$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/1b7eba2f-7375-388c-aa89-d907adaf73d5.roa File: 1b7eba2f-7375-388c-aa89-d907adaf73d5.roa (raw, json) Hash identifier: Ea1wSY58e8B9uUTS5UGvgsjr7941eyQ2eKvlNZPX1UI= Subject key identifier: 0C:D1:F4:70:C0:85:8F:C2:D5:37:78:AB:FB:3D:9C:C6:7A:03:8A:9F Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584B95A78A45983CA73D75BDFB00 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/1b7eba2f-7375-388c-aa89-d907adaf73d5.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 14618 IP address blocks: 149.20.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:8a:45:98:3c:a7:3d:75:bd:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=10e7f41e-1b1f-4edf-8c2f-be744d6a51bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5d:88:49:44:a8:f1:d7:3a:d7:5e:e0:13:b2: 3e:ed:6a:42:26:91:fd:53:13:3c:02:ee:23:68:78: f2:b8:3c:47:42:1d:cb:7a:4f:88:e8:e4:92:bf:82: 5d:59:f5:04:33:1e:c7:d3:10:b2:5f:e2:65:0d:d7: 47:af:af:8a:15:8b:85:d3:80:e6:e0:19:ef:55:b8: 2b:c8:55:91:9b:12:61:77:9a:0e:a8:e5:6a:d2:dc: a7:a1:57:d5:a7:f6:00:af:3e:d5:8f:01:5f:aa:79: 4f:c2:8b:b1:ff:ac:47:15:46:81:23:b0:59:78:08: eb:0c:e0:29:e7:ae:26:c7:06:cc:04:aa:06:99:dd: a3:c3:70:8a:58:5e:b3:64:b7:f0:34:70:2d:72:6c: 30:f4:37:b5:92:fe:86:bc:ed:18:90:82:71:26:75: e9:63:31:c6:eb:88:f2:00:52:7a:96:30:7d:86:81: cb:1c:f9:5b:f0:4f:3e:78:cc:9a:d3:2b:e9:42:00: 1d:79:22:b4:43:13:ff:b6:4e:e4:3e:0b:37:59:3c: e5:38:a1:9d:33:c5:36:cc:af:fa:ba:88:8b:a7:36: d0:a6:ae:ab:fd:f3:aa:39:71:27:9e:29:61:9c:a2: f8:c5:a9:1f:ad:64:6f:e9:ff:49:cf:13:27:d3:7d: b7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:D1:F4:70:C0:85:8F:C2:D5:37:78:AB:FB:3D:9C:C6:7A:03:8A:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/1b7eba2f-7375-388c-aa89-d907adaf73d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:c0:a2:e6:d7:a0:fe:a1:1e:68:13:7b:30:34:62:39:90:3b: 83:2e:1c:e3:8f:8d:84:f6:30:ce:c6:ff:a1:af:df:b5:b9:bc: 3f:05:7a:90:8a:09:a5:01:02:70:93:9a:66:ea:a7:ad:2f:03: 1e:b9:a7:63:14:2a:34:d3:e1:aa:10:bc:1f:a9:56:06:34:fe: af:d8:8c:a6:65:e3:87:1f:8d:6c:82:cb:66:b6:65:57:fc:1e: e8:91:2a:4d:f8:b4:18:d8:ce:55:05:ee:a9:74:7a:62:e2:11: ae:9d:1e:ae:36:55:d3:a2:c7:bf:aa:4a:de:8d:f5:5e:9a:d9: 71:76:0e:d7:5e:38:0c:23:2a:5a:36:a6:13:63:7e:c2:97:a9: 75:68:47:6b:67:54:e2:04:6e:38:07:98:4b:74:10:5d:7c:89: ad:75:2d:80:77:a1:0f:39:a8:3f:96:1b:64:e8:75:38:9f:d3: 47:9a:ef:a6:22:91:c0:24:8d:88:63:3e:72:14:21:4e:95:75: 33:d8:84:4b:bd:00:d6:5a:7c:c2:65:44:6f:ef:52:bc:6f:32: 47:35:f7:85:ec:c1:72:82:da:ef:98:97:25:60:e3:fd:5d:50: 54:41:4a:4e:4e:87:aa:0c:8c:6f:c3:d7:cc:7d:72:fd:16:4f: 1f:d7:67:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp4pFmDynPXW9+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MTBlN2Y0MWUtMWIxZi00ZWRmLThjMmYtYmU3NDRkNmE1MWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvl2ISUSo8dc6117gE7I+7WpCJpH9UxM8Au4j aHjyuDxHQh3Lek+I6OSSv4JdWfUEMx7H0xCyX+JlDddHr6+KFYuF04Dm4BnvVbgr yFWRmxJhd5oOqOVq0tynoVfVp/YArz7VjwFfqnlPwoux/6xHFUaBI7BZeAjrDOAp 564mxwbMBKoGmd2jw3CKWF6zZLfwNHAtcmww9De1kv6GvO0YkIJxJnXpYzHG64jy AFJ6ljB9hoHLHPlb8E8+eMya0yvpQgAdeSK0QxP/tk7kPgs3WTzlOKGdM8U2zK/6 uoiLpzbQpq6r/fOqOXEnnilhnKL4xakfrWRv6f9JzxMn0323IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzR9HDAhY/C1Td4q/s9nMZ6A4qfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvMWI3ZWJhMmYtNzM3NS0z ODhjLWFhODktZDkwN2FkYWY3M2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRQLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJzAoubXoP6hHmgTezA0YjmQO4MuHOOPjYT2MM7G/6Gv37W5vD8FepCK CaUBAnCTmmbqp60vAx65p2MUKjTT4aoQvB+pVgY0/q/YjKZl44cfjWyCy2a2ZVf8 HuiRKk34tBjYzlUF7ql0emLiEa6dHq42VdOix7+qSt6N9V6a2XF2DtdeOAwjKlo2 phNjfsKXqXVoR2tnVOIEbjgHmEt0EF18ia11LYB3oQ85qD+WG2TodTif00ea76Yi kcAkjYhjPnIUIU6VdTPYhEu9ANZafMJlRG/vUrxvMkc194XswXKC2u+YlyVg4/1d UFRBSk5Oh6oMjG/D18x9cv0WTx/XZx8= -----END CERTIFICATE-----Generated at Tue Oct 28 14:11:34 2025 by rpki-client