$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/e819445d-361a-387d-b566-8a4e051fa91e.roa File: e819445d-361a-387d-b566-8a4e051fa91e.roa (raw, json) Hash identifier: RjQTY1CGYSJNw/iQWDdsr/erJnTLHDWk5sGDY6jcMrM= Subject key identifier: 58:D1:82:70:DC:CD:53:4A:17:9D:68:A7:2F:67:D0:F4:D7:39:3F:8F Certificate issuer: /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61 Certificate serial: 010D0C9F4328584B64CD60CB7872A15FBA8E4B00 Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/e819445d-361a-387d-b566-8a4e051fa91e.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 32381 IP address blocks: 207.126.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:60:cb:78:72:a1:5f:ba:8e:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=68f0f8e2-23b0-40f8-8d87-bf04ba523648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7e:9f:3e:86:1e:26:21:bb:b8:56:57:95:57: d3:2e:15:91:40:60:ae:86:e4:95:1b:98:d5:3c:ff: bc:34:60:83:01:ef:9f:7e:db:b3:a8:3a:8d:fa:69: cb:4d:b8:fd:f8:29:a7:7a:d6:6c:6d:c6:77:02:68: 03:a6:f2:70:1c:7d:ab:62:f9:e2:e1:2c:8d:07:76: f4:33:a9:21:df:a7:f1:77:ba:18:af:a3:48:26:e2: a7:8d:37:62:6f:0c:7a:c5:d2:ca:f4:5b:5c:23:a3: d3:82:be:21:78:7d:9a:85:84:4b:a9:46:7a:6f:81: 14:4e:49:c3:2e:44:7f:83:9d:7b:28:24:de:a4:7a: 7f:59:95:53:32:1e:9f:3c:ac:a3:dc:9d:1f:51:09: 67:f3:8c:a5:99:af:62:1c:d9:48:94:6a:d8:68:b0: a9:0c:99:86:a3:42:c9:4d:ac:56:3b:1c:e9:66:5f: 03:dd:f5:39:8a:a2:1d:b0:99:35:b5:b7:b0:99:e8: 2a:5d:c1:30:72:90:c7:7f:14:97:a0:25:f5:91:51: cd:70:81:04:7b:2d:36:6c:6b:be:c5:af:2e:93:4a: 77:88:97:02:5e:1f:92:65:28:19:f8:9d:00:6f:35: 30:f0:d0:cc:ed:e6:50:73:79:ea:1b:07:af:38:35: 68:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D1:82:70:DC:CD:53:4A:17:9D:68:A7:2F:67:D0:F4:D7:39:3F:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/e819445d-361a-387d-b566-8a4e051fa91e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl X509v3 Authority Key Identifier: keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer sbgp-ipAddrBlock: critical IPv4: 207.126.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:6f:d1:cd:af:3e:a1:69:9a:dd:cb:2a:c0:dc:7c:33:b9:4c: ed:c5:c8:16:e8:2a:6b:e1:f8:73:cc:dd:e4:34:84:82:11:0f: 5c:c5:ab:73:b6:84:ef:8f:c0:bb:11:94:6c:2e:9f:8a:7b:aa: f3:20:86:83:10:b4:47:c2:87:34:ed:d1:8b:9e:c7:9a:ad:e8: 81:ba:13:b5:3a:a8:d5:c3:31:43:67:d0:64:b5:d8:60:2d:8a: 32:cf:31:01:f3:c2:27:62:7c:64:8c:e2:e3:8d:ea:da:01:a5: 28:9d:3f:2d:15:74:5c:ad:7a:b5:56:89:be:bd:5a:31:ff:e2: 42:a7:3f:fb:38:f1:ad:71:f0:7a:ae:d3:98:db:3b:05:d4:a5: aa:45:26:b7:87:e8:c1:62:8b:11:18:f0:4f:58:be:57:34:bf: 7c:33:e4:46:bb:54:d4:fb:dc:6e:3b:91:37:77:d6:66:05:8c: 2c:aa:2a:75:e7:8c:5f:b1:d0:1d:c3:54:e7:6d:4c:9c:dc:0a: a3:1c:03:c1:2f:44:ca:62:f6:9c:3e:2e:2f:26:79:09:be:1b: 3d:29:49:47:de:41:71:3a:bc:30:83:9a:23:86:ea:19:15:d3: 2b:e4:e1:5a:cd:fb:83:bb:eb:93:8c:23:22:60:4f:7e:b4:64: 61:f3:f7:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzWDLeHKhX7qOSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmUyN2M0YzAtNTI5ZS00YzlkLWJiNjktZGVkYjA3YmJm ZjYxMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NjhmMGY4ZTItMjNiMC00MGY4LThkODctYmYwNGJhNTIzNjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp36fPoYeJiG7uFZXlVfTLhWRQGCuhuSVG5jV PP+8NGCDAe+fftuzqDqN+mnLTbj9+CmnetZsbcZ3AmgDpvJwHH2rYvni4SyNB3b0 M6kh36fxd7oYr6NIJuKnjTdibwx6xdLK9FtcI6PTgr4heH2ahYRLqUZ6b4EUTknD LkR/g517KCTepHp/WZVTMh6fPKyj3J0fUQln84ylma9iHNlIlGrYaLCpDJmGo0LJ TaxWOxzpZl8D3fU5iqIdsJk1tbewmegqXcEwcpDHfxSXoCX1kVHNcIEEey02bGu+ xa8uk0p3iJcCXh+SZSgZ+J0AbzUw8NDM7eZQc3nqGwevODVoNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjRgnDczVNKF51opy9n0PTXOT+PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3 YzRjMC01MjllLTRjOWQtYmI2OS1kZWRiMDdiYmZmNjEvZTgxOTQ0NWQtMzYxYS0z ODdkLWI1NjYtOGE0ZTA1MWZhOTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmUyN2M0YzAtNTI5ZS00YzlkLWJi NjktZGVkYjA3YmJmZjYxL2JlMjdjNGMwLTUyOWUtNGM5ZC1iYjY5LWRlZGIwN2Ji ZmY2MS5jcmwwHwYDVR0jBBgwFoAUU5KbZMgjMWU/oBu15jJ72IhWwpcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3YzRjMC01MjllLTRjOWQtYmI2OS1kZWRi MDdiYmZmNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz36VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALJv0c2vPqFpmt3LKsDcfDO5TO3FyBboKmvh+HPM3eQ0hIIRD1zFq3O2 hO+PwLsRlGwun4p7qvMghoMQtEfChzTt0Yuex5qt6IG6E7U6qNXDMUNn0GS12GAt ijLPMQHzwidifGSM4uON6toBpSidPy0VdFyterVWib69WjH/4kKnP/s48a1x8Hqu 05jbOwXUpapFJreH6MFiixEY8E9Yvlc0v3wz5Ea7VNT73G47kTd31mYFjCyqKnXn jF+x0B3DVOdtTJzcCqMcA8EvRMpi9pw+Li8meQm+Gz0pSUfeQXE6vDCDmiOG6hkV 0yvk4VrN+4O765OMIyJgT360ZGHz9xs= -----END CERTIFICATE-----Generated at Mon Oct 20 07:02:12 2025 by rpki-client