$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/48c11378-660d-3999-a7c5-2245378b1910.roa File: 48c11378-660d-3999-a7c5-2245378b1910.roa (raw, json) Hash identifier: sXLbnRBL7+gf5PqZ7+f33SFlZBYLtaxX3vKJ2N0Ox+U= Subject key identifier: 4E:73:3C:8E:1C:D5:5D:38:D3:07:0D:03:64:B5:DF:72:1B:1A:43:10 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584B80B7509CD96031FDFB9DD4C4 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/48c11378-660d-3999-a7c5-2245378b1910.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 9009 IP address blocks: 149.143.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:50:9c:d9:60:31:fd:fb:9d:d4:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=1072cb9a-a4e3-4c34-92b4-590a916ef04d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:eb:43:47:2a:79:05:4f:8c:91:17:a4:7c:55: b8:6d:60:83:36:21:2f:25:78:d3:8d:79:6c:af:30: 6d:91:dd:c5:14:ab:d3:61:5e:fe:13:74:50:ab:14: fa:a1:26:0e:71:d8:2d:e0:f3:0a:be:e2:1e:87:17: 6b:23:6b:8d:98:1d:4e:59:11:ab:2f:ed:4b:a8:d8: c3:b4:d9:fd:b5:05:54:21:29:09:a1:51:13:3e:16: a9:14:b9:50:ba:f8:87:1d:1a:a5:14:8a:61:52:89: d8:7a:e0:51:fd:08:63:7e:bb:4b:a7:57:44:86:62: ef:61:07:f8:fa:84:ee:0e:42:26:d6:f9:6c:dc:f5: 79:b4:f2:f9:0a:43:93:c3:39:74:b5:cb:6a:3d:19: 79:ea:f0:1f:74:80:37:62:17:5f:8d:25:ff:a1:5e: ec:fd:42:95:7b:f4:f1:fc:e7:10:85:52:24:c5:d2: 82:a4:fc:6b:8f:b6:b5:87:43:b0:ad:56:63:6d:65: 64:f5:ab:c4:c3:bb:db:4b:84:33:cd:67:34:98:bc: e3:96:33:4b:e9:c9:f7:c5:21:c8:fd:d1:bf:90:9e: 19:3a:a7:d1:af:af:02:94:27:60:c1:7b:74:83:f5: 0f:53:17:1f:d3:d9:06:90:ae:b3:de:57:66:dd:07: 22:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:73:3C:8E:1C:D5:5D:38:D3:07:0D:03:64:B5:DF:72:1B:1A:43:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/48c11378-660d-3999-a7c5-2245378b1910.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:23:3a:49:0c:91:f7:22:11:d8:77:a1:e6:68:f0:23:3f:8b: 95:26:73:68:16:22:a8:3f:2d:da:85:0e:e1:8a:e0:2a:47:22: 04:88:08:3f:40:ef:69:27:34:aa:75:31:45:10:3b:42:3e:5b: b2:49:46:ad:8b:ca:8e:60:22:0a:11:4e:55:ee:8f:e6:ec:c8: 5c:ce:f5:5a:d9:31:f8:3c:77:c6:2c:ed:c2:f1:ce:62:d7:a0: 24:94:24:b8:be:f4:a9:22:e7:6b:34:80:f6:32:58:85:12:9c: 7f:68:a0:65:02:9b:a0:e4:4a:dc:fa:e8:b6:49:1d:77:f4:07: 8a:2e:a2:2f:e0:6c:19:99:24:e6:6a:35:e6:de:2d:15:0c:81: 89:c2:be:c3:03:2b:b2:38:00:25:f4:8a:bb:af:c8:fe:9d:5f: 51:5b:b7:1c:64:d4:26:3d:d7:1c:39:f0:a9:b9:9f:79:5d:5f: 7d:0a:fe:68:b2:d6:55:c0:70:c3:1b:8b:ce:e9:e0:ce:3b:07: 72:72:93:ab:b9:a3:0d:5b:54:88:96:3b:37:26:a7:04:69:26: ee:3d:3e:6b:7b:62:87:39:bd:06:e6:ee:f1:84:1c:fe:92:2a: 0e:5f:8d:ec:5f:e5:60:41:0d:c7:10:e1:3f:85:a2:7e:fc:48: 9b:e3:be:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuAt1Cc2WAx/fud1MQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk MTA3MmNiOWEtYTRlMy00YzM0LTkyYjQtNTkwYTkxNmVmMDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxetDRyp5BU+MkRekfFW4bWCDNiEvJXjTjXls rzBtkd3FFKvTYV7+E3RQqxT6oSYOcdgt4PMKvuIehxdrI2uNmB1OWRGrL+1LqNjD tNn9tQVUISkJoVETPhapFLlQuviHHRqlFIphUonYeuBR/QhjfrtLp1dEhmLvYQf4 +oTuDkIm1vls3PV5tPL5CkOTwzl0tctqPRl56vAfdIA3YhdfjSX/oV7s/UKVe/Tx /OcQhVIkxdKCpPxrj7a1h0OwrVZjbWVk9avEw7vbS4QzzWc0mLzjljNL6cn3xSHI /dG/kJ4ZOqfRr68ClCdgwXt0g/UPUxcf09kGkK6z3ldm3QciBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5zPI4c1V040wcNA2S133IbGkMQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNDhjMTEzNzgtNjYwZC0z OTk5LWE3YzUtMjI0NTM3OGIxOTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlY+xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgjOkkMkfciEdh3oeZo8CM/i5Umc2gWIqg/LdqFDuGK4CpHIgSICD9A 72knNKp1MUUQO0I+W7JJRq2Lyo5gIgoRTlXuj+bsyFzO9VrZMfg8d8Ys7cLxzmLX oCSUJLi+9Kki52s0gPYyWIUSnH9ooGUCm6DkStz66LZJHXf0B4ouoi/gbBmZJOZq NebeLRUMgYnCvsMDK7I4ACX0iruvyP6dX1Fbtxxk1CY91xw58Km5n3ldX30K/miy 1lXAcMMbi87p4M47B3Jyk6u5ow1bVIiWOzcmpwRpJu49Pmt7Yoc5vQbm7vGEHP6S Kg5fjexf5WBBDccQ4T+Fon78SJvjviM= -----END CERTIFICATE-----Generated at Mon Oct 20 04:17:41 2025 by rpki-client