$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/dc43e7a8-ab6c-3f47-baea-a1eacdff42d8.roa File: dc43e7a8-ab6c-3f47-baea-a1eacdff42d8.roa (raw, json) Hash identifier: ARfcv9r1ru9yKFYiGzM7vwZU/EdYJqGRRlFOd69wZFM= Subject key identifier: 81:EF:8C:5A:7D:95:F0:84:61:AE:D3:52:DF:1E:6D:24:DA:E4:7D:5C Certificate issuer: /CN=a7840f46-b135-4a45-8c47-daede4b0b707 Certificate serial: 010D0C9F4328584B16114B0C9EAC6CCCC64D2A80 Authority key identifier: 91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/dc43e7a8-ab6c-3f47-baea-a1eacdff42d8.roa Signing time: Thu 04 Sep 2025 20:10:20 +0000 ROA not before: Thu 04 Sep 2025 20:10:20 +0000 ROA not after: Wed 03 Dec 2025 21:10:20 +0000 asID: 12213 IP address blocks: 149.137.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:11:4b:0c:9e:ac:6c:cc:c6:4d:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7840f46-b135-4a45-8c47-daede4b0b707 Validity Not Before: Sep 4 20:10:20 2025 GMT Not After : Dec 3 21:10:20 2025 GMT Subject: CN=01095266-149e-406a-a834-8e64bddf2927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:56:3a:5b:41:e3:72:b4:95:19:13:10:8f:17: e1:ee:11:e1:1c:80:78:39:15:78:4e:18:3d:73:24: ab:f5:cd:56:76:4f:5c:b0:8e:06:7a:62:23:b0:42: ac:b1:83:d4:8a:b9:de:38:06:10:1d:f0:c1:e5:56: a6:8c:e8:8d:55:76:82:10:c7:2b:53:4d:e6:f0:2e: 89:95:61:5d:0c:b2:b1:11:69:c0:63:5a:1b:40:e2: 56:cd:f3:27:e9:59:c0:3b:d7:29:7d:02:00:ce:e7: fb:b7:66:a3:a4:5a:a9:74:1a:17:9c:7f:a5:96:4d: 8e:c9:d1:d8:ad:f7:ec:9b:f7:ef:a2:3f:1a:9a:15: db:61:ac:a7:bc:d9:05:a5:54:5d:f4:b4:8b:f9:7f: db:34:74:24:91:1a:ee:6f:21:01:6f:d5:07:37:05: 31:f9:25:3f:f6:ec:a5:af:f5:eb:1b:c8:82:54:a5: 59:56:09:f8:62:1b:a1:0c:37:16:00:63:d9:c7:42: de:36:a1:07:bd:49:86:48:16:82:1b:79:0c:12:bb: 96:d9:aa:b5:a3:7c:cb:02:ae:03:e2:27:73:09:12: 7b:35:c8:b1:35:b0:48:5f:3d:2f:78:b6:65:f3:23: fa:c4:fd:9a:fa:79:3d:ab:e4:10:a2:03:f2:64:f7: 0f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:EF:8C:5A:7D:95:F0:84:61:AE:D3:52:DF:1E:6D:24:DA:E4:7D:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/dc43e7a8-ab6c-3f47-baea-a1eacdff42d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl X509v3 Authority Key Identifier: keyid:91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer sbgp-ipAddrBlock: critical IPv4: 149.137.