$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/774a050a-18b3-390e-8bca-f3119f67dd8a.roa File: 774a050a-18b3-390e-8bca-f3119f67dd8a.roa (raw, json) Hash identifier: O5+5hhZ+tZgP9j74YnBXw9/iFh0bxhZYTRQ/25zy9dk= Subject key identifier: 5D:CA:45:F9:BB:1A:18:4C:2D:C7:B0:E4:BB:74:CB:46:5C:34:62:C6 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584B99D78065502B184FD31C9C00 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/774a050a-18b3-390e-8bca-f3119f67dd8a.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 1280 IP address blocks: 149.20.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:80:65:50:2b:18:4f:d3:1c:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=f68d4f39-5083-499a-9aa3-846eaece3ff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:40:60:e5:83:43:4e:be:f7:85:65:bf:cd:bc: 2b:b7:fe:95:48:a2:ce:e6:47:e7:82:ad:2a:16:33: 60:10:df:dc:bf:fc:af:10:fe:10:32:d0:40:21:4e: d3:a2:d2:27:e7:6c:07:3c:f9:e9:99:ad:e5:5c:d8: 9e:ec:4e:b1:8e:a4:5c:50:3e:46:c9:0a:5a:42:87: 51:0c:be:b3:10:8e:6e:30:5c:21:e6:2c:f3:02:29: 7e:95:0a:2b:52:82:03:5f:e6:c2:a5:59:35:64:b6: 06:b7:85:79:2e:a8:06:25:73:eb:0a:63:b1:f5:cb: 38:a0:86:68:a6:1b:ff:b9:15:55:4e:5d:dc:dd:e0: 70:e8:7a:d5:2c:80:c7:cf:b1:a7:91:82:11:65:22: 97:22:64:d4:ed:31:c0:0f:07:8e:de:28:1a:56:5a: 77:2a:61:35:33:1e:56:92:bd:57:a0:a7:51:fc:16: 8f:64:a2:4a:4f:7a:ef:3a:37:af:a4:87:0b:06:6f: 90:08:92:b6:d1:f6:89:27:3c:f3:ae:fb:1b:42:a1: 8a:81:0d:d0:1a:f2:58:e9:92:8b:37:0d:3b:f9:be: 1f:14:b8:8c:cb:92:4d:d9:83:40:17:d5:41:19:43: f2:fc:43:cd:ee:45:1f:c2:65:9f:41:3d:d4:94:76: 4d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:CA:45:F9:BB:1A:18:4C:2D:C7:B0:E4:BB:74:CB:46:5C:34:62:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/774a050a-18b3-390e-8bca-f3119f67dd8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:be:27:d3:3a:30:42:c6:73:af:3a:75:8e:ef:20:86:e3:bf: de:7f:77:21:ab:09:90:a9:d4:56:6e:06:38:58:09:80:f5:e4: b0:cf:8d:e8:9e:59:02:a6:f1:be:4d:f0:67:d6:24:78:37:13: a1:c4:ff:a5:3a:49:0b:bd:dd:43:3b:41:ad:aa:ef:7c:ca:9d: ab:e4:3d:f8:3e:e5:f1:e5:25:35:e5:dd:d9:38:ad:5b:82:93: d9:f9:32:55:5c:fa:56:1d:70:49:13:15:46:ce:0b:2a:c7:34: 8d:96:41:26:b2:bf:18:e9:dc:b8:83:fc:d4:88:4b:86:bf:c5: 33:de:6c:bb:9b:5e:83:57:1b:f8:24:96:e9:65:72:5a:98:e3: 62:56:c3:f7:aa:38:b4:d9:1a:2e:fb:65:38:31:6a:54:bc:7b: d8:60:e7:45:4d:4d:01:19:e1:eb:b1:01:69:6b:96:2e:64:7c: ac:1b:85:d8:b9:7a:cc:45:a7:fc:57:c7:40:df:e7:3e:7a:83: d2:37:01:8e:3a:8c:43:d4:0b:37:e3:a2:04:2d:d7:30:fe:b8: 63:44:80:6f:c4:f0:fe:26:c0:a2:5a:1c:40:b1:ee:a4:03:47: 68:c6:a7:7b:33:e8:fa:6a:23:8f:20:bb:57:df:81:b7:2d:95: 34:67:d2:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ14BlUCsYT9McnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZjY4ZDRmMzktNTA4My00OTlhLTlhYTMtODQ2ZWFlY2UzZmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0Bg5YNDTr73hWW/zbwrt/6VSKLO5kfngq0q FjNgEN/cv/yvEP4QMtBAIU7TotIn52wHPPnpma3lXNie7E6xjqRcUD5GyQpaQodR DL6zEI5uMFwh5izzAil+lQorUoIDX+bCpVk1ZLYGt4V5LqgGJXPrCmOx9cs4oIZo phv/uRVVTl3c3eBw6HrVLIDHz7GnkYIRZSKXImTU7THADweO3igaVlp3KmE1Mx5W kr1XoKdR/BaPZKJKT3rvOjevpIcLBm+QCJK20faJJzzzrvsbQqGKgQ3QGvJY6ZKL Nw07+b4fFLiMy5JN2YNAF9VBGUPy/EPN7kUfwmWfQT3UlHZN4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3KRfm7GhhMLcew5Lt0y0ZcNGLGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvNzc0YTA1MGEtMThiMy0z OTBlLThiY2EtZjMxMTlmNjdkZDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRRWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACy+J9M6MELGc686dY7vIIbjv95/dyGrCZCp1FZuBjhYCYD15LDPjeie WQKm8b5N8GfWJHg3E6HE/6U6SQu93UM7Qa2q73zKnavkPfg+5fHlJTXl3dk4rVuC k9n5MlVc+lYdcEkTFUbOCyrHNI2WQSayvxjp3LiD/NSIS4a/xTPebLubXoNXG/gk lullclqY42JWw/eqOLTZGi77ZTgxalS8e9hg50VNTQEZ4euxAWlrli5kfKwbhdi5 esxFp/xXx0Df5z56g9I3AY46jEPUCzfjogQt1zD+uGNEgG/E8P4mwKJaHECx7qQD R2jGp3sz6PpqI48gu1ffgbctlTRn0vk= -----END CERTIFICATE-----Generated at Sun Oct 26 01:49:55 2025 by rpki-client