$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/242691ed-7e95-376c-af82-2bd75883d13d.roa File: 242691ed-7e95-376c-af82-2bd75883d13d.roa (raw, json) Hash identifier: D2qS1gNfebAR4XvThkWoSnPIxz8PRVMwHhvvukAa4fs= Subject key identifier: 21:D4:FC:B5:BE:70:1A:E4:4E:17:3D:47:A8:35:0B:55:FE:3D:C7:07 Certificate issuer: /CN=a7840f46-b135-4a45-8c47-daede4b0b707 Certificate serial: 010D0C9F4328584B1610A104105D7F7225B72580 Authority key identifier: 91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/242691ed-7e95-376c-af82-2bd75883d13d.roa Signing time: Thu 04 Sep 2025 20:08:59 +0000 ROA not before: Thu 04 Sep 2025 20:08:59 +0000 ROA not after: Wed 03 Dec 2025 21:08:59 +0000 asID: 12213 IP address blocks: 149.137.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:10:a1:04:10:5d:7f:72:25:b7:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7840f46-b135-4a45-8c47-daede4b0b707 Validity Not Before: Sep 4 20:08:59 2025 GMT Not After : Dec 3 21:08:59 2025 GMT Subject: CN=e38dee37-7787-4f97-aff3-7aea264df85b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0e:bf:60:b0:75:bb:ce:b0:47:bb:04:5c:99: 49:f2:49:01:cd:50:8f:23:98:92:af:a0:cd:4a:8c: 3d:7c:da:06:65:c0:1d:24:89:22:bf:5a:55:89:e5: 4c:cc:bd:8d:5b:23:5f:e7:f7:44:6d:59:8e:8c:02: 32:e6:c7:da:b3:00:50:53:82:0c:59:13:2a:db:93: 4c:f3:27:04:9c:8c:d6:06:86:66:f1:ac:07:8a:11: c9:5b:22:c1:2d:cd:70:85:e1:2e:7a:79:f4:89:96: 84:1c:6e:68:68:38:34:a0:7e:2f:38:d1:9f:b0:8c: 14:92:76:ea:d8:fd:c7:b5:fa:a2:cf:35:32:12:d7: 83:ba:8b:95:95:70:ea:67:9d:9c:b4:d7:6d:0b:4f: ba:ce:4c:cb:17:ab:69:b3:44:a8:a7:1b:c3:26:ec: a6:9a:7a:6c:f2:af:71:af:0e:c9:0e:b9:c3:da:bb: e2:19:b2:46:7b:b8:99:16:c7:5e:1a:e9:b3:eb:05: 8e:55:03:1d:42:2c:b6:e0:d8:bc:8b:7f:93:dc:fe: 4c:b4:63:e8:5b:31:ea:9c:73:04:83:aa:01:3b:e8: f1:42:c7:73:cf:96:39:5a:ca:6c:39:47:80:b0:0d: 38:81:8d:83:79:42:2b:32:f5:1a:28:5b:ae:20:8b: a4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:D4:FC:B5:BE:70:1A:E4:4E:17:3D:47:A8:35:0B:55:FE:3D:C7:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/242691ed-7e95-376c-af82-2bd75883d13d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl X509v3 Authority Key Identifier: keyid:91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer sbgp-ipAddrBlock: critical IPv4: 149.137.