$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/3d7e51e5-cc22-379b-8813-0bc1cdfc955a.roa File: 3d7e51e5-cc22-379b-8813-0bc1cdfc955a.roa (raw, json) Hash identifier: WNpe273N590U0h7ReVVVB9vrwImqakSmIgJrwbwfUZA= Subject key identifier: F8:65:AA:EF:51:2A:77:E1:71:A9:2B:10:34:C1:50:1A:E0:17:4E:41 Certificate issuer: /CN=6bf65f5a-6dd3-4c5d-9a94-33050d9022d6 Certificate serial: 010D0C9F4328584BB2F830F1C57C18BE56E0EDA0 Authority key identifier: F2:A4:2B:DE:FA:FE:77:93:4E:14:AF:9C:ED:16:EC:DD:01:9F:E4:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/3d7e51e5-cc22-379b-8813-0bc1cdfc955a.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 63221 IP address blocks: 149.112.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:30:f1:c5:7c:18:be:56:e0:ed:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bf65f5a-6dd3-4c5d-9a94-33050d9022d6 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=67143f78-5881-44e0-aefb-c07e959d3548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:58:21:df:12:9d:fd:a5:0d:db:ae:a7:95:95: 4d:f2:a2:a0:95:0d:e5:34:18:4a:d2:47:d9:1e:8f: e4:18:48:b4:7e:37:7c:41:02:af:38:b7:7d:dd:59: 2d:69:f8:73:70:84:c1:b7:59:bb:fe:dc:a5:46:4f: ec:9e:b6:b3:c6:2a:b1:00:79:c9:1a:2c:c7:99:be: 27:ff:1e:26:8b:d3:88:b7:39:45:aa:43:23:a2:a5: 89:fc:5a:e1:35:6b:c8:59:88:77:6d:1a:cd:97:c6: 48:4e:f0:d6:a7:8e:ac:ec:85:ee:05:d1:82:b1:3f: c9:76:96:14:61:58:15:b3:af:71:2f:7f:fe:4d:1c: 46:d3:f5:4c:ca:1f:0f:58:b6:3e:75:81:8d:94:f0: f4:68:de:6e:f0:7a:56:6a:1d:b7:48:be:2c:ba:61: 01:c7:53:f2:d2:23:bb:ad:f4:d4:f6:f1:35:4b:82: fa:46:f4:9a:fd:94:d3:22:a7:21:3b:2c:04:71:90: c1:29:dd:80:df:1e:b7:80:8e:c2:6f:57:6b:0a:16: 9f:53:fe:25:92:20:4e:93:0a:5c:e7:bc:6b:25:87: f1:89:41:8c:f8:9f:2a:58:1c:99:23:3b:c4:df:1b: 77:91:0a:63:64:35:06:14:f4:fa:54:25:09:5c:36: be:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:65:AA:EF:51:2A:77:E1:71:A9:2B:10:34:C1:50:1A:E0:17:4E:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/3d7e51e5-cc22-379b-8813-0bc1cdfc955a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.crl X509v3 Authority Key Identifier: keyid:F2:A4:2B:DE:FA:FE:77:93:4E:14:AF:9C:ED:16:EC:DD:01:9F:E4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer sbgp-ipAddrBlock: critical IPv4: 149.112.