$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/46d58c35-f7f4-3dd1-8495-938d58077651.roa File: 46d58c35-f7f4-3dd1-8495-938d58077651.roa (raw, json) Hash identifier: dKuHfR0DLnVcWANjoJsCOSYerMaGgRfv4wRs9R9JDF8= Subject key identifier: 36:BC:BF:23:E4:B0:A9:D1:49:2A:41:54:2A:F2:F3:0B:44:04:1B:A8 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584B99D784F3E0E5A794AB173920 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/46d58c35-f7f4-3dd1-8495-938d58077651.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 1280 IP address blocks: 149.20.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:84:f3:e0:e5:a7:94:ab:17:39:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=800936d4-0e35-4842-849f-12eef4b5fcc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:25:4f:05:5f:f0:16:e4:2f:a3:3d:a3:47:33: 99:b8:e0:5b:4e:67:37:73:cb:6e:1c:b7:85:5e:4e: 58:c9:8a:aa:63:5a:89:21:d9:32:cd:a1:d6:d0:d1: 3f:41:59:46:ad:ef:68:d1:17:47:29:9c:bd:5d:d2: ba:0b:db:47:32:c8:71:79:de:92:06:47:c0:da:3f: 95:d9:19:77:b3:fa:6e:89:51:ba:db:8c:d8:30:fe: 08:f7:b8:a2:2b:b1:4a:0a:b1:c8:8e:4b:fd:64:9b: 61:91:b7:f1:d7:87:89:c6:39:f5:67:1f:63:7c:3e: 5f:8b:73:98:3f:9a:7f:14:f1:3b:49:f6:67:36:0f: 87:81:c5:11:59:b4:72:73:a0:f2:e5:6f:e9:f9:e1: 14:76:9f:55:b0:d9:28:e4:97:88:c0:ba:2a:97:1c: d6:8c:7c:b6:24:d9:bf:ee:4d:34:9c:de:da:af:5e: 32:34:3a:3c:8e:91:c5:6a:02:ff:ed:1b:32:df:59: cb:75:dc:f7:e4:cd:fb:6d:eb:72:54:fc:db:a3:92: 44:a1:65:ea:dd:46:b9:bf:b3:a6:f3:c1:ff:e6:93: b5:78:b7:7e:73:0d:2d:39:42:eb:36:f4:b1:53:0e: 4d:43:db:dd:8a:5d:f3:5b:d2:1a:ce:3e:59:07:24: 9f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:BC:BF:23:E4:B0:A9:D1:49:2A:41:54:2A:F2:F3:0B:44:04:1B:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/46d58c35-f7f4-3dd1-8495-938d58077651.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:95:f0:cc:86:2d:c2:11:41:e6:21:52:27:aa:97:b7:93:89: 0d:d2:6e:09:46:ed:29:a1:57:f8:6f:05:59:93:9a:80:9f:ad: 40:85:4d:79:09:5e:63:bf:0e:f1:b1:dc:d1:f8:ac:81:95:bb: ac:19:62:4d:2e:4a:12:7b:f2:23:98:86:e8:80:86:7d:ef:b6: 49:a8:fc:94:b1:36:04:30:c2:42:9f:41:77:ef:75:01:5f:b8: 3d:9f:94:41:b6:cb:ae:e6:9b:cc:d9:c7:0a:54:f3:39:20:a9: c3:40:41:7f:28:13:d0:66:30:28:3b:73:5f:d2:0f:ef:50:d2: 81:ff:fc:4b:01:2b:fe:15:2a:fd:4a:73:e8:32:28:73:27:1b: a0:5e:78:ab:bb:54:53:a5:d7:ec:a0:2b:82:55:c4:8e:d2:bc: 31:54:f8:49:4b:69:11:cf:fd:56:90:28:74:fe:26:78:08:66: 43:14:9b:76:10:6c:ff:0d:9f:c3:58:0d:19:1b:cc:7a:e5:a9: 61:91:22:bc:07:90:e1:63:63:fc:c0:5a:d9:c4:eb:d3:37:fc: 2d:bd:75:77:10:9c:19:4c:57:cd:0a:fe:fb:6d:c2:65:73:9a: 74:24:80:3f:8c:f6:90:cc:e9:8b:16:70:bc:89:62:12:e0:12: bc:18:9e:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ14Tz4OWnlKsXOSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ODAwOTM2ZDQtMGUzNS00ODQyLTg0OWYtMTJlZWY0YjVmY2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCVPBV/wFuQvoz2jRzOZuOBbTmc3c8tuHLeF Xk5YyYqqY1qJIdkyzaHW0NE/QVlGre9o0RdHKZy9XdK6C9tHMshxed6SBkfA2j+V 2Rl3s/puiVG624zYMP4I97iiK7FKCrHIjkv9ZJthkbfx14eJxjn1Zx9jfD5fi3OY P5p/FPE7SfZnNg+HgcURWbRyc6Dy5W/p+eEUdp9VsNko5JeIwLoqlxzWjHy2JNm/ 7k00nN7ar14yNDo8jpHFagL/7Rsy31nLddz35M37betyVPzbo5JEoWXq3Ua5v7Om 88H/5pO1eLd+cw0tOULrNvSxUw5NQ9vdil3zW9Iazj5ZBySfmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDa8vyPksKnRSSpBVCry8wtEBBuoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvNDZkNThjMzUtZjdmNC0z ZGQxLTg0OTUtOTM4ZDU4MDc3NjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRQIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABeV8MyGLcIRQeYhUieql7eTiQ3SbglG7SmhV/hvBVmTmoCfrUCFTXkJ XmO/DvGx3NH4rIGVu6wZYk0uShJ78iOYhuiAhn3vtkmo/JSxNgQwwkKfQXfvdQFf uD2flEG2y67mm8zZxwpU8zkgqcNAQX8oE9BmMCg7c1/SD+9Q0oH//EsBK/4VKv1K c+gyKHMnG6BeeKu7VFOl1+ygK4JVxI7SvDFU+ElLaRHP/VaQKHT+JngIZkMUm3YQ bP8Nn8NYDRkbzHrlqWGRIrwHkOFjY/zAWtnE69M3/C29dXcQnBlMV80K/vttwmVz mnQkgD+M9pDM6YsWcLyJYhLgErwYnm4= -----END CERTIFICATE-----Generated at Sun Oct 26 01:49:51 2025 by rpki-client