$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/1ca259cf-4951-3a1d-8f0f-07070ad8f25b.roa File: 1ca259cf-4951-3a1d-8f0f-07070ad8f25b.roa (raw, json) Hash identifier: jit13fE3aB8xYUsxeoq7xIAD0JWNSyNHQa988NnTFWE= Subject key identifier: 17:BC:AC:86:4C:04:6C:F1:6F:18:AA:24:1E:8F:4C:45:D3:20:22:AA Certificate issuer: /CN=811bd2ac-c53d-40a6-bfa4-275c2241af63 Certificate serial: 010D0C9F4328584B44B1B78CA3299ADF6C6D93C0 Authority key identifier: 2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/1ca259cf-4951-3a1d-8f0f-07070ad8f25b.roa Signing time: Sun 21 Sep 2025 13:00:42 +0000 ROA not before: Sun 21 Sep 2025 13:00:42 +0000 ROA not after: Sat 20 Dec 2025 14:00:42 +0000 asID: 400597 IP address blocks: 217.149.96.0/24 maxlen: 24 2602:fb1b:60::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:44:b1:b7:8c:a3:29:9a:df:6c:6d:93:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=811bd2ac-c53d-40a6-bfa4-275c2241af63 Validity Not Before: Sep 21 13:00:42 2025 GMT Not After : Dec 20 14:00:42 2025 GMT Subject: CN=aa76453d-5fe5-41f7-bee0-e21bd58d12a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ec:6e:51:b9:fd:4a:73:60:b3:e8:c4:6b:48: 08:40:05:85:61:c6:e5:99:01:36:e1:df:81:33:a8: e7:c3:cd:d0:13:67:be:43:f4:f2:73:1f:c4:7b:a9: 50:ad:78:6e:7d:6f:3f:e7:2f:c5:a3:03:6d:01:b7: a6:ef:14:de:af:f4:4a:46:89:3e:71:7d:f1:f6:70: 33:94:07:2d:b9:2d:0c:ff:81:87:9f:62:0a:e4:70: 60:68:3f:9a:bb:c6:a6:40:af:73:8a:41:4c:39:a3: f9:50:17:b3:05:dd:12:b2:d3:bc:ff:d3:a6:e7:72: 86:74:01:8b:be:84:98:a3:c4:a9:28:9c:13:e1:45: ac:4f:38:aa:ec:da:81:02:ac:80:99:39:88:bf:6b: ee:f9:35:f8:81:54:5f:47:b3:4d:73:1c:e2:93:6b: e2:98:bb:f1:b9:3b:f8:82:26:85:dc:ce:a7:d2:35: fa:21:7f:e8:4f:73:42:e4:61:51:6e:06:a7:c3:8a: 06:cb:8d:bd:c6:dd:74:22:90:0f:87:10:8d:bd:03: 93:2a:44:a2:a4:74:88:cc:3d:c3:cf:7e:5b:4e:2d: 2b:69:9c:bb:02:3d:9c:01:1b:3f:e4:68:75:65:4e: 49:03:ad:68:7b:5c:02:e7:a9:ef:c6:64:6a:61:68: 2a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:BC:AC:86:4C:04:6C:F1:6F:18:AA:24:1E:8F:4C:45:D3:20:22:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/1ca259cf-4951-3a1d-8f0f-07070ad8f25b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.crl X509v3 Authority Key Identifier: keyid:2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer sbgp-ipAddrBlock: critical IPv4: 217.149.96.0/24 IPv6: 2602:fb1b:60::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:3c:85:10:67:c6:02:1a:d0:fc:0c:bb:8a:fb:ec:82:8b:7b: 0b:ac:85:cc:a0:75:3d:25:fa:c1:66:76:8f:29:5d:d2:9a:4e: 