$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/13b87a3b-b027-35b1-83fb-fd66e92f0e65.roa File: 13b87a3b-b027-35b1-83fb-fd66e92f0e65.roa (raw, json) Hash identifier: +hsBjJWL7ABlMudO9lJ+PyUJdyAQgoV0p24NL8oYQGE= Subject key identifier: C3:F0:CB:32:D3:B4:EB:15:2A:C9:49:57:FD:DF:59:72:8D:65:53:BF Certificate issuer: /CN=afa8b068-97b2-4c52-904f-d78c4e46fb8c Certificate serial: 010D0C9F4328584B0B769DE205567FCC6B59F080 Authority key identifier: 06:8A:44:11:76:8D:69:EA:42:55:0C:15:AD:78:BB:AD:A7:F1:62:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/13b87a3b-b027-35b1-83fb-fd66e92f0e65.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 1007 IP address blocks: 149.112.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/afa8b068-97b2-4c52-904f-d78c4e46fb8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/afa8b068-97b2-4c52-904f-d78c4e46fb8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:9d:e2:05:56:7f:cc:6b:59:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afa8b068-97b2-4c52-904f-d78c4e46fb8c Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=1c23b4d9-cea8-460b-bd77-a217d0e7f450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:19:db:62:b2:1b:14:fc:c8:4b:68:2e:2a:4d: 43:7b:21:b9:e4:8b:c1:a7:06:fb:3c:13:30:f9:45: 84:f7:b8:4a:ae:1d:a5:9c:b9:c4:4e:5e:63:df:10: 17:8b:fd:d3:4b:b4:46:40:ca:af:88:8f:ac:2f:bc: 1d:35:67:ca:25:5d:6a:07:8b:6a:4d:2f:d2:2c:42: d1:ea:57:d4:f5:fe:ef:ae:29:ff:36:eb:52:e3:04: b8:aa:be:a4:60:be:f8:e9:51:ac:d3:78:7f:cc:bb: cb:0c:4b:07:22:58:4a:ba:82:cd:81:73:b5:4d:62: c6:31:75:dd:92:20:d0:6d:94:44:75:83:21:23:93: 34:79:43:87:2a:3c:36:62:6a:e9:20:2f:72:35:8f: a4:f5:6f:3e:e0:b8:75:fe:ed:d0:62:b7:51:55:39: 6e:c7:fb:e1:2f:94:2d:bf:0a:30:72:f7:90:06:26: 32:e8:f8:f3:3a:ea:1e:53:9a:b0:31:a7:7e:f9:28: e6:71:9f:1b:dd:e7:32:81:c1:26:66:3a:34:ea:45: ec:f1:53:68:98:11:46:72:7f:35:9b:31:87:d4:a4: 08:96:8b:eb:93:e0:69:b4:d3:c5:a6:2c:45:c6:77: c5:9f:b8:71:1f:e1:02:20:67:69:fc:d0:cf:7d:84: eb:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:F0:CB:32:D3:B4:EB:15:2A:C9:49:57:FD:DF:59:72:8D:65:53:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/13b87a3b-b027-35b1-83fb-fd66e92f0e65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/afa8b068-97b2-4c52-904f-d78c4e46fb8c.crl X509v3 Authority Key Identifier: keyid:06:8A:44:11:76:8D:69:EA:42:55:0C:15:AD:78:BB:AD:A7:F1:62:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c.cer sbgp-ipAddrBlock: critical IPv4: 149.112.46.