$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/f85ff5e7-a338-3d57-bcfe-00ac7ef54f8a.roa File: f85ff5e7-a338-3d57-bcfe-00ac7ef54f8a.roa (raw, json) Hash identifier: AJKJSxBnqry1HWFXhDQJnFjBh1v65AA7veMTbSqm28E= Subject key identifier: 66:A2:BD:2B:98:37:2B:BA:55:EE:58:C7:98:29:D9:58:F9:C1:D4:31 Certificate issuer: /CN=9bc88207-e7c7-453e-a4ab-77b72152c33a Certificate serial: 010D0C9F4328584B004BEC8CFC6F23BF57AD9F00 Authority key identifier: 49:30:1E:1C:4D:A2:59:C8:C5:65:AF:94:7B:C5:60:74:D2:96:22:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/f85ff5e7-a338-3d57-bcfe-00ac7ef54f8a.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 22379 IP address blocks: 149.20.70.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4b:ec:8c:fc:6f:23:bf:57:ad:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bc88207-e7c7-453e-a4ab-77b72152c33a Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=8466f41c-8d58-47b7-bfdf-013332376ffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:46:8c:65:be:6c:4b:9d:78:e6:3c:70:fd:b9: dc:56:b8:d4:46:54:65:3d:62:23:67:63:d9:5b:cc: bf:f4:7e:e4:f5:b5:d7:09:95:bd:15:b8:f8:83:2a: dd:ba:e8:6e:c6:4b:ef:fb:c2:1c:0e:be:f2:54:0d: 7d:3d:91:15:6b:12:ec:2d:69:4e:57:1f:2e:07:04: 9e:98:b5:54:15:bd:09:51:7f:08:94:cd:f9:ff:8b: 7e:8f:82:de:47:7d:c7:20:1b:11:51:74:ac:7c:dd: 64:2d:ba:e3:66:d9:65:86:95:0c:a7:47:70:53:6b: ae:ce:d1:eb:6b:56:f4:28:24:72:df:1f:b5:45:43: 9d:3c:72:78:6b:c0:ae:42:58:ee:b4:80:0c:4e:d5: 24:d0:bd:32:ae:19:f6:c0:45:a9:09:87:f1:57:84: ae:15:98:ed:75:a7:6c:62:82:34:9f:bd:d9:e9:2c: 37:f4:dc:4d:57:bf:40:6d:d4:84:52:93:35:ca:7b: 36:3c:98:6a:b8:7f:03:81:25:e3:f8:4d:b0:0e:df: ae:1b:17:01:cc:85:fd:ae:02:7c:1c:95:ca:4b:c5: a8:87:12:6d:0c:d1:17:d9:c7:df:ba:fe:74:2f:c2: 3e:c5:d8:d0:1a:99:c7:12:89:b6:62:91:fc:05:34: 81:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A2:BD:2B:98:37:2B:BA:55:EE:58:C7:98:29:D9:58:F9:C1:D4:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/f85ff5e7-a338-3d57-bcfe-00ac7ef54f8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.crl X509v3 Authority Key Identifier: keyid:49:30:1E:1C:4D:A2:59:C8:C5:65:AF:94:7B:C5:60:74:D2:96:22:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer sbgp-ipAddrBlock: critical IPv4: 149.20.