43:6e:a1:03:6d:ef:60:4d:70:d9:6d:c7:05:ff:a5:6e:e6:6f: 1f:d1:d8:cb:ce:c0:84:04:3f:3e:13:53:d8:94:57:0c:79:bf: ee:3b:75:24:58:2d:0b:6e:1f:72:38:25:5f:d3:a7:3f:cc:17: fd:a4:e8:b3:ab:ae:ff:01:a7:7e:9b:5d:7d:3a:20:11:d2:b2: f3:21:2e:ac:a3:38:a5:7e:90:a5:29:3a:a4:0a:87:c8:ea:c5: 76:7c:8c:18:5b:7f:15:df:09:f5:e4:f1:14:84:2f:10:5b:21: b5:cd:8a:ba:89:2d:af:6f:52:e4:68:f4:35:91:50:73:78:27: b1:3a:c7:63:9f:65:12:c3:18:d6:47:b9:21:b0:d1:1b:e2:b4: c3:35:5c:5c:6d:8e:91:6e:c4:82:81:ec:b0:17:2a:7a:e6:c4: 8b:11:ac:57:78:4b:ae:97:c2:bd:be:57:dd:55:e8:57:5d:c0: c9:1d:d0:61:6a:d8:47:6d:38:4a:6c:d5:a6:c7:21:97:66:c4: dd:ca:bf:d6:64:54:40:f8:e6:ee:41:e4:37:5b:f9:dc:a7:1a: 26:d5:0e:1c -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEtEsbeMoyma32xtk8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODExYmQyYWMtYzUzZC00MGE2LWJmYTQtMjc1YzIyNDFh ZjYzMB4XDTI1MDkyMTEzMDA0MloXDTI1MTIyMDE0MDA0MlowLzEtMCsGA1UEAxMk YWE3NjQ1M2QtNWZlNS00MWY3LWJlZTAtZTIxYmQ1OGQxMmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+xuUbn9SnNgs+jEa0gIQAWFYcblmQE24d+B M6jnw83QE2e+Q/Tycx/Ee6lQrXhufW8/5y/FowNtAbem7xTer/RKRok+cX3x9nAz lActuS0M/4GHn2IK5HBgaD+au8amQK9zikFMOaP5UBezBd0SstO8/9Om53KGdAGL voSYo8SpKJwT4UWsTziq7NqBAqyAmTmIv2vu+TX4gVRfR7NNcxzik2vimLvxuTv4 giaF3M6n0jX6IX/oT3NC5GFRbganw4oGy429xt10IpAPhxCNvQOTKkSipHSIzD3D z35bTi0raZy7Aj2cARs/5Gh1ZU5JA61oe1wC56nvxmRqYWgqaQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFBe8rIZMBGzxbxiqJB6PTEXTICKqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84MTFi ZDJhYy1jNTNkLTQwYTYtYmZhNC0yNzVjMjI0MWFmNjMvMWNhMjU5Y2YtNDk1MS0z YTFkLThmMGYtMDcwNzBhZDhmMjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODExYmQyYWMtYzUzZC00MGE2LWJm YTQtMjc1YzIyNDFhZjYzLzgxMWJkMmFjLWM1M2QtNDBhNi1iZmE0LTI3NWMyMjQx YWY2My5jcmwwHwYDVR0jBBgwFoAUL6VyaMN3iHmP21Xe0bvHxqiGXYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84MTFiZDJhYy1jNTNkLTQwYTYtYmZhNC0yNzVj MjI0MWFmNjMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQA2ZVgMA8E AgACMAkDBwAmAvsbAGAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAWjyFEGfGAhrQ/Ay7ivvsgot7C6yFzKB1 PSX6wWZ2jyld0ppOQ26hA23vYE1w2W3HBf+lbuZvH9HYy87AhAQ/PhNT2JRXDHm/ 7jt1JFgtC24fcjglX9OnP8wX/aTos6uu/wGnfptdfTogEdKy8yEurKM4pX6QpSk6 pAqHyOrFdnyMGFt/Fd8J9eTxFIQvEFshtc2Kuoktr29S5Gj0NZFQc3gnsTrHY59l EsMY1ke5IbDRG+K0wzVcXG2OkW7EgoHssBcqeubEixGsV3hLrpfCvb5X3VXoV13A yR3QYWrYR204SmzVpschl2bE3cq/1mRUQPjm7kHkN1v53KcaJtUOHA== -----END CERTIFICATE-----Generated at Mon Oct 20 05:30:45 2025 by rpki-client