$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/fd1f75bb-b322-31d2-97d8-2837137ee140.roa File: fd1f75bb-b322-31d2-97d8-2837137ee140.roa (raw, json) Hash identifier: jsjiz0Nbh8MafMTiS9Ds5kRNXkRZNV/bmnq/Cdur0rY= Subject key identifier: 21:2E:8B:BA:CB:FA:6A:63:84:3A:12:22:D4:9A:79:B5:9C:81:6D:40 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584B99D78627CBF9A4B62B3D2340 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/fd1f75bb-b322-31d2-97d8-2837137ee140.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 1280 IP address blocks: 149.20.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:86:27:cb:f9:a4:b6:2b:3d:23:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=ed58c9ae-f72a-49ba-9917-3c42f73289ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:88:3f:14:a9:e0:44:d5:38:26:6a:04:cc:fa: 33:be:4d:3b:5b:55:db:09:ca:6d:e4:42:92:fd:3e: 7f:3e:a3:b1:85:75:f2:90:30:5c:21:a3:f4:18:21: f0:6c:72:5f:46:6c:a6:7a:8c:bc:21:99:05:43:ae: 81:1c:9c:ea:4c:ba:3b:5b:e1:06:5f:81:a4:75:c3: 1c:6e:e3:53:e4:4f:6c:65:97:1e:65:59:a9:b8:87: a3:3c:80:50:ac:84:f8:e7:b0:0b:d4:74:e1:db:02: 71:2a:59:8b:e7:cc:88:84:e7:ce:40:bd:b5:52:46: f7:f6:91:88:5e:17:7c:c7:3a:54:eb:91:40:6b:bf: 9f:e9:c7:81:12:7e:48:89:17:35:ce:1c:97:2a:46: a7:f1:89:f7:95:ce:77:a2:78:81:96:da:3e:b1:54: a1:38:a4:d1:b7:8e:23:7a:70:b7:60:7b:4f:73:16: 42:48:da:7e:20:5b:87:60:b5:e9:af:dc:33:51:8b: 8c:a2:c0:7a:b6:a1:80:bb:5c:18:a8:1f:81:9e:c8: 9d:e5:a8:ae:9a:1b:0b:5a:e2:dd:14:53:f3:8f:38: c4:2a:e8:9a:7a:0b:4b:11:66:aa:7c:f9:17:a7:ba: e3:79:af:67:e1:a3:a3:e9:e6:b0:b6:fb:fe:d5:32: a2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:2E:8B:BA:CB:FA:6A:63:84:3A:12:22:D4:9A:79:B5:9C:81:6D:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/fd1f75bb-b322-31d2-97d8-2837137ee140.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:d8:93:ee:9a:db:9a:13:dd:3f:49:03:b8:b2:b6:14:4a:a4: f9:a6:b2:11:68:78:0a:f1:ab:2e:47:f9:1d:f9:7f:ef:ae:4f: 84:6c:4c:bb:a6:32:7b:e2:1a:84:a0:52:15:d4:3f:81:91:f0: fe:d3:cc:99:da:10:4c:d0:17:b7:4c:d0:3f:d9:bb:f9:0f:42: 89:e7:94:42:2f:77:27:78:77:67:e7:63:f5:29:d0:94:bd:4f: 3a:58:bf:fc:70:df:df:bf:ce:89:0a:ed:1a:d7:45:f0:9c:b5: 37:00:09:73:32:45:b9:f0:57:28:17:09:bd:ba:31:c2:43:93: 98:d4:1a:2a:dc:47:91:e8:81:0d:a6:81:c9:79:6c:1b:c6:09: 6e:b5:86:e0:46:ad:bc:bd:0d:60:7b:32:4f:c8:dd:5f:db:2c: 70:38:77:f7:9d:06:46:f0:45:5d:ff:24:1e:b7:a4:4e:88:41: 88:13:84:8b:e4:07:66:d0:63:c0:55:d8:d0:cc:02:05:5c:89: 53:72:c8:05:33:39:25:39:aa:e7:21:17:25:72:5c:47:a5:6f: 37:6a:90:e7:c8:1b:b8:f3:29:e9:2a:59:ec:70:14:f7:39:86: f1:ef:6a:13:de:35:f0:3a:9f:03:3d:71:c2:71:2d:a8:72:a0: 7c:a5:77:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ14Yny/mktis9I0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZWQ1OGM5YWUtZjcyYS00OWJhLTk5MTctM2M0MmY3MzI4OWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApog/FKngRNU4JmoEzPozvk07W1XbCcpt5EKS /T5/PqOxhXXykDBcIaP0GCHwbHJfRmymeoy8IZkFQ66BHJzqTLo7W+EGX4GkdcMc buNT5E9sZZceZVmpuIejPIBQrIT457AL1HTh2wJxKlmL58yIhOfOQL21Ukb39pGI Xhd8xzpU65FAa7+f6ceBEn5IiRc1zhyXKkan8Yn3lc53oniBlto+sVShOKTRt44j enC3YHtPcxZCSNp+IFuHYLXpr9wzUYuMosB6tqGAu1wYqB+Bnsid5aiumhsLWuLd FFPzjzjEKuiaegtLEWaqfPkXp7rjea9n4aOj6eawtvv+1TKilwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCEui7rL+mpjhDoSItSaebWcgW1AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvZmQxZjc1YmItYjMyMi0z MWQyLTk3ZDgtMjgzNzEzN2VlMTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRRYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjYk+6a25oT3T9JA7iythRKpPmmshFoeArxqy5H+R35f++uT4RsTLum MnviGoSgUhXUP4GR8P7TzJnaEEzQF7dM0D/Zu/kPQonnlEIvdyd4d2fnY/Up0JS9 TzpYv/xw39+/zokK7RrXRfCctTcACXMyRbnwVygXCb26McJDk5jUGircR5HogQ2m gcl5bBvGCW61huBGrby9DWB7Mk/I3V/bLHA4d/edBkbwRV3/JB63pE6IQYgThIvk B2bQY8BV2NDMAgVciVNyyAUzOSU5quchFyVyXEelbzdqkOfIG7jzKekqWexwFPc5 hvHvahPeNfA6nwM9ccJxLahyoHyld/E= -----END CERTIFICATE-----Generated at Sun Oct 26 01:49:52 2025 by rpki-client