$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/a46f441d-0abd-33e3-9b46-c39200d4c504.roa File: a46f441d-0abd-33e3-9b46-c39200d4c504.roa (raw, json) Hash identifier: fxn+7qEDNswc6f61HCheJnjb8rcT/AjLI/vzkSvKsHI= Subject key identifier: 3E:E7:6D:6C:62:4F:BD:51:64:F5:CC:28:B7:4D:DF:01:DD:A4:FA:35 Certificate issuer: /CN=0d1af089-3ace-488d-8f52-6b375c813ba2 Certificate serial: 010D0C9F4328584BA0D2641E149E4272A869BC40 Authority key identifier: A6:9C:CE:F2:D7:BC:3F:8C:EE:2F:16:34:59:64:85:BD:CE:1E:2E:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/a46f441d-0abd-33e3-9b46-c39200d4c504.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 174 IP address blocks: 149.149.248.0/21 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/0d1af089-3ace-488d-8f52-6b375c813ba2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/0d1af089-3ace-488d-8f52-6b375c813ba2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:64:1e:14:9e:42:72:a8:69:bc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d1af089-3ace-488d-8f52-6b375c813ba2 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=176a6af6-a1b8-42d7-9f41-c45ea4149197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0f:fd:96:fa:9a:60:10:95:57:ee:af:16:a0: d8:15:d4:ca:0b:69:fd:16:d8:0b:94:d1:6e:4d:53: 96:f7:61:56:44:7b:0d:9d:33:25:ca:69:ab:8c:9e: 59:ad:5d:76:c5:d9:38:54:c8:98:c8:2c:df:2c:70: 90:29:08:37:17:66:e0:79:ac:9f:4e:82:88:8e:18: c5:37:24:f3:6c:a5:b3:46:31:95:f2:a0:0e:14:52: 08:22:10:86:ed:40:de:c3:3d:47:e2:2a:99:68:38: e2:94:20:63:f3:c5:31:04:cf:9f:4c:03:14:5f:37: 7f:da:a4:01:79:05:5a:9f:27:b0:20:db:d6:e9:38: ed:d2:a4:d4:0b:f1:8d:1f:e2:ac:bc:2b:c2:6b:11: e2:c4:10:2c:b1:52:05:96:3a:96:fb:fc:35:62:79: d8:70:9b:17:a7:c0:dc:a7:fd:c8:ca:59:93:b1:6c: 40:b1:61:fe:33:58:d6:4c:91:f8:1e:ec:a9:26:f0: 8b:c8:8b:5e:b6:f1:39:b0:f2:98:85:f1:17:8c:21: ba:ae:0f:f6:f6:c7:2e:1c:ed:9a:bb:3e:cc:20:f4: e4:42:09:24:87:dc:11:b9:80:28:05:65:5c:8e:7d: 94:5c:43:20:19:67:3c:bd:26:e8:28:92:c9:89:77: ef:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:E7:6D:6C:62:4F:BD:51:64:F5:CC:28:B7:4D:DF:01:DD:A4:FA:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/a46f441d-0abd-33e3-9b46-c39200d4c504.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/0d1af089-3ace-488d-8f52-6b375c813ba2.crl X509v3 Authority Key Identifier: keyid:A6:9C:CE:F2:D7:BC:3F:8C:EE:2F:16:34:59:64:85:BD:CE:1E:2E:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2.cer sbgp-ipAddrBlock: critical IPv4: 149.149.