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:1e:cb:49:42:77:f4:ba:b3:8d:2d:a2:40:d5:cc:92:c1:2e: b3:fc:34:29:10:34:8f:f2:59:cf:85:a1:b8:7c:5c:18:16:c2: dc:0a:ef:34:f2:c6:0d:e3:36:1b:68:89:3d:39:7f:de:ac:8b: c7:6f:ab:ff:ea:d1:08:75:c8:36:54:f3:c0:5a:29:4b:33:dd: 1b:c9:8d:da:7b:21:7f:38:94:77:63:49:52:01:d1:27:cb:75: 23:cd:28:44:88:38:fe:04:44:dc:5a:b2:d8:89:16:84:36:e9: 96:4d:e8:38:1d:b4:44:bf:fe:64:ff:c8:c4:44:48:8d:7b:a1: 7c:b0:dc:ce:dc:54:7b:79:8a:cd:6d:1c:6f:bd:8c:51:80:ef: 47:f5:1f:1f:1b:ab:51:92:e6:7d:02:99:2f:8a:77:d8:49:56: ce:18:99:24:e7:e0:8f:bf:f3:1e:1e:82:f1:a5:79:ef:d3:86: 8c:48:7d:7d:a4:7e:9d:c1:e4:d0:af:e8:c2:c9:e3:b9:06:34: f6:32:01:71:47:77:56:4a:5d:20:ee:8a:b1:7a:4b:c4:9a:cb: ac:8e:f9:3b:50:a5:04:fd:bc:c2:30:c9:c2:4e:9f:f2:fe:ac: 5c:e2:a5:de:4c:19:77:80:3b:c4:dd:a1:d1:fe:2e:ac:22:a8: 75:8e:8f:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdp3iBVZ/zGtZ8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZhOGIwNjgtOTdiMi00YzUyLTkwNGYtZDc4YzRlNDZm YjhjMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk MWMyM2I0ZDktY2VhOC00NjBiLWJkNzctYTIxN2QwZTdmNDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhnbYrIbFPzIS2guKk1DeyG55IvBpwb7PBMw +UWE97hKrh2lnLnETl5j3xAXi/3TS7RGQMqviI+sL7wdNWfKJV1qB4tqTS/SLELR 6lfU9f7vrin/NutS4wS4qr6kYL746VGs03h/zLvLDEsHIlhKuoLNgXO1TWLGMXXd kiDQbZREdYMhI5M0eUOHKjw2YmrpIC9yNY+k9W8+4Lh1/u3QYrdRVTlux/vhL5Qt vwowcveQBiYy6PjzOuoeU5qwMad++SjmcZ8b3ecygcEmZjo06kXs8VNomBFGcn81 mzGH1KQIlovrk+BptNPFpixFxnfFn7hxH+ECIGdp/NDPfYTrbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPwyzLTtOsVKslJV/3fWXKNZVO/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hZmE4 YjA2OC05N2IyLTRjNTItOTA0Zi1kNzhjNGU0NmZiOGMvMTNiODdhM2ItYjAyNy0z NWIxLTgzZmItZmQ2NmU5MmYwZTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWZhOGIwNjgtOTdiMi00YzUyLTkw NGYtZDc4YzRlNDZmYjhjL2FmYThiMDY4LTk3YjItNGM1Mi05MDRmLWQ3OGM0ZTQ2 ZmI4Yy5jcmwwHwYDVR0jBBgwFoAUBopEEXaNaepCVQwVrXi7rafxYlowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hZmE4YjA2OC05N2IyLTRjNTItOTA0Zi1kNzhj NGU0NmZiOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXAuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEey0lCd/S6s40tokDVzJLBLrP8NCkQNI/yWc+Fobh8XBgWwtwK7zTy xg3jNhtoiT05f96si8dvq//q0Qh1yDZU88BaKUsz3RvJjdp7IX84lHdjSVIB0SfL dSPNKESIOP4ERNxastiJFoQ26ZZN6DgdtES//mT/yMRESI17oXyw3M7cVHt5is1t HG+9jFGA70f1Hx8bq1GS5n0CmS+Kd9hJVs4YmSTn4I+/8x4egvGlee/ThoxIfX2k fp3B5NCv6MLJ47kGNPYyAXFHd1ZKXSDuirF6S8Say6yO+TtQpQT9vMIwycJOn/L+ rFzipd5MGXeAO8TdodH+LqwiqHWOj1c= -----END CERTIFICATE-----Generated at Mon Oct 20 23:31:05 2025 by rpki-client