$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/a95dabbe-6d2c-3476-8c33-1fdebb9832d4.roa File: a95dabbe-6d2c-3476-8c33-1fdebb9832d4.roa (raw, json) Hash identifier: YXQZ21eZ5N5Fs1XSNeNgRwka9k0dZoR1+O6C1obzMcQ= Subject key identifier: 9A:85:05:BC:99:A7:F7:EC:10:E4:FF:3E:38:E4:AA:A7:FE:9D:CF:65 Certificate issuer: /CN=9faf7a12-0176-44f9-9938-7bbccac3d238 Certificate serial: 010D0C9F4328584B0B76AC0742AF524CBBE6EF80 Authority key identifier: 27:F5:34:9F:8C:B1:FD:33:07:55:93:76:CC:BC:45:98:C1:2E:B5:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/a95dabbe-6d2c-3476-8c33-1fdebb9832d4.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 30399 IP address blocks: 149.112.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:ac:07:42:af:52:4c:bb:e6:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9faf7a12-0176-44f9-9938-7bbccac3d238 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=c7b146f8-ad73-4fc3-8f92-78d9219dd24b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:5f:78:88:1d:3e:41:84:f4:e4:79:6b:d5:0f: 60:49:4c:5e:79:96:d4:6a:23:b8:56:ce:e0:ce:c3: 98:23:73:5d:3a:8a:f6:90:81:9d:34:ec:f7:3f:11: 31:8e:51:fb:09:9f:2e:70:e7:72:b3:36:89:61:87: c3:37:dc:4f:48:5d:d3:28:b9:09:2b:2a:6a:2b:ab: 0f:ed:b0:4e:d4:18:59:89:3c:84:4d:8a:74:40:c4: 93:2d:8f:00:73:dc:0c:67:f5:eb:39:81:57:1a:39: dc:fa:a1:59:e1:4a:2f:33:44:39:e0:ea:a8:94:6d: a9:ff:f4:af:5b:2e:de:c6:c5:25:79:a4:69:f6:66: 6e:47:f8:0b:ea:7f:bb:47:f9:f1:ce:09:dc:31:43: 65:37:26:98:71:2a:cf:54:4b:be:e2:b3:b0:2a:06: 37:79:cc:6c:a4:87:b9:34:ee:3c:b3:c6:c6:29:93: 3f:bd:b1:30:fe:c6:99:4b:1f:d4:64:04:92:c0:4b: 44:d1:78:2d:b5:b7:db:e2:ba:63:5d:39:1f:52:55: e7:63:a0:78:98:4a:0c:d1:87:c7:3b:f6:2c:d6:3e: 82:d5:8f:c3:f8:f8:2e:7c:3d:d2:25:57:d7:c4:86: b3:1f:03:a5:1a:b8:ee:25:b5:0c:81:e1:91:a9:10: 1b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:85:05:BC:99:A7:F7:EC:10:E4:FF:3E:38:E4:AA:A7:FE:9D:CF:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/a95dabbe-6d2c-3476-8c33-1fdebb9832d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.crl X509v3 Authority Key Identifier: keyid:27:F5:34:9F:8C:B1:FD:33:07:55:93:76:CC:BC:45:98:C1:2E:B5:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238.cer sbgp-ipAddrBlock: critical IPv4: 149.112.