$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/9ecee302-59db-3fe2-8434-966c474e0474.roa File: 9ecee302-59db-3fe2-8434-966c474e0474.roa (raw, json) Hash identifier: E/CEVs1Emz9oMlNgYKYsZ3RRG9vmRyQXFgzW73XHipY= Subject key identifier: 07:DA:8B:D6:71:C5:6C:65:1E:6D:20:43:52:BF:78:33:5B:3F:8A:F3 Certificate issuer: /CN=2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f Certificate serial: 010D0C9F4328584AF9514755E72C65642FE5A180 Authority key identifier: E7:C3:4D:92:13:BD:90:DE:BE:98:53:B6:75:61:97:86:5B:27:46:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/9ecee302-59db-3fe2-8434-966c474e0474.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 0 IP address blocks: 149.112.17.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:47:55:e7:2c:65:64:2f:e5:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=da9699ba-0661-4ac1-9a5a-9ac9b0bc10db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:00:ad:4b:c1:ae:fd:07:90:9e:7f:6e:9f:0d: e1:1b:53:60:b8:ef:93:9b:9b:60:88:4b:16:54:bb: d3:32:2a:8d:7d:c8:49:43:84:a2:c6:cc:b2:4c:04: 60:80:84:1d:dc:54:b8:9e:3f:11:b1:1e:74:33:c5: b5:da:3d:48:ec:78:d5:7d:4e:dd:f6:aa:28:f4:8a: 1a:ab:fd:59:8b:dd:8c:2f:9f:ad:bf:c7:eb:18:2e: b5:aa:6e:64:94:68:70:5c:23:60:d0:43:78:a5:65: a5:81:27:e7:6b:15:f3:32:b8:59:f0:eb:d7:75:22: b3:a6:e0:31:0f:22:60:52:db:6c:a2:01:6e:1a:9d: 2e:14:8d:eb:7d:f7:78:ac:79:80:f0:45:2d:be:ff: af:bf:c6:16:dd:1d:ae:f3:15:36:86:f4:e6:79:a0: 88:ff:9e:08:ce:06:9b:53:f2:fd:7c:df:9d:a6:0c: 74:7a:c4:a2:1b:a4:93:2e:13:2e:69:3a:af:bb:57: 4b:1c:e2:21:52:d9:2d:6a:48:51:94:4d:84:40:60: a8:87:12:11:37:2d:6b:21:18:09:f9:8f:d0:19:dc: d9:6d:ce:06:6f:49:e1:1e:07:40:a0:ea:84:11:c2: 47:2f:05:61:27:e7:fa:c6:52:1c:b1:76:74:31:14: 32:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:DA:8B:D6:71:C5:6C:65:1E:6D:20:43:52:BF:78:33:5B:3F:8A:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/9ecee302-59db-3fe2-8434-966c474e0474.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.crl X509v3 Authority Key Identifier: keyid:E7:C3:4D:92:13:BD:90:DE:BE:98:53:B6:75:61:97:86:5B:27:46:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer sbgp-ipAddrBlock: critical IPv4: 149.112.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:c5:0e:09:ea:62:e6:29:cd:62:c1:ab:f8:38:9b:c8:de:ba: a0:43:d4:b6:eb:ac:d7:6c:3e:65:aa:0d:4e:35:56:0d:1f:d8: af:d9:ad:3b:ce:52:17:f3:54:9a:66:73:0d:c8:38:85:3d:b4: b2:e7:99:bc:5d:35:ff:c3:ba:ae:8d:07:9e:a2:71:80:7a:1d: 78:26:1e:50:af:ec:82:d7:41:0e:af:d2:0f:f1:6d:2a:13:50: 6c:83:03:3d:fd:36:ce:63:41:e8:9a:a7:6a:aa:f6:a4:c6:6d: 61:51:e2:25:b8:2d:aa:b0:21:6b:a2:6b:ca:af:49:56:ed:28: 8e:38:94:5f:94:1f:f2:0b:ae:f2:93:97:81:08:2a:ae:63:b4: 4f:02:a5:5b:80:b5:8a:ed:7a:00:3f:f6:8c:d9:fe:19:9c:f0: cc:b8:a5:a6:00:06:bd:7c:c9:15:33:3c:fa:b7:a6:68:f2:95: 99:2a:d4:82:53:60:98:d8:06:a4:bc:09:76:04:5b:0a:44:9a: bd:ff:69:9e:07:0e:d8:33:00:40:48:be:6c:67:d8:f1:81:16: 1f:46:2f:52:16:cd:76:5f:30:21:7d:64:f1:39:18:82:3a:5a: 56:0f:df:14:41:27:4e:ef:ca:53:f0:fb:db:bb:ea:fc:13:e9: bf:c6:8a:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UUdV5yxlZC/loYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE2MTFlZjEtMTk1ZS00OTU4LWE2YWMtZjRhMWQyY2Q4 YzhmMB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ZGE5Njk5YmEtMDY2MS00YWMxLTlhNWEtOWFjOWIwYmMxMGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7gCtS8Gu/QeQnn9unw3hG1NguO+Tm5tgiEsW VLvTMiqNfchJQ4SixsyyTARggIQd3FS4nj8RsR50M8W12j1I7HjVfU7d9qoo9Ioa q/1Zi92ML5+tv8frGC61qm5klGhwXCNg0EN4pWWlgSfnaxXzMrhZ8OvXdSKzpuAx DyJgUttsogFuGp0uFI3rffd4rHmA8EUtvv+vv8YW3R2u8xU2hvTmeaCI/54Izgab U/L9fN+dpgx0esSiG6STLhMuaTqvu1dLHOIhUtktakhRlE2EQGCohxIRNy1rIRgJ +Y/QGdzZbc4Gb0nhHgdAoOqEEcJHLwVhJ+f6xlIcsXZ0MRQyiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAfai9ZxxWxlHm0gQ1K/eDNbP4rzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yYTYx MWVmMS0xOTVlLTQ5NTgtYTZhYy1mNGExZDJjZDhjOGYvOWVjZWUzMDItNTlkYi0z ZmUyLTg0MzQtOTY2YzQ3NGUwNDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmE2MTFlZjEtMTk1ZS00OTU4LWE2 YWMtZjRhMWQyY2Q4YzhmLzJhNjExZWYxLTE5NWUtNDk1OC1hNmFjLWY0YTFkMmNk OGM4Zi5jcmwwHwYDVR0jBBgwFoAU58NNkhO9kN6+mFO2dWGXhlsnRk0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yYTYxMWVmMS0xOTVlLTQ5NTgtYTZhYy1mNGEx ZDJjZDhjOGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXARMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbFDgnqYuYpzWLBq/g4m8jeuqBD1LbrrNdsPmWqDU41Vg0f2K/ZrTvO UhfzVJpmcw3IOIU9tLLnmbxdNf/Duq6NB56icYB6HXgmHlCv7ILXQQ6v0g/xbSoT UGyDAz39Ns5jQeiap2qq9qTGbWFR4iW4LaqwIWuia8qvSVbtKI44lF+UH/ILrvKT l4EIKq5jtE8CpVuAtYrtegA/9ozZ/hmc8My4paYABr18yRUzPPq3pmjylZkq1IJT YJjYBqS8CXYEWwpEmr3/aZ4HDtgzAEBIvmxn2PGBFh9GL1IWzXZfMCF9ZPE5GII6 WlYP3xRBJ07vylPw+9u76vwT6b/GiuQ= -----END CERTIFICATE-----Generated at Tue Nov 4 22:57:29 2025 by rpki-client