$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f06bd477-b8a8-473e-9210-c25d8e9ee781/a892cd3e-052c-3ff3-9d4b-9e4c78fad954.roa File: a892cd3e-052c-3ff3-9d4b-9e4c78fad954.roa (raw, json) Hash identifier: Ptnum55P8zmeeOL1HVghh0zJIt46Jl5ftEnr7Ri+01Q= Subject key identifier: 9B:F1:5B:B6:AA:6C:C0:A1:BF:58:AE:4A:13:5B:4F:68:E6:7B:05:A7 Certificate issuer: /CN=f06bd477-b8a8-473e-9210-c25d8e9ee781 Certificate serial: 010D0C9F4328584AF0F142C0187E942056E7C740 Authority key identifier: 76:D6:95:68:D1:DB:93:A7:99:AD:19:56:A7:AB:9B:69:46:3B:70:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f06bd477-b8a8-473e-9210-c25d8e9ee781.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f06bd477-b8a8-473e-9210-c25d8e9ee781/a892cd3e-052c-3ff3-9d4b-9e4c78fad954.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 401248 IP address blocks: 149.105.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f06bd477-b8a8-473e-9210-c25d8e9ee781/f06bd477-b8a8-473e-9210-c25d8e9ee781.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f06bd477-b8a8-473e-9210-c25d8e9ee781/f06bd477-b8a8-473e-9210-c25d8e9ee781.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f06bd477-b8a8-473e-9210-c25d8e9ee781.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:42:c0:18:7e:94:20:56:e7:c7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f06bd477-b8a8-473e-9210-c25d8e9ee781 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=80b17941-7224-4d1d-89ca-71a9cbd6453a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:07:46:ee:f9:6c:73:83:71:f4:9a:b8:77:99: 2b:d5:64:7a:af:b5:54:5e:ed:b1:d9:f5:5f:3e:d6: 4f:85:1f:a0:69:dc:a0:55:41:1a:b2:42:e8:98:84: e7:6e:63:5c:24:b9:95:99:c7:57:41:d6:06:1f:ad: e6:c1:03:f5:7b:e8:ea:b4:14:ac:33:b2:7c:ac:ab: 33:38:c4:49:e6:0f:23:5a:54:ab:75:5d:93:5b:38: aa:50:89:d9:c3:d9:c2:18:88:99:36:ab:6d:a1:70: 01:c7:77:16:c4:e0:bd:b1:03:8a:bb:78:b7:0c:7d: 48:ca:43:34:7c:98:1e:75:b3:8f:cf:ab:d7:0d:68: ba:27:e6:d8:26:d8:2f:44:b3:9f:78:e4:98:f0:59: e9:4a:8b:21:e9:84:dc:b9:ba:80:b3:83:90:de:68: fd:76:82:5d:a5:40:cc:60:fa:5d:3d:85:5c:e3:dc: 1e:36:ce:93:e9:37:8b:1d:ac:28:c9:af:26:c3:e9: 6f:00:f8:64:88:f7:4d:e0:8a:75:75:e4:a6:b1:50: 86:4f:db:bf:fc:17:bd:a5:b0:c3:6b:ef:a1:e9:49: d0:18:eb:60:12:cd:84:c4:d6:c7:34:ac:f6:0e:f8: 27:46:04:1b:8e:f7:3e:8a:f0:da:34:49:7b:fa:60: 30:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:F1:5B:B6:AA:6C:C0:A1:BF:58:AE:4A:13:5B:4F:68:E6:7B:05:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f06bd477-b8a8-473e-9210-c25d8e9ee781/a892cd3e-052c-3ff3-9d4b-9e4c78fad954.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f06bd477-b8a8-473e-9210-c25d8e9ee781/f06bd477-b8a8-473e-9210-c25d8e9ee781.crl X509v3 Authority Key Identifier: keyid:76:D6:95:68:D1:DB:93:A7:99:AD:19:56:A7:AB:9B:69:46:3B:70:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f06bd477-b8a8-473e-9210-c25d8e9ee781.cer sbgp-ipAddrBlock: critical IPv4: 149.105.