$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/4c4c9fac-6d7d-375f-93e9-b348075a4662.roa File: 4c4c9fac-6d7d-375f-93e9-b348075a4662.roa (raw, json) Hash identifier: P1OVp9OYwdhBztdjEVtzkbrf7m+dsjCJXqzW5piauc0= Subject key identifier: 49:58:51:65:AB:66:3B:C5:87:3E:EA:82:21:22:DA:86:13:56:E6:57 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584B99D78A1D84704B770F37A420 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/4c4c9fac-6d7d-375f-93e9-b348075a4662.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 1280 IP address blocks: 149.20.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:8a:1d:84:70:4b:77:0f:37:a4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=ee87ae1e-616e-4011-a3b3-c35645cceb03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:50:05:63:d5:b4:f9:bb:09:5c:c2:13:cd:59: ea:ee:d7:8b:45:18:6d:42:de:74:af:5a:8c:f4:1e: d7:e4:87:4d:f3:bc:fc:6f:bf:8c:a8:07:d8:68:4a: 54:f3:98:3e:2a:8f:8c:01:ee:db:99:de:da:b5:89: 09:9e:c7:80:23:ea:c5:b9:6d:2c:5e:ec:d3:fd:c6: 56:14:fc:c3:bf:bb:2d:8f:47:e2:4a:b5:73:1a:05: 77:4c:ad:35:9b:ef:d0:83:58:43:9d:ae:8b:b5:aa: f5:95:57:3e:87:ec:ff:46:70:1e:44:94:b7:17:cc: 9e:cd:e0:bc:0c:2d:dd:da:fc:d2:02:02:d4:f4:9c: 8b:f1:84:7e:ca:7d:dd:78:79:8c:bd:6e:16:ff:03: a3:3a:25:01:a4:f4:44:a6:ee:c4:d5:e7:53:ee:d7: de:d8:53:50:40:ec:e4:e2:de:b3:9b:2c:5a:fb:24: 55:8e:f9:45:d5:31:c4:96:f8:63:3e:55:8a:fb:27: 8e:f8:69:04:6c:bb:b0:1b:83:a7:a1:f1:2c:50:7c: ee:1e:3c:2e:8d:f8:21:bf:b0:65:f3:b1:20:fc:9e: 59:90:b7:a8:93:05:92:a5:f3:8c:ad:84:cd:31:55: 8e:d3:c5:e2:df:54:89:5b:3d:c0:7c:9c:7b:3a:2b: b0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:58:51:65:AB:66:3B:C5:87:3E:EA:82:21:22:DA:86:13:56:E6:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/4c4c9fac-6d7d-375f-93e9-b348075a4662.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:44:c6:5c:ad:21:44:36:f8:d3:2c:d7:a0:9f:0d:0b:bb:44: d2:ba:25:92:ef:46:2b:87:5c:71:74:8e:77:ab:9d:14:3e:fb: f1:2e:62:a2:0c:c6:c4:ad:2e:81:6b:33:c3:53:b6:dd:fd:05: e4:50:b8:5c:96:ad:e1:68:7e:da:82:f5:59:f9:6a:3c:81:ae: b4:f2:af:ae:40:e2:06:30:ed:f5:df:0b:91:11:93:84:0f:e6: fc:72:3e:27:bf:9e:92:ba:f4:d3:d7:8d:16:c4:e8:ac:1d:98: ba:47:f2:3f:b1:e4:29:42:53:95:ab:a0:b1:b8:da:10:80:c7: 1f:4c:cb:dc:aa:a6:a5:48:81:69:3f:ef:4b:d9:84:4a:f7:15: 70:6a:a6:ef:20:16:4a:22:35:f6:37:22:53:e6:95:ab:9f:dc: 21:86:43:c0:6f:73:ae:d7:fd:55:54:c5:95:8d:7f:c5:be:ff: 09:6d:1d:49:3b:43:b1:f5:3b:c2:ac:48:14:c3:00:e1:22:92: 0a:1c:4e:ca:26:e9:90:08:65:f4:89:ad:e0:4d:10:d2:4f:ab: fa:19:cb:09:c8:76:bc:10:03:57:05:ae:47:08:33:c7:6c:d6: 3b:8b:ab:db:42:8d:8d:1b:46:7f:31:76:07:d7:99:9a:e3:10: 5a:19:fd:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ14odhHBLdw83pCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZWU4N2FlMWUtNjE2ZS00MDExLWEzYjMtYzM1NjQ1Y2NlYjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA71AFY9W0+bsJXMITzVnq7teLRRhtQt50r1qM 9B7X5IdN87z8b7+MqAfYaEpU85g+Ko+MAe7bmd7atYkJnseAI+rFuW0sXuzT/cZW FPzDv7stj0fiSrVzGgV3TK01m+/Qg1hDna6Ltar1lVc+h+z/RnAeRJS3F8yezeC8 DC3d2vzSAgLU9JyL8YR+yn3deHmMvW4W/wOjOiUBpPREpu7E1edT7tfe2FNQQOzk 4t6zmyxa+yRVjvlF1THElvhjPlWK+yeO+GkEbLuwG4OnofEsUHzuHjwujfghv7Bl 87Eg/J5ZkLeokwWSpfOMrYTNMVWO08Xi31SJWz3AfJx7OiuwgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElYUWWrZjvFhz7qgiEi2oYTVuZXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvNGM0YzlmYWMtNmQ3ZC0z NzVmLTkzZTktYjM0ODA3NWE0NjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRRUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9ExlytIUQ2+NMs16CfDQu7RNK6JZLvRiuHXHF0jnernRQ++/EuYqIM xsStLoFrM8NTtt39BeRQuFyWreFoftqC9Vn5ajyBrrTyr65A4gYw7fXfC5ERk4QP 5vxyPie/npK69NPXjRbE6KwdmLpH8j+x5ClCU5WroLG42hCAxx9My9yqpqVIgWk/ 70vZhEr3FXBqpu8gFkoiNfY3IlPmlauf3CGGQ8Bvc67X/VVUxZWNf8W+/wltHUk7 Q7H1O8KsSBTDAOEikgocTsom6ZAIZfSJreBNENJPq/oZywnIdrwQA1cFrkcIM8ds 1juLq9tCjY0bRn8xdgfXmZrjEFoZ/ew= -----END CERTIFICATE-----Generated at Sun Oct 26 01:49:59 2025 by rpki-client