$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/4aff5b75-c317-3b8d-949c-1bcc94ead1f6.roa File: 4aff5b75-c317-3b8d-949c-1bcc94ead1f6.roa (raw, json) Hash identifier: eDcu7ZrvrZoSLO4xXBt5d/FGmHPG69E+nlaUYAAZBOU= Subject key identifier: A7:69:41:71:31:F8:C1:67:EC:23:DF:40:1E:C2:1C:B0:82:F0:F3:28 Certificate issuer: /CN=917f98c2-cbd2-43de-a8cf-7091ad719621 Certificate serial: 010D0C9F4328584B970D06DEECA245D6CD600540 Authority key identifier: 5D:92:48:68:AC:B1:85:67:D2:75:86:CA:93:F0:1D:52:F7:6C:FC:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/4aff5b75-c317-3b8d-949c-1bcc94ead1f6.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 0 IP address blocks: 149.112.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/917f98c2-cbd2-43de-a8cf-7091ad719621.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/917f98c2-cbd2-43de-a8cf-7091ad719621.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0d:06:de:ec:a2:45:d6:cd:60:05:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=917f98c2-cbd2-43de-a8cf-7091ad719621 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=9ef71d52-530b-4c6c-9c26-677a1f628039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7e:f6:00:5e:fe:60:1f:9e:a7:ad:0f:4a:f6: 78:8a:6d:6c:a8:a7:f6:a8:e9:c9:81:3d:0f:40:65: b5:c1:3e:9d:81:75:b6:88:94:73:a9:e9:7d:b4:02: 24:29:c9:37:de:0e:0f:a6:13:f6:f9:cc:36:09:d2: a6:1e:92:e6:44:7d:ac:ca:7a:59:86:a2:92:e8:5a: 6b:13:7e:7e:ec:82:e5:8b:b4:19:ba:cc:4a:b4:9d: 08:c2:7e:6a:31:89:2b:a1:9e:69:23:85:02:5d:f4: ca:16:b1:e4:27:a7:ae:8a:32:42:5d:d0:cb:ee:3c: a4:45:b6:ae:1d:93:77:57:46:9c:d1:68:01:42:cb: d1:fc:49:3a:88:f6:25:19:88:53:d1:b3:76:ae:3c: bc:63:2f:93:12:d8:b3:1a:68:30:ad:cb:16:fa:1d: 1c:45:12:57:38:d5:0d:ba:32:02:55:25:94:90:85: 2a:fa:c7:26:b4:e9:32:32:55:62:d7:d8:82:43:24: a2:59:aa:ba:45:31:cf:b8:a1:e1:eb:f9:a4:ec:cd: 1c:b9:a4:7f:9f:7c:dd:d2:a6:02:45:f3:47:05:e2: c8:33:34:27:b9:65:4c:9c:c6:91:6f:1d:aa:f6:84: 95:29:8e:56:be:5e:5d:72:2a:f8:56:69:1b:bf:1f: 9f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:69:41:71:31:F8:C1:67:EC:23:DF:40:1E:C2:1C:B0:82:F0:F3:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/4aff5b75-c317-3b8d-949c-1bcc94ead1f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/917f98c2-cbd2-43de-a8cf-7091ad719621.crl X509v3 Authority Key Identifier: keyid:5D:92:48:68:AC:B1:85:67:D2:75:86:CA:93:F0:1D:52:F7:6C:FC:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621.cer sbgp-ipAddrBlock: critical IPv4: 149.112.