$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/8291b825-526c-3dc2-ba9f-af6d7f6607fb.roa File: 8291b825-526c-3dc2-ba9f-af6d7f6607fb.roa (raw, json) Hash identifier: ApB+j6cTvAB2304tEL+x7TTMVb46chjJOfjxvtLZbjI= Subject key identifier: 77:BF:A4:A8:C0:ED:07:9F:F6:C5:0E:9B:D3:2C:2D:65:48:4D:5D:C8 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584B99D7809FD6C7927B52AB5F00 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/8291b825-526c-3dc2-ba9f-af6d7f6607fb.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 1280 IP address blocks: 149.20.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:80:9f:d6:c7:92:7b:52:ab:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=75caf946-a3b6-482e-9601-48f0ac692d08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e7:fd:29:66:9a:63:1a:e4:af:4a:4f:07:71: e1:f9:00:28:00:54:f2:36:f7:cd:0d:cb:3c:a3:0d: e6:bb:77:be:6b:a9:1e:52:d2:f7:eb:c6:88:0d:18: ac:b0:6a:75:13:42:c4:5d:48:7c:8a:a0:f2:86:2b: 25:7c:55:ef:92:36:13:ec:05:c3:0b:0f:24:7d:6a: fe:f0:79:6f:5d:e7:be:ff:2f:d9:ec:3d:9f:33:c6: bf:f6:02:74:10:df:5a:18:21:0e:4f:b1:03:d2:28: ac:97:e2:61:61:29:b7:a5:49:a5:81:5d:65:fb:68: f2:6b:ed:0f:10:58:30:96:8d:88:6f:bd:19:85:52: ee:e2:b4:14:4b:7f:ec:44:96:ca:07:47:27:b3:c9: b5:07:45:89:1f:b4:46:ae:b3:c1:cf:99:70:8f:12: 00:1d:ac:01:2b:bb:cd:0b:8a:96:e0:bd:69:c9:c0: cc:05:96:92:ae:d1:f4:74:75:b2:ee:86:40:24:08: c1:d0:f3:70:c7:a1:ae:00:73:af:45:dc:11:0b:06: cf:fe:e9:26:1c:d4:92:88:ae:de:c6:5e:39:e0:db: 75:fe:73:91:e6:56:33:fd:db:a8:86:f8:08:46:b1: bf:c6:19:22:28:aa:8c:ca:ad:c3:28:69:90:d2:7e: 24:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:BF:A4:A8:C0:ED:07:9F:F6:C5:0E:9B:D3:2C:2D:65:48:4D:5D:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/8291b825-526c-3dc2-ba9f-af6d7f6607fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:a0:f4:57:91:c3:c3:42:84:1a:e3:57:c6:23:61:7d:bc:a8: ae:80:dd:bd:bf:6c:06:51:71:13:a0:09:f5:25:71:34:05:b2: 82:5b:c3:3f:3e:0c:df:72:f1:52:b4:6c:af:8d:0f:54:0e:d5: d9:c0:00:ce:22:7d:18:66:85:43:45:3b:5f:3d:dc:81:03:30: 57:cb:1e:b9:f1:d6:27:f4:07:e6:19:0d:88:44:c8:27:df:9a: 8a:70:dc:a0:ea:f0:8a:5c:68:f8:61:da:2b:d6:49:7f:e4:f4: 1b:f7:ce:2a:2c:a9:2b:a7:e5:b9:93:35:32:db:fd:db:74:97: 74:36:cf:05:c2:48:b1:3b:53:68:16:f0:7f:39:b6:39:45:04: 87:b8:a9:72:80:ea:51:90:fe:10:1b:11:ef:a6:6b:82:88:75: 52:a7:87:99:fe:59:91:2a:02:bd:db:7b:cd:5c:27:fd:c7:94: 8e:db:4d:16:3e:b0:0c:e0:54:c2:fe:45:2b:6f:91:09:3e:b9: 03:92:9e:db:b7:ce:7d:f4:04:30:3b:05:77:3e:d8:f0:13:c5: 7b:7c:18:f8:10:08:d0:e0:f4:18:52:65:ac:5a:91:94:fe:f1: e8:ae:d5:10:da:4d:22:55:3d:db:f7:60:00:8d:82:1b:17:f0: 36:4f:e9:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ14Cf1seSe1KrXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NzVjYWY5NDYtYTNiNi00ODJlLTk2MDEtNDhmMGFjNjkyZDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+f9KWaaYxrkr0pPB3Hh+QAoAFTyNvfNDcs8 ow3mu3e+a6keUtL368aIDRissGp1E0LEXUh8iqDyhislfFXvkjYT7AXDCw8kfWr+ 8HlvXee+/y/Z7D2fM8a/9gJ0EN9aGCEOT7ED0iisl+JhYSm3pUmlgV1l+2jya+0P EFgwlo2Ib70ZhVLu4rQUS3/sRJbKB0cns8m1B0WJH7RGrrPBz5lwjxIAHawBK7vN C4qW4L1pycDMBZaSrtH0dHWy7oZAJAjB0PNwx6GuAHOvRdwRCwbP/ukmHNSSiK7e xl454Nt1/nOR5lYz/duohvgIRrG/xhkiKKqMyq3DKGmQ0n4k5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHe/pKjA7Qef9sUOm9MsLWVITV3IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvODI5MWI4MjUtNTI2Yy0z ZGMyLWJhOWYtYWY2ZDdmNjYwN2ZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRQ8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADag9FeRw8NChBrjV8YjYX28qK6A3b2/bAZRcROgCfUlcTQFsoJbwz8+ DN9y8VK0bK+ND1QO1dnAAM4ifRhmhUNFO1893IEDMFfLHrnx1if0B+YZDYhEyCff mopw3KDq8IpcaPhh2ivWSX/k9Bv3ziosqSun5bmTNTLb/dt0l3Q2zwXCSLE7U2gW 8H85tjlFBIe4qXKA6lGQ/hAbEe+ma4KIdVKnh5n+WZEqAr3be81cJ/3HlI7bTRY+ sAzgVML+RStvkQk+uQOSntu3zn30BDA7BXc+2PATxXt8GPgQCNDg9BhSZaxakZT+ 8eiu1RDaTSJVPdv3YACNghsX8DZP6XM= -----END CERTIFICATE-----Generated at Sun Oct 26 01:47:43 2025 by rpki-client