$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/3f35fd67-5df2-3eaa-ab48-10f5762d0aa5.roa File: 3f35fd67-5df2-3eaa-ab48-10f5762d0aa5.roa (raw, json) Hash identifier: bmEWzg0NGZ9lUGr/r3Zyaw3GzIivKx9Me/UyAstcJmU= Subject key identifier: 79:1B:F6:F1:21:31:35:77:AC:B3:31:30:6B:4D:4F:2D:0F:44:FE:FD Certificate issuer: /CN=0d1af089-3ace-488d-8f52-6b375c813ba2 Certificate serial: 010D0C9F4328584BA0D250A00DFEBB4C13E31540 Authority key identifier: A6:9C:CE:F2:D7:BC:3F:8C:EE:2F:16:34:59:64:85:BD:CE:1E:2E:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/3f35fd67-5df2-3eaa-ab48-10f5762d0aa5.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 19331 IP address blocks: 149.149.0.0/16 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/0d1af089-3ace-488d-8f52-6b375c813ba2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/0d1af089-3ace-488d-8f52-6b375c813ba2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:50:a0:0d:fe:bb:4c:13:e3:15:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d1af089-3ace-488d-8f52-6b375c813ba2 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=4ed08d50-c3ec-4405-b095-0c1a3c2ab231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:1f:77:1c:89:da:66:04:87:45:78:db:5e:5a: 94:31:81:ea:36:46:c7:cf:05:f6:a7:97:ab:8b:ee: 08:72:a3:4b:a7:1b:75:8d:d6:69:68:3b:b3:c7:fa: 6d:83:df:04:0a:19:1e:93:2f:8d:51:8b:a9:7f:78: 8e:0e:1f:18:3c:74:41:94:50:68:3f:b6:dc:7e:a1: ce:11:2b:0a:4b:30:65:78:61:ea:8a:bf:ad:f1:20: 51:bd:0d:7b:4c:ce:63:f6:8f:44:d8:05:0d:fe:50: fe:5f:e9:b8:24:90:59:81:f0:b7:27:85:82:23:34: e7:10:f9:10:16:14:05:15:fd:b2:a8:a3:2d:aa:39: 2e:41:43:72:1a:2e:e9:52:0a:15:16:6a:f9:1f:47: c9:76:d1:ee:c8:a1:dc:9a:82:67:f8:01:03:42:00: c7:15:7a:63:a3:fd:ae:bc:40:72:c2:99:59:9b:fb: 2e:f5:69:b7:99:d4:1f:f2:58:be:4f:82:fa:c5:2d: dc:d5:fd:14:7a:ea:d4:16:d8:ee:3c:d6:8c:65:9d: 02:ee:df:33:0c:75:11:f5:8d:92:56:a7:70:e3:68: a2:aa:47:88:20:ae:2b:e3:5b:94:f3:9d:dc:39:3d: 63:5b:b6:d1:d7:1a:a0:f9:de:db:ec:80:be:96:00: 3b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:1B:F6:F1:21:31:35:77:AC:B3:31:30:6B:4D:4F:2D:0F:44:FE:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/3f35fd67-5df2-3eaa-ab48-10f5762d0aa5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/0d1af089-3ace-488d-8f52-6b375c813ba2.crl X509v3 Authority Key Identifier: keyid:A6:9C:CE:F2:D7:BC:3F:8C:EE:2F:16:34:59:64:85:BD:CE:1E:2E:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2.cer sbgp-ipAddrBlock: critical IPv4: 149.149.