$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/3d3f8886-9c9a-3c26-8c09-99569f5bf532.roa File: 3d3f8886-9c9a-3c26-8c09-99569f5bf532.roa (raw, json) Hash identifier: fPn/Rr7C2DNJp+3MzoqmRZjq8VKcmleFymwTlbpTJGU= Subject key identifier: 0D:0E:7A:0F:22:71:78:6F:11:A7:D1:4A:92:70:FF:10:52:DB:2F:A5 Certificate issuer: /CN=de4a1dfa-8867-4aef-a2e6-131e93add9f9 Certificate serial: 010D0C9F4328584B23318A607B4047E08E2C9480 Authority key identifier: BE:D8:56:32:EB:8C:A4:4A:C0:EA:03:98:A0:D1:F1:2F:29:91:03:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/3d3f8886-9c9a-3c26-8c09-99569f5bf532.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 153371 IP address blocks: 149.112.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/de4a1dfa-8867-4aef-a2e6-131e93add9f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/de4a1dfa-8867-4aef-a2e6-131e93add9f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:8a:60:7b:40:47:e0:8e:2c:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de4a1dfa-8867-4aef-a2e6-131e93add9f9 Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=3337536b-c356-4788-8d6b-515e88d9ba7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:28:db:7a:9b:1a:58:63:11:2d:cb:9c:00:e4: c7:ed:7f:8e:06:54:4b:47:09:b2:a6:ff:de:5d:f1: 0b:bd:32:57:ae:70:0d:3c:6a:dc:58:ca:9c:69:4d: 9b:29:82:f7:00:cd:09:1f:c9:70:1e:06:0e:8e:51: 2b:06:09:20:7b:94:bc:80:a8:58:30:9e:eb:63:25: a1:6f:84:0d:a2:d6:3f:14:9f:e5:cf:d1:7a:2e:fa: a9:6e:61:8d:6a:34:0b:b7:b6:5a:4d:ae:ae:07:86: 5f:0c:60:76:e2:b2:e9:df:07:f0:ea:2f:7f:11:d6: 98:f3:c2:a0:9e:9f:52:b0:c6:63:a3:6f:0d:30:0c: 22:54:92:34:e3:f3:a7:bb:e6:b8:0e:1c:28:b1:c5: 47:46:d0:b2:41:50:6a:f1:83:da:22:a2:0d:ab:c1: f1:a4:71:7d:ad:6e:7d:f1:39:b6:2d:cc:d0:9e:86: 0a:94:da:e7:87:64:30:fa:14:05:b8:d8:41:dd:17: ba:16:8b:10:8b:72:c8:9c:ad:40:62:72:4c:66:1a: 9a:29:09:e5:4a:5f:41:27:85:27:eb:74:30:b1:5d: ac:a3:ea:b2:ed:95:69:fb:78:d2:ae:9a:f4:f6:2b: d3:1c:ce:8f:00:47:58:e3:61:a9:c9:0e:3a:79:10: 91:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:0E:7A:0F:22:71:78:6F:11:A7:D1:4A:92:70:FF:10:52:DB:2F:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/3d3f8886-9c9a-3c26-8c09-99569f5bf532.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/de4a1dfa-8867-4aef-a2e6-131e93add9f9.crl X509v3 Authority Key Identifier: keyid:BE:D8:56:32:EB:8C:A4:4A:C0:EA:03:98:A0:D1:F1:2F:29:91:03:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9.cer sbgp-ipAddrBlock: critical IPv4: 149.112.