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:6a:9b:35:49:85:c2:42:c1:a2:56:4c:58:36:e3:cb:60:d3: e0:9d:8f:b9:bc:43:43:95:97:db:6a:46:c0:da:5b:47:17:53: 8a:a1:81:74:2a:07:69:fd:22:81:90:ed:b7:c5:02:63:f5:00: 8a:0b:b0:63:46:3b:75:05:2d:8c:d0:d5:e9:b3:a8:a3:e2:2b: 48:84:e2:39:2d:99:99:8d:64:be:a6:2a:55:e5:ef:10:00:d1: 49:8f:97:12:f4:90:13:ef:65:c1:97:ef:1c:3e:64:2a:1e:7d: fd:53:c5:12:84:b8:01:1e:b8:4a:41:3d:1b:ca:f7:dc:29:c7: 37:2b:13:39:56:41:65:e0:3c:5d:a7:9c:0e:7d:28:95:93:22: 8f:7b:fb:03:27:70:ef:a6:a9:74:e7:f2:8b:8c:d8:0d:f5:71: bb:11:3a:f8:6f:31:49:72:95:84:f5:7e:e7:b6:c1:96:b8:88: 4f:3a:14:1b:f2:bc:98:49:26:b0:54:4b:0f:ad:8e:78:bd:c9: 1a:bd:33:cf:21:64:bc:d7:2a:ee:7b:60:a6:30:31:a2:b9:90: 21:fc:a9:31:e0:65:da:50:b7:52:25:da:ae:02:4a:8e:55:7f: cd:3d:ea:12:53:88:e1:9c:27:0e:49:77:3a:d1:2d:5c:60:48: 29:10:ce:21 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWErw8ULAGH6UIFbnx0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjA2YmQ0NzctYjhhOC00NzNlLTkyMTAtYzI1ZDhlOWVl NzgxMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk ODBiMTc5NDEtNzIyNC00ZDFkLTg5Y2EtNzFhOWNiZDY0NTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQdG7vlsc4Nx9Jq4d5kr1WR6r7VUXu2x2fVf PtZPhR+gadygVUEaskLomITnbmNcJLmVmcdXQdYGH63mwQP1e+jqtBSsM7J8rKsz OMRJ5g8jWlSrdV2TWziqUInZw9nCGIiZNqttoXABx3cWxOC9sQOKu3i3DH1IykM0 fJgedbOPz6vXDWi6J+bYJtgvRLOfeOSY8FnpSosh6YTcubqAs4OQ3mj9doJdpUDM YPpdPYVc49weNs6T6TeLHawoya8mw+lvAPhkiPdN4Ip1deSmsVCGT9u//Be9pbDD a++h6UnQGOtgEs2ExNbHNKz2DvgnRgQbjvc+ivDaNEl7+mAwUQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJvxW7aqbMChv1iuShNbT2jmewWnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9mMDZi ZDQ3Ny1iOGE4LTQ3M2UtOTIxMC1jMjVkOGU5ZWU3ODEvYTg5MmNkM2UtMDUyYy0z ZmYzLTlkNGItOWU0Yzc4ZmFkOTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZjA2YmQ0NzctYjhhOC00NzNlLTky MTAtYzI1ZDhlOWVlNzgxL2YwNmJkNDc3LWI4YTgtNDczZS05MjEwLWMyNWQ4ZTll ZTc4MS5jcmwwHwYDVR0jBBgwFoAUdtaVaNHbk6eZrRlWp6ubaUY7cDAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9mMDZiZDQ3Ny1iOGE4LTQ3M2UtOTIxMC1jMjVk OGU5ZWU3ODEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAlWkwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAPGqbNUmFwkLBolZMWDbjy2DT4J2PubxDQ5WX22pGwNpbRxdTiqGBdCoH af0igZDtt8UCY/UAiguwY0Y7dQUtjNDV6bOoo+IrSITiOS2ZmY1kvqYqVeXvEADR SY+XEvSQE+9lwZfvHD5kKh59/VPFEoS4AR64SkE9G8r33CnHNysTOVZBZeA8Xaec Dn0olZMij3v7Aydw76apdOfyi4zYDfVxuxE6+G8xSXKVhPV+57bBlriITzoUG/K8 mEkmsFRLD62OeL3JGr0zzyFkvNcq7ntgpjAxormQIfypMeBl2lC3UiXargJKjlV/ zT3qElOI4ZwnDkl3OtEtXGBIKRDOIQ== -----END CERTIFICATE-----Generated at Sat Aug 23 22:51:04 2025 by rpki-client