$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/dd500401-147e-3a58-a77f-2dd06ab30b5f.roa File: dd500401-147e-3a58-a77f-2dd06ab30b5f.roa (raw, json) Hash identifier: SbO0LQz6Z+oCFo1KIxNHmP+2+dm5Z5c1qgYUn/9/yX0= Subject key identifier: AC:01:F7:1D:2D:4B:AC:37:26:53:D8:2C:62:66:20:3C:4E:E0:15:4D Certificate issuer: /CN=811bd2ac-c53d-40a6-bfa4-275c2241af63 Certificate serial: 010D0C9F4328584B44B1C06C998D9F8F8FBF2400 Authority key identifier: 2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/dd500401-147e-3a58-a77f-2dd06ab30b5f.roa Signing time: Sun 21 Sep 2025 13:00:42 +0000 ROA not before: Sun 21 Sep 2025 13:00:42 +0000 ROA not after: Sat 20 Dec 2025 14:00:42 +0000 asID: 400597 IP address blocks: 217.149.99.0/24 maxlen: 24 2602:fb1b:63::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:44:b1:c0:6c:99:8d:9f:8f:8f:bf:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=811bd2ac-c53d-40a6-bfa4-275c2241af63 Validity Not Before: Sep 21 13:00:42 2025 GMT Not After : Dec 20 14:00:42 2025 GMT Subject: CN=1d2f0e2b-c0f5-4478-95f6-0ed1405ca08b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2c:78:26:8d:5e:96:72:0d:66:a6:51:03:e4: 1d:5b:17:ac:92:b3:03:05:9e:36:7c:fe:ec:46:e4: 68:a7:4d:02:da:1e:78:f4:07:37:95:6f:7a:2e:82: e1:13:cb:4d:72:0b:3a:97:07:01:ad:4d:1f:c5:bf: 7a:9d:40:a6:c4:19:d7:56:d1:d5:e0:d1:a3:2d:91: e5:ed:4c:61:b1:36:2b:d4:4d:22:3d:2b:5b:1b:b5: ec:b7:c1:f5:d6:02:6b:b3:ce:82:2f:e2:05:1b:f4: f5:a4:f6:4c:35:c4:1e:9f:3e:09:91:d9:cb:f6:56: c9:69:fe:83:a3:97:21:7f:17:00:c4:37:bb:b3:d5: c1:b1:e1:a3:7a:49:0e:7f:25:23:b7:f2:d4:89:be: 95:49:1f:5e:26:a7:ab:b0:0b:68:1a:af:05:f0:4c: 33:c0:c8:75:ff:0b:10:da:a3:70:d5:32:69:03:04: d7:0a:8f:14:67:19:76:48:ab:94:ca:9a:a2:db:6d: 87:68:47:07:60:22:c3:af:f3:dd:90:e5:72:a0:f4: 43:37:34:20:ac:3b:6d:db:56:67:df:1b:16:72:c9: c0:e7:f9:2e:7a:fc:1f:37:de:0f:b6:80:1d:91:4b: 3b:99:64:61:20:df:fa:a8:ae:38:c2:91:a1:59:b4: a1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:01:F7:1D:2D:4B:AC:37:26:53:D8:2C:62:66:20:3C:4E:E0:15:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/dd500401-147e-3a58-a77f-2dd06ab30b5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.crl X509v3 Authority Key Identifier: keyid:2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer sbgp-ipAddrBlock: critical IPv4: 217.149.99.0/24 IPv6: 2602:fb1b:63::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:df:66:8d:8d:72:bc:46:35:ec:da:d1:9d:37:3e:1f:0c:6f: 97:91:95:2c:7a:4b:6b:e6:5c:5d:47:9b:41:81:a8:d9:91:45: