$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744/6a07785b-f6b7-3b19-842b-7d5a54e7a0ee.roa File: 6a07785b-f6b7-3b19-842b-7d5a54e7a0ee.roa (raw, json) Hash identifier: cc8iwcP1+klLKCU4V52WdeB0b+H1DGSuAUDkj+0LB8o= Subject key identifier: C6:83:6F:1C:FA:FD:A9:8A:3B:6F:59:85:D9:CD:57:B9:E9:E1:8A:DE Certificate issuer: /CN=c768f2c1-f55b-4ae8-a44c-b9b6062d3744 Certificate serial: 010D0C9F4328584BB4FE53B30E8B7CE199144500 Authority key identifier: EE:4F:45:A3:B5:11:B2:C3:B7:83:36:11:41:5E:BA:95:F6:CB:6D:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744/6a07785b-f6b7-3b19-842b-7d5a54e7a0ee.roa Signing time: Fri 31 Oct 2025 18:25:38 +0000 ROA not before: Fri 31 Oct 2025 18:25:38 +0000 ROA not after: Thu 29 Jan 2026 19:25:38 +0000 asID: 16509 IP address blocks: 149.24.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744/c768f2c1-f55b-4ae8-a44c-b9b6062d3744.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744/c768f2c1-f55b-4ae8-a44c-b9b6062d3744.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:fe:53:b3:0e:8b:7c:e1:99:14:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c768f2c1-f55b-4ae8-a44c-b9b6062d3744 Validity Not Before: Oct 31 18:25:38 2025 GMT Not After : Jan 29 19:25:38 2026 GMT Subject: CN=3fd8757a-061b-4dc7-aa9c-28ef378267cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:fa:6e:43:4c:ba:4a:35:d9:6c:2f:20:c7:54: 95:51:59:a4:e0:3a:df:99:0a:ef:c4:b9:da:c7:d7: 9e:59:f3:04:b0:1a:94:94:9f:1f:22:27:14:c9:bf: 2a:cd:ad:71:13:bc:b1:0c:e3:5b:3a:6f:d0:65:b0: e5:3d:e3:61:28:a4:8b:63:5b:37:d2:c5:d1:c7:d3: 50:3e:8f:fc:2a:99:29:63:fe:56:ce:1e:4a:8c:dd: b1:2b:42:07:4a:e7:a7:d8:46:92:b6:6d:7b:5e:82: 38:26:59:0e:82:2e:9d:59:32:23:33:ec:6f:c4:c6: 64:0e:8e:99:df:5c:9f:59:55:02:a2:79:02:16:5b: 4e:a4:63:07:ae:52:03:c4:ce:29:a9:4c:2c:8e:15: 42:04:ec:c7:f5:41:7c:b6:a4:3c:4c:89:7c:f9:d8: 10:07:2a:0c:e9:1b:98:17:d7:1a:72:20:98:a0:a0: 0b:ee:e5:c8:30:29:01:66:e6:00:f1:69:ce:c5:f1: 07:02:81:70:09:2b:46:18:b8:db:f7:03:8f:47:09: 0b:21:d4:b5:e5:40:f1:89:2c:fb:4e:6d:83:64:95: 5d:ae:13:52:7d:d5:39:10:5e:82:ae:32:22:e4:fd: 09:a4:6f:b6:d6:6e:3a:b3:4b:2a:1f:8d:1a:77:0a: c3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:83:6F:1C:FA:FD:A9:8A:3B:6F:59:85:D9:CD:57:B9:E9:E1:8A:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744/6a07785b-f6b7-3b19-842b-7d5a54e7a0ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744/c768f2c1-f55b-4ae8-a44c-b9b6062d3744.crl X509v3 Authority Key Identifier: keyid:EE:4F:45:A3:B5:11:B2:C3:B7:83:36:11:41:5E:BA:95:F6:CB:6D:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744.cer sbgp-ipAddrBlock: critical IPv4: 149.24.