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:62:a2:10:31:c5:23:d6:11:0d:04:12:ac:1c:ae:f8:c2:fa: ae:d9:8e:09:f5:b4:0e:86:2f:3c:45:88:af:d8:40:bc:13:b0: 50:43:d1:d8:5a:71:e0:57:87:f1:f9:fc:df:06:d9:fb:70:26: f9:e7:32:77:c6:54:94:17:45:3b:6e:35:3a:eb:d5:c7:14:b8: 84:01:09:2d:1b:98:88:24:d9:c2:a7:e4:d0:0c:a6:79:12:25: 92:98:90:3a:cd:51:89:02:e3:a5:3f:1f:12:09:ba:f2:63:fb: a5:94:d9:aa:0b:d5:55:1b:9f:aa:ab:96:4b:db:82:63:84:dc: 31:fd:2a:c2:f4:c2:7f:69:56:3d:0d:61:ad:eb:61:98:9e:12: 30:ea:5b:eb:6e:e5:22:2e:12:5d:5c:e1:54:c4:b8:9f:9c:6a: 20:05:41:09:f2:f0:b4:a6:23:bf:f5:ac:f1:a7:a0:33:45:ee: 8a:10:2b:aa:f0:e4:fd:ac:db:5e:18:0d:ff:fc:8f:fe:6a:4d: 7b:47:2b:85:06:c2:da:bf:14:2b:2e:fe:8c:9a:43:10:1c:67: d2:ef:41:96:9c:99:b7:dd:1c:39:2a:a6:67:85:00:d1:a7:49: 96:6c:e2:42:77:32:44:de:86:d5:08:12:9f:66:f4:2f:8f:56: 31:ac:30:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdqwHQq9STLvm74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWZhZjdhMTItMDE3Ni00NGY5LTk5MzgtN2JiY2NhYzNk MjM4MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk YzdiMTQ2ZjgtYWQ3My00ZmMzLThmOTItNzhkOTIxOWRkMjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhF94iB0+QYT05Hlr1Q9gSUxeeZbUaiO4Vs7g zsOYI3NdOor2kIGdNOz3PxExjlH7CZ8ucOdyszaJYYfDN9xPSF3TKLkJKypqK6sP 7bBO1BhZiTyETYp0QMSTLY8Ac9wMZ/XrOYFXGjnc+qFZ4UovM0Q54OqolG2p//Sv Wy7exsUleaRp9mZuR/gL6n+7R/nxzgncMUNlNyaYcSrPVEu+4rOwKgY3ecxspIe5 NO48s8bGKZM/vbEw/saZSx/UZASSwEtE0Xgttbfb4rpjXTkfUlXnY6B4mEoM0YfH O/Ys1j6C1Y/D+PgufD3SJVfXxIazHwOlGrjuJbUMgeGRqRAbfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJqFBbyZp/fsEOT/Pjjkqqf+nc9lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ZmFm N2ExMi0wMTc2LTQ0ZjktOTkzOC03YmJjY2FjM2QyMzgvYTk1ZGFiYmUtNmQyYy0z NDc2LThjMzMtMWZkZWJiOTgzMmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWZhZjdhMTItMDE3Ni00NGY5LTk5 MzgtN2JiY2NhYzNkMjM4LzlmYWY3YTEyLTAxNzYtNDRmOS05OTM4LTdiYmNjYWMz ZDIzOC5jcmwwHwYDVR0jBBgwFoAUJ/U0n4yx/TMHVZN2zLxFmMEutRAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ZmFmN2ExMi0wMTc2LTQ0ZjktOTkzOC03YmJj Y2FjM2QyMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRiohAxxSPWEQ0EEqwcrvjC+q7Zjgn1tA6GLzxFiK/YQLwTsFBD0dha ceBXh/H5/N8G2ftwJvnnMnfGVJQXRTtuNTrr1ccUuIQBCS0bmIgk2cKn5NAMpnkS JZKYkDrNUYkC46U/HxIJuvJj+6WU2aoL1VUbn6qrlkvbgmOE3DH9KsL0wn9pVj0N Ya3rYZieEjDqW+tu5SIuEl1c4VTEuJ+caiAFQQny8LSmI7/1rPGnoDNF7ooQK6rw 5P2s214YDf/8j/5qTXtHK4UGwtq/FCsu/oyaQxAcZ9LvQZacmbfdHDkqpmeFANGn SZZs4kJ3MkTehtUIEp9m9C+PVjGsMNE= -----END CERTIFICATE-----Generated at Sat Oct 11 06:23:11 2025 by rpki-client