$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/1cba40e9-633e-3bf0-b7b7-791b6ab99778.roa File: 1cba40e9-633e-3bf0-b7b7-791b6ab99778.roa (raw, json) Hash identifier: sEv1moKmUCdVIoHeD0yRRXl4V7WUTGeOag9JtwgClEQ= Subject key identifier: F2:E7:A1:30:FC:63:57:93:C8:E7:E1:88:B7:2D:0B:9C:C6:69:6A:D0 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584B99D77C9EBB4A76A447D6BF00 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/1cba40e9-633e-3bf0-b7b7-791b6ab99778.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 27321 IP address blocks: 149.20.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:7c:9e:bb:4a:76:a4:47:d6:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=ff786147-9c60-486c-8163-576bea8b1531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:93:5b:dd:58:54:38:91:79:9d:ae:44:30:4b: ba:5f:e6:32:b9:35:83:99:92:07:be:80:47:01:ce: 5f:40:12:76:34:9a:47:70:96:a0:60:d7:4c:41:57: a4:fe:ea:b8:c0:71:72:a3:12:3f:8f:bd:d0:07:86: 71:16:98:1f:eb:1a:64:9d:16:05:18:e1:6e:78:44: 43:e8:e9:36:2f:16:d1:66:37:b2:06:78:3a:08:56: 10:5f:ad:06:82:8c:3c:7c:7d:88:1d:56:e9:5b:e3: 7b:29:0f:04:8c:a9:bb:d0:5b:f9:13:33:e1:9a:18: 00:fe:d6:e1:f3:a1:df:13:11:6f:3a:3d:c7:fe:22: 84:4c:41:70:79:a2:e6:ea:50:b8:e8:f7:76:46:18: a6:76:c8:89:e0:fa:75:d2:6b:be:ac:70:db:50:14: cb:92:be:7f:7d:c9:55:ae:61:e2:d0:10:07:ae:8d: dd:f7:00:18:1d:f4:e9:7f:35:3a:1f:49:0d:64:2d: 80:69:db:7f:b7:76:71:c9:4b:42:14:99:5f:8b:8c: e6:c4:f5:3d:94:9c:84:4a:36:f7:c9:18:28:43:07: 71:be:32:f6:6d:09:23:85:a1:c7:a1:f8:7f:15:1b: 1d:e3:1f:00:c9:8f:a8:c5:d9:02:16:b8:19:b3:22: 44:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:E7:A1:30:FC:63:57:93:C8:E7:E1:88:B7:2D:0B:9C:C6:69:6A:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/1cba40e9-633e-3bf0-b7b7-791b6ab99778.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:ff:8a:49:f8:63:e5:19:7e:26:26:a9:62:d8:65:38:6f:77: 0e:b9:b8:56:bc:11:bd:cb:27:e4:96:1b:6a:74:98:f2:8e:c9: 84:4c:20:e0:e5:15:9f:c4:f3:b5:5b:45:4c:db:4f:27:be:46: 19:52:0a:97:c1:56:64:7c:fc:ba:8f:a0:61:7d:76:8e:fc:ea: 9c:c8:20:ce:b5:7c:e2:0a:be:2f:3d:3d:b8:63:e7:ee:ee:3b: 72:77:3c:d9:29:51:a3:84:a9:65:3a:e1:62:01:6f:5d:fd:3b: 16:3a:47:39:53:8f:37:13:fc:0e:c6:dc:2c:0b:64:42:57:81: e0:85:ab:78:06:4f:f0:fd:00:f3:25:40:df:f2:90:83:b8:e3: e8:da:51:3b:31:6e:29:17:b2:c7:d7:9f:c2:33:20:af:8f:4b: a4:5a:be:fe:99:7c:14:a4:35:54:b5:98:8f:df:8b:cd:02:87: 38:4f:7c:45:3f:96:b7:47:cf:56:ee:f6:75:db:4a:f7:49:95: c1:a8:49:82:7f:3d:ca:33:e2:10:d9:cc:aa:7e:ea:56:9f:e0: 17:3a:67:7c:b0:c8:7c:d2:2f:19:93:d5:c2:7c:a8:4c:59:f1: 54:01:7c:2d:88:b5:d5:5b:70:98:de:04:97:0c:18:07:bb:86: 4f:3f:15:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ13yeu0p2pEfWvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZmY3ODYxNDctOWM2MC00ODZjLTgxNjMtNTc2YmVhOGIxNTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5Nb3VhUOJF5na5EMEu6X+YyuTWDmZIHvoBH Ac5fQBJ2NJpHcJagYNdMQVek/uq4wHFyoxI/j73QB4ZxFpgf6xpknRYFGOFueERD 6Ok2LxbRZjeyBng6CFYQX60Ggow8fH2IHVbpW+N7KQ8EjKm70Fv5EzPhmhgA/tbh 86HfExFvOj3H/iKETEFweaLm6lC46Pd2RhimdsiJ4Pp10mu+rHDbUBTLkr5/fclV rmHi0BAHro3d9wAYHfTpfzU6H0kNZC2Aadt/t3ZxyUtCFJlfi4zmxPU9lJyESjb3 yRgoQwdxvjL2bQkjhaHHofh/FRsd4x8AyY+oxdkCFrgZsyJE9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPLnoTD8Y1eTyOfhiLctC5zGaWrQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvMWNiYTQwZTktNjMzZS0z YmYwLWI3YjctNzkxYjZhYjk5Nzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRQ5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADn/ikn4Y+UZfiYmqWLYZThvdw65uFa8Eb3LJ+SWG2p0mPKOyYRMIODl FZ/E87VbRUzbTye+RhlSCpfBVmR8/LqPoGF9do786pzIIM61fOIKvi89Pbhj5+7u O3J3PNkpUaOEqWU64WIBb139OxY6RzlTjzcT/A7G3CwLZEJXgeCFq3gGT/D9APMl QN/ykIO44+jaUTsxbikXssfXn8IzIK+PS6Ravv6ZfBSkNVS1mI/fi80ChzhPfEU/ lrdHz1bu9nXbSvdJlcGoSYJ/Pcoz4hDZzKp+6laf4Bc6Z3ywyHzSLxmT1cJ8qExZ 8VQBfC2ItdVbcJjeBJcMGAe7hk8/FbQ= -----END CERTIFICATE-----Generated at Tue Oct 28 02:32:50 2025 by rpki-client