$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/8cf64f11-8acd-37b0-b43f-7968ae8c9cca.roa File: 8cf64f11-8acd-37b0-b43f-7968ae8c9cca.roa (raw, json) Hash identifier: KoxxN/k9Q8EkwqoJjqlNSlqC+OEdAaztHJcIdOfbK8I= Subject key identifier: 56:C7:98:E3:5D:38:BD:1D:1C:12:6A:19:F3:54:A9:DE:A5:35:38:DF Certificate issuer: /CN=14618cc8-9232-4da8-8bf5-dcc0386e13c4 Certificate serial: 010D0C9F4328584ACB40EFAB2BACAAD83EA3F940 Authority key identifier: 96:22:F5:84:82:2C:B9:22:17:C9:F8:1C:1D:50:E1:A4:08:8F:63:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/8cf64f11-8acd-37b0-b43f-7968ae8c9cca.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 399646 IP address blocks: 149.112.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/14618cc8-9232-4da8-8bf5-dcc0386e13c4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/14618cc8-9232-4da8-8bf5-dcc0386e13c4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:40:ef:ab:2b:ac:aa:d8:3e:a3:f9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14618cc8-9232-4da8-8bf5-dcc0386e13c4 Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=7e42dd5e-a89a-428a-9f10-70fdc1c0e2a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:27:f0:40:69:4b:fa:20:aa:78:68:ab:25:8d: 90:c0:d8:27:f9:35:21:5f:d6:7d:9e:10:f6:6a:b0: 2e:1b:a3:14:45:07:b3:c6:e1:80:e6:5f:25:25:6b: 97:47:94:3d:e2:f0:b3:38:ae:3c:e5:83:f7:8c:1f: 08:f8:0c:3c:62:62:ce:8d:85:d2:ea:93:77:50:3c: 2e:d6:9c:21:79:70:ec:aa:e0:49:27:80:48:89:6c: a7:8d:7e:c2:d3:86:46:f6:13:5b:f0:3d:0d:9d:5c: 8d:26:88:dc:b9:4a:41:f5:37:fb:95:0c:34:be:c2: 0a:c2:37:43:f1:cd:87:2f:5e:b0:7a:fb:0c:86:76: e2:32:91:00:be:8f:2c:f4:42:c1:cb:dd:03:e3:ea: d5:2e:11:1a:67:a4:34:3c:b5:23:95:1a:f6:fc:24: 2e:34:d8:7f:2f:ca:13:c3:31:64:7d:af:56:e5:b9: 25:6e:62:80:d3:9b:ed:09:68:7c:3f:70:c1:d4:7c: bc:5c:e2:66:68:1f:b5:6d:75:25:64:f3:2d:65:33: f5:87:fd:c2:06:68:e7:3b:21:1d:de:9e:96:77:d4: c9:b2:45:00:58:7a:d9:fe:6e:78:40:76:61:12:23: 54:d1:59:27:06:99:ea:37:d2:96:2c:69:34:68:b1: ae:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:C7:98:E3:5D:38:BD:1D:1C:12:6A:19:F3:54:A9:DE:A5:35:38:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/8cf64f11-8acd-37b0-b43f-7968ae8c9cca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/14618cc8-9232-4da8-8bf5-dcc0386e13c4.crl X509v3 Authority Key Identifier: keyid:96:22:F5:84:82:2C:B9:22:17:C9:F8:1C:1D:50:E1:A4:08:8F:63:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer sbgp-ipAddrBlock: critical IPv4: 149.112.