b6:41:f4:25:60:11:b6:a1:d3:e2:58:5c:16:f9:cb:24:05:ac: d9:1d:33:0e:35:15:01:d2:0f:ed:99:94:90:37:c9:24:8e:49: d2:f7:f4:29:f9:64:5a:60:ee:06:04:1b:69:d8:4c:06:20:61: dc:4a:2f:ab:cd:fd:96:83:5d:c2:0a:54:2a:fb:5f:2c:4f:50: 06:fd:db:41:f8:be:e5:51:e7:68:be:60:64:b8:2c:a3:71:33: 6a:9d:c1:45:b9:21:17:87:90:c2:45:93:1c:f8:94:3e:e7:13: 38:ea:6c:f0:0d:a7:ba:f0:8b:dd:8c:54:a6:d1:27:64:af:95: 8a:77:15:15:2e:64:68:e8:f0:46:24:11:91:13:50:fa:28:e3: a1:63:44:49:c2:b1:61:cc:2e:84:03:a9:da:de:77:d8:cd:96: 20:de:27:8a:5b:db:00:89:b9:b8:27:c3:8f:06:3a:99:59:b7: 54:bd:e3:f3:09:16:06:1e:fe:8f:ce:1f:39:d5:8f:1b:d2:8b: 13:8e:3c:73:2a:e7:75:f7:ef:aa:19:8b:f5:d5:24:1d:ff:b2: 7d:54:f7:08 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEtEscBsmY2fj4+/JAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODExYmQyYWMtYzUzZC00MGE2LWJmYTQtMjc1YzIyNDFh ZjYzMB4XDTI1MDkyMTEzMDA0MloXDTI1MTIyMDE0MDA0MlowLzEtMCsGA1UEAxMk MWQyZjBlMmItYzBmNS00NDc4LTk1ZjYtMGVkMTQwNWNhMDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Sx4Jo1elnINZqZRA+QdWxeskrMDBZ42fP7s RuRop00C2h549Ac3lW96LoLhE8tNcgs6lwcBrU0fxb96nUCmxBnXVtHV4NGjLZHl 7UxhsTYr1E0iPStbG7Xst8H11gJrs86CL+IFG/T1pPZMNcQenz4JkdnL9lbJaf6D o5chfxcAxDe7s9XBseGjekkOfyUjt/LUib6VSR9eJqersAtoGq8F8EwzwMh1/wsQ 2qNw1TJpAwTXCo8UZxl2SKuUypqi222HaEcHYCLDr/PdkOVyoPRDNzQgrDtt21Zn 3xsWcsnA5/kuevwfN94PtoAdkUs7mWRhIN/6qK44wpGhWbShtQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFKwB9x0tS6w3JlPYLGJmIDxO4BVNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84MTFi ZDJhYy1jNTNkLTQwYTYtYmZhNC0yNzVjMjI0MWFmNjMvZGQ1MDA0MDEtMTQ3ZS0z YTU4LWE3N2YtMmRkMDZhYjMwYjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODExYmQyYWMtYzUzZC00MGE2LWJm YTQtMjc1YzIyNDFhZjYzLzgxMWJkMmFjLWM1M2QtNDBhNi1iZmE0LTI3NWMyMjQx YWY2My5jcmwwHwYDVR0jBBgwFoAUL6VyaMN3iHmP21Xe0bvHxqiGXYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84MTFiZDJhYy1jNTNkLTQwYTYtYmZhNC0yNzVj MjI0MWFmNjMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQA2ZVjMA8E AgACMAkDBwAmAvsbAGMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAh99mjY1yvEY17NrRnTc+Hwxvl5GVLHpL a+ZcXUebQYGo2ZFFtkH0JWARtqHT4lhcFvnLJAWs2R0zDjUVAdIP7ZmUkDfJJI5J 0vf0KflkWmDuBgQbadhMBiBh3Eovq839loNdwgpUKvtfLE9QBv3bQfi+5VHnaL5g ZLgso3Ezap3BRbkhF4eQwkWTHPiUPucTOOps8A2nuvCL3YxUptEnZK+VincVFS5k aOjwRiQRkRNQ+ijjoWNEScKxYcwuhAOp2t532M2WIN4nilvbAIm5uCfDjwY6mVm3 VL3j8wkWBh7+j84fOdWPG9KLE448cyrndffvqhmL9dUkHf+yfVT3CA== -----END CERTIFICATE-----Generated at Mon Oct 20 08:12:58 2025 by rpki-client