$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48/1f310779-9b2a-3cc4-aea4-e31521d28f2a.roa File: 1f310779-9b2a-3cc4-aea4-e31521d28f2a.roa (raw, json) Hash identifier: JVKq19VVL9OBVzDx2WbCa15wtO/K20T0Ey3HCuOLE98= Subject key identifier: 84:EC:6A:08:C0:62:A6:47:33:C8:CD:96:9E:65:D0:E5:86:AF:B9:09 Certificate issuer: /CN=5012f96a-2af5-4bb0-9c98-db8b9a8a9c48 Certificate serial: 010D0C9F4328584B0A116B13C301356E6988AB50 Authority key identifier: 1E:5F:8F:54:BB:C2:5B:64:9A:E2:E1:51:2F:E5:36:48:FA:F5:FA:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48/1f310779-9b2a-3cc4-aea4-e31521d28f2a.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 0 IP address blocks: 149.112.0.0/24 maxlen: 32 2001:504:104::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:6b:13:c3:01:35:6e:69:88:ab:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5012f96a-2af5-4bb0-9c98-db8b9a8a9c48 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=a023f6dd-3c7a-49d8-8a94-33e8e0101270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b6:06:de:da:91:db:df:5c:24:fb:9d:2c:f9: c1:62:43:b5:90:a6:66:ba:a3:8f:fd:5c:10:8e:73: 59:c9:84:2d:7b:2b:09:b1:a4:74:20:69:2b:17:09: 49:44:0d:01:e4:6e:99:e2:57:4d:9d:58:09:8a:a8: 81:18:49:c8:aa:a4:94:47:0f:37:06:40:97:7d:83: 30:8a:53:ce:ec:e1:3f:55:3c:31:16:fd:d3:82:04: 41:e5:24:2a:4a:d1:02:6f:3d:63:94:4d:cb:f2:62: ec:f3:f4:5b:96:a0:e2:7d:62:d5:ff:28:0c:a0:d3: 1b:e7:86:2e:34:83:db:1b:8f:48:df:1e:fe:c1:d8: 60:2a:d9:a6:17:f4:7c:f9:50:90:9b:33:c8:8e:00: 96:d0:8d:b4:f4:ed:da:ee:e8:f8:64:a2:af:11:28: 71:20:7d:32:28:e4:e9:ab:73:65:81:24:60:b0:2b: a7:fd:e3:6c:39:22:c7:8c:83:a5:67:db:7b:c1:7e: 19:48:ea:15:68:fa:8d:97:ba:86:39:ad:53:83:38: 51:df:bc:f9:17:53:18:9b:66:7f:4f:a0:99:b0:5c: 2c:95:3d:64:d1:13:89:75:2e:d2:47:1d:44:da:65: 31:82:79:f7:25:46:bb:14:7a:24:44:47:c0:4b:fe: 13:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:EC:6A:08:C0:62:A6:47:33:C8:CD:96:9E:65:D0:E5:86:AF:B9:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48/1f310779-9b2a-3cc4-aea4-e31521d28f2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.crl X509v3 Authority Key Identifier: keyid:1E:5F:8F:54:BB:C2:5B:64:9A:E2:E1:51:2F:E5:36:48:FA:F5:FA:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.cer sbgp-ipAddrBlock: critical IPv4: 149.112.0.0/24 IPv6: 2001:504:104::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:59:8f:88:e0:c1:d2:e0:25:02:d2:b0:23:fd:c9:e2:94:9d: 41:a1:2f:d6:7f:ba:e2:d4:70:bd:d4:6f:96:7e:59:24:77:e6: 