$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec/1ece9c7d-b04b-3926-9731-b706c26b400a.roa File: 1ece9c7d-b04b-3926-9731-b706c26b400a.roa (raw, json) Hash identifier: Te2T+XNqk/Z/4Wy8uFt2dROdx8fdGnnksi232xH7qwU= Subject key identifier: 07:C1:2E:8B:C9:31:E5:97:C9:64:28:D5:14:93:37:45:56:0C:E9:14 Certificate issuer: /CN=8fd7a5d6-2433-44f5-94f4-95c64a92b2ec Certificate serial: 010D0C9F4328584B4E770B0AE552676D03441B00 Authority key identifier: 6A:B4:BA:2D:9B:D2:93:08:BD:70:DA:47:8F:C1:F2:97:CE:19:CE:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec/1ece9c7d-b04b-3926-9731-b706c26b400a.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 20169 IP address blocks: 149.112.51.0/24 maxlen: 24 2001:504:128::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:0b:0a:e5:52:67:6d:03:44:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fd7a5d6-2433-44f5-94f4-95c64a92b2ec Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=2ce2c2b7-f753-48f8-a64d-e5d66af05552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3e:df:51:e5:3a:90:2b:90:a9:bb:8f:26:11: f9:79:d5:fc:20:a2:20:23:5d:69:c6:0d:04:28:60: 01:b2:ea:2b:f2:17:5a:cb:b9:22:a8:43:58:fe:af: 19:98:ee:69:7d:1b:25:43:56:80:d5:8c:e4:71:98: ae:08:f5:51:f1:e8:a3:8a:d1:f2:0b:fb:2f:63:8f: 0c:ed:0c:19:e5:65:be:9a:c8:8d:4f:4e:f7:6b:bb: 89:bf:85:63:ac:6d:b7:44:3d:d2:69:af:f2:9e:be: 8c:b4:25:b7:2e:f3:c4:07:19:0b:38:f7:ae:e9:14: 0b:ef:7b:26:39:15:b5:c2:0f:91:84:8d:11:fe:36: 6e:49:1d:27:28:97:3e:07:8e:3b:f7:69:10:92:8c: bb:6a:19:6d:05:c2:86:34:57:58:31:2c:f3:f5:fa: 11:a5:64:80:d8:57:2c:5c:fc:d3:64:71:39:22:30: 83:89:57:9c:3d:fe:07:00:06:f7:7f:74:8e:d3:d6: a1:42:60:41:99:ea:e3:9b:ae:76:b5:35:98:84:0c: 7b:cb:2b:dd:01:37:82:34:b6:0d:26:95:f8:fa:43: 06:ee:a5:1c:6a:4f:35:90:f0:5f:11:30:03:b1:76: 43:80:40:ff:dd:64:72:12:a8:c8:fb:a1:9d:9e:c6: 91:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:C1:2E:8B:C9:31:E5:97:C9:64:28:D5:14:93:37:45:56:0C:E9:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec/1ece9c7d-b04b-3926-9731-b706c26b400a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec.crl X509v3 Authority Key Identifier: keyid:6A:B4:BA:2D:9B:D2:93:08:BD:70:DA:47:8F:C1:F2:97:CE:19:CE:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec.cer sbgp-ipAddrBlock: critical IPv4: 149.112.51.0/24 IPv6: 2001:504:128::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:c3:c2:eb:7a:e2:a9:67:0b:85:9b:91:e1:06:d0:b2:56:e6: 0e:23:30:aa:13:32:20:37:0b:48:9e:4e:46:12:fb:aa:a1:39: