$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/45d41f15-8492-3fc0-95d1-32224912a7f9.roa File: 45d41f15-8492-3fc0-95d1-32224912a7f9.roa (raw, json) Hash identifier: kGbA4ETU0C5uo8s0NNGS2yRuIanho8Ro615Q/Ld18gc= Subject key identifier: 71:74:79:7A:3B:68:54:B3:D2:C7:5F:C7:D8:49:1B:F7:45:0F:18:53 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584B99D77CFF3EEA91CD8F303080 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/45d41f15-8492-3fc0-95d1-32224912a7f9.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 1280 IP address blocks: 149.20.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:7c:ff:3e:ea:91:cd:8f:30:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=bd5e9bdc-f5cd-465a-b065-05befabc997d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:36:ea:de:a0:67:d1:a6:94:f7:c7:36:7b:90: 9f:84:57:e2:aa:ca:24:5d:d6:49:dc:01:d6:f1:58: f5:51:04:f6:ed:b0:8c:a0:31:dc:ff:87:05:f3:d8: 2c:dd:b2:f0:8e:be:f7:b5:f7:29:8a:42:45:e4:b2: 32:81:04:7c:c8:8f:16:d0:88:c8:df:30:55:e2:85: a4:02:dc:64:79:99:65:f6:b2:1b:30:5f:68:7c:00: e1:66:e4:c5:f4:4a:59:39:75:aa:d9:63:72:a7:fd: 1b:62:7f:93:09:4b:a4:19:b0:3f:d2:61:5a:00:f3: 80:9c:63:d4:38:3f:45:29:96:2c:c1:ca:2a:9f:fc: f8:e0:56:62:dc:06:2a:31:a6:05:8f:58:3f:50:8f: 93:50:1e:5e:bf:f4:4e:81:3c:8a:dc:a5:ab:43:1d: ec:26:b8:07:4d:c0:23:8f:c2:75:f9:c1:65:de:01: 11:80:65:ac:2e:b5:21:d0:90:a5:b5:d4:93:d9:af: 7c:24:61:e0:d5:97:40:6b:09:c0:9c:0d:1f:ef:ef: 2d:2e:29:b7:aa:a1:52:ea:e9:bb:31:84:19:68:ca: 4d:a0:f3:c0:59:3b:06:04:a9:f8:f2:d2:d6:79:91: 79:25:71:ca:61:32:5d:6f:f2:d0:3d:5a:92:76:ba: 8c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:74:79:7A:3B:68:54:B3:D2:C7:5F:C7:D8:49:1B:F7:45:0F:18:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/45d41f15-8492-3fc0-95d1-32224912a7f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:41:9f:3d:3c:ff:1d:3c:a6:ed:cb:d0:03:72:90:bf:a1:4a: eb:5c:d6:c1:6d:f8:5e:e0:89:d3:c5:7b:66:3d:17:0e:63:04: 50:7d:49:cc:85:e2:1f:b1:d2:f3:cb:4c:05:37:a2:88:95:19: 95:ae:fd:e5:29:a7:99:4b:fa:40:37:33:f6:0f:ae:5d:f4:03: 3e:d6:83:69:b3:4e:82:91:14:7f:09:25:8a:3a:36:58:6a:23: 8d:ad:df:45:cd:40:6e:de:73:64:2a:92:bf:34:2e:c4:16:a6: 0b:b5:53:5f:24:e4:aa:a1:2a:37:be:e3:87:50:8b:81:37:77: 43:79:f5:23:8f:4a:db:f4:70:9e:fb:03:da:4b:66:a9:8e:4b: 2d:c2:d2:5b:58:30:ba:0d:98:80:e9:de:e7:65:9f:df:eb:76: cd:d7:a6:a1:6f:c0:a7:13:ac:84:6b:a5:be:d4:89:56:b6:c2: 20:ec:cc:15:0d:99:ce:61:5e:a5:a6:6e:6f:04:ed:51:ae:0f: 9b:66:99:46:cd:f6:75:32:8a:1c:66:70:19:f5:1a:b0:ef:7c: cb:6d:42:de:71:1b:9e:38:d5:be:93:5a:5a:01:21:d2:87:73: 30:cb:45:d5:59:72:14:66:42:71:11:19:3a:a3:e3:f3:56:b3: 5f:a3:4b:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ13z/PuqRzY8wMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk YmQ1ZTliZGMtZjVjZC00NjVhLWIwNjUtMDViZWZhYmM5OTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszbq3qBn0aaU98c2e5CfhFfiqsokXdZJ3AHW 8Vj1UQT27bCMoDHc/4cF89gs3bLwjr73tfcpikJF5LIygQR8yI8W0IjI3zBV4oWk AtxkeZll9rIbMF9ofADhZuTF9EpZOXWq2WNyp/0bYn+TCUukGbA/0mFaAPOAnGPU OD9FKZYswcoqn/z44FZi3AYqMaYFj1g/UI+TUB5ev/ROgTyK3KWrQx3sJrgHTcAj j8J1+cFl3gERgGWsLrUh0JCltdST2a98JGHg1ZdAawnAnA0f7+8tLim3qqFS6um7 MYQZaMpNoPPAWTsGBKn48tLWeZF5JXHKYTJdb/LQPVqSdrqMbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHF0eXo7aFSz0sdfx9hJG/dFDxhTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvNDVkNDFmMTUtODQ5Mi0z ZmMwLTk1ZDEtMzIyMjQ5MTJhN2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlRRIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9Bnz08/x08pu3L0ANykL+hSutc1sFt+F7gidPFe2Y9Fw5jBFB9ScyF 4h+x0vPLTAU3ooiVGZWu/eUpp5lL+kA3M/YPrl30Az7Wg2mzToKRFH8JJYo6Nlhq I42t30XNQG7ec2Qqkr80LsQWpgu1U18k5KqhKje+44dQi4E3d0N59SOPStv0cJ77 A9pLZqmOSy3C0ltYMLoNmIDp3udln9/rds3XpqFvwKcTrIRrpb7UiVa2wiDszBUN mc5hXqWmbm8E7VGuD5tmmUbN9nUyihxmcBn1GrDvfMttQt5xG5441b6TWloBIdKH czDLRdVZchRmQnERGTqj4/NWs1+jS60= -----END CERTIFICATE-----Generated at Sun Oct 26 01:47:39 2025 by rpki-client