$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/2aeaa8a8-f785-3776-ae69-d340696016c0.roa File: 2aeaa8a8-f785-3776-ae69-d340696016c0.roa (raw, json) Hash identifier: lDwNw4G23QXVCR4jT2EalyPvgxwFUjUVOLexaKw+uIU= Subject key identifier: AE:FF:F1:23:90:BA:AF:03:0D:03:27:2A:6A:88:2B:99:D7:92:D2:3D Certificate issuer: /CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7 Certificate serial: 010D0C9F4328584B99D77FE3BA59B4255E0E6500 Authority key identifier: 65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/2aeaa8a8-f785-3776-ae69-d340696016c0.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 0 IP address blocks: 149.112.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:7f:e3:ba:59:b4:25:5e:0e:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=a0f5052f-9fe2-4cbd-83f1-88024fcb2f11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:85:22:32:b3:b5:d4:bd:ac:90:bc:20:6f:12: 7e:5b:c7:40:90:d5:69:c6:31:a1:29:d8:a7:23:15: 59:14:7e:cb:97:15:ec:12:ad:a1:0b:d3:21:ef:62: 86:f0:d7:e0:37:f5:46:8f:40:12:9f:6d:30:08:eb: 7d:dd:01:ac:6a:36:b3:d6:a5:2a:e4:52:58:13:85: e7:f6:ac:15:9a:00:9a:2b:32:6f:03:8f:ed:3b:77: 5a:4e:b9:99:cd:1e:12:27:66:81:c0:76:77:ff:0c: 77:0c:de:0d:ee:0d:3a:c6:35:3d:95:43:0c:20:56: ee:d4:e8:99:55:ef:17:ab:e6:a2:f1:04:7d:95:de: a9:ad:d1:8a:46:8b:00:8a:76:8c:ec:f4:14:22:a3: e5:2e:e8:a9:3e:86:1a:dc:ae:4b:ee:7d:2d:19:09: f2:9a:70:70:34:90:53:f0:90:e1:75:0c:f5:c0:01: de:71:80:18:66:0f:12:b5:fd:b5:62:ff:0b:fc:f7: 2e:19:1b:64:cf:70:0b:64:8d:50:37:c2:7d:91:80: 84:15:f9:96:ee:e3:6e:40:3b:68:dc:40:a7:88:48: 53:11:37:49:34:4b:66:ca:6f:8c:86:df:3b:39:57: eb:e4:f3:9e:02:3c:46:a4:42:06:15:ca:b0:05:32: a9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:FF:F1:23:90:BA:AF:03:0D:03:27:2A:6A:88:2B:99:D7:92:D2:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/2aeaa8a8-f785-3776-ae69-d340696016c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.crl X509v3 Authority Key Identifier: keyid:65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer sbgp-ipAddrBlock: critical IPv4: 149.112.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:4e:a1:e5:71:f9:58:20:9e:96:52:00:d6:e3:9e:db:4c:f3: b1:82:3e:e8:e9:47:a5:ac:c0:94:06:6d:59:d7:bc:e4:78:87: 26:a1:7f:38:51:4f:f7:91:73:0c:03:33:bd:4d:36:7a:db:e5: 97:2f:d2:0b:b9:af:d7:ca:0a:ba:9b:a5:c6:6d:85:ca:bf:45: 12:fb:d4:dd:a0:99:be:14:e8:e3:df:05:35:42:c6:09:7f:e0: df:eb:60:a8:c7:75:c2:c4:9b:08:cf:7b:e3:c5:30:49:c5:ab: d4:79:f0:a8:c1:2a:6d:b1:fb:c4:5c:bc:fd:2f:bc:ea:d7:da: ee:79:c3:f1:79:35:a5:70:a5:0e:48:0e:df:19:c4:90:7e:7d: 16:a5:ef:dd:2e:ce:e1:e5:18:5b:de:fe:ae:7d:9a:68:7e:8a: a4:95:ce:e1:fd:35:4f:1b:af:2a:fd:29:8a:8d:4c:11:6f:b5: 2d:28:94:78:2f:29:9f:93:83:b9:33:f4:4b:d4:ff:c4:1b:36: 0b:3f:0e:d5:73:ab:18:db:7b:46:1e:a1:31:fb:1d:b6:bd:47: 48:06:20:14:45:aa:72:bb:39:f5:1d:df:c4:2c:fe:a4:70:a1: 22:9d:d8:46:84:d8:84:ba:ed:ef:db:c8:45:36:2d:ff:60:e8: d1:3b:7f:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ13/julm0JV4OZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVlNTE0MWUtYTA2OS00OTU1LThjNTUtNGRhNWRmZDM2 ZmE3MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk YTBmNTA1MmYtOWZlMi00Y2JkLTgzZjEtODgwMjRmY2IyZjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4UiMrO11L2skLwgbxJ+W8dAkNVpxjGhKdin IxVZFH7LlxXsEq2hC9Mh72KG8NfgN/VGj0ASn20wCOt93QGsajaz1qUq5FJYE4Xn 9qwVmgCaKzJvA4/tO3daTrmZzR4SJ2aBwHZ3/wx3DN4N7g06xjU9lUMMIFbu1OiZ Ve8Xq+ai8QR9ld6prdGKRosAinaM7PQUIqPlLuipPoYa3K5L7n0tGQnymnBwNJBT 8JDhdQz1wAHecYAYZg8Stf21Yv8L/PcuGRtkz3ALZI1QN8J9kYCEFfmW7uNuQDto 3ECniEhTETdJNEtmym+Mht87OVfr5POeAjxGpEIGFcqwBTKpyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK7/8SOQuq8DDQMnKmqIK5nXktI9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWU1 MTQxZS1hMDY5LTQ5NTUtOGM1NS00ZGE1ZGZkMzZmYTcvMmFlYWE4YTgtZjc4NS0z Nzc2LWFlNjktZDM0MDY5NjAxNmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGVlNTE0MWUtYTA2OS00OTU1LThj NTUtNGRhNWRmZDM2ZmE3LzRlZTUxNDFlLWEwNjktNDk1NS04YzU1LTRkYTVkZmQz NmZhNy5jcmwwHwYDVR0jBBgwFoAUZclCa6B2R1JWJymYeUgFgb61rrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWU1MTQxZS1hMDY5LTQ5NTUtOGM1NS00ZGE1 ZGZkMzZmYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXALMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBOoeVx+VggnpZSANbjnttM87GCPujpR6WswJQGbVnXvOR4hyahfzhR T/eRcwwDM71NNnrb5Zcv0gu5r9fKCrqbpcZthcq/RRL71N2gmb4U6OPfBTVCxgl/ 4N/rYKjHdcLEmwjPe+PFMEnFq9R58KjBKm2x+8RcvP0vvOrX2u55w/F5NaVwpQ5I Dt8ZxJB+fRal790uzuHlGFve/q59mmh+iqSVzuH9NU8bryr9KYqNTBFvtS0olHgv KZ+Tg7kz9EvU/8QbNgs/DtVzqxjbe0YeoTH7Hba9R0gGIBRFqnK7OfUd38Qs/qRw oSKd2EaE2IS67e/byEU2Lf9g6NE7f8I= -----END CERTIFICATE-----Generated at Tue Nov 4 21:09:38 2025 by rpki-client