$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/0746b4f7-76f5-35d6-baaa-3c5785188ed1.roa File: 0746b4f7-76f5-35d6-baaa-3c5785188ed1.roa (raw, json) Hash identifier: rJtAJEHrNrj0grCHRWJTb9C10t/7KyuZAxXcPdwwGII= Subject key identifier: BF:F4:59:95:5B:94:FA:F0:0C:28:40:D0:78:BD:05:C1:E2:0C:54:98 Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F4328584BBA1035E43E4CFD557D414A00 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/0746b4f7-76f5-35d6-baaa-3c5785188ed1.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 23467 IP address blocks: 162.247.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:35:e4:3e:4c:fd:55:7d:41:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=a79a3ee4-587c-48ee-8100-1f09d536b83b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7a:5f:f2:8d:c3:10:dc:20:75:b7:4a:be:37: 2b:53:49:3f:06:93:13:a7:39:9c:be:5e:bd:f0:fb: e1:29:2d:39:00:5d:44:3e:99:2a:5c:75:bc:f5:2e: 47:4c:7c:ea:b5:8c:ca:18:70:41:fb:bc:11:4c:07: 2d:a0:bb:c8:f3:0b:74:be:b9:45:4b:c6:9c:cc:57: 93:c5:f8:72:50:84:08:2e:ed:54:d9:17:b2:a6:eb: 16:4a:f9:05:8d:0e:4a:a2:ee:75:85:4b:2a:63:de: 58:75:53:3e:69:af:35:27:dd:2b:2f:97:62:dd:71: d3:28:d8:35:de:e5:f3:3b:9a:d9:c8:13:f5:88:ca: ca:50:6f:3c:fe:8d:2d:58:3c:a2:b7:28:0e:24:97: 15:48:16:9d:18:5a:a6:0c:9c:6c:63:98:b4:1a:76: 88:98:27:9d:7f:96:69:bc:9c:78:92:49:5b:08:1b: 68:c0:83:c9:62:91:9e:19:55:7e:cf:81:52:51:a7: b8:33:bd:cd:bd:b9:31:b3:b9:16:b0:5c:f5:91:43: 28:14:a7:de:ac:83:93:a7:eb:5e:97:69:c9:e1:41: 7c:9a:4c:a4:45:92:03:e6:87:7c:8a:27:cc:58:66: 07:4d:20:a5:60:45:f5:3c:af:ca:93:64:4b:18:c4: 06:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F4:59:95:5B:94:FA:F0:0C:28:40:D0:78:BD:05:C1:E2:0C:54:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/0746b4f7-76f5-35d6-baaa-3c5785188ed1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 162.247.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:df:83:9f:1b:e1:a4:e9:ef:f2:49:28:5a:2a:9a:d7:f3:5d: 84:1f:e1:d7:e4:3c:f4:73:c2:57:9a:40:42:e1:26:e1:f7:4e: 77:3c:5d:76:09:03:10:7b:00:5a:27:ef:76:6e:c6:44:0f:a5: f9:05:27:5d:45:53:d4:1b:df:73:5f:2a:5e:b8:42:a5:95:b3: 32:fc:9b:33:27:ee:93:6f:48:a3:ff:27:bc:1a:a7:cb:ac:10: cf:7c:f7:7e:7c:4a:68:ed:7b:e3:30:25:84:ca:52:b3:35:ee: 3e:1e:f4:5f:e4:8b:09:28:64:d7:fc:29:70:0c:36:07:b9:64: 24:95:40:c8:1c:63:4f:ad:25:46:47:27:c7:c8:10:29:4a:f7: 18:b8:91:20:4f:ed:44:d1:05:bf:c0:17:20:1c:89:67:33:e6: 82:bc:db:aa:c3:04:8b:aa:ce:9e:88:9e:1c:bb:90:32:00:f4: 9b:b7:e1:f5:fc:51:dd:35:a8:cd:39:2b:78:6e:54:ff:03:be: e6:20:b9:71:f1:51:52:15:d5:4f:9b:82:4d:ff:41:08:5c:78: fc:c3:ca:65:00:f3:1f:7e:0a:a4:de:1e:2a:79:1f:70:93:69: c9:db:0d:94:b5:75:8d:f5:80:15:5f:97:a2:37:2c:23:72:04: 84:92:79:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu6EDXkPkz9VX1BSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk YTc5YTNlZTQtNTg3Yy00OGVlLTgxMDAtMWYwOWQ1MzZiODNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynpf8o3DENwgdbdKvjcrU0k/BpMTpzmcvl69 8PvhKS05AF1EPpkqXHW89S5HTHzqtYzKGHBB+7wRTActoLvI8wt0vrlFS8aczFeT xfhyUIQILu1U2ReypusWSvkFjQ5Kou51hUsqY95YdVM+aa81J90rL5di3XHTKNg1 3uXzO5rZyBP1iMrKUG88/o0tWDyitygOJJcVSBadGFqmDJxsY5i0GnaImCedf5Zp vJx4kklbCBtowIPJYpGeGVV+z4FSUae4M73Nvbkxs7kWsFz1kUMoFKferIOTp+te l2nJ4UF8mkykRZID5od8iifMWGYHTSClYEX1PK/Kk2RLGMQGIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/0WZVblPrwDChA0Hi9BcHiDFSYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvMDc0NmI0ZjctNzZmNS0z NWQ2LWJhYWEtM2M1Nzg1MTg4ZWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovfxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKDfg58b4aTp7/JJKFoqmtfzXYQf4dfkPPRzwleaQELhJuH3Tnc8XXYJ AxB7AFon73ZuxkQPpfkFJ11FU9Qb33NfKl64QqWVszL8mzMn7pNvSKP/J7wap8us EM989358Smjte+MwJYTKUrM17j4e9F/kiwkoZNf8KXAMNge5ZCSVQMgcY0+tJUZH J8fIEClK9xi4kSBP7UTRBb/AFyAciWcz5oK826rDBIuqzp6Inhy7kDIA9Ju34fX8 Ud01qM05K3huVP8DvuYguXHxUVIV1U+bgk3/QQhcePzDymUA8x9+CqTeHip5H3CT acnbDZS1dY31gBVfl6I3LCNyBISSeQU= -----END CERTIFICATE-----Generated at Wed Nov 5 05:28:49 2025 by rpki-client