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:24:0c:e6:da:c2:4f:d1:cc:27:cf:85:a1:8f:aa:ef:7f:96: dd:01:25:2b:c3:99:74:38:d3:a7:e6:3d:69:f5:da:c9:0f:74: dd:2e:20:b9:17:f5:1c:51:e6:8d:03:c0:77:b6:5f:68:41:ed: 49:70:ae:61:92:bf:1a:01:1b:1a:b7:a8:44:19:92:9b:5e:e7: 39:1f:67:88:bd:e0:46:96:53:c6:92:45:79:0f:85:05:b9:83: a7:44:9e:fe:89:c4:4d:98:57:33:b1:13:c0:75:3b:03:96:be: a7:ad:bf:be:92:03:e7:e3:75:fa:13:43:01:3a:17:ed:8a:31: b3:97:b8:4a:a7:dc:92:c2:97:e4:55:b1:8d:22:71:6e:76:9c: 21:c8:71:62:65:cc:76:4e:f3:8a:aa:98:48:e2:9e:2d:3e:ce: fe:8b:e9:86:bf:34:98:cd:71:d4:dc:1d:f9:4b:83:8e:7d:5c: 84:93:99:bb:c2:38:65:b9:96:69:46:d7:ab:47:83:d2:80:4a: bd:ba:56:39:66:88:3c:f0:d9:72:6b:01:28:df:2b:d9:dc:a4: 5f:3b:e1:d8:29:22:9d:5d:f7:81:26:7d:74:71:e0:17:86:76: 25:3c:83:57:f5:4f:e1:14:e8:35:37:40:23:12:92:e2:45:60: c4:d1:a2:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMYpge0BH4I4slIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU0YTFkZmEtODg2Ny00YWVmLWEyZTYtMTMxZTkzYWRk OWY5MB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk MzMzNzUzNmItYzM1Ni00Nzg4LThkNmItNTE1ZTg4ZDliYTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCjbepsaWGMRLcucAOTH7X+OBlRLRwmypv/e XfELvTJXrnANPGrcWMqcaU2bKYL3AM0JH8lwHgYOjlErBgkge5S8gKhYMJ7rYyWh b4QNotY/FJ/lz9F6LvqpbmGNajQLt7ZaTa6uB4ZfDGB24rLp3wfw6i9/EdaY88Kg np9SsMZjo28NMAwiVJI04/Onu+a4DhwoscVHRtCyQVBq8YPaIqINq8HxpHF9rW59 8Tm2LczQnoYKlNrnh2Qw+hQFuNhB3Re6FosQi3LInK1AYnJMZhqaKQnlSl9BJ4Un 63QwsV2so+qy7ZVp+3jSrpr09ivTHM6PAEdY42GpyQ46eRCRrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA0Oeg8icXhvEafRSpJw/xBS2y+lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kZTRh MWRmYS04ODY3LTRhZWYtYTJlNi0xMzFlOTNhZGQ5ZjkvM2QzZjg4ODYtOWM5YS0z YzI2LThjMDktOTk1NjlmNWJmNTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGU0YTFkZmEtODg2Ny00YWVmLWEy ZTYtMTMxZTkzYWRkOWY5L2RlNGExZGZhLTg4NjctNGFlZi1hMmU2LTEzMWU5M2Fk ZDlmOS5jcmwwHwYDVR0jBBgwFoAUvthWMuuMpErA6gOYoNHxLymRA8QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kZTRhMWRmYS04ODY3LTRhZWYtYTJlNi0xMzFl OTNhZGQ5ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXB0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUkDObawk/RzCfPhaGPqu9/lt0BJSvDmXQ406fmPWn12skPdN0uILkX 9RxR5o0DwHe2X2hB7UlwrmGSvxoBGxq3qEQZkpte5zkfZ4i94EaWU8aSRXkPhQW5 g6dEnv6JxE2YVzOxE8B1OwOWvqetv76SA+fjdfoTQwE6F+2KMbOXuEqn3JLCl+RV sY0icW52nCHIcWJlzHZO84qqmEjini0+zv6L6Ya/NJjNcdTcHflLg459XISTmbvC OGW5lmlG16tHg9KASr26VjlmiDzw2XJrASjfK9ncpF874dgpIp1d94EmfXRx4BeG diU8g1f1T+EU6DU3QCMSkuJFYMTRohw= -----END CERTIFICATE-----Generated at Mon Oct 20 00:05:31 2025 by rpki-client