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:7a:c9:e3:a4:9f:cd:90:94:ba:77:e7:24:9f:9e:a4:e5:f4: 21:0f:2a:1d:2e:58:08:fc:8b:07:bb:48:89:ef:32:7c:de:7c: c4:00:29:93:9a:50:b0:30:57:b3:71:a0:bc:ef:25:96:b5:b8: b3:54:b5:76:a3:73:75:a8:2d:0a:c3:67:bc:1f:d9:3d:82:1f: 4d:05:48:fe:8a:96:ab:96:d5:26:07:e5:bb:a1:cd:a7:a6:2e: 08:ae:fa:39:ee:4b:14:42:d2:ca:b5:4e:3e:06:c0:03:80:1a: 71:a7:e2:65:a0:36:8c:ba:33:a8:c8:30:71:4c:82:0e:10:f6: 43:bd:42:c3:b1:8d:48:d8:67:54:35:70:3e:6e:fa:63:4b:7c: cc:70:fb:17:d9:4f:9e:16:ec:4d:c3:f0:39:b8:64:eb:42:e3: 7b:05:5d:98:13:3a:9a:29:e8:f3:8f:e2:54:8d:70:d9:1a:a5: 22:d4:45:0d:46:97:b5:cf:dd:ad:56:2a:87:ea:23:d1:fc:1f: 71:06:35:40:d4:fa:ff:db:c4:1c:10:79:01:bd:69:e3:a5:50: 7f:cc:68:4d:49:4c:2a:4f:e0:74:50:86:b1:e0:ef:aa:1d:48: 81:d5:a6:ff:c1:eb:de:a8:b0:5e:94:bf:41:36:98:b7:54:1c: a5:53:f1:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDQbe7KJF1s1gBUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE3Zjk4YzItY2JkMi00M2RlLWE4Y2YtNzA5MWFkNzE5 NjIxMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk OWVmNzFkNTItNTMwYi00YzZjLTljMjYtNjc3YTFmNjI4MDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp372AF7+YB+ep60PSvZ4im1sqKf2qOnJgT0P QGW1wT6dgXW2iJRzqel9tAIkKck33g4PphP2+cw2CdKmHpLmRH2synpZhqKS6Fpr E35+7ILli7QZusxKtJ0Iwn5qMYkroZ5pI4UCXfTKFrHkJ6euijJCXdDL7jykRbau HZN3V0ac0WgBQsvR/Ek6iPYlGYhT0bN2rjy8Yy+TEtizGmgwrcsW+h0cRRJXONUN ujICVSWUkIUq+scmtOkyMlVi19iCQySiWaq6RTHPuKHh6/mk7M0cuaR/n3zd0qYC RfNHBeLIMzQnuWVMnMaRbx2q9oSVKY5Wvl5dcir4Vmkbvx+fbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKdpQXEx+MFn7CPfQB7CHLCC8PMoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MTdm OThjMi1jYmQyLTQzZGUtYThjZi03MDkxYWQ3MTk2MjEvNGFmZjViNzUtYzMxNy0z YjhkLTk0OWMtMWJjYzk0ZWFkMWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTE3Zjk4YzItY2JkMi00M2RlLWE4 Y2YtNzA5MWFkNzE5NjIxLzkxN2Y5OGMyLWNiZDItNDNkZS1hOGNmLTcwOTFhZDcx OTYyMS5jcmwwHwYDVR0jBBgwFoAUXZJIaKyxhWfSdYbKk/AdUvds/O8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MTdmOThjMi1jYmQyLTQzZGUtYThjZi03MDkx YWQ3MTk2MjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXBJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADR6yeOkn82QlLp35ySfnqTl9CEPKh0uWAj8iwe7SInvMnzefMQAKZOa ULAwV7NxoLzvJZa1uLNUtXajc3WoLQrDZ7wf2T2CH00FSP6KlquW1SYH5buhzaem Lgiu+jnuSxRC0sq1Tj4GwAOAGnGn4mWgNoy6M6jIMHFMgg4Q9kO9QsOxjUjYZ1Q1 cD5u+mNLfMxw+xfZT54W7E3D8Dm4ZOtC43sFXZgTOpop6POP4lSNcNkapSLURQ1G l7XP3a1WKofqI9H8H3EGNUDU+v/bxBwQeQG9aeOlUH/MaE1JTCpP4HRQhrHg76od SIHVpv/B696osF6Uv0E2mLdUHKVT8Yg= -----END CERTIFICATE-----Generated at Tue Nov 4 21:09:29 2025 by rpki-client