$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/61b43dc6-923a-309c-82be-50a0e60faeb2.roa File: 61b43dc6-923a-309c-82be-50a0e60faeb2.roa (raw, json) Hash identifier: xhOQdXnu0gz0jO6DF6JQafBJDrbFDC7ockfTPiN9skg= Subject key identifier: 60:1D:61:2F:40:94:4A:8F:4A:9D:42:63:B2:AE:99:B0:31:65:A1:75 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B6BC755F9AC0194E0BCB08E80 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/61b43dc6-923a-309c-82be-50a0e60faeb2.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 64267 IP address blocks: 149.20.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:55:f9:ac:01:94:e0:bc:b0:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=41c467f9-bc6b-4f03-a548-a2d4dc69ca11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:1b:65:64:e5:0f:45:5b:fe:81:63:38:a9:de: 68:56:25:ae:29:09:14:16:be:bd:11:63:8b:ac:cc: 02:81:5a:90:89:1c:fc:a8:99:44:ac:00:66:7b:89: a8:6d:7d:96:bb:71:ef:9f:16:5c:14:2c:46:a3:2f: 89:42:57:0f:30:0f:90:ba:1f:fd:cc:b5:56:d3:a9: de:61:23:33:bf:64:3a:c7:ef:52:0c:b7:55:35:76: b2:3c:44:85:ed:0c:1b:03:4b:a5:5d:d0:dc:9c:6e: b4:96:a2:61:b7:20:89:33:cc:13:21:08:dd:d4:f5: 08:98:83:21:22:4e:68:f3:93:a8:f0:b1:03:17:af: 1b:a0:ff:b0:ac:c8:9b:15:b7:ad:c8:29:82:2c:12: 35:56:b3:8f:58:a6:eb:89:4e:d9:22:d8:5a:8c:79: a9:5c:e7:0f:b4:f2:cb:19:df:77:43:3a:f9:8b:d0: 64:d8:b5:99:30:fd:d3:17:ac:f5:9d:ba:0f:95:c1: 9a:f3:04:78:1b:a4:24:db:d5:35:7a:9f:9a:87:31: 46:4c:01:6b:09:52:28:b1:cf:47:6a:97:ab:63:ce: af:71:4c:5e:9f:c6:f8:4e:7b:6e:04:76:6a:64:4e: be:41:f2:31:02:db:5b:d1:01:04:36:d5:00:9d:ef: e2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:1D:61:2F:40:94:4A:8F:4A:9D:42:63:B2:AE:99:B0:31:65:A1:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/61b43dc6-923a-309c-82be-50a0e60faeb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 149.20.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:63:8a:1c:b7:dd:e6:9e:d8:ef:cc:cd:38:6e:3d:40:bb:9f: b9:42:01:0d:51:3f:af:2b:cd:7e:86:e1:fc:a4:d3:d4:3f:b9: 58:65:c7:b1:75:fb:a1:fa:cb:4d:32:46:11:56:4a:c0:f0:e5: 0a:a2:dd:c4:4d:17:6c:a6:0c:77:47:21:43:ac:93:bc:7e:35: 66:11:74:48:a5:51:7c:a4:09:6f:c8:1b:3f:fa:36:85:6a:28: ce:65:52:91:59:72:40:fc:7d:11:23:bd:99:87:2e:8f:f8:d6: 86:e1:eb:98:fa:f3:b9:57:89:8e:65:cc:54:66:a2:0a:4e:76: 29:19:a7:10:5d:d0:3f:27:54:9e:31:e3:97:3d:08:4f:0e:9c: b7:b5:0d:d6:2b:2a:a9:78:4a:36:a7:04:0e:b7:09:f0:67:1c: 30:a5:7b:b4:81:ad:cf:e4:81:1d:7d:88:cd:bd:04:79:8d:5c: f8:ee:56:59:f0:c0:01:8d:3e:57:99:7f:e6:60:dd:b0:32:b8: f6:f1:aa:1f:94:a0:95:9b:49:a3:1e:20:1d:a4:4c:44:6c:d1: 02:aa:16:73:d5:c0:fa:f8:a7:4c:1e:9b:9b:42:9f:8d:69:51: dd:37:01:dd:1e:bb:14:f1:6e:fa:da:7c:69:41:11:32:31:5c: 97:f6:f2:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx1X5rAGU4LywjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk NDFjNDY3ZjktYmM2Yi00ZjAzLWE1NDgtYTJkNGRjNjljYTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRtlZOUPRVv+gWM4qd5oViWuKQkUFr69EWOL rMwCgVqQiRz8qJlErABme4mobX2Wu3HvnxZcFCxGoy+JQlcPMA+Quh/9zLVW06ne YSMzv2Q6x+9SDLdVNXayPESF7QwbA0ulXdDcnG60lqJhtyCJM8wTIQjd1PUImIMh Ik5o85Oo8LEDF68boP+wrMibFbetyCmCLBI1VrOPWKbriU7ZIthajHmpXOcPtPLL Gd93Qzr5i9Bk2LWZMP3TF6z1nboPlcGa8wR4G6Qk29U1ep+ahzFGTAFrCVIosc9H aperY86vcUxen8b4TntuBHZqZE6+QfIxAttb0QEENtUAne/i5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGAdYS9AlEqPSp1CY7KumbAxZaF1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNjFiNDNkYzYtOTIzYS0z MDljLTgyYmUtNTBhMGU2MGZhZWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRT3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1jihy33eae2O/MzThuPUC7n7lCAQ1RP68rzX6G4fyk09Q/uVhlx7F1 +6H6y00yRhFWSsDw5Qqi3cRNF2ymDHdHIUOsk7x+NWYRdEilUXykCW/IGz/6NoVq KM5lUpFZckD8fREjvZmHLo/41obh65j687lXiY5lzFRmogpOdikZpxBd0D8nVJ4x 45c9CE8OnLe1DdYrKql4SjanBA63CfBnHDCle7SBrc/kgR19iM29BHmNXPjuVlnw wAGNPleZf+Zg3bAyuPbxqh+UoJWbSaMeIB2kTERs0QKqFnPVwPr4p0wem5tCn41p Ud03Ad0euxTxbvrafGlBETIxXJf28nA= -----END CERTIFICATE-----Generated at Mon Oct 20 03:57:54 2025 by rpki-client