$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/66006420-1af3-3ecd-8691-f4c4740fbadc.roa File: 66006420-1af3-3ecd-8691-f4c4740fbadc.roa (raw, json) Hash identifier: McQbBLP+g7MxUOcCQ/1Vbwf2WXI7uxx5O0xlPvXEpnk= Subject key identifier: C5:71:B2:CA:6F:16:66:66:68:3F:8E:E3:41:38:86:15:96:08:4F:29 Certificate issuer: /CN=0d1af089-3ace-488d-8f52-6b375c813ba2 Certificate serial: 010D0C9F4328584B0A115FFDE3470B49B0DF8500 Authority key identifier: A6:9C:CE:F2:D7:BC:3F:8C:EE:2F:16:34:59:64:85:BD:CE:1E:2E:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/66006420-1af3-3ecd-8691-f4c4740fbadc.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 10490 IP address blocks: 149.149.248.0/21 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/0d1af089-3ace-488d-8f52-6b375c813ba2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/0d1af089-3ace-488d-8f52-6b375c813ba2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:5f:fd:e3:47:0b:49:b0:df:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d1af089-3ace-488d-8f52-6b375c813ba2 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=c3fc1339-6cae-46b3-a29d-75ab46a97b21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:1c:fe:51:9f:d7:74:6b:05:3d:e2:a1:a8:41: dc:d1:30:8e:66:63:74:d3:2e:14:40:57:e5:58:a1: 12:11:a6:69:cb:f4:88:c2:3b:77:9d:9b:93:33:52: 74:c1:58:54:25:d4:78:43:06:7f:2e:0a:6e:81:8b: fd:17:5a:50:3e:7e:9f:de:e9:a0:dd:db:09:c2:81: 36:46:0d:dd:e5:03:f7:3b:48:af:f1:d9:b7:fb:61: 9a:c6:18:a3:7e:8f:ad:8b:83:f1:9a:74:69:10:05: 21:1a:b8:ef:de:b1:28:cb:e1:6d:06:bb:45:35:13: d9:7b:0f:9b:96:ff:1d:53:9b:c3:76:cd:2e:87:ba: 32:5f:18:93:6a:76:87:5d:23:98:a4:22:cd:10:04: 9c:d7:74:c6:fa:d6:c9:f2:5f:74:ea:ed:e8:72:2a: 31:06:c9:aa:31:10:d8:bf:de:23:08:13:ca:af:ac: ad:aa:77:93:70:e7:15:4f:d8:4a:6e:16:a8:a1:ce: 98:e7:29:58:80:a5:15:b8:d5:05:a2:17:38:c4:77: 24:61:80:a9:ec:b4:09:44:ff:d0:f2:18:a4:77:c2: 9e:58:41:fb:b7:59:84:58:95:40:7b:61:a1:b2:a5: 24:16:48:b4:ac:a7:1c:89:4d:6b:e3:cc:7d:94:78: df:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:71:B2:CA:6F:16:66:66:68:3F:8E:E3:41:38:86:15:96:08:4F:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/66006420-1af3-3ecd-8691-f4c4740fbadc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/0d1af089-3ace-488d-8f52-6b375c813ba2.crl X509v3 Authority Key Identifier: keyid:A6:9C:CE:F2:D7:BC:3F:8C:EE:2F:16:34:59:64:85:BD:CE:1E:2E:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2.cer sbgp-ipAddrBlock: critical IPv4: 149.149.