$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/3d8b42a3-eae4-3fe6-b365-6bf888dd670d.roa File: 3d8b42a3-eae4-3fe6-b365-6bf888dd670d.roa (raw, json) Hash identifier: 69+RZ0JPRzD4z9wo8KCi9QZRNM95hZIlsDEPoN4fFYw= Subject key identifier: 0D:C5:22:4B:94:E2:15:38:F8:A5:95:01:D2:FD:BC:97:49:5B:FE:36 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584B99D785B19CF216DDB8A66AA0 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/3d8b42a3-eae4-3fe6-b365-6bf888dd670d.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 1280 IP address blocks: 149.20.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:85:b1:9c:f2:16:dd:b8:a6:6a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=f6af5709-066e-46b6-a551-ddc60762ad79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3b:f7:c1:af:6b:8d:d5:d6:cf:e8:28:48:24: b4:b3:1c:78:f1:20:77:3c:18:e8:17:8d:cf:cc:0a: 20:93:5e:71:4c:d1:bb:a8:cd:f0:fc:e8:5b:db:9e: 28:0e:26:a5:07:7e:3e:2d:d8:b5:be:b8:35:f8:99: b1:5b:85:85:08:a8:03:81:b3:24:9c:e8:9a:fd:1a: 47:b7:b8:2a:83:d8:65:c7:6a:b5:38:40:09:a2:65: d2:3c:5b:04:df:8b:79:41:51:cd:4c:65:67:9c:b2: 04:43:a0:84:36:b4:09:71:ba:90:f9:ab:ae:c9:30: 85:67:fa:29:d9:7c:19:03:51:5e:95:42:be:07:30: 34:c4:2b:a2:54:3a:ed:16:f3:ee:09:b8:63:16:df: fc:15:e0:ae:3b:4c:89:57:94:3a:33:e0:0a:85:df: 01:18:62:48:f2:13:b6:8a:c4:47:e2:9e:f4:90:9a: b1:46:cd:2e:7f:6a:49:4b:69:36:9e:b0:cc:27:5a: 88:08:9b:9e:de:ff:4a:73:6d:a1:3f:4b:91:03:9f: 2d:68:de:04:02:3b:82:1b:e9:f7:a2:2e:bb:7c:ce: 4e:b0:91:77:54:ce:9d:f0:35:48:1f:5d:51:3c:01: 62:26:ad:21:b0:38:de:c5:e5:63:32:17:59:e3:b2: 32:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C5:22:4B:94:E2:15:38:F8:A5:95:01:D2:FD:BC:97:49:5B:FE:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/3d8b42a3-eae4-3fe6-b365-6bf888dd670d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:e6:bf:ed:7b:c1:94:ee:33:92:5d:bb:bd:8a:cc:14:99:23: 8c:13:32:90:3e:b8:3d:b1:44:ee:e3:d2:ac:65:27:5c:50:87: de:fd:45:72:cc:ba:1a:a9:6d:82:c3:ae:d7:53:bd:71:10:ce: 76:f2:2e:0b:23:04:78:df:8a:2f:02:77:22:c3:1c:9e:9a:7a: 32:9c:54:7c:7d:8b:b1:f5:b5:c6:01:7a:a6:55:04:47:4e:a9: 09:11:6e:c1:ca:1b:f4:61:1a:43:4d:2c:07:a2:e5:e8:42:2e: b6:57:06:6d:f9:51:5f:0c:a4:06:af:44:b8:06:02:45:4e:f9: db:1d:4d:06:e0:3d:5e:35:25:56:30:77:73:5c:fa:e5:e5:e5: be:35:10:5b:e4:24:9c:2a:2c:87:76:c8:b0:18:4a:af:35:93: 13:fa:6c:42:ca:4c:2f:62:0c:55:5f:29:2b:65:64:a2:22:87: d2:a4:cd:38:5b:89:16:01:4e:f0:04:01:66:1c:16:4c:41:5f: 91:9b:ee:0f:52:8f:5e:65:aa:3f:46:a0:75:1e:4b:e3:50:e8: 86:44:7b:19:22:4f:3e:8e:8f:79:b0:a7:71:17:fe:d5:83:7c: 11:91:56:a5:2a:fb:26:14:8a:e8:c3:7f:f9:cc:0a:23:4f:b0: f3:af:e2:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ14WxnPIW3bimaqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZjZhZjU3MDktMDY2ZS00NmI2LWE1NTEtZGRjNjA3NjJhZDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Dv3wa9rjdXWz+goSCS0sxx48SB3PBjoF43P zAogk15xTNG7qM3w/Ohb254oDialB34+Ldi1vrg1+JmxW4WFCKgDgbMknOia/RpH t7gqg9hlx2q1OEAJomXSPFsE34t5QVHNTGVnnLIEQ6CENrQJcbqQ+auuyTCFZ/op 2XwZA1FelUK+BzA0xCuiVDrtFvPuCbhjFt/8FeCuO0yJV5Q6M+AKhd8BGGJI8hO2 isRH4p70kJqxRs0uf2pJS2k2nrDMJ1qICJue3v9Kc22hP0uRA58taN4EAjuCG+n3 oi67fM5OsJF3VM6d8DVIH11RPAFiJq0hsDjexeVjMhdZ47IyIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA3FIkuU4hU4+KWVAdL9vJdJW/42MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvM2Q4YjQyYTMtZWFlNC0z ZmU2LWIzNjUtNmJmODg4ZGQ2NzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClRRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJXmv+17wZTuM5Jdu72KzBSZI4wTMpA+uD2xRO7j0qxlJ1xQh979RXLM uhqpbYLDrtdTvXEQznbyLgsjBHjfii8CdyLDHJ6aejKcVHx9i7H1tcYBeqZVBEdO qQkRbsHKG/RhGkNNLAei5ehCLrZXBm35UV8MpAavRLgGAkVO+dsdTQbgPV41JVYw d3Nc+uXl5b41EFvkJJwqLId2yLAYSq81kxP6bELKTC9iDFVfKStlZKIih9KkzThb iRYBTvAEAWYcFkxBX5Gb7g9Sj15lqj9GoHUeS+NQ6IZEexkiTz6Oj3mwp3EX/tWD fBGRVqUq+yYUiujDf/nMCiNPsPOv4jM= -----END CERTIFICATE-----Generated at Sun Oct 26 01:47:47 2025 by rpki-client