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:77:1c:1b:3a:c1:0d:50:23:4e:6a:2b:3c:60:23:4b:40:c8: 87:c0:62:42:7d:f5:f4:43:87:8b:1f:18:06:af:b6:71:68:cf: 1f:96:a8:d5:5c:2d:f1:a2:02:53:e3:3c:45:94:b3:a6:8c:c5: 7c:aa:92:4d:5d:1d:9c:d8:45:d8:45:d7:55:c2:c5:15:b0:91: c3:1e:34:9d:e5:03:9e:2c:cb:bd:fc:e8:52:3a:03:76:4f:b7: 09:43:06:2f:e6:34:e5:83:c1:6c:29:63:5c:b9:cb:30:79:17: b3:ff:ee:a7:5f:21:22:47:57:05:5c:49:a5:2b:59:06:f2:38: 4e:a6:95:0c:7d:d3:86:7f:37:2e:e3:a7:96:74:99:37:f9:52: 54:15:e0:8b:32:26:cd:69:62:95:a5:0c:e7:32:73:96:ab:6d: 1b:9d:0d:30:6f:6c:62:b2:b7:8c:b8:ab:f1:ca:50:21:59:9e: d5:b3:81:0c:d1:aa:93:5a:ab:bd:54:bc:f0:43:95:dd:eb:c9: 6d:ad:8a:03:4b:b8:30:67:d4:c7:3b:21:e2:86:68:99:72:88: d1:47:2b:fb:51:9a:49:86:4c:db:84:72:ef:7e:78:5a:30:3a: 58:bd:a4:60:4a:1e:90:2c:a8:f9:89:63:53:56:d8:cc:f0:b4: 17:98:1d:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsWEKEEEF1/ciW3JYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc4NDBmNDYtYjEzNS00YTQ1LThjNDctZGFlZGU0YjBi NzA3MB4XDTI1MDkwNDIwMDg1OVoXDTI1MTIwMzIxMDg1OVowLzEtMCsGA1UEAxMk ZTM4ZGVlMzctNzc4Ny00Zjk3LWFmZjMtN2FlYTI2NGRmODViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg6/YLB1u86wR7sEXJlJ8kkBzVCPI5iSr6DN Sow9fNoGZcAdJIkiv1pVieVMzL2NWyNf5/dEbVmOjAIy5sfaswBQU4IMWRMq25NM 8ycEnIzWBoZm8awHihHJWyLBLc1wheEuenn0iZaEHG5oaDg0oH4vONGfsIwUknbq 2P3HtfqizzUyEteDuouVlXDqZ52ctNdtC0+6zkzLF6tps0SopxvDJuymmnps8q9x rw7JDrnD2rviGbJGe7iZFsdeGumz6wWOVQMdQiy24Ni8i3+T3P5MtGPoWzHqnHME g6oBO+jxQsdzz5Y5WspsOUeAsA04gY2DeUIrMvUaKFuuIIukjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHU/LW+cBrkThc9R6g1C1X+PccHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0 MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVkZTRiMGI3MDcvMjQyNjkxZWQtN2U5NS0z NzZjLWFmODItMmJkNzU4ODNkMTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTc4NDBmNDYtYjEzNS00YTQ1LThj NDctZGFlZGU0YjBiNzA3L2E3ODQwZjQ2LWIxMzUtNGE0NS04YzQ3LWRhZWRlNGIw YjcwNy5jcmwwHwYDVR0jBBgwFoAUkXwZ6lZt7d6ge9kx5g0uw1oWE84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVk ZTRiMGI3MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClYnQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZ3HBs6wQ1QI05qKzxgI0tAyIfAYkJ99fRDh4sfGAavtnFozx+WqNVc LfGiAlPjPEWUs6aMxXyqkk1dHZzYRdhF11XCxRWwkcMeNJ3lA54sy7386FI6A3ZP twlDBi/mNOWDwWwpY1y5yzB5F7P/7qdfISJHVwVcSaUrWQbyOE6mlQx904Z/Ny7j p5Z0mTf5UlQV4IsyJs1pYpWlDOcyc5arbRudDTBvbGKyt4y4q/HKUCFZntWzgQzR qpNaq71UvPBDld3ryW2tigNLuDBn1Mc7IeKGaJlyiNFHK/tRmkmGTNuEcu9+eFow Oli9pGBKHpAsqPmJY1NW2MzwtBeYHQI= -----END CERTIFICATE-----Generated at Wed Sep 10 22:42:22 2025 by rpki-client