$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/0be0cb03-91c4-3e48-8a57-742ceeeacdb7.roa File: 0be0cb03-91c4-3e48-8a57-742ceeeacdb7.roa (raw, json) Hash identifier: 8kJIVtotcVa0h8YIh8qlEWu9bKQTlgq4ZDdrYjTYOYo= Subject key identifier: 58:EB:E3:2B:A5:12:78:B8:FC:8D:08:0E:9C:E9:B4:0F:70:D1:C3:CA Certificate issuer: /CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7 Certificate serial: 010D0C9F4328584AD3A110DBA8F7D62A0541A860 Authority key identifier: 65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/0be0cb03-91c4-3e48-8a57-742ceeeacdb7.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 0 IP address blocks: 149.112.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a1:10:db:a8:f7:d6:2a:05:41:a8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=c7a32b63-befa-4220-8cb7-4f1de9ac817d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c8:72:89:f6:48:b7:a3:4a:09:70:ab:e1:0c: 0f:a3:d4:b6:f9:1f:5c:5e:bb:5b:a9:5d:e3:62:78: d1:52:c4:9a:e9:f3:94:c5:9b:48:b1:be:83:e1:5b: a7:02:d4:81:4b:e5:8e:fe:d7:7e:04:f9:53:77:fa: b5:b2:f4:db:0a:c5:ab:aa:92:fa:43:ce:e6:a8:ea: c4:0c:a8:ac:db:5d:fe:35:d5:be:e3:10:7f:51:52: f0:bf:16:1c:89:7f:cc:35:a9:66:1e:97:98:10:06: af:6e:ab:ba:56:90:50:46:6b:6f:11:8a:d1:ba:db: 9f:35:24:26:95:5f:c8:13:d2:2e:3f:43:4a:75:76: 5e:21:2b:7d:fd:fd:21:1a:92:f0:8a:5e:76:df:7a: 6c:9d:6f:14:fd:81:c5:85:1e:a3:7e:98:9b:de:2c: ac:12:67:33:15:f3:50:6a:e0:c1:ca:45:4a:b4:66: ec:15:83:8f:46:93:e2:ef:c7:72:be:d1:f6:12:e1: 60:3d:96:66:17:82:c0:79:b5:3d:a8:f0:61:42:aa: 9f:34:43:e0:98:b9:71:f4:27:9f:19:74:7e:13:9e: f0:7f:ac:0e:fc:a0:6f:cb:63:f0:62:a3:91:2e:c3: 28:de:2d:28:ec:6a:0f:fd:40:88:af:ba:fc:e0:c5: 76:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:EB:E3:2B:A5:12:78:B8:FC:8D:08:0E:9C:E9:B4:0F:70:D1:C3:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/0be0cb03-91c4-3e48-8a57-742ceeeacdb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.crl X509v3 Authority Key Identifier: keyid:65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer sbgp-ipAddrBlock: critical IPv4: 149.112.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:ed:50:25:2c:d9:79:20:36:c4:b2:7b:5f:1d:47:81:59:08: 98:9c:67:26:ef:10:a8:1c:f5:93:43:8a:55:d5:46:78:f0:92: 60:f0:4f:14:93:3e:8a:db:5d:fe:5e:6d:d1:1b:e1:81:d0:f5: ee:0f:83:7d:60:14:0a:45:cc:94:96:16:db:a5:39:e6:ec:95: 7c:c1:17:47:bf:a2:44:37:48:16:9e:66:76:7f:8c:2b:d4:ac: a9:b6:05:4b:e0:d3:34:18:27:19:b3:fe:f6:47:2d:cf:be:1a: 99:3a:c6:59:a7:45:e4:77:29:64:fe:4d:e4:84:2d:62:b4:85: 56:d2:33:f6:61:60:d6:6b:24:3d:3b:39:e6:a7:13:d9:7a:89: 7c:70:8e:97:d7:9b:2f:9c:51:ab:53:ad:65:f7:37:75:c0:01: e2:81:68:c9:2a:b7:df:93:7c:1a:a7:31:1f:9a:b3:91:1d:bf: 0c:d5:bb:fd:b1:a2:24:ef:30:1b:c9:d6:e5:98:b5:0e:4a:52: 44:a0:b4:16:33:21:79:90:6b:3c:1b:b2:a1:53:68:29:04:e9: f5:6d:6f:1d:ed:94:02:47:2e:2b:20:0b:41:71:5b:57:90:6d: d2:81:ae:7a:e0:c1:8a:74:2f:73:70:92:62:80:73:40:df:ae: 9c:cf:03:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToRDbqPfWKgVBqGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVlNTE0MWUtYTA2OS00OTU1LThjNTUtNGRhNWRmZDM2 ZmE3MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk YzdhMzJiNjMtYmVmYS00MjIwLThjYjctNGYxZGU5YWM4MTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5MhyifZIt6NKCXCr4QwPo9S2+R9cXrtbqV3j YnjRUsSa6fOUxZtIsb6D4VunAtSBS+WO/td+BPlTd/q1svTbCsWrqpL6Q87mqOrE DKis213+NdW+4xB/UVLwvxYciX/MNalmHpeYEAavbqu6VpBQRmtvEYrRutufNSQm lV/IE9IuP0NKdXZeISt9/f0hGpLwil5233psnW8U/YHFhR6jfpib3iysEmczFfNQ auDBykVKtGbsFYOPRpPi78dyvtH2EuFgPZZmF4LAebU9qPBhQqqfNEPgmLlx9Cef GXR+E57wf6wO/KBvy2PwYqORLsMo3i0o7GoP/UCIr7r84MV26QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjr4yulEni4/I0IDpzptA9w0cPKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWU1 MTQxZS1hMDY5LTQ5NTUtOGM1NS00ZGE1ZGZkMzZmYTcvMGJlMGNiMDMtOTFjNC0z ZTQ4LThhNTctNzQyY2VlZWFjZGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGVlNTE0MWUtYTA2OS00OTU1LThj NTUtNGRhNWRmZDM2ZmE3LzRlZTUxNDFlLWEwNjktNDk1NS04YzU1LTRkYTVkZmQz NmZhNy5jcmwwHwYDVR0jBBgwFoAUZclCa6B2R1JWJymYeUgFgb61rrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWU1MTQxZS1hMDY5LTQ5NTUtOGM1NS00ZGE1 ZGZkMzZmYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXBEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXtUCUs2XkgNsSye18dR4FZCJicZybvEKgc9ZNDilXVRnjwkmDwTxST PorbXf5ebdEb4YHQ9e4Pg31gFApFzJSWFtulOebslXzBF0e/okQ3SBaeZnZ/jCvU rKm2BUvg0zQYJxmz/vZHLc++Gpk6xlmnReR3KWT+TeSELWK0hVbSM/ZhYNZrJD07 OeanE9l6iXxwjpfXmy+cUatTrWX3N3XAAeKBaMkqt9+TfBqnMR+as5EdvwzVu/2x oiTvMBvJ1uWYtQ5KUkSgtBYzIXmQazwbsqFTaCkE6fVtbx3tlAJHLisgC0FxW1eQ bdKBrnrgwYp0L3NwkmKAc0DfrpzPA58= -----END CERTIFICATE-----Generated at Sat Aug 23 10:19:49 2025 by rpki-client