$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/5d732c70-b840-307e-bacd-9752a58c0f29.roa File: 5d732c70-b840-307e-bacd-9752a58c0f29.roa (raw, json) Hash identifier: GGijYVcRQDQQcyqyBY4f/tWpcfAYInIzSMolFW8p2/0= Subject key identifier: C8:AD:7C:AD:DE:36:07:62:DF:00:62:AA:13:9A:62:65:95:58:5F:AB Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584B99D7808E8075BE813F39A300 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/5d732c70-b840-307e-bacd-9752a58c0f29.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 1280 IP address blocks: 149.20.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:80:8e:80:75:be:81:3f:39:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=31eee7b6-8900-4797-b937-ba74a337ecc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ea:e4:b4:6f:35:71:48:16:2f:3e:a4:c6:13: a2:3e:06:79:8b:03:bd:de:8b:62:5e:12:b2:97:51: 46:e2:37:f2:61:5a:10:ed:e3:20:9a:9b:59:d8:4c: 0f:ee:d7:5e:41:61:34:f2:e3:96:70:e4:6d:fe:40: f3:60:e1:44:70:22:84:5f:52:e4:f1:57:8f:d8:89: b9:c9:a3:6c:ec:8e:81:c1:8e:21:f7:5d:dc:7b:e9: 64:1b:6e:48:ef:cc:60:14:da:3f:8c:a6:ad:51:8d: ce:75:ce:0f:7b:ae:d9:4b:fd:02:f1:b7:25:10:4b: 8b:71:6c:47:d2:86:ac:8c:f5:92:d5:12:4d:ec:a3: 1d:0b:9b:d2:62:34:b8:df:3d:a6:67:3d:e2:9b:cc: 14:50:ca:92:f5:ec:70:16:27:58:bd:44:fa:54:25: 58:04:58:83:86:33:b2:ec:b3:fa:ca:02:60:1e:b8: 50:ca:f0:dc:f5:03:45:41:9e:ee:84:f6:51:b1:32: 30:4c:92:22:5b:10:d3:40:b0:2e:a3:69:27:22:37: 07:5f:47:a2:c3:a9:53:5f:21:3a:ed:30:dc:9e:ca: f3:93:c2:c9:79:9c:9d:12:c3:43:1a:3d:48:df:9a: d8:58:70:83:78:0c:50:b7:b5:fa:81:82:dc:eb:ae: 53:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:AD:7C:AD:DE:36:07:62:DF:00:62:AA:13:9A:62:65:95:58:5F:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/5d732c70-b840-307e-bacd-9752a58c0f29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:b6:1e:8f:e5:e5:6a:9a:75:4f:d9:39:49:a0:9d:8f:61:29: 3a:cd:1a:65:a4:b3:a5:54:23:2c:62:d6:47:9c:e7:4f:f2:11: f0:a0:7b:95:40:b6:28:78:c4:9b:21:18:e1:de:e8:96:1f:26: 82:54:57:8d:fe:13:2b:ae:96:df:d7:08:57:31:ef:a3:8c:a8: 56:9c:f5:36:64:e3:a0:af:bf:e5:26:2a:5f:e4:ab:ce:ad:40: cc:84:b7:cc:94:42:21:de:8e:3e:dd:50:3d:d7:dc:86:ea:97: dc:dd:e4:fa:2b:08:cf:8e:98:74:a4:49:20:6f:c5:2b:35:9c: 79:17:df:2c:9c:6e:5c:f4:2c:15:64:e3:e8:01:7d:24:de:19: 00:aa:4a:5f:2b:fb:94:8c:41:de:66:d9:e2:3a:59:7b:a2:ef: 43:9c:29:4c:99:85:cc:8f:a3:80:8f:36:15:79:13:d2:56:6b: ae:76:e5:7a:ba:68:30:06:a8:6f:07:58:50:99:4f:6d:80:29: e3:c9:5b:4a:57:cf:58:e2:e8:a5:d2:da:5a:a1:a6:c7:ef:cc: 03:34:b1:24:0b:c3:37:bb:18:b7:f8:b3:8c:a2:1e:b9:ce:4c: 0b:1f:2e:be:e5:9b:0d:87:65:e0:99:ea:3c:07:fc:54:e8:36: e6:86:e1:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ14COgHW+gT85owAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MzFlZWU3YjYtODkwMC00Nzk3LWI5MzctYmE3NGEzMzdlY2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwerktG81cUgWLz6kxhOiPgZ5iwO93otiXhKy l1FG4jfyYVoQ7eMgmptZ2EwP7tdeQWE08uOWcORt/kDzYOFEcCKEX1Lk8VeP2Im5 yaNs7I6BwY4h913ce+lkG25I78xgFNo/jKatUY3Odc4Pe67ZS/0C8bclEEuLcWxH 0oasjPWS1RJN7KMdC5vSYjS43z2mZz3im8wUUMqS9exwFidYvUT6VCVYBFiDhjOy 7LP6ygJgHrhQyvDc9QNFQZ7uhPZRsTIwTJIiWxDTQLAuo2knIjcHX0eiw6lTXyE6 7TDcnsrzk8LJeZydEsNDGj1I35rYWHCDeAxQt7X6gYLc665THwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMitfK3eNgdi3wBiqhOaYmWVWF+rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvNWQ3MzJjNzAtYjg0MC0z MDdlLWJhY2QtOTc1MmE1OGMwZjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRRRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA62Ho/l5WqadU/ZOUmgnY9hKTrNGmWks6VUIyxi1kec50/yEfCge5VA tih4xJshGOHe6JYfJoJUV43+Eyuult/XCFcx76OMqFac9TZk46Cvv+UmKl/kq86t QMyEt8yUQiHejj7dUD3X3Ibql9zd5PorCM+OmHSkSSBvxSs1nHkX3yycblz0LBVk 4+gBfSTeGQCqSl8r+5SMQd5m2eI6WXui70OcKUyZhcyPo4CPNhV5E9JWa6525Xq6 aDAGqG8HWFCZT22AKePJW0pXz1ji6KXS2lqhpsfvzAM0sSQLwze7GLf4s4yiHrnO TAsfLr7lmw2HZeCZ6jwH/FToNuaG4VU= -----END CERTIFICATE-----Generated at Sun Oct 26 01:47:45 2025 by rpki-client