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:b9:79:f1:d6:0c:c2:05:e0:e8:6d:28:46:5d:0b:57:6e:71: 66:c2:f2:ac:f4:44:62:1b:ed:31:be:9d:a6:3e:97:bc:4b:bd: 77:ee:9e:be:aa:e9:51:a2:f4:3b:80:3a:43:39:6c:4f:5f:13: aa:ae:d4:f6:1b:6c:e7:19:2f:9c:b8:fa:5c:16:35:3a:96:9f: b5:20:fe:4a:65:43:9e:08:6b:2f:02:2f:1f:ba:53:68:91:84: 7c:26:7b:32:dd:49:35:9b:14:f5:9d:ae:d3:96:97:b6:49:a4: 2a:cf:26:47:d2:8b:f1:c6:37:31:77:49:3c:e9:47:17:96:34: 16:91:62:73:16:81:ab:67:ef:10:24:a4:02:91:36:96:d6:1d: 35:b0:42:75:c6:1c:08:cf:3b:e9:79:6f:9b:5e:98:6d:a3:dc: 0b:96:4e:45:12:21:be:ff:4c:ec:44:da:1a:9d:c6:c5:71:e8: a8:31:1d:2c:69:fe:83:ad:bb:22:95:9a:99:16:5d:e2:d0:34: 3a:03:84:44:cf:a5:14:68:7d:44:2e:8f:e8:dd:bb:a7:68:f1: 04:bc:11:91:a9:b1:8c:3d:48:62:a8:6b:a6:54:29:37:7f:8a: a9:6b:c2:28:16:89:4e:a1:91:7c:67:b4:eb:59:f0:05:2b:94: 61:bb:cd:4f -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEug0lCgDf67TBPjFUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQxYWYwODktM2FjZS00ODhkLThmNTItNmIzNzVjODEz YmEyMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk NGVkMDhkNTAtYzNlYy00NDA1LWIwOTUtMGMxYTNjMmFiMjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgR93HInaZgSHRXjbXlqUMYHqNkbHzwX2p5er i+4IcqNLpxt1jdZpaDuzx/ptg98EChkeky+NUYupf3iODh8YPHRBlFBoP7bcfqHO ESsKSzBleGHqir+t8SBRvQ17TM5j9o9E2AUN/lD+X+m4JJBZgfC3J4WCIzTnEPkQ FhQFFf2yqKMtqjkuQUNyGi7pUgoVFmr5H0fJdtHuyKHcmoJn+AEDQgDHFXpjo/2u vEBywplZm/su9Wm3mdQf8li+T4L6xS3c1f0UeurUFtjuPNaMZZ0C7t8zDHUR9Y2S Vqdw42iiqkeIIK4r41uU853cOT1jW7bR1xqg+d7b7IC+lgA7hwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFHkb9vEhMTV3rLMxMGtNTy0PRP79MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wZDFh ZjA4OS0zYWNlLTQ4OGQtOGY1Mi02YjM3NWM4MTNiYTIvM2YzNWZkNjctNWRmMi0z ZWFhLWFiNDgtMTBmNTc2MmQwYWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGQxYWYwODktM2FjZS00ODhkLThm NTItNmIzNzVjODEzYmEyLzBkMWFmMDg5LTNhY2UtNDg4ZC04ZjUyLTZiMzc1Yzgx M2JhMi5jcmwwHwYDVR0jBBgwFoAUppzO8te8P4zuLxY0WWSFvc4eLpQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wZDFhZjA4OS0zYWNlLTQ4OGQtOGY1Mi02YjM3 NWM4MTNiYTIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAlZUwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAULl58dYMwgXg6G0oRl0LV25xZsLyrPREYhvtMb6dpj6XvEu9d+6evqrp UaL0O4A6QzlsT18Tqq7U9hts5xkvnLj6XBY1OpaftSD+SmVDnghrLwIvH7pTaJGE fCZ7Mt1JNZsU9Z2u05aXtkmkKs8mR9KL8cY3MXdJPOlHF5Y0FpFicxaBq2fvECSk ApE2ltYdNbBCdcYcCM876Xlvm16YbaPcC5ZORRIhvv9M7ETaGp3GxXHoqDEdLGn+ g627IpWamRZd4tA0OgOERM+lFGh9RC6P6N27p2jxBLwRkamxjD1IYqhrplQpN3+K qWvCKBaJTqGRfGe061nwBSuUYbvNTw== -----END CERTIFICATE-----Generated at Wed Nov 5 10:35:01 2025 by rpki-client