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:e1:de:47:fd:27:28:c9:13:7a:3c:59:2a:88:fa:64:57:14: f8:92:88:37:73:df:e3:2b:89:b8:a9:64:a9:49:2c:1c:85:73: ff:1f:9e:29:87:82:ce:38:2c:f4:45:74:86:63:1f:40:3a:2e: e2:c5:68:4a:09:92:dc:7a:ae:c5:3d:cb:4a:92:71:c0:62:4d: cf:d6:c2:73:56:af:87:2e:b6:73:fb:6c:8b:29:4e:34:81:aa: 54:74:d3:e1:4c:58:79:b2:1a:fd:8f:15:4d:f0:67:8e:fe:d2: 24:95:b7:8b:20:80:f5:af:23:9f:32:e6:8d:7f:e8:5c:05:d4: e7:81:da:77:78:c4:79:14:94:d0:01:82:c6:22:45:f2:52:93: c9:ec:d1:82:39:0d:58:18:6f:5b:9d:e2:a2:6f:10:6e:81:ae: 45:92:80:94:ae:c4:84:cd:7d:d7:72:cf:37:4a:fd:40:fa:13: 08:25:28:c4:a2:82:0d:cd:8d:ca:af:d5:8f:16:88:b5:f1:0e: 71:42:5f:85:4a:71:87:c7:27:c7:e6:53:4d:b7:7e:35:21:d9: c1:5e:6f:c2:63:f1:74:73:46:1c:26:98:3a:00:ab:00:80:f8: 13:6f:33:12:43:aa:d1:32:a6:31:19:ac:7c:ae:30:1b:e5:f3: 5b:dc:a7:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0/lOzDot84ZkURQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzc2OGYyYzEtZjU1Yi00YWU4LWE0NGMtYjliNjA2MmQz NzQ0MB4XDTI1MTAzMTE4MjUzOFoXDTI2MDEyOTE5MjUzOFowLzEtMCsGA1UEAxMk M2ZkODc1N2EtMDYxYi00ZGM3LWFhOWMtMjhlZjM3ODI2N2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPpuQ0y6SjXZbC8gx1SVUVmk4DrfmQrvxLna x9eeWfMEsBqUlJ8fIicUyb8qza1xE7yxDONbOm/QZbDlPeNhKKSLY1s30sXRx9NQ Po/8KpkpY/5Wzh5KjN2xK0IHSuen2EaStm17XoI4JlkOgi6dWTIjM+xvxMZkDo6Z 31yfWVUConkCFltOpGMHrlIDxM4pqUwsjhVCBOzH9UF8tqQ8TIl8+dgQByoM6RuY F9caciCYoKAL7uXIMCkBZuYA8WnOxfEHAoFwCStGGLjb9wOPRwkLIdS15UDxiSz7 Tm2DZJVdrhNSfdU5EF6CrjIi5P0JpG+21m46s0sqH40adwrDkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMaDbxz6/amKO29ZhdnNV7np4YreMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jNzY4 ZjJjMS1mNTViLTRhZTgtYTQ0Yy1iOWI2MDYyZDM3NDQvNmEwNzc4NWItZjZiNy0z YjE5LTg0MmItN2Q1YTU0ZTdhMGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzc2OGYyYzEtZjU1Yi00YWU4LWE0 NGMtYjliNjA2MmQzNzQ0L2M3NjhmMmMxLWY1NWItNGFlOC1hNDRjLWI5YjYwNjJk Mzc0NC5jcmwwHwYDVR0jBBgwFoAU7k9Fo7URssO3gzYRQV66lfbLbZ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jNzY4ZjJjMS1mNTViLTRhZTgtYTQ0Yy1iOWI2 MDYyZDM3NDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlRh6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJvh3kf9JyjJE3o8WSqI+mRXFPiSiDdz3+MribipZKlJLByFc/8fnimH gs44LPRFdIZjH0A6LuLFaEoJktx6rsU9y0qSccBiTc/WwnNWr4cutnP7bIspTjSB qlR00+FMWHmyGv2PFU3wZ47+0iSVt4sggPWvI58y5o1/6FwF1OeB2nd4xHkUlNAB gsYiRfJSk8ns0YI5DVgYb1ud4qJvEG6BrkWSgJSuxITNfddyzzdK/UD6EwglKMSi gg3Njcqv1Y8WiLXxDnFCX4VKcYfHJ8fmU023fjUh2cFeb8Jj8XRzRhwmmDoAqwCA +BNvMxJDqtEypjEZrHyuMBvl81vcp5k= -----END CERTIFICATE-----Generated at Wed Nov 5 11:07:50 2025 by rpki-client