$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/05d2fedc-f94d-3f2b-bde7-27b9d7f43dec.roa File: 05d2fedc-f94d-3f2b-bde7-27b9d7f43dec.roa (raw, json) Hash identifier: o9RbAISg5o9z8+SebchaT0ih4BGrzVpJoBC59rWnXV4= Subject key identifier: 6B:37:DD:D8:94:E5:97:96:F1:95:64:19:6F:23:D0:ED:94:85:7B:60 Certificate issuer: /CN=a7840f46-b135-4a45-8c47-daede4b0b707 Certificate serial: 010D0C9F4328584B1610FE86B283BD78D4ED3BC0 Authority key identifier: 91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/05d2fedc-f94d-3f2b-bde7-27b9d7f43dec.roa Signing time: Thu 04 Sep 2025 20:09:43 +0000 ROA not before: Thu 04 Sep 2025 20:09:43 +0000 ROA not after: Wed 03 Dec 2025 21:09:43 +0000 asID: 12213 IP address blocks: 149.137.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:10:fe:86:b2:83:bd:78:d4:ed:3b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7840f46-b135-4a45-8c47-daede4b0b707 Validity Not Before: Sep 4 20:09:43 2025 GMT Not After : Dec 3 21:09:43 2025 GMT Subject: CN=41ac34fd-9ec1-4456-81d8-9678988fe9d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2c:c9:c4:2e:74:c6:b9:8d:4d:9f:af:0e:bd: fe:93:68:9b:56:12:bf:e5:e4:6c:c6:d2:1c:16:50: 95:cd:d7:f3:36:5e:86:7f:56:d9:6a:76:06:c5:2f: 39:4c:bb:7c:91:6c:a3:d9:0d:f9:a1:e6:4e:b2:98: 73:11:c5:10:eb:be:59:4a:ac:06:77:2d:92:12:70: 5f:fe:56:e9:60:04:70:0b:af:0b:fb:cf:96:6c:ce: 35:1a:5a:3c:42:88:ef:99:21:04:ee:2f:54:70:40: 44:ac:bb:12:ce:6c:5c:34:7b:22:d0:f7:13:07:14: d7:03:fd:3c:22:6b:3c:9a:5e:8e:05:8d:1e:c8:0b: 31:54:ff:d0:9f:ad:00:4e:7a:25:cb:94:4c:e6:82: 88:2c:65:f9:ec:dd:13:22:71:52:66:b9:23:ba:a9: ad:80:24:1e:70:5f:e3:5f:b4:14:5b:88:de:4f:b7: 33:cf:a9:90:18:2d:c9:d9:33:ae:2a:b6:a4:1d:a5: 3c:10:7f:4d:c0:6a:87:ec:85:cc:73:b4:03:ab:46: f6:13:38:68:ce:b2:00:f0:bf:bd:08:93:d6:51:08: 30:4f:79:cd:da:88:a5:67:7c:c8:e7:bc:b1:ed:92: 94:2d:37:79:c4:b6:00:52:74:4a:7c:69:6f:14:22: 95:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:37:DD:D8:94:E5:97:96:F1:95:64:19:6F:23:D0:ED:94:85:7B:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/05d2fedc-f94d-3f2b-bde7-27b9d7f43dec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl X509v3 Authority Key Identifier: keyid:91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer sbgp-ipAddrBlock: critical IPv4: 149.137.