$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/2b1f44a4-c876-3ecd-b6a6-2389f2610dcd.roa File: 2b1f44a4-c876-3ecd-b6a6-2389f2610dcd.roa (raw, json) Hash identifier: ule3a/eYNl7Cb16g+ufkZFLL69ylVA/Wqbz+5IsueZs= Subject key identifier: 6E:17:00:5F:5A:A9:27:9F:36:6B:83:8C:FE:BE:40:31:58:1D:10:C2 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584B95A78E3C60A911F3C26B8420 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/2b1f44a4-c876-3ecd-b6a6-2389f2610dcd.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 16509 IP address blocks: 149.20.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:8e:3c:60:a9:11:f3:c2:6b:84:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=3c14b393-1d3f-4ea2-99af-7bd8adb4f844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:43:35:1b:f3:29:e5:69:5f:13:9b:b3:88:82: 2f:c9:8c:ed:df:b9:1b:fe:fc:ac:d0:6e:f7:bd:ed: 58:7a:f6:5d:45:df:dd:78:a6:82:9d:bc:27:07:82: 4c:6f:73:74:e7:ea:3a:7a:2c:6c:67:9b:1a:e9:89: 71:8b:7a:8d:93:a0:c1:fe:b1:d4:52:5f:d0:80:ed: ad:dc:92:79:ce:9f:11:fa:21:b6:91:38:8f:5d:c8: ae:d3:70:57:43:3b:e8:5d:50:4e:46:f0:1e:be:ea: b4:0a:89:af:93:67:b5:84:45:c8:e4:dc:99:7f:c4: b1:e9:20:b7:d0:40:b9:1c:1d:9b:62:ec:a4:58:94: ab:aa:f6:8f:a9:45:f8:c5:6b:90:3c:82:00:e7:1d: f5:71:9f:0e:9d:d8:2b:21:74:48:3d:b1:89:ad:45: 51:79:8d:71:d1:3f:50:76:bc:96:38:0f:0e:ad:b0: ab:92:5a:15:94:c9:d5:2b:df:c6:9e:73:1b:14:49: c7:23:82:e8:dd:75:99:61:8e:81:5b:8e:64:e9:ec: 85:5a:7f:b6:da:d5:1b:1d:93:97:dc:15:5b:b1:0b: 23:2e:d0:e9:5e:2e:3c:74:f6:e4:98:d5:6e:26:70: 38:e3:a7:85:1e:53:d2:13:0f:ef:3f:b6:b0:6f:b8: e8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:17:00:5F:5A:A9:27:9F:36:6B:83:8C:FE:BE:40:31:58:1D:10:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/2b1f44a4-c876-3ecd-b6a6-2389f2610dcd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:2e:60:d9:f7:5d:4f:3c:d0:10:01:2b:b9:7f:6c:13:1d:7a: bb:13:39:25:d0:58:4e:f8:c3:5c:60:8f:7c:71:45:42:ab:dd: 19:56:46:cc:0f:d5:d2:2c:bd:07:46:d2:ec:31:3b:b1:e4:82: e6:b6:02:07:d5:77:3d:3f:44:93:a9:b5:fd:90:86:53:21:f4: ab:96:c1:80:e6:90:cc:9c:b7:cc:98:0e:c7:df:5c:80:19:ae: 11:40:d4:bc:eb:1c:fe:65:97:1e:90:15:93:23:8f:31:50:b2: a7:d2:de:94:79:55:d5:e8:04:d6:66:a1:19:2e:06:88:60:ff: ab:96:17:e6:97:30:b2:8d:80:71:66:b1:ca:dc:8c:4f:b2:d2: ce:a2:6d:8c:aa:22:91:d3:3b:c9:26:bb:6a:fb:1d:68:74:a2: ed:2f:8d:84:98:d2:16:50:f6:ee:10:36:3e:c4:a5:05:bc:ed: 3f:08:dc:07:51:0b:e4:88:e3:88:73:a0:70:f0:d8:13:3d:d6: e1:d4:14:c3:5b:5b:02:13:c8:bf:43:2b:7f:28:35:aa:67:af: c5:a9:ee:95:a6:a5:e2:aa:d5:98:31:3d:4a:5a:df:e0:88:00: 71:a2:dc:11:95:ab:e4:ca:c3:4a:e5:d9:dc:e8:68:ab:8b:67: 91:a0:f6:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp448YKkR88JrhCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk M2MxNGIzOTMtMWQzZi00ZWEyLTk5YWYtN2JkOGFkYjRmODQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0M1G/Mp5WlfE5uziIIvyYzt37kb/vys0G73 ve1YevZdRd/deKaCnbwnB4JMb3N05+o6eixsZ5sa6Ylxi3qNk6DB/rHUUl/QgO2t 3JJ5zp8R+iG2kTiPXciu03BXQzvoXVBORvAevuq0Comvk2e1hEXI5NyZf8Sx6SC3 0EC5HB2bYuykWJSrqvaPqUX4xWuQPIIA5x31cZ8OndgrIXRIPbGJrUVReY1x0T9Q dryWOA8OrbCrkloVlMnVK9/GnnMbFEnHI4Lo3XWZYY6BW45k6eyFWn+22tUbHZOX 3BVbsQsjLtDpXi48dPbkmNVuJnA446eFHlPSEw/vP7awb7joEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG4XAF9aqSefNmuDjP6+QDFYHRDCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvMmIxZjQ0YTQtYzg3Ni0z ZWNkLWI2YTYtMjM4OWYyNjEwZGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRQLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcuYNn3XU880BABK7l/bBMdersTOSXQWE74w1xgj3xxRUKr3RlWRswP 1dIsvQdG0uwxO7Hkgua2AgfVdz0/RJOptf2QhlMh9KuWwYDmkMyct8yYDsffXIAZ rhFA1LzrHP5llx6QFZMjjzFQsqfS3pR5VdXoBNZmoRkuBohg/6uWF+aXMLKNgHFm scrcjE+y0s6ibYyqIpHTO8kmu2r7HWh0ou0vjYSY0hZQ9u4QNj7EpQW87T8I3AdR C+SI44hzoHDw2BM91uHUFMNbWwITyL9DK38oNapnr8Wp7pWmpeKq1ZgxPUpa3+CI AHGi3BGVq+TKw0rl2dzoaKuLZ5Gg9ps= -----END CERTIFICATE-----Generated at Tue Oct 28 14:03:24 2025 by rpki-client