$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/800c5f2d-1ef2-3519-8a82-3303d1e0c2db.roa File: 800c5f2d-1ef2-3519-8a82-3303d1e0c2db.roa (raw, json) Hash identifier: MeAU3iq1pOuqUdY70o62ky2dPGheRcFacvaASj4mnas= Subject key identifier: 15:B5:57:9F:92:43:9A:23:2D:DA:80:65:A1:09:DD:9D:0A:D0:30:AB Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584B5141B7561930E9F6220F29C0 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/800c5f2d-1ef2-3519-8a82-3303d1e0c2db.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 27321 IP address blocks: 149.20.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:b7:56:19:30:e9:f6:22:0f:29:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=c3375258-1843-431b-8ef4-968e11164c19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8a:0f:4e:1d:aa:46:07:b3:38:a7:e5:c9:7f: 4a:eb:bc:7f:3b:45:fd:8a:bb:56:f6:b8:89:99:25: c0:60:71:17:47:6c:d3:17:e3:65:1f:1b:71:d5:ae: 7c:72:85:60:42:04:b3:05:35:d7:e4:ab:56:11:62: 74:db:81:e5:15:0a:d0:ac:6d:e7:47:f5:7e:c9:58: 9d:24:f1:2d:5e:b5:84:e3:3a:e6:4c:fc:06:7e:65: 7a:45:06:cb:41:ee:f0:be:96:e6:7d:fe:d3:22:88: 56:ff:f6:48:25:b5:d3:0c:d4:c0:67:08:1e:ae:54: fb:24:5e:9c:e3:d0:e8:43:36:e1:ee:b7:86:a7:25: 70:d3:0c:1e:42:49:23:1d:6b:cb:01:05:a1:c9:bf: 0f:82:cf:b2:92:79:8d:75:fd:e3:a5:aa:f2:ab:74: 0d:2d:e5:ca:0f:f5:da:0e:5f:58:b0:d9:ca:03:8b: 85:e8:2e:7e:2e:51:6e:70:f3:ed:1e:5c:cf:2a:26: 11:f8:fa:70:24:ff:ce:6b:a4:3d:63:a9:86:06:32: af:e5:c5:ff:8f:ee:20:0a:24:b4:e4:1a:37:66:ea: dc:b7:90:ac:e0:8a:f4:6c:50:bb:f2:c5:66:ce:01: 6c:ae:31:12:3e:e6:e5:a3:b2:a3:ad:25:88:24:ac: 72:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:B5:57:9F:92:43:9A:23:2D:DA:80:65:A1:09:DD:9D:0A:D0:30:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/800c5f2d-1ef2-3519-8a82-3303d1e0c2db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:da:9b:f9:ab:44:90:0d:20:c8:f3:14:f5:64:9a:85:1b:60: 20:e5:b0:30:8e:04:d5:70:70:24:69:70:d2:34:3b:c1:bb:7d: 4e:54:28:87:47:01:5c:f9:d8:54:91:f5:37:b0:51:57:2f:a9: 1e:c3:7e:a1:6b:ee:a1:97:40:c4:29:8e:a9:9a:ef:61:03:6b: 2b:2e:fb:ce:20:f0:b6:22:1a:bd:31:02:d0:56:af:7e:98:8e: f0:11:00:47:8d:e8:fe:75:18:4f:aa:07:fb:96:7d:89:e0:e7: 13:06:09:5a:8e:08:35:4d:83:ac:b9:d4:fd:49:e9:3d:dd:3d: 15:7c:ed:cd:2c:4c:46:0e:23:14:e7:e5:90:f3:8e:66:b6:b6: 89:52:c7:0f:e5:cc:a7:37:5b:c9:88:dc:21:e8:4a:3f:f0:29: 32:47:f8:b0:23:ef:38:40:fd:65:a0:52:dd:8f:80:53:15:e2: dc:83:68:d3:db:4e:2c:71:ee:a0:f8:f2:de:2a:d3:b3:3f:f8: 8a:4b:ab:48:b7:82:a7:d8:f0:c0:a7:e0:0c:77:0c:21:c8:fb: e0:b4:02:a3:17:8a:54:95:17:5c:6b:41:bb:a7:8a:59:57:66: 6c:6b:45:3f:d6:34:83:e9:e9:6a:9f:4c:21:43:73:1e:e8:7e: 1f:e2:1b:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQbdWGTDp9iIPKcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk YzMzNzUyNTgtMTg0My00MzFiLThlZjQtOTY4ZTExMTY0YzE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIoPTh2qRgezOKflyX9K67x/O0X9irtW9riJ mSXAYHEXR2zTF+NlHxtx1a58coVgQgSzBTXX5KtWEWJ024HlFQrQrG3nR/V+yVid JPEtXrWE4zrmTPwGfmV6RQbLQe7wvpbmff7TIohW//ZIJbXTDNTAZwgerlT7JF6c 49DoQzbh7reGpyVw0wweQkkjHWvLAQWhyb8Pgs+yknmNdf3jparyq3QNLeXKD/Xa Dl9YsNnKA4uF6C5+LlFucPPtHlzPKiYR+PpwJP/Oa6Q9Y6mGBjKv5cX/j+4gCiS0 5Bo3Zurct5Cs4Ir0bFC78sVmzgFsrjESPublo7KjrSWIJKxyywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBW1V5+SQ5ojLdqAZaEJ3Z0K0DCrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvODAwYzVmMmQtMWVmMi0z NTE5LThhODItMzMwM2QxZTBjMmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRQCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/am/mrRJANIMjzFPVkmoUbYCDlsDCOBNVwcCRpcNI0O8G7fU5UKIdH AVz52FSR9TewUVcvqR7DfqFr7qGXQMQpjqma72EDaysu+84g8LYiGr0xAtBWr36Y jvARAEeN6P51GE+qB/uWfYng5xMGCVqOCDVNg6y51P1J6T3dPRV87c0sTEYOIxTn 5ZDzjma2tolSxw/lzKc3W8mI3CHoSj/wKTJH+LAj7zhA/WWgUt2PgFMV4tyDaNPb Tixx7qD48t4q07M/+IpLq0i3gqfY8MCn4Ax3DCHI++C0AqMXilSVF1xrQbunillX ZmxrRT/WNIPp6WqfTCFDcx7ofh/iG0w= -----END CERTIFICATE-----Generated at Tue Oct 28 02:28:04 2025 by rpki-client