$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/babc6df1-c51d-3e82-84c7-c1423a14e9c0.roa File: babc6df1-c51d-3e82-84c7-c1423a14e9c0.roa (raw, json) Hash identifier: crcA0XcEZ6QL0qzaBvWArC2KgzgAXvjVKnUEnrrw6S4= Subject key identifier: 19:F3:88:72:78:30:F0:F5:B1:7D:18:A8:C8:EE:F2:D5:07:69:B9:B4 Certificate issuer: /CN=811bd2ac-c53d-40a6-bfa4-275c2241af63 Certificate serial: 010D0C9F4328584B5E3269730E288E1B247ACDE0 Authority key identifier: 2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/babc6df1-c51d-3e82-84c7-c1423a14e9c0.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 6939 IP address blocks: 217.149.103.0/24 maxlen: 24 2602:fb1b:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5e:32:69:73:0e:28:8e:1b:24:7a:cd:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=811bd2ac-c53d-40a6-bfa4-275c2241af63 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=4d46bfc1-879b-413f-987f-176c09558930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d3:7b:79:87:96:ad:6d:4a:4d:33:81:e3:36: 2a:0e:8f:90:6d:bb:58:5e:9c:30:11:9b:9a:2c:a5: 34:cf:14:ec:d2:93:9f:d7:14:89:0d:8b:f6:2f:e1: 91:97:02:a3:24:50:2c:63:d9:19:93:f2:d8:5f:37: 4b:0f:c2:4e:17:9c:a6:c3:d5:54:e1:e6:68:86:91: 97:e6:01:c8:2c:ef:68:af:c9:99:8c:9b:3b:da:32: 9d:d2:2e:3a:bc:46:a7:9d:bb:4d:27:16:20:82:fb: 22:bf:68:a8:e8:e6:2b:e5:77:08:db:04:7f:d2:3a: ae:a7:23:ba:ee:de:e5:6c:3e:b8:c9:41:ed:fc:f8: f2:6b:08:f4:f4:05:39:76:a6:7e:a8:35:36:4a:48: 6d:7c:03:59:f5:8c:56:a5:be:03:ce:95:65:23:e3: 7d:44:28:eb:45:18:4b:4d:ab:15:ba:98:b8:71:5b: 95:da:7d:3a:65:47:4a:0e:49:8f:62:c1:99:4b:be: 40:99:4c:3c:b4:ed:5e:8b:dc:f6:ca:fa:d4:7c:6e: 6c:aa:0a:78:99:fe:e1:51:64:45:72:01:6a:f7:a5: 77:43:89:93:e9:0e:9a:6e:b5:30:db:f8:b8:12:e6: 25:e2:9e:47:ad:3c:9a:01:de:5a:31:84:ac:70:08: 34:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:F3:88:72:78:30:F0:F5:B1:7D:18:A8:C8:EE:F2:D5:07:69:B9:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/babc6df1-c51d-3e82-84c7-c1423a14e9c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.crl X509v3 Authority Key Identifier: keyid:2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer sbgp-ipAddrBlock: critical IPv4: 217.149.103.0/24 IPv6: 2602:fb1b:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:05:40:22:1a:53:95:22:38:91:a9:a3:9d:84:5a:92:b7:85: 3b:af:6c:7f:52:fc:a9:81:17:eb:b1:12:77:f7:88:19:98:20: 22:e0:44:ca:0b:33:37:5b:4c:ab:1e:03:58:09:cd:cd:b3:82: 7d:55:28:ea:97:bf:c5:60:96:f0:f0:9a:59:c9:e9:ef:87:0f: d9:3c:60:4d:f5:83:3a:17:20:1d:c6:dc:01:f0:a4:65:5a:ff: 04:1d:82:c3:90:3a:6c:93:c3:52:e3:8c:b5:10:c3:18:16:8f: 95:ad:f3:ba:db:38:0d:a8:0f:3a:e0:1a:89:ac:17:e9:53:20: a9:fb:08:8e:14:fe:5c:a8:eb:9e:b7:7f:fd:b9:2e:1b:46:8b: cf:be:78:2a:8c:08:45:b0:a8:14:52:af:cb:43:b8:57:f3:3d: 15:89:22:1c:f4:b7:42:1f:e6:b8:f9:67:9c:8f:f2:9c:3b:ed: f1:4b:44:d5:71:ce:37:0b:17:7b:f3:54:8e:f0:b3:77:f1:be: e5:24:6e:8c:d5:2a:e4:6d:55:93:ef:a7:af:99:98:fa:66:3e: 9c:4b:a7:b0:6a:1f:f3:c9:2d:dc:ea:9e:4f:1b:78:b4:9a:8f: e3:75:e9:f5:c0:7d:35:48:f5:66:85:8b:96:5d:5b:0a:3f:df: cf:26:e3:10 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEteMmlzDiiOGyR6zeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODExYmQyYWMtYzUzZC00MGE2LWJmYTQtMjc1YzIyNDFh ZjYzMB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk NGQ0NmJmYzEtODc5Yi00MTNmLTk4N2YtMTc2YzA5NTU4OTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtN7eYeWrW1KTTOB4zYqDo+QbbtYXpwwEZua LKU0zxTs0pOf1xSJDYv2L+GRlwKjJFAsY9kZk/LYXzdLD8JOF5ymw9VU4eZohpGX 5gHILO9or8mZjJs72jKd0i46vEannbtNJxYggvsiv2io6OYr5XcI2wR/0jqupyO6 7t7lbD64yUHt/Pjyawj09AU5dqZ+qDU2SkhtfANZ9YxWpb4DzpVlI+N9RCjrRRhL TasVupi4cVuV2n06ZUdKDkmPYsGZS75AmUw8tO1ei9z2yvrUfG5sqgp4mf7hUWRF cgFq96V3Q4mT6Q6abrUw2/i4EuYl4p5HrTyaAd5aMYSscAg0jwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFBnziHJ4MPD1sX0YqMju8tUHabm0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84MTFi ZDJhYy1jNTNkLTQwYTYtYmZhNC0yNzVjMjI0MWFmNjMvYmFiYzZkZjEtYzUxZC0z ZTgyLTg0YzctYzE0MjNhMTRlOWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODExYmQyYWMtYzUzZC00MGE2LWJm YTQtMjc1YzIyNDFhZjYzLzgxMWJkMmFjLWM1M2QtNDBhNi1iZmE0LTI3NWMyMjQx YWY2My5jcmwwHwYDVR0jBBgwFoAUL6VyaMN3iHmP21Xe0bvHxqiGXYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84MTFiZDJhYy1jNTNkLTQwYTYtYmZhNC0yNzVj MjI0MWFmNjMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQA2ZVnMA8E AgACMAkDBwAmAvsbAAIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEARQVAIhpTlSI4kamjnYRakreFO69sf1L8 qYEX67ESd/eIGZggIuBEygszN1tMqx4DWAnNzbOCfVUo6pe/xWCW8PCaWcnp74cP 2TxgTfWDOhcgHcbcAfCkZVr/BB2Cw5A6bJPDUuOMtRDDGBaPla3zuts4DagPOuAa iawX6VMgqfsIjhT+XKjrnrd//bkuG0aLz754KowIRbCoFFKvy0O4V/M9FYkiHPS3 Qh/muPlnnI/ynDvt8UtE1XHONwsXe/NUjvCzd/G+5SRujNUq5G1Vk++nr5mY+mY+ nEunsGof88kt3OqeTxt4tJqP43Xp9cB9NUj1ZoWLll1bCj/fzybjEA== -----END CERTIFICATE-----Generated at Mon Oct 20 09:24:59 2025 by rpki-client