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:cf:b4:db:8f:cd:01:81:be:b3:4b:89:56:ca:24:ff:f2:e2: 57:ea:2f:fd:9d:71:c6:64:ba:1b:8c:64:c6:81:e7:ce:0e:e6: 45:a1:d6:b9:31:41:7b:17:a9:95:81:80:33:7c:fb:f1:63:7b: e7:8d:bb:df:49:5c:58:fb:7f:a8:b0:9a:47:85:09:08:b5:d5: f9:e6:7a:d4:c5:f8:aa:53:95:3b:c9:20:5e:81:80:e3:36:72: 75:09:9d:0a:c1:ef:49:3a:37:85:d7:09:f8:46:a7:3f:91:09: cf:1e:f8:3a:8b:5d:cf:b9:df:26:2c:0c:21:54:d5:75:c0:d2: 8f:81:ca:3c:4b:ac:cd:a9:00:ad:7f:54:6a:c7:7b:49:88:c9: 79:2f:9f:d9:1e:af:93:9d:8e:d4:31:a1:10:7f:15:96:0a:fa: 57:20:58:35:dc:f2:58:01:e2:2b:8c:b7:a4:1f:2d:45:f9:d0: bc:5f:d2:b1:7a:23:89:84:17:aa:b4:f3:5c:ba:22:a0:39:b7: 95:5d:9e:94:60:a6:3b:17:4c:d7:9c:9d:d0:8d:51:48:7e:59: 55:fb:7c:b0:5a:cc:d7:7a:c8:c8:ab:70:3a:0a:48:77:9e:29: 80:ee:bc:de:d9:bb:25:44:4e:93:98:04:07:73:c0:52:35:6c: 99:9b:06:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsAS+yM/G8jv1etnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWJjODgyMDctZTdjNy00NTNlLWE0YWItNzdiNzIxNTJj MzNhMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk ODQ2NmY0MWMtOGQ1OC00N2I3LWJmZGYtMDEzMzMyMzc2ZmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEaMZb5sS5145jxw/bncVrjURlRlPWIjZ2PZ W8y/9H7k9bXXCZW9Fbj4gyrduuhuxkvv+8IcDr7yVA19PZEVaxLsLWlOVx8uBwSe mLVUFb0JUX8IlM35/4t+j4LeR33HIBsRUXSsfN1kLbrjZtllhpUMp0dwU2uuztHr a1b0KCRy3x+1RUOdPHJ4a8CuQljutIAMTtUk0L0yrhn2wEWpCYfxV4SuFZjtdads YoI0n73Z6Sw39NxNV79AbdSEUpM1yns2PJhquH8DgSXj+E2wDt+uGxcBzIX9rgJ8 HJXKS8WohxJtDNEX2cffuv50L8I+xdjQGpnHEom2YpH8BTSBTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGaivSuYNyu6Ve5Yx5gp2Vj5wdQxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85YmM4 ODIwNy1lN2M3LTQ1M2UtYTRhYi03N2I3MjE1MmMzM2EvZjg1ZmY1ZTctYTMzOC0z ZDU3LWJjZmUtMDBhYzdlZjU0ZjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWJjODgyMDctZTdjNy00NTNlLWE0 YWItNzdiNzIxNTJjMzNhLzliYzg4MjA3LWU3YzctNDUzZS1hNGFiLTc3YjcyMTUy YzMzYS5jcmwwHwYDVR0jBBgwFoAUSTAeHE2iWcjFZa+Ue8VgdNKWIv8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85YmM4ODIwNy1lN2M3LTQ1M2UtYTRhYi03N2I3 MjE1MmMzM2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlRRGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvPtNuPzQGBvrNLiVbKJP/y4lfqL/2dccZkuhuMZMaB584O5kWh1rkx QXsXqZWBgDN8+/Fje+eNu99JXFj7f6iwmkeFCQi11fnmetTF+KpTlTvJIF6BgOM2 cnUJnQrB70k6N4XXCfhGpz+RCc8e+DqLXc+53yYsDCFU1XXA0o+ByjxLrM2pAK1/ VGrHe0mIyXkvn9ker5OdjtQxoRB/FZYK+lcgWDXc8lgB4iuMt6QfLUX50Lxf0rF6 I4mEF6q081y6IqA5t5VdnpRgpjsXTNecndCNUUh+WVX7fLBazNd6yMircDoKSHee KYDuvN7ZuyVETpOYBAdzwFI1bJmbBgA= -----END CERTIFICATE-----Generated at Mon Oct 13 22:09:12 2025 by rpki-client