$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/539fc5bd-7296-35e8-99e1-17fbb00d92f9.roa File: 539fc5bd-7296-35e8-99e1-17fbb00d92f9.roa (raw, json) Hash identifier: YC5MFhn4uDq7GZisZ7e1L56lcydSlgSsSwmWf6HuiGM= Subject key identifier: 91:04:11:85:5F:87:20:C9:54:22:A8:9F:1F:27:B5:E9:B9:A1:7B:7A Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584AFEE6AA71009BDA4BE1B49F80 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/539fc5bd-7296-35e8-99e1-17fbb00d92f9.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 399629 IP address blocks: 149.248.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:aa:71:00:9b:da:4b:e1:b4:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=71592939-0d79-4c3d-8f22-4c348805d439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:27:bd:c6:bc:ae:39:22:a2:98:cc:13:33:83: 9d:d9:a2:a9:57:56:63:f0:5a:b4:df:69:99:f8:6c: af:f3:4f:24:39:6c:95:4c:34:71:3d:46:49:cf:39: 7f:f2:e2:b5:8f:2a:0e:c6:e7:c4:cf:a6:e6:b6:3c: d9:5a:62:21:dd:2f:7f:0a:b0:2f:0b:b4:39:14:1c: b8:52:23:f0:8f:6c:6f:ac:6b:20:28:a5:11:20:49: b6:d8:7d:d0:1f:cf:b6:00:42:cf:0e:50:63:dd:f9: ac:d1:43:38:f6:a1:7a:31:3f:cb:45:2c:99:de:db: cb:3e:7d:1b:da:fa:bc:2b:5d:c8:e5:2b:a0:a3:eb: 0d:19:86:06:51:84:1b:70:71:66:be:da:3e:a7:92: ef:74:79:35:3e:93:f5:c2:a4:f8:55:1b:c5:7c:20: 1d:0b:9b:82:11:03:29:b5:c0:30:6e:b5:2b:41:ea: cd:24:3a:cb:c8:15:95:01:09:3e:17:ee:15:b2:2c: 03:00:80:21:67:06:91:da:52:23:55:be:f2:42:9d: b3:bc:d4:f6:c7:1c:3c:f8:48:5c:50:61:9a:c2:12: 8b:0f:91:23:b9:c8:cb:03:8b:62:4c:c7:f1:00:af: be:f8:fb:9d:57:8a:5e:8e:6a:ff:a2:00:e1:a0:63: 25:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:04:11:85:5F:87:20:C9:54:22:A8:9F:1F:27:B5:E9:B9:A1:7B:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/539fc5bd-7296-35e8-99e1-17fbb00d92f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 149.248.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:00:e9:e9:65:9a:e2:21:46:04:1e:ec:a7:d9:a7:d0:db:ba: a3:60:e4:5a:de:7e:c4:d4:20:e0:a7:4e:79:a7:74:e9:80:2d: 57:e7:24:b9:bd:43:a0:b8:59:11:1c:bc:ef:cb:ff:8c:46:c4: 48:f2:db:0c:15:77:bd:68:8d:6d:e4:fb:51:bc:33:e7:5b:81: fa:9e:91:33:38:5d:dc:1e:f2:dd:6e:10:f3:1f:d4:59:5f:d5: 14:7c:79:e3:ba:88:53:e9:4c:c9:f7:6c:52:42:50:ec:c4:a9: 98:d5:5a:6a:3e:1f:2f:11:cb:a9:86:5f:37:af:2f:f8:44:f8: 63:56:aa:7d:cc:0b:b7:0f:3c:3d:4c:02:2f:50:fe:9f:b9:03: e5:52:c5:bb:21:ea:c0:0d:06:a6:08:df:c3:2e:6f:27:13:d9: 38:3a:34:3c:6f:db:c7:97:54:00:07:4f:16:42:13:be:5b:31: f9:b3:86:cd:be:e4:d6:f2:5e:95:d9:b1:42:68:b2:17:4f:90: 29:8d:d6:e2:57:db:e1:06:7b:fe:ee:e3:d1:f6:aa:d4:85:57: 66:f2:5d:9d:13:25:0f:a3:a9:24:6c:d1:40:cf:e6:f6:af:3d: 12:43:1e:80:3d:2a:86:0c:16:d9:e3:30:5d:33:c8:6b:6d:c0: 3e:eb:48:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5qpxAJvaS+G0n4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk NzE1OTI5MzktMGQ3OS00YzNkLThmMjItNGMzNDg4MDVkNDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCe9xryuOSKimMwTM4Od2aKpV1Zj8Fq032mZ +Gyv808kOWyVTDRxPUZJzzl/8uK1jyoOxufEz6bmtjzZWmIh3S9/CrAvC7Q5FBy4 UiPwj2xvrGsgKKURIEm22H3QH8+2AELPDlBj3fms0UM49qF6MT/LRSyZ3tvLPn0b 2vq8K13I5Sugo+sNGYYGUYQbcHFmvto+p5LvdHk1PpP1wqT4VRvFfCAdC5uCEQMp tcAwbrUrQerNJDrLyBWVAQk+F+4VsiwDAIAhZwaR2lIjVb7yQp2zvNT2xxw8+Ehc UGGawhKLD5EjucjLA4tiTMfxAK+++PudV4pejmr/ogDhoGMlRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJEEEYVfhyDJVCKonx8ntem5oXt6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvNTM5ZmM1YmQtNzI5Ni0z NWU4LTk5ZTEtMTdmYmIwMGQ5MmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlfhNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMA6ellmuIhRgQe7KfZp9DbuqNg5FrefsTUIOCnTnmndOmALVfnJLm9 Q6C4WREcvO/L/4xGxEjy2wwVd71ojW3k+1G8M+dbgfqekTM4Xdwe8t1uEPMf1Flf 1RR8eeO6iFPpTMn3bFJCUOzEqZjVWmo+Hy8Ry6mGXzevL/hE+GNWqn3MC7cPPD1M Ai9Q/p+5A+VSxbsh6sANBqYI38MubycT2Tg6NDxv28eXVAAHTxZCE75bMfmzhs2+ 5NbyXpXZsUJoshdPkCmN1uJX2+EGe/7u49H2qtSFV2byXZ0TJQ+jqSRs0UDP5vav PRJDHoA9KoYMFtnjMF0zyGttwD7rSHw= -----END CERTIFICATE-----Generated at Wed Nov 5 16:08:02 2025 by rpki-client