$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/ec21eef4-c817-32b7-96b9-389471f742c8.roa File: ec21eef4-c817-32b7-96b9-389471f742c8.roa (raw, json) Hash identifier: mA4i8JbrgP02ofh7F8s+4fjAe2aM86s+TQHNtrUY1bU= Subject key identifier: B4:3C:1C:2D:9F:71:31:54:E3:29:D2:91:94:C2:C2:12:78:7C:A8:EF Certificate issuer: /CN=6866e4a0-5810-4bb4-9c54-7f703ccf4289 Certificate serial: 010D0C9F4328584BBD2922C554BF3FB8748ED000 Authority key identifier: 10:7B:A7:0B:58:8F:FB:01:75:CA:06:79:82:18:CF:41:F5:BD:16:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/ec21eef4-c817-32b7-96b9-389471f742c8.roa Signing time: Mon 03 Nov 2025 16:11:08 +0000 ROA not before: Mon 03 Nov 2025 16:11:08 +0000 ROA not after: Sun 01 Feb 2026 16:11:08 +0000 asID: 16276 IP address blocks: 135.148.193.0/24 maxlen: 24 2604:2dc0:118:300::/56 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/6866e4a0-5810-4bb4-9c54-7f703ccf4289.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/6866e4a0-5810-4bb4-9c54-7f703ccf4289.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bd:29:22:c5:54:bf:3f:b8:74:8e:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6866e4a0-5810-4bb4-9c54-7f703ccf4289 Validity Not Before: Nov 3 16:11:08 2025 GMT Not After : Feb 1 16:11:08 2026 GMT Subject: CN=dca3b576-ff7c-41b5-9dcf-23b40eb8d759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d4:16:d4:6f:cc:63:40:fd:54:32:4a:00:47: 33:66:e9:b9:df:93:79:c1:42:f3:83:03:bc:b5:e1: 5a:bb:e5:78:54:58:95:c2:50:cb:1d:b3:38:a3:e3: af:c4:48:d0:37:bb:76:c2:7e:e1:6b:c6:24:b0:ed: 53:f4:8e:1d:3f:12:47:f3:90:ab:cd:5d:b3:a1:78: 95:e0:30:b9:9c:57:c3:3c:a5:c7:5b:a0:82:8c:a6: 45:3d:9a:ee:2f:5c:9b:9a:f6:c5:c1:8f:b7:07:ab: 06:1c:14:31:71:80:b6:6f:f9:4e:51:b9:e9:1f:fd: 90:ce:00:6f:71:d5:85:e8:71:0a:b5:5f:b3:44:ba: 67:19:70:e4:66:0d:ac:9a:ea:36:9f:8f:b9:99:55: 13:5b:df:55:e1:51:f3:b4:74:c3:ca:7d:5e:ef:cf: df:f8:cc:80:a3:7e:f7:04:3c:b7:de:1d:43:1f:87: fd:e4:18:82:0d:6f:dd:68:e6:a9:56:bf:74:bc:83: bf:5b:35:09:e5:ad:10:7a:21:f8:27:4d:80:c8:13: 76:96:fe:98:08:fe:8b:07:9e:e0:1b:f2:62:3a:62: 6a:b3:d3:65:09:94:93:a1:55:c1:9f:b5:81:be:c8: 68:f2:84:d1:e9:2d:dd:d8:9c:d3:2c:7a:87:e8:5f: 11:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:3C:1C:2D:9F:71:31:54:E3:29:D2:91:94:C2:C2:12:78:7C:A8:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/ec21eef4-c817-32b7-96b9-389471f742c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/6866e4a0-5810-4bb4-9c54-7f703ccf4289.crl X509v3 Authority Key Identifier: keyid:10:7B:A7:0B:58:8F:FB:01:75:CA:06:79:82:18:CF:41:F5:BD:16:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289.cer sbgp-ipAddrBlock: critical IPv4: 135.148.193.0/24 IPv6: 