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:f7:b8:21:54:e8:08:96:89:9c:ac:77:6c:9e:26:e5:14:7e: e1:54:8d:5d:eb:e5:75:10:6e:e4:64:c7:f6:89:5e:39:43:3d: 04:8e:7f:d5:b3:d4:4f:19:ff:f1:e2:df:d9:f5:80:29:33:46: 44:cd:ec:a5:13:6c:a5:49:8f:f7:e5:ab:9a:2a:42:c3:ae:cb: 2b:db:04:ca:34:73:c1:49:92:76:83:86:34:6b:4d:18:fb:91: 25:5b:09:61:91:f1:32:6f:38:e0:6b:c0:6c:95:8c:76:31:9a: be:4d:db:23:4e:29:f7:78:87:99:48:70:2f:ab:d4:00:e6:80: 54:ef:3c:d1:93:09:50:22:fb:61:12:f8:c7:fd:75:68:53:10: e5:00:a2:91:fb:2d:7e:7f:8d:f2:dd:02:cc:bd:af:ea:f1:0e: 08:44:ee:16:97:f5:15:c8:86:55:29:d3:c8:52:09:79:64:28: 17:14:fc:b1:e1:a5:c6:5c:dd:6f:a5:db:a2:1e:f9:81:29:0e: 13:42:40:6d:e7:75:4e:92:12:d2:97:0e:e1:5c:2d:59:45:9e: 71:6d:4a:08:78:a9:72:fa:7c:c2:bf:fd:57:d3:b9:d8:3a:6b: b2:8a:76:61:18:94:a0:ec:1d:11:d4:91:b8:2f:be:b8:e6:6d: 6a:eb:9b:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsWEP6GsoO9eNTtO8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc4NDBmNDYtYjEzNS00YTQ1LThjNDctZGFlZGU0YjBi NzA3MB4XDTI1MDkwNDIwMDk0M1oXDTI1MTIwMzIxMDk0M1owLzEtMCsGA1UEAxMk NDFhYzM0ZmQtOWVjMS00NDU2LTgxZDgtOTY3ODk4OGZlOWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSzJxC50xrmNTZ+vDr3+k2ibVhK/5eRsxtIc FlCVzdfzNl6Gf1bZanYGxS85TLt8kWyj2Q35oeZOsphzEcUQ675ZSqwGdy2SEnBf /lbpYARwC68L+8+WbM41Glo8QojvmSEE7i9UcEBErLsSzmxcNHsi0PcTBxTXA/08 Ims8ml6OBY0eyAsxVP/Qn60ATnoly5RM5oKILGX57N0TInFSZrkjuqmtgCQecF/j X7QUW4jeT7czz6mQGC3J2TOuKrakHaU8EH9NwGqH7IXMc7QDq0b2EzhozrIA8L+9 CJPWUQgwT3nN2oilZ3zI57yx7ZKULTd5xLYAUnRKfGlvFCKVZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGs33diU5ZeW8ZVkGW8j0O2UhXtgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0 MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVkZTRiMGI3MDcvMDVkMmZlZGMtZjk0ZC0z ZjJiLWJkZTctMjdiOWQ3ZjQzZGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTc4NDBmNDYtYjEzNS00YTQ1LThj NDctZGFlZGU0YjBiNzA3L2E3ODQwZjQ2LWIxMzUtNGE0NS04YzQ3LWRhZWRlNGIw YjcwNy5jcmwwHwYDVR0jBBgwFoAUkXwZ6lZt7d6ge9kx5g0uw1oWE84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVk ZTRiMGI3MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlYnYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJf3uCFU6AiWiZysd2yeJuUUfuFUjV3r5XUQbuRkx/aJXjlDPQSOf9Wz 1E8Z//Hi39n1gCkzRkTN7KUTbKVJj/flq5oqQsOuyyvbBMo0c8FJknaDhjRrTRj7 kSVbCWGR8TJvOOBrwGyVjHYxmr5N2yNOKfd4h5lIcC+r1ADmgFTvPNGTCVAi+2ES +Mf9dWhTEOUAopH7LX5/jfLdAsy9r+rxDghE7haX9RXIhlUp08hSCXlkKBcU/LHh pcZc3W+l26Ie+YEpDhNCQG3ndU6SEtKXDuFcLVlFnnFtSgh4qXL6fMK//VfTudg6 a7KKdmEYlKDsHRHUkbgvvrjmbWrrm0s= -----END CERTIFICATE-----Generated at Wed Sep 10 22:37:32 2025 by rpki-client