$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d9dadca9-e1ce-3069-b7ea-dd090ba66171.roa File: d9dadca9-e1ce-3069-b7ea-dd090ba66171.roa (raw, json) Hash identifier: Qkv6s6EbVBmtCicc0yxSn8DA/hXOs3xHe2bngSYxIj0= Subject key identifier: F2:17:9D:AC:63:83:E8:49:17:93:14:E9:C4:DE:49:69:08:18:9E:D5 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584AF521309722FA063591A8E980 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d9dadca9-e1ce-3069-b7ea-dd090ba66171.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 30132 IP address blocks: 149.20.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:30:97:22:fa:06:35:91:a8:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=c42ae49b-490b-4e11-8882-5422d5230c2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:83:68:df:a6:93:f5:83:6c:d0:60:7b:e6:02: 1a:bc:80:2d:c8:b4:8c:5f:a1:9d:2e:31:a9:d5:52: 34:35:91:de:ba:44:c2:d1:7e:c6:8b:09:20:69:fa: 67:67:91:d0:9c:eb:5f:22:9e:aa:2a:46:f6:55:37: d5:e9:f9:ff:bd:ea:58:04:2b:a4:5a:f9:ab:34:36: 56:79:c7:77:59:09:85:6b:35:2a:08:f7:04:e0:d2: 26:a6:b2:6f:70:03:a0:8f:7a:08:70:c0:0a:a2:e8: b6:3d:c5:62:62:1a:87:e9:ff:04:58:20:d0:67:5a: e0:c1:cd:49:42:6d:44:45:3a:40:ac:44:93:5f:82: 52:cc:ed:14:cb:67:2b:f5:c8:3a:fe:06:a0:32:cc: bc:3d:42:9b:c6:44:0f:7b:bf:4a:d6:4a:6c:9f:72: c1:8f:b6:1d:63:c5:db:ab:df:f4:ea:b2:7d:30:68: 04:21:e5:23:1f:f5:b4:c9:a1:a0:92:eb:47:9f:81: 62:59:5d:b6:01:d3:1e:95:90:e1:43:31:a4:06:7c: 61:c2:50:0d:65:75:f0:90:f2:65:80:5e:04:22:7d: be:b1:24:4b:2f:7e:a6:66:fa:c5:4a:61:fc:c8:d1: 17:98:24:e1:63:72:42:fb:e7:f7:47:cf:06:be:05: a6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:17:9D:AC:63:83:E8:49:17:93:14:E9:C4:DE:49:69:08:18:9E:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d9dadca9-e1ce-3069-b7ea-dd090ba66171.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:49:00:82:c1:fc:c3:e5:f6:27:0d:99:9c:b5:59:a4:d1:a0: fa:a6:fd:dc:ef:ee:18:33:62:99:eb:55:76:91:e1:a3:ac:0e: 89:3e:52:b7:4f:56:17:30:12:34:97:84:73:93:f1:93:c2:7d: 97:97:d7:c7:47:62:f2:3f:3c:c5:58:00:db:09:04:db:47:9b: a6:30:42:1c:b7:70:c4:43:4a:b8:ec:6b:2a:79:36:11:f4:4c: fb:9e:49:8e:30:03:67:04:70:0a:63:ce:ad:f5:f8:83:f4:72: 5c:5d:21:8d:e6:ab:9b:ab:ee:a5:8e:0b:37:8e:78:24:b9:82: ef:87:dc:37:cf:69:d6:eb:e1:fd:76:40:f5:f7:e0:d4:bd:a8: 4b:34:d4:2a:72:a9:8c:49:6a:d0:65:14:37:87:ec:39:d2:2d: e8:ad:64:2c:8e:c5:7d:18:79:ff:fd:d7:81:6c:70:b1:55:94: ad:5a:c5:91:5e:48:ce:dc:37:b2:26:b4:52:28:14:1c:68:ae: 9e:fc:f9:47:ae:06:39:db:b3:29:fe:b0:6d:eb:9b:a8:93:8a: b9:f2:59:87:07:54:8f:35:ab:2a:48:51:1f:03:63:5c:d3:2e: 5d:f0:a0:3d:c5:73:03:22:83:5a:a0:d4:ce:9f:94:f1:90:40: c2:94:a3:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1ITCXIvoGNZGo6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk YzQyYWU0OWItNDkwYi00ZTExLTg4ODItNTQyMmQ1MjMwYzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApINo36aT9YNs0GB75gIavIAtyLSMX6GdLjGp 1VI0NZHeukTC0X7GiwkgafpnZ5HQnOtfIp6qKkb2VTfV6fn/vepYBCukWvmrNDZW ecd3WQmFazUqCPcE4NImprJvcAOgj3oIcMAKoui2PcViYhqH6f8EWCDQZ1rgwc1J Qm1ERTpArESTX4JSzO0Uy2cr9cg6/gagMsy8PUKbxkQPe79K1kpsn3LBj7YdY8Xb q9/06rJ9MGgEIeUjH/W0yaGgkutHn4FiWV22AdMelZDhQzGkBnxhwlANZXXwkPJl gF4EIn2+sSRLL36mZvrFSmH8yNEXmCThY3JC++f3R88GvgWmUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPIXnaxjg+hJF5MU6cTeSWkIGJ7VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvZDlkYWRjYTktZTFjZS0z MDY5LWI3ZWEtZGQwOTBiYTY2MTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRRDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVJAILB/MPl9icNmZy1WaTRoPqm/dzv7hgzYpnrVXaR4aOsDok+UrdP VhcwEjSXhHOT8ZPCfZeX18dHYvI/PMVYANsJBNtHm6YwQhy3cMRDSrjsayp5NhH0 TPueSY4wA2cEcApjzq31+IP0clxdIY3mq5ur7qWOCzeOeCS5gu+H3DfPadbr4f12 QPX34NS9qEs01CpyqYxJatBlFDeH7DnSLeitZCyOxX0Yef/914FscLFVlK1axZFe SM7cN7ImtFIoFBxorp78+UeuBjnbsyn+sG3rm6iTirnyWYcHVI81qypIUR8DY1zT Ll3woD3FcwMig1qg1M6flPGQQMKUo/Q= -----END CERTIFICATE-----Generated at Tue Oct 28 02:38:30 2025 by rpki-client