$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/146e5fc4-91b0-37d5-bddc-8ae821bfe7cb.roa File: 146e5fc4-91b0-37d5-bddc-8ae821bfe7cb.roa (raw, json) Hash identifier: x0F3/vuFOWGpgnG0GqEEc8v5bF2QyNe2A6yj28+3Qsc= Subject key identifier: 71:79:BE:60:ED:B2:6A:49:6C:3B:70:F4:C0:86:EF:4E:D5:4E:73:45 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584B2CF6EC7BC78CDA85D2F19580 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/146e5fc4-91b0-37d5-bddc-8ae821bfe7cb.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 27321 IP address blocks: 149.20.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:ec:7b:c7:8c:da:85:d2:f1:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=41f7d737-b316-4bc8-a512-efd401d131e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2c:b8:9c:e9:f4:fb:90:aa:a9:16:ff:c4:d8: f1:9b:cf:d2:b2:ea:44:5b:47:d7:25:6e:f2:4f:c7: a6:b4:06:fc:fb:e6:de:1a:b5:4a:e5:c5:00:2f:19: e5:fb:fa:67:16:90:27:75:38:e4:3b:a4:bc:78:35: 44:63:3e:36:e2:47:83:f4:fc:1c:a5:11:d3:2f:97: 7b:0d:dc:37:ca:38:d5:a4:06:a6:b2:57:65:3d:40: 1f:93:5b:54:29:4b:3e:21:44:2c:58:e9:cb:9b:4b: 84:d6:f9:10:7a:17:25:ab:4a:cd:9a:05:cf:4d:bd: c0:84:80:ef:98:8b:dc:3d:32:79:3f:27:e2:3a:bc: 33:fe:ab:9f:d1:74:ff:8e:10:b6:ce:cb:1f:3d:44: e8:c8:6d:a7:08:0c:30:e4:1d:1f:a2:81:5a:92:03: 4d:35:32:79:d0:69:ff:a4:7a:a0:0b:ec:f8:dc:fc: 72:99:fe:9e:bc:63:97:2b:00:f0:8a:5f:1c:bb:89: 7d:7c:1c:1b:2b:e1:1d:fc:1e:11:32:38:7c:25:b3: 19:ea:0a:4b:af:42:2c:50:36:36:ee:87:4c:54:8c: 01:8e:4f:bb:70:e7:ba:de:58:7e:49:0b:fb:ad:a2: a0:74:bb:64:1c:db:c7:8f:5f:5f:41:a2:a3:b2:4d: bc:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:79:BE:60:ED:B2:6A:49:6C:3B:70:F4:C0:86:EF:4E:D5:4E:73:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/146e5fc4-91b0-37d5-bddc-8ae821bfe7cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:e2:bf:6f:df:87:6d:8c:aa:c3:7b:fb:9b:af:d7:c8:79:dc: 53:91:91:7a:e6:e5:21:6b:b5:5d:bc:3a:6e:ad:1e:82:11:08: a1:be:78:80:16:b6:e5:12:a1:4a:9c:cd:cc:2d:fe:1c:eb:96: df:5b:df:50:94:83:d6:ff:52:59:be:2a:d7:cd:0f:95:df:9f: 4e:91:e4:db:49:ed:5f:ab:37:0f:64:bb:7f:b5:0a:75:6f:4d: 85:6e:69:b4:71:14:64:99:b0:56:07:0d:96:90:2d:93:7c:00: 28:d2:41:93:c2:33:74:15:dc:69:5e:a0:73:d1:ed:0a:18:e0: 48:44:84:a0:d7:dd:8e:df:8d:91:9e:83:64:2d:ab:a9:a4:85: 38:57:fc:de:01:5d:78:94:2c:c5:29:79:b9:12:f6:44:df:06: 20:cc:63:a0:f2:a5:7a:32:e2:41:31:4c:44:15:75:e0:75:58: f6:14:14:9d:71:e5:83:74:de:78:65:39:65:93:91:e4:5a:f6: 28:45:b8:56:b2:c6:6e:67:4e:04:ec:37:ad:8c:34:66:54:af: 10:c5:af:66:3b:d9:1c:8e:83:6e:4f:37:d0:59:14:75:2b:db: b5:ee:f7:5d:6c:ac:53:02:29:c1:a2:08:1a:7c:e4:06:3f:8c: 5c:70:81:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9ux7x4zahdLxlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk NDFmN2Q3MzctYjMxNi00YmM4LWE1MTItZWZkNDAxZDEzMWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCy4nOn0+5CqqRb/xNjxm8/SsupEW0fXJW7y T8emtAb8++beGrVK5cUALxnl+/pnFpAndTjkO6S8eDVEYz424keD9PwcpRHTL5d7 Ddw3yjjVpAamsldlPUAfk1tUKUs+IUQsWOnLm0uE1vkQehclq0rNmgXPTb3AhIDv mIvcPTJ5PyfiOrwz/quf0XT/jhC2zssfPUToyG2nCAww5B0fooFakgNNNTJ50Gn/ pHqgC+z43Pxymf6evGOXKwDwil8cu4l9fBwbK+Ed/B4RMjh8JbMZ6gpLr0IsUDY2 7odMVIwBjk+7cOe63lh+SQv7raKgdLtkHNvHj19fQaKjsk28wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHF5vmDtsmpJbDtw9MCG707VTnNFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvMTQ2ZTVmYzQtOTFiMC0z N2Q1LWJkZGMtOGFlODIxYmZlN2NiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRQEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjiv2/fh22MqsN7+5uv18h53FORkXrm5SFrtV28Om6tHoIRCKG+eIAW tuUSoUqczcwt/hzrlt9b31CUg9b/Ulm+KtfND5Xfn06R5NtJ7V+rNw9ku3+1CnVv TYVuabRxFGSZsFYHDZaQLZN8ACjSQZPCM3QV3GleoHPR7QoY4EhEhKDX3Y7fjZGe g2Qtq6mkhThX/N4BXXiULMUpebkS9kTfBiDMY6DypXoy4kExTEQVdeB1WPYUFJ1x 5YN03nhlOWWTkeRa9ihFuFayxm5nTgTsN62MNGZUrxDFr2Y72RyOg25PN9BZFHUr 27Xu911srFMCKcGiCBp85AY/jFxwgZk= -----END CERTIFICATE-----Generated at Mon Oct 20 15:49:25 2025 by rpki-client