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:4a:ee:7d:d2:a5:5f:c0:6e:76:f6:de:fc:f1:42:06:0e:65: 78:37:8c:0d:56:6d:9c:49:42:e0:56:13:0f:0b:02:5b:9e:40: 78:94:1d:a7:a8:fe:30:0d:20:6d:bf:e4:57:d9:19:6a:fa:e0: 0d:33:71:02:aa:4b:e6:29:1f:0b:e1:55:1f:12:a3:2e:5f:92: 77:b3:a6:5b:7e:36:55:97:d5:1a:8e:79:bb:46:20:93:56:79: 32:b2:71:9a:0c:fa:4d:b9:6d:04:9d:3c:06:70:31:d9:ae:d0: c0:91:2b:dd:c6:24:3e:40:6c:e2:fc:7a:35:20:b9:2a:1d:3e: f8:19:1e:3a:f1:97:7a:b6:f1:4d:b6:e2:67:56:83:f6:58:7f: 86:cc:a0:f2:2c:c2:f1:cb:bc:3b:7f:6f:76:66:0a:ec:89:91: 95:2b:08:e9:2e:c2:20:47:ed:36:60:54:b1:9b:d5:05:19:86: 3f:1a:43:93:67:02:a4:dc:52:b9:c8:fa:eb:e6:80:63:fc:6f: a1:95:04:13:93:43:5a:2b:76:2f:b1:40:35:2a:43:4c:5c:67: be:44:9d:7f:2f:05:32:40:31:63:dc:ca:6e:7f:37:95:64:89: 66:a4:2d:6b:1d:e3:73:52:6d:8b:ee:df:3a:55:f0:de:d7:17: 83:c4:0d:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0mQeFJ5CcqhpvEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQxYWYwODktM2FjZS00ODhkLThmNTItNmIzNzVjODEz YmEyMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk MTc2YTZhZjYtYTFiOC00MmQ3LTlmNDEtYzQ1ZWE0MTQ5MTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmw/9lvqaYBCVV+6vFqDYFdTKC2n9FtgLlNFu TVOW92FWRHsNnTMlymmrjJ5ZrV12xdk4VMiYyCzfLHCQKQg3F2bgeayfToKIjhjF NyTzbKWzRjGV8qAOFFIIIhCG7UDewz1H4iqZaDjilCBj88UxBM+fTAMUXzd/2qQB eQVanyewINvW6Tjt0qTUC/GNH+KsvCvCaxHixBAssVIFljqW+/w1YnnYcJsXp8Dc p/3IylmTsWxAsWH+M1jWTJH4HuypJvCLyItetvE5sPKYhfEXjCG6rg/29scuHO2a uz7MIPTkQgkkh9wRuYAoBWVcjn2UXEMgGWc8vSboKJLJiXfvrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7nbWxiT71RZPXMKLdN3wHdpPo1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wZDFh ZjA4OS0zYWNlLTQ4OGQtOGY1Mi02YjM3NWM4MTNiYTIvYTQ2ZjQ0MWQtMGFiZC0z M2UzLTliNDYtYzM5MjAwZDRjNTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGQxYWYwODktM2FjZS00ODhkLThm NTItNmIzNzVjODEzYmEyLzBkMWFmMDg5LTNhY2UtNDg4ZC04ZjUyLTZiMzc1Yzgx M2JhMi5jcmwwHwYDVR0jBBgwFoAUppzO8te8P4zuLxY0WWSFvc4eLpQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wZDFhZjA4OS0zYWNlLTQ4OGQtOGY1Mi02YjM3 NWM4MTNiYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlZX4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5K7n3SpV/Abnb23vzxQgYOZXg3jA1WbZxJQuBWEw8LAlueQHiUHaeo /jANIG2/5FfZGWr64A0zcQKqS+YpHwvhVR8Soy5fknezplt+NlWX1RqOebtGIJNW eTKycZoM+k25bQSdPAZwMdmu0MCRK93GJD5AbOL8ejUguSodPvgZHjrxl3q28U22 4mdWg/ZYf4bMoPIswvHLvDt/b3ZmCuyJkZUrCOkuwiBH7TZgVLGb1QUZhj8aQ5Nn AqTcUrnI+uvmgGP8b6GVBBOTQ1ordi+xQDUqQ0xcZ75EnX8vBTJAMWPcym5/N5Vk iWakLWsd43NSbYvu3zpV8N7XF4PEDcE= -----END CERTIFICATE-----Generated at Wed Nov 5 01:14:29 2025 by rpki-client