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:11:66:42:42:aa:08:47:00:76:56:bb:5f:c0:8c:52:21:01: d8:c2:32:54:72:3c:63:08:2c:b6:0d:7e:54:61:39:ba:20:9a: e7:bb:1f:31:39:e0:c3:f8:83:07:f0:1b:09:b2:eb:44:d2:5e: 66:06:00:1f:3c:57:d3:9e:4b:9a:6d:4a:0d:7f:83:3b:f7:8a: 4c:fa:83:21:06:68:95:9b:d3:03:67:be:d7:7f:36:69:95:6f: bd:1d:ab:4a:bc:b6:20:d8:85:ab:50:56:41:38:96:65:a9:94: e4:7e:81:1b:3c:31:c9:9e:73:d0:af:0b:e3:fb:a7:82:9d:3b: 30:90:0e:73:d4:52:70:5b:f9:d1:1d:64:21:80:5d:f2:d1:51: 05:61:df:e9:c3:d2:c7:68:14:8a:85:81:e5:b5:cf:c9:b4:05: 21:4a:24:c4:25:9c:35:45:19:29:3d:2a:c4:59:0d:0e:0c:f3: 7a:c8:c8:cd:7f:9c:3f:0e:1f:9f:f5:e6:20:eb:f1:f9:12:06: f4:5c:b3:89:5e:1c:ae:30:06:36:1b:fc:5f:58:1a:3b:3a:99: b5:2f:2a:b1:c7:d5:7a:ec:28:2d:e3:23:f9:7a:05:45:dd:57: 9a:9c:41:95:fc:00:46:68:f9:4a:c4:0e:49:f2:0c:f0:b7:f6: 96:89:5f:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsWEUsMnqxszMZNKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc4NDBmNDYtYjEzNS00YTQ1LThjNDctZGFlZGU0YjBi NzA3MB4XDTI1MDkwNDIwMTAyMFoXDTI1MTIwMzIxMTAyMFowLzEtMCsGA1UEAxMk MDEwOTUyNjYtMTQ5ZS00MDZhLWE4MzQtOGU2NGJkZGYyOTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFY6W0HjcrSVGRMQjxfh7hHhHIB4ORV4Thg9 cySr9c1Wdk9csI4GemIjsEKssYPUirneOAYQHfDB5VamjOiNVXaCEMcrU03m8C6J lWFdDLKxEWnAY1obQOJWzfMn6VnAO9cpfQIAzuf7t2ajpFqpdBoXnH+llk2OydHY rffsm/fvoj8amhXbYaynvNkFpVRd9LSL+X/bNHQkkRrubyEBb9UHNwUx+SU/9uyl r/XrG8iCVKVZVgn4YhuhDDcWAGPZx0LeNqEHvUmGSBaCG3kMEruW2aq1o3zLAq4D 4idzCRJ7NcixNbBIXz0veLZl8yP6xP2a+nk9q+QQogPyZPcPIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIHvjFp9lfCEYa7TUt8ebSTa5H1cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0 MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVkZTRiMGI3MDcvZGM0M2U3YTgtYWI2Yy0z ZjQ3LWJhZWEtYTFlYWNkZmY0MmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTc4NDBmNDYtYjEzNS00YTQ1LThj NDctZGFlZGU0YjBiNzA3L2E3ODQwZjQ2LWIxMzUtNGE0NS04YzQ3LWRhZWRlNGIw YjcwNy5jcmwwHwYDVR0jBBgwFoAUkXwZ6lZt7d6ge9kx5g0uw1oWE84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVk ZTRiMGI3MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFlYngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwRZkJCqghHAHZWu1/AjFIhAdjCMlRyPGMILLYNflRhObogmue7HzE5 4MP4gwfwGwmy60TSXmYGAB88V9OeS5ptSg1/gzv3ikz6gyEGaJWb0wNnvtd/NmmV b70dq0q8tiDYhatQVkE4lmWplOR+gRs8Mcmec9CvC+P7p4KdOzCQDnPUUnBb+dEd ZCGAXfLRUQVh3+nD0sdoFIqFgeW1z8m0BSFKJMQlnDVFGSk9KsRZDQ4M83rIyM1/ nD8OH5/15iDr8fkSBvRcs4leHK4wBjYb/F9YGjs6mbUvKrHH1XrsKC3jI/l6BUXd V5qcQZX8AEZo+UrEDknyDPC39paJX4Q= -----END CERTIFICATE-----Generated at Wed Sep 10 22:36:34 2025 by rpki-client