$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4e8c3eea-5290-39c2-8a92-9b920877b78a.roa File: 4e8c3eea-5290-39c2-8a92-9b920877b78a.roa (raw, json) Hash identifier: fpwU11DJVDPWXeXZz5Yxwd7o1H+/T1iwKM2/HMYiJ+0= Subject key identifier: 0A:77:C3:05:7F:F1:11:CA:FA:95:17:F9:46:B5:E3:75:66:CE:33:30 Certificate issuer: /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8 Certificate serial: 010D0C9F4328584B4081A2AF429BDA8D22719600 Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4e8c3eea-5290-39c2-8a92-9b920877b78a.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 394354 IP address blocks: 149.112.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:a2:af:42:9b:da:8d:22:71:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=f4e3fe36-8b55-4310-a74d-329ebed39dc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:cc:18:48:7f:7c:a4:06:68:d2:bc:ce:96:ad: ec:ef:29:66:2f:02:55:76:38:ae:83:66:82:b7:8e: 2f:9b:7a:68:4e:19:18:d1:80:4f:ed:57:7c:d9:a7: 55:78:a6:9f:2e:23:da:82:cd:2b:33:f2:62:2e:d8: 9e:6e:2a:ec:07:74:5d:b0:ab:31:30:18:6c:a6:4f: e9:9d:11:32:b0:01:31:21:69:9f:6d:77:86:bf:c9: 2e:ad:ba:02:c0:f1:de:1b:da:38:a4:c7:4a:c8:1c: 55:b8:f5:13:28:15:9d:b2:d2:17:6b:dc:13:f7:88: 66:5b:4a:d8:d8:ca:9d:6d:17:82:26:21:aa:c1:a9: 67:c1:1f:3f:f4:2c:33:e3:9f:23:5b:d0:4c:c2:fc: 52:98:b2:79:11:ad:95:2e:76:9c:20:89:70:ac:f4: b8:b2:74:4b:7f:ea:56:01:74:8d:01:d2:56:f7:1a: 5f:97:8d:32:03:6b:c6:ad:dc:09:81:33:61:9f:4f: 28:fe:29:2d:41:9e:24:66:95:30:46:bf:45:d6:6f: 4c:7f:d8:e6:13:37:35:4f:ee:b8:a1:c5:51:17:e1: b1:57:7b:0e:1e:01:64:e2:fd:1b:11:51:49:93:42: ba:0e:34:58:0a:93:39:1b:f7:9c:3d:25:44:0a:c4: 06:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:77:C3:05:7F:F1:11:CA:FA:95:17:F9:46:B5:E3:75:66:CE:33:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4e8c3eea-5290-39c2-8a92-9b920877b78a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl X509v3 Authority Key Identifier: keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer sbgp-ipAddrBlock: critical IPv4: 149.112.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:8d:e4:4a:dd:97:f9:41:82:2b:61:d3:e4:78:f8:00:9e:39: f5:85:0d:08:0e:05:c7:73:34:86:02:ad:22:82:0f:aa:c9:2b: 66:ee:21:50:56:7d:61:af:b7:79:3a:e1:38:cd:f1:7f:99:ff: 31:53:1c:dd:78:6f:5a:2c:61:f6:c4:e6:79:d5:3d:3d:d0:41: e0:b4:30:41:7d:5f:10:cb:e5:0d:a4:38:67:cb:20:f4:1a:4a: 2d:0b:ad:f9:b1:44:b6:e4:79:a2:d9:9f:20:04:e0:9c:9d:b3: 7d:98:79:05:78:75:cb:d6:69:fd:54:08:23:ff:ba:53:a3:b5: d3:07:5c:70:05:26:0a:9c:e4:37:80:39:c5:64:58:3f:b6:79: 66:c1:6a:dd:30:8d:3d:02:38:d1:9c:59:12:3a:4f:c2:b1:b6: d5:2d:a4:42:52:80:4c:db:a7:b6:c5:fe:e2:6e:a9:5b:ee:e8: ec:4a:b9:b7:d5:7c:17:2d:26:2f:ae:69:d2:d1:a6:78:3a:4f: 30:d2:d6:e7:59:0c:97:9a:9b:66:ec:a8:dc:41:cd:b1:fa:41: f1:88:f9:75:91:e5:10:95:d7:b7:5d:96:47:47:37:9f:c3:94: 8e:ca:59:2f:b1:63:db:da:8a:27:15:e5:06:5f:94:c4:15:bb: 5e:39:6e:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgaKvQpvajSJxlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJjNjA0ZGUtYWMyYi00OTIxLWI2MDEtYTJjOTc2YWIx OGU4MB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk ZjRlM2ZlMzYtOGI1NS00MzEwLWE3NGQtMzI5ZWJlZDM5ZGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnswYSH98pAZo0rzOlq3s7ylmLwJVdjiug2aC t44vm3poThkY0YBP7Vd82adVeKafLiPags0rM/JiLtiebirsB3RdsKsxMBhspk/p nREysAExIWmfbXeGv8kurboCwPHeG9o4pMdKyBxVuPUTKBWdstIXa9wT94hmW0rY 2MqdbReCJiGqwalnwR8/9Cwz458jW9BMwvxSmLJ5Ea2VLnacIIlwrPS4snRLf+pW AXSNAdJW9xpfl40yA2vGrdwJgTNhn08o/iktQZ4kZpUwRr9F1m9Mf9jmEzc1T+64 ocVRF+GxV3sOHgFk4v0bEVFJk0K6DjRYCpM5G/ecPSVECsQGKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAp3wwV/8RHK+pUX+Ua143VmzjMwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2 MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5NzZhYjE4ZTgvNGU4YzNlZWEtNTI5MC0z OWMyLThhOTItOWI5MjA4NzdiNzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGJjNjA0ZGUtYWMyYi00OTIxLWI2 MDEtYTJjOTc2YWIxOGU4LzRiYzYwNGRlLWFjMmItNDkyMS1iNjAxLWEyYzk3NmFi MThlOC5jcmwwHwYDVR0jBBgwFoAUXezCHp0HnbEJciCnXQk9+uP8rEAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5 NzZhYjE4ZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXChMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSN5Erdl/lBgith0+R4+ACeOfWFDQgOBcdzNIYCrSKCD6rJK2buIVBW fWGvt3k64TjN8X+Z/zFTHN14b1osYfbE5nnVPT3QQeC0MEF9XxDL5Q2kOGfLIPQa Si0LrfmxRLbkeaLZnyAE4Jyds32YeQV4dcvWaf1UCCP/ulOjtdMHXHAFJgqc5DeA OcVkWD+2eWbBat0wjT0CONGcWRI6T8KxttUtpEJSgEzbp7bF/uJuqVvu6OxKubfV fBctJi+uadLRpng6TzDS1udZDJeam2bsqNxBzbH6QfGI+XWR5RCV17ddlkdHN5/D lI7KWS+xY9vaiicV5QZflMQVu145bkE= -----END CERTIFICATE-----Generated at Mon Oct 20 05:16:13 2025 by rpki-client