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:08:f8:87:c9:e5:79:1c:53:07:50:8c:10:d6:f1:8f:0c:66: 27:da:8d:5f:5a:ab:4c:82:3f:25:a4:2d:73:af:35:06:c6:53: 85:a8:ed:aa:8d:36:19:d8:68:8f:16:03:cf:9e:08:bb:8a:e3: ba:64:67:78:d3:1e:35:96:ea:c7:0b:6b:a0:3a:81:e3:60:3f: aa:f4:0c:f2:a5:d7:c8:d6:e7:be:c4:e2:9c:6e:e1:5b:bc:8f: 27:57:71:91:24:14:dd:2d:17:6b:a3:aa:c8:58:f4:a5:6e:34: 39:20:94:6b:3d:2f:ad:9f:da:5b:df:5a:36:9b:dc:b9:b9:7c: 13:df:82:16:ae:77:e6:f7:46:9d:fa:c7:27:b7:1c:8d:5a:3a: b0:74:93:8c:4d:f8:58:d2:34:47:7d:70:40:c0:f2:6c:7f:69: 6c:f3:33:eb:8e:9f:03:41:29:7a:77:79:5d:90:e6:55:eb:20: 29:d5:db:7e:14:6d:33:49:da:fb:8d:f0:b6:15:30:e5:a7:54: 64:c9:45:71:8b:49:e4:92:93:2e:79:12:32:a9:57:20:56:c8: 29:09:22:3f:c8:0b:8b:1e:1b:12:ea:36:5f:f7:4f:41:42:bc: 70:d9:71:a2:1c:37:ca:ef:3c:4b:c5:e2:4d:e0:a7:90:1d:79: f8:73:d2:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsKEV/940cLSbDfhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQxYWYwODktM2FjZS00ODhkLThmNTItNmIzNzVjODEz YmEyMB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk YzNmYzEzMzktNmNhZS00NmIzLWEyOWQtNzVhYjQ2YTk3YjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBz+UZ/XdGsFPeKhqEHc0TCOZmN00y4UQFfl WKESEaZpy/SIwjt3nZuTM1J0wVhUJdR4QwZ/LgpugYv9F1pQPn6f3umg3dsJwoE2 Rg3d5QP3O0iv8dm3+2Gaxhijfo+ti4PxmnRpEAUhGrjv3rEoy+FtBrtFNRPZew+b lv8dU5vDds0uh7oyXxiTanaHXSOYpCLNEASc13TG+tbJ8l906u3ocioxBsmqMRDY v94jCBPKr6ytqneTcOcVT9hKbhaooc6Y5ylYgKUVuNUFohc4xHckYYCp7LQJRP/Q 8hikd8KeWEH7t1mEWJVAe2GhsqUkFki0rKcciU1r48x9lHjfswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMVxsspvFmZmaD+O40E4hhWWCE8pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wZDFh ZjA4OS0zYWNlLTQ4OGQtOGY1Mi02YjM3NWM4MTNiYTIvNjYwMDY0MjAtMWFmMy0z ZWNkLTg2OTEtZjRjNDc0MGZiYWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGQxYWYwODktM2FjZS00ODhkLThm NTItNmIzNzVjODEzYmEyLzBkMWFmMDg5LTNhY2UtNDg4ZC04ZjUyLTZiMzc1Yzgx M2JhMi5jcmwwHwYDVR0jBBgwFoAUppzO8te8P4zuLxY0WWSFvc4eLpQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wZDFhZjA4OS0zYWNlLTQ4OGQtOGY1Mi02YjM3 NWM4MTNiYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlZX4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHcI+IfJ5XkcUwdQjBDW8Y8MZifajV9aq0yCPyWkLXOvNQbGU4Wo7aqN NhnYaI8WA8+eCLuK47pkZ3jTHjWW6scLa6A6geNgP6r0DPKl18jW577E4pxu4Vu8 jydXcZEkFN0tF2ujqshY9KVuNDkglGs9L62f2lvfWjab3Lm5fBPfghaud+b3Rp36 xye3HI1aOrB0k4xN+FjSNEd9cEDA8mx/aWzzM+uOnwNBKXp3eV2Q5lXrICnV234U bTNJ2vuN8LYVMOWnVGTJRXGLSeSSky55EjKpVyBWyCkJIj/IC4seGxLqNl/3T0FC vHDZcaIcN8rvPEvF4k3gp5Adefhz0q4= -----END CERTIFICATE-----Generated at Thu Sep 18 11:19:54 2025 by rpki-client