$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/29cb27c5-4e3c-342b-a9e3-44052be6fe97.roa File: 29cb27c5-4e3c-342b-a9e3-44052be6fe97.roa (raw, json) Hash identifier: NaiGhLkQweJ8VYWd0/o/Qu9+1v0XvL7PuHS/BDXUgiM= Subject key identifier: B6:BF:26:49:82:71:E9:E1:72:47:80:1E:5E:22:54:CC:ED:A1:5C:07 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584B80B7545FA407329BA3F88980 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/29cb27c5-4e3c-342b-a9e3-44052be6fe97.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 27321 IP address blocks: 149.20.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:54:5f:a4:07:32:9b:a3:f8:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=52ce814c-736d-4f4a-b78f-14e9311a470e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:63:92:f0:93:ca:70:18:67:31:71:4a:27:c8: 75:71:1e:b9:c4:f9:16:4c:6d:72:a0:22:b4:bf:b6: 71:c0:8d:ec:1f:a7:05:ce:b2:cd:48:34:45:8c:89: c8:42:9e:aa:7f:12:a6:ad:cb:30:e2:ec:7c:34:c2: 2b:0c:9c:2b:95:6a:26:c6:2d:fe:de:03:df:3a:94: 01:9a:a6:fb:41:c7:fd:6d:b6:4b:71:a3:87:71:92: 22:88:69:69:ac:79:bc:08:04:06:ef:67:72:e1:6a: c9:bb:9a:b3:86:89:ac:1f:c1:5f:2a:e5:26:6b:62: d1:a9:0c:bc:1e:b3:aa:ea:0e:9e:74:45:68:22:32: 78:c9:ca:b1:f4:a6:1d:f5:9e:7b:52:c0:f2:13:19: 76:c6:a3:a9:b7:a5:8b:83:9e:5d:82:03:74:9b:f2: cb:91:f9:40:48:4f:0c:19:96:e7:67:65:60:3a:fe: 70:b6:4e:06:71:a0:41:b8:eb:25:ce:39:d3:79:5f: e3:ac:e0:1a:f3:77:23:a1:92:82:b1:20:75:cc:be: de:df:09:8d:db:d4:b9:37:5d:11:65:34:ce:02:1a: e5:c3:6f:bc:48:26:8d:d9:9d:d1:51:d5:a5:e8:90: 8b:45:b2:12:e8:23:b8:ca:ac:ae:af:b3:c6:2d:7b: 7e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:BF:26:49:82:71:E9:E1:72:47:80:1E:5E:22:54:CC:ED:A1:5C:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/29cb27c5-4e3c-342b-a9e3-44052be6fe97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:d3:14:5a:70:b8:dc:60:61:e1:5d:73:96:63:03:a5:23:8a: 5c:75:91:34:33:d6:02:64:b0:6c:86:62:56:6a:43:7a:6c:c6: e2:19:c4:15:83:49:84:26:fb:c5:47:a5:e6:84:71:fe:9b:49: 74:aa:b9:b5:62:4b:15:bf:94:b9:e7:27:c4:9f:8d:0e:a1:a5: 9b:61:e3:69:78:64:01:6a:ee:69:bd:54:f4:5e:cd:ef:6e:a9: 68:63:27:6d:a8:3d:f9:af:7b:78:93:a5:fa:e9:49:80:3b:6f: 8c:ca:c3:ba:e1:4a:04:54:d8:9e:da:c8:88:e4:aa:23:4e:6a: 4f:c0:78:77:74:27:a5:c1:15:bc:c6:de:1d:84:6b:17:1b:a3: ef:09:e0:ab:e7:3c:aa:9e:1d:40:9e:31:e4:97:b6:c9:0e:97: ef:4e:ed:0f:a7:ce:d5:0c:80:e8:f1:2b:93:86:f3:77:91:3b: 36:04:2e:d8:12:3c:86:9f:1f:ba:17:87:d2:09:1e:93:26:ea: 6b:07:60:e5:f5:be:47:ae:b1:9d:95:16:42:00:32:58:a7:8c: 56:42:f1:39:21:54:3c:6e:be:cf:45:07:c0:c9:ca:2d:6e:34: f3:d5:cc:ff:63:de:91:03:d9:65:79:7b:18:14:d2:a0:54:75: 0f:8e:8d:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuAt1RfpAcym6P4iYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk NTJjZTgxNGMtNzM2ZC00ZjRhLWI3OGYtMTRlOTMxMWE0NzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGOS8JPKcBhnMXFKJ8h1cR65xPkWTG1yoCK0 v7ZxwI3sH6cFzrLNSDRFjInIQp6qfxKmrcsw4ux8NMIrDJwrlWomxi3+3gPfOpQB mqb7Qcf9bbZLcaOHcZIiiGlprHm8CAQG72dy4WrJu5qzhomsH8FfKuUma2LRqQy8 HrOq6g6edEVoIjJ4ycqx9KYd9Z57UsDyExl2xqOpt6WLg55dggN0m/LLkflASE8M GZbnZ2VgOv5wtk4GcaBBuOslzjnTeV/jrOAa83cjoZKCsSB1zL7e3wmN29S5N10R ZTTOAhrlw2+8SCaN2Z3RUdWl6JCLRbIS6CO4yqyur7PGLXt+RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLa/JkmCcenhckeAHl4iVMztoVwHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvMjljYjI3YzUtNGUzYy0z NDJiLWE5ZTMtNDQwNTJiZTZmZTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRRCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/TFFpwuNxgYeFdc5ZjA6Ujilx1kTQz1gJksGyGYlZqQ3psxuIZxBWD SYQm+8VHpeaEcf6bSXSqubViSxW/lLnnJ8SfjQ6hpZth42l4ZAFq7mm9VPReze9u qWhjJ22oPfmve3iTpfrpSYA7b4zKw7rhSgRU2J7ayIjkqiNOak/AeHd0J6XBFbzG 3h2Eaxcbo+8J4KvnPKqeHUCeMeSXtskOl+9O7Q+nztUMgOjxK5OG83eROzYELtgS PIafH7oXh9IJHpMm6msHYOX1vkeusZ2VFkIAMlinjFZC8TkhVDxuvs9FB8DJyi1u NPPVzP9j3pED2WV5exgU0qBUdQ+OjTY= -----END CERTIFICATE-----Generated at Mon Oct 20 13:21:24 2025 by rpki-client