cb:70:46:69:df:3e:37:79:ad:1b:89:cb:a2:75:3a:cd:07:95: f1:d6:9e:4b:25:93:32:fe:b9:7c:d4:b2:a7:e7:59:96:33:67: ac:73:4d:ee:83:86:17:73:e3:8d:08:24:18:ae:5c:1e:a1:0b: 05:67:77:cd:7e:99:38:f1:9b:ce:2c:dc:8b:fe:97:82:48:e3: b4:30:b6:82:cf:a9:38:2b:7c:59:69:ed:38:a2:a9:cf:e7:37: 37:e2:86:fa:fc:f3:49:8f:42:8c:b6:49:e1:d4:72:80:2a:03: 5e:3d:ac:fe:c3:84:3b:42:f1:51:f7:4a:1a:ba:de:f8:13:2c: f9:d8:00:f8:09:66:5d:0b:98:9f:b2:ad:8a:6c:06:90:2f:6f: a2:5a:07:ef:73:31:15:f6:53:52:9c:08:a0:ec:5c:82:e3:d6: e2:4b:de:78:00:20:e4:41:56:a3:cb:88:9a:b6:7c:e2:94:60: 5c:5e:c2:6c:2b:26:65:9a:85:90:3e:30:f8:e8:6f:2b:42:74: b3:1d:72:c3:e0:e3:a4:23:87:d4:38:f8:7b:75:50:20:c6:ca: 53:e2:64:da -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEtOdwsK5VJnbQNEGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGZkN2E1ZDYtMjQzMy00NGY1LTk0ZjQtOTVjNjRhOTJi MmVjMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk MmNlMmMyYjctZjc1My00OGY4LWE2NGQtZTVkNjZhZjA1NTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqD7fUeU6kCuQqbuPJhH5edX8IKIgI11pxg0E KGABsuor8hday7kiqENY/q8ZmO5pfRslQ1aA1YzkcZiuCPVR8eijitHyC/svY48M 7QwZ5WW+msiNT073a7uJv4VjrG23RD3Saa/ynr6MtCW3LvPEBxkLOPeu6RQL73sm ORW1wg+RhI0R/jZuSR0nKJc+B44792kQkoy7ahltBcKGNFdYMSzz9foRpWSA2Fcs XPzTZHE5IjCDiVecPf4HAAb3f3SO09ahQmBBmerjm652tTWYhAx7yyvdATeCNLYN JpX4+kMG7qUcak81kPBfETADsXZDgED/3WRyEqjI+6GdnsaRhQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFAfBLovJMeWXyWQo1RSTN0VWDOkUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84ZmQ3 YTVkNi0yNDMzLTQ0ZjUtOTRmNC05NWM2NGE5MmIyZWMvMWVjZTljN2QtYjA0Yi0z OTI2LTk3MzEtYjcwNmMyNmI0MDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGZkN2E1ZDYtMjQzMy00NGY1LTk0 ZjQtOTVjNjRhOTJiMmVjLzhmZDdhNWQ2LTI0MzMtNDRmNS05NGY0LTk1YzY0YTky YjJlYy5jcmwwHwYDVR0jBBgwFoAUarS6LZvSkwi9cNpHj8Hyl84ZzrUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84ZmQ3YTVkNi0yNDMzLTQ0ZjUtOTRmNC05NWM2 NGE5MmIyZWMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAlXAzMA8E AgACMAkDBwAgAQUEASgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAC8PC63riqWcLhZuR4QbQslbmDiMwqhMy IDcLSJ5ORhL7qqE5y3BGad8+N3mtG4nLonU6zQeV8daeSyWTMv65fNSyp+dZljNn rHNN7oOGF3PjjQgkGK5cHqELBWd3zX6ZOPGbzizci/6XgkjjtDC2gs+pOCt8WWnt OKKpz+c3N+KG+vzzSY9CjLZJ4dRygCoDXj2s/sOEO0LxUfdKGrre+BMs+dgA+Alm XQuYn7KtimwGkC9voloH73MxFfZTUpwIoOxcguPW4kveeAAg5EFWo8uImrZ84pRg XF7CbCsmZZqFkD4w+OhvK0J0sx1yw+DjpCOH1Dj4e3VQIMbKU+Jk2g== -----END CERTIFICATE-----Generated at Wed Oct 15 17:40:19 2025 by rpki-client