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:34:3f:eb:e3:a4:4d:f1:28:6e:46:d7:4b:2c:d0:85:ff:79: 09:27:21:03:a1:69:79:73:4b:ba:8a:cf:74:6c:54:c5:3f:5f: 30:7c:87:5f:9a:ad:6f:08:33:fd:0c:5a:f5:37:c8:6e:da:3b: 73:8e:fc:c2:9b:0f:f8:6a:80:33:3e:54:23:d7:e1:20:df:7b: 30:c3:c7:7f:26:0e:5f:a6:19:c7:e7:b8:9d:d9:99:af:e4:77: 68:29:f5:31:46:e7:73:c4:62:c7:99:95:3c:7b:5c:93:f0:e5: b8:b8:05:70:c1:b7:7d:97:78:6c:5e:45:7c:fe:32:9e:61:ec: 7a:46:89:4e:e8:78:69:8a:76:7d:3f:5b:f6:77:02:e9:ba:9c: 24:fd:67:53:e6:d5:a0:e1:3e:6e:04:31:d9:21:c6:ef:d2:09: d0:98:e4:d4:b4:73:64:64:cb:d2:d3:05:18:44:28:b5:14:63: 09:f6:98:13:1b:5e:02:20:a7:78:70:ea:32:dc:d3:b6:3a:52: e7:0f:dd:2b:42:00:33:21:c0:4e:56:d2:12:a7:ec:1d:b3:41: f8:13:8f:62:e3:fc:bf:e3:e5:a7:72:92:e1:a5:d3:a8:29:73: ec:21:0b:2b:75:fe:3c:ac:75:a4:a0:84:1d:81:5c:9c:19:37: 2f:ea:e4:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQO+rK6yq2D6j+UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQ2MThjYzgtOTIzMi00ZGE4LThiZjUtZGNjMDM4NmUx M2M0MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk N2U0MmRkNWUtYTg5YS00MjhhLTlmMTAtNzBmZGMxYzBlMmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSfwQGlL+iCqeGirJY2QwNgn+TUhX9Z9nhD2 arAuG6MURQezxuGA5l8lJWuXR5Q94vCzOK485YP3jB8I+Aw8YmLOjYXS6pN3UDwu 1pwheXDsquBJJ4BIiWynjX7C04ZG9hNb8D0NnVyNJojcuUpB9Tf7lQw0vsIKwjdD 8c2HL16wevsMhnbiMpEAvo8s9ELBy90D4+rVLhEaZ6Q0PLUjlRr2/CQuNNh/L8oT wzFkfa9W5bklbmKA05vtCWh8P3DB1Hy8XOJmaB+1bXUlZPMtZTP1h/3CBmjnOyEd 3p6Wd9TJskUAWHrZ/m54QHZhEiNU0VknBpnqN9KWLGk0aLGuGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFbHmONdOL0dHBJqGfNUqd6lNTjfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xNDYx OGNjOC05MjMyLTRkYTgtOGJmNS1kY2MwMzg2ZTEzYzQvOGNmNjRmMTEtOGFjZC0z N2IwLWI0M2YtNzk2OGFlOGM5Y2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTQ2MThjYzgtOTIzMi00ZGE4LThi ZjUtZGNjMDM4NmUxM2M0LzE0NjE4Y2M4LTkyMzItNGRhOC04YmY1LWRjYzAzODZl MTNjNC5jcmwwHwYDVR0jBBgwFoAUliL1hIIsuSIXyfgcHVDhpAiPYyMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xNDYxOGNjOC05MjMyLTRkYTgtOGJmNS1kY2Mw Mzg2ZTEzYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXBUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHg0P+vjpE3xKG5G10ss0IX/eQknIQOhaXlzS7qKz3RsVMU/XzB8h1+a rW8IM/0MWvU3yG7aO3OO/MKbD/hqgDM+VCPX4SDfezDDx38mDl+mGcfnuJ3Zma/k d2gp9TFG53PEYseZlTx7XJPw5bi4BXDBt32XeGxeRXz+Mp5h7HpGiU7oeGmKdn0/ W/Z3Aum6nCT9Z1Pm1aDhPm4EMdkhxu/SCdCY5NS0c2Rky9LTBRhEKLUUYwn2mBMb XgIgp3hw6jLc07Y6UucP3StCADMhwE5W0hKn7B2zQfgTj2Lj/L/j5adykuGl06gp c+whCyt1/jysdaSghB2BXJwZNy/q5G8= -----END CERTIFICATE-----Generated at Sat Aug 23 20:56:15 2025 by rpki-client