72:d2:38:63:b4:d7:4a:24:d2:8d:dd:df:a6:77:33:cd:44:9b: c4:87:53:41:62:09:e0:8c:ac:40:0f:cc:09:a9:0f:dd:7c:3a: 35:ee:1f:48:c7:17:74:90:23:86:28:10:74:a3:ef:93:42:02: 08:9f:e6:07:87:72:f5:f3:a1:e4:90:e1:6c:d1:4b:df:15:7e: 69:f1:cb:cc:3b:f0:48:70:fb:64:ef:ec:2d:f2:85:37:8c:f1: 85:27:77:79:95:d7:02:ea:28:f0:da:9f:7e:f3:8d:22:d3:af: 27:54:ff:c2:25:d3:f7:7f:a2:9b:2d:3a:82:48:d1:fa:6e:23: ea:a6:09:2c:d2:d1:22:48:f0:05:2b:61:09:19:a1:63:6a:29: 76:d3:1b:e7:81:08:16:04:bc:a1:d2:13:fd:26:92:8f:bb:07: 7f:a6:b8:45:30:7c:c7:e3:8b:67:b9:de:6d:80:1b:29:6a:cc: 32:2e:5a:5a:c4:35:c7:8d:9e:8f:7a:a4:47:8c:ac:bf:49:04: 8c:e2:d9:3b:54:aa:fc:87:e3:28:d6:fa:7b:43:ba:34:b0:26: 17:14:e6:03 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEsKEWsTwwE1bmmIq1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTAxMmY5NmEtMmFmNS00YmIwLTljOTgtZGI4YjlhOGE5 YzQ4MB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk YTAyM2Y2ZGQtM2M3YS00OWQ4LThhOTQtMzNlOGUwMTAxMjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47YG3tqR299cJPudLPnBYkO1kKZmuqOP/VwQ jnNZyYQteysJsaR0IGkrFwlJRA0B5G6Z4ldNnVgJiqiBGEnIqqSURw83BkCXfYMw ilPO7OE/VTwxFv3TggRB5SQqStECbz1jlE3L8mLs8/RblqDifWLV/ygMoNMb54Yu NIPbG49I3x7+wdhgKtmmF/R8+VCQmzPIjgCW0I209O3a7uj4ZKKvEShxIH0yKOTp q3NlgSRgsCun/eNsOSLHjIOlZ9t7wX4ZSOoVaPqNl7qGOa1TgzhR37z5F1MYm2Z/ T6CZsFwslT1k0ROJdS7SRx1E2mUxgnn3JUa7FHokREfAS/4TeQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFITsagjAYqZHM8jNlp5l0OWGr7kJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MDEy Zjk2YS0yYWY1LTRiYjAtOWM5OC1kYjhiOWE4YTljNDgvMWYzMTA3NzktOWIyYS0z Y2M0LWFlYTQtZTMxNTIxZDI4ZjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTAxMmY5NmEtMmFmNS00YmIwLTlj OTgtZGI4YjlhOGE5YzQ4LzUwMTJmOTZhLTJhZjUtNGJiMC05Yzk4LWRiOGI5YThh OWM0OC5jcmwwHwYDVR0jBBgwFoAUHl+PVLvCW2Sa4uFRL+U2SPr1+i8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MDEyZjk2YS0yYWY1LTRiYjAtOWM5OC1kYjhi OWE4YTljNDguY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAlXAAMA8E AgACMAkDBwAgAQUEAQQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAD1mPiODB0uAlAtKwI/3J4pSdQaEv1n+6 4tRwvdRvln5ZJHfmctI4Y7TXSiTSjd3fpnczzUSbxIdTQWIJ4IysQA/MCakP3Xw6 Ne4fSMcXdJAjhigQdKPvk0ICCJ/mB4dy9fOh5JDhbNFL3xV+afHLzDvwSHD7ZO/s LfKFN4zxhSd3eZXXAuoo8NqffvONItOvJ1T/wiXT93+imy06gkjR+m4j6qYJLNLR IkjwBSthCRmhY2opdtMb54EIFgS8odIT/SaSj7sHf6a4RTB8x+OLZ7nebYAbKWrM Mi5aWsQ1x42ej3qkR4ysv0kEjOLZO1Sq/IfjKNb6e0O6NLAmFxTmAw== -----END CERTIFICATE-----Generated at Wed Oct 8 14:02:18 2025 by rpki-client