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d7:8c:6d:c3:5e:da:ea:da:ce:7e:41:59:23:e5:15:43:3b:42: 5e:f5:e2:68:fe:96:a2:7a:28:7c:3a:a8:04:4a:99:bf:e0:bc: 2c:de:44:53:0e:f1:5b:d2:9a:de:fa:e0:ac:26:b2:47:af:09: 6a:3e:54:f1:04:0a:43:01:4d:0c:f4:9c:01:98:d1:c1:1f:ab: 58:c4:5d:36:f4:7c:ea:62:ba:79:15:5a:97:cb:95:17:74:9b: 09:82:c2:b9:21:29:5c:fa:5b:c6:d5:25:a3:77:c2:03:5c:7f: 9b:29:84:5f:90:ff:74:89:b9:fc:71:fb:73:f8:54:8c:3d:c0: a1:f5:92:74:89:0d:0a:bd:dd:b4:6a:3d:d4:ca:66:1b:86:bf: ac:17:e2:80:45:e8:9d:23:de:1e:ee:4c:b0:2c:85:ef:5d:09: 19:2f:7b:f5:9e:b3:0b:77:b6:92:cc:48:7c:0f:1c:ce:d4:fc: ec:1b:13:e4:3e:f1:3e:cc:3d:2d:63:2f:da:48:04:31:d8:5b: 69:46:4d:cc:af:ca:cd:01:1e:9f:ee:0c:67:4c:d6:36:33:42: 32:34:08:63:87:4d:fe:eb:0f:7f:cf:81:8c:37:02:f3:a0:49: c2:ff:f5:b8:9f:3a:24:35:3e:61:cd:d1:26:9e:91:f8:bd:e8: 9d:4e:c9:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy+DDxxXwYvlbg7aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJmNjVmNWEtNmRkMy00YzVkLTlhOTQtMzMwNTBkOTAy MmQ2MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk NjcxNDNmNzgtNTg4MS00NGUwLWFlZmItYzA3ZTk1OWQzNTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFgh3xKd/aUN266nlZVN8qKglQ3lNBhK0kfZ Ho/kGEi0fjd8QQKvOLd93VktafhzcITBt1m7/tylRk/snrazxiqxAHnJGizHmb4n /x4mi9OItzlFqkMjoqWJ/FrhNWvIWYh3bRrNl8ZITvDWp46s7IXuBdGCsT/JdpYU YVgVs69xL3/+TRxG0/VMyh8PWLY+dYGNlPD0aN5u8HpWah23SL4sumEBx1Py0iO7 rfTU9vE1S4L6RvSa/ZTTIqchOywEcZDBKd2A3x63gI7Cb1drChafU/4lkiBOkwpc 57xrJYfxiUGM+J8qWByZIzvE3xt3kQpjZDUGFPT6VCUJXDa++wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhlqu9RKnfhcakrEDTBUBrgF05BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82YmY2 NWY1YS02ZGQzLTRjNWQtOWE5NC0zMzA1MGQ5MDIyZDYvM2Q3ZTUxZTUtY2MyMi0z NzliLTg4MTMtMGJjMWNkZmM5NTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmJmNjVmNWEtNmRkMy00YzVkLTlh OTQtMzMwNTBkOTAyMmQ2LzZiZjY1ZjVhLTZkZDMtNGM1ZC05YTk0LTMzMDUwZDkw MjJkNi5jcmwwHwYDVR0jBBgwFoAU8qQr3vr+d5NOFK+c7Rbs3QGf5MQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82YmY2NWY1YS02ZGQzLTRjNWQtOWE5NC0zMzA1 MGQ5MDIyZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXCFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANeMbcNe2urazn5BWSPlFUM7Ql714mj+lqJ6KHw6qARKmb/gvCzeRFMO 8VvSmt764KwmskevCWo+VPEECkMBTQz0nAGY0cEfq1jEXTb0fOpiunkVWpfLlRd0 mwmCwrkhKVz6W8bVJaN3wgNcf5sphF+Q/3SJufxx+3P4VIw9wKH1knSJDQq93bRq PdTKZhuGv6wX4oBF6J0j3h7uTLAshe9dCRkve/Weswt3tpLMSHwPHM7U/OwbE+Q+ 8T7MPS1jL9pIBDHYW2lGTcyvys0BHp/uDGdM1jYzQjI0CGOHTf7rD3/PgYw3AvOg ScL/9bifOiQ1PmHN0Saekfi96J1OyQY= -----END CERTIFICATE-----Generated at Wed Nov 5 10:19:24 2025 by rpki-client