2604:2dc0:118:300::/56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:dd:e1:4f:cc:56:98:b0:2d:e2:40:88:8e:fd:8c:87:33:e1: c7:66:0c:db:6c:a1:0c:9e:cb:e4:d1:00:8d:41:d8:38:01:12: ad:27:04:e3:2d:11:c5:55:fd:67:f9:f1:2c:f5:b4:66:b3:10: 84:f8:1e:68:56:5c:7d:d1:9e:cc:69:b0:d8:43:f8:4b:d2:f3: 5b:7b:52:e8:81:ca:cf:6b:94:12:4a:3c:92:9e:d5:5e:b2:cf: 5f:71:3e:ce:9a:0c:da:7a:3f:5c:f4:d2:9b:ac:ba:9c:d6:43: d2:37:4f:80:51:b0:4a:31:34:6a:aa:ce:da:d0:b6:18:fc:22: ee:98:44:d9:10:23:6d:ed:b9:19:11:77:66:03:f5:c8:3a:36: cb:9c:21:e9:9f:e2:17:1d:6a:e3:2b:a5:9c:ad:f4:00:24:75: a4:4b:46:10:5e:71:d5:5f:af:5a:d9:2c:98:f0:17:9c:41:4d: bf:21:b9:69:f9:d9:f0:e9:a8:c3:a9:18:99:f5:fe:90:cd:85: bc:4a:9d:4b:fa:40:a9:f6:8f:09:b5:fc:b7:43:2c:b2:71:93: 93:78:1d:a1:1b:d8:4a:ee:52:7a:55:0b:96:ae:8c:a5:34:ea: 51:3c:88:fe:7e:80:1e:f3:11:03:73:cf:c7:62:a2:d5:36:93: 24:af:4d:8a -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEu9KSLFVL8/uHSO0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg2NmU0YTAtNTgxMC00YmI0LTljNTQtN2Y3MDNjY2Y0 Mjg5MB4XDTI1MTEwMzE2MTEwOFoXDTI2MDIwMTE2MTEwOFowLzEtMCsGA1UEAxMk ZGNhM2I1NzYtZmY3Yy00MWI1LTlkY2YtMjNiNDBlYjhkNzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdQW1G/MY0D9VDJKAEczZum535N5wULzgwO8 teFau+V4VFiVwlDLHbM4o+OvxEjQN7t2wn7ha8YksO1T9I4dPxJH85CrzV2zoXiV 4DC5nFfDPKXHW6CCjKZFPZruL1ybmvbFwY+3B6sGHBQxcYC2b/lOUbnpH/2QzgBv cdWF6HEKtV+zRLpnGXDkZg2smuo2n4+5mVUTW99V4VHztHTDyn1e78/f+MyAo373 BDy33h1DH4f95BiCDW/daOapVr90vIO/WzUJ5a0QeiH4J02AyBN2lv6YCP6LB57g G/JiOmJqs9NlCZSToVXBn7WBvsho8oTR6S3d2JzTLHqH6F8RFQIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFLQ8HC2fcTFU4ynSkZTCwhJ4fKjvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82ODY2 ZTRhMC01ODEwLTRiYjQtOWM1NC03ZjcwM2NjZjQyODkvZWMyMWVlZjQtYzgxNy0z MmI3LTk2YjktMzg5NDcxZjc0MmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjg2NmU0YTAtNTgxMC00YmI0LTlj NTQtN2Y3MDNjY2Y0Mjg5LzY4NjZlNGEwLTU4MTAtNGJiNC05YzU0LTdmNzAzY2Nm NDI4OS5jcmwwHwYDVR0jBBgwFoAUEHunC1iP+wF1ygZ5ghjPQfW9FmIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82ODY2ZTRhMC01ODEwLTRiYjQtOWM1NC03Zjcw M2NjZjQyODkuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAMBAIAATAGAwQAh5TBMBAE AgACMAoDCAAmBC3AARgDMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAC/d4U/MVpiwLeJAiI79jIcz4cdmDNts oQyey+TRAI1B2DgBEq0nBOMtEcVV/Wf58Sz1tGazEIT4HmhWXH3RnsxpsNhD+EvS 81t7UuiBys9rlBJKPJKe1V6yz19xPs6aDNp6P1z00pusupzWQ9I3T4BRsEoxNGqq ztrQthj8Iu6YRNkQI23tuRkRd2YD9cg6NsucIemf4hcdauMrpZyt9AAkdaRLRhBe cdVfr1rZLJjwF5xBTb8huWn52fDpqMOpGJn1/pDNhbxKnUv6QKn2jwm1/LdDLLJx k5N4HaEb2EruUnpVC5aujKU06lE8iP5+gB7zEQNzz8diotU2kySvTYo= -----END CERTIFICATE-----Generated at Tue Nov 4 21:02:31 2025 by rpki-client