE1K8pXVlvh46QEDlD5ZnmUKsj6/iqoBwYLlnNi f6zSowRcsptfb7ffNKhZfkbCY+ufIH/cHZePdJiN0fcCLPd5xg1ziiJ3aJ3Vpuep 1+eARZMaOsXK16Rm6D75ThKa5XW+bThuCk4GcaEWPluMFlkhLXf8o9SHyVlSlAYr OKEraV95XNCLRmdT0cSShnfBIb8eF85En8ZpfFl+Igg5WaaoowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMt5m6hXFoGQyEbqfIK1uJFMBnpUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYjFhMGUxMmYtOGI3MS0z MDU4LWI2YTYtODdlNGFhYzY1OGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFlVaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALVs+GkEiU9HHyx5Uzhy+HSuk0ORQlg5OB1+ElWDuuIVHiHwnbynOR+A 3hN9JV6CXg8m923JQCNeDkVZtzFlg1Xtj/AbKE6e3EK1WxQqboVheHMgJS77Bm5a LB4BTLKTTlEvNN4dw6FAK/9nFaap4OtC2/DVRx1yLBsidvV7sAG9K+pWebXaAZn1 UKxvfh4S/DbZHuNQV6IXR1YnBmiqqcleHiDrJ5stDxy6Nl96ARKc21OQEMrppXCJ E0wvdqucG/FhxnRjeF1DDIF3Xn9Y1/V8FFRDlQ/s6YEWbdEz5qOSa0fZfZTrwDsB gbYtSAbpLogJkfJzWT/xDCuen3StULQ= -----END CERTIFICATE-----Generated at Sat Oct 11 12:08:16 2025 by rpki-client