$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/4acfbd79-bf73-3109-a7d6-3478fd447c0e.roa File: 4acfbd79-bf73-3109-a7d6-3478fd447c0e.roa (raw, json) Hash identifier: ywZnXyGWTNj5Md60UQWnZJBwdjJlHgGNy5lhi8DcmUI= Subject key identifier: 2D:BC:19:DB:7C:5A:EE:9A:76:5F:9C:3C:80:80:B1:9E:4F:A7:40:ED Certificate issuer: /CN=111c4633-f730-480a-8516-3382e9a5eda3 Certificate serial: 010D0C9F4328584B153C140B85DEBD62B5FCF600 Authority key identifier: 4D:ED:C7:C0:B0:EB:0A:39:CC:65:17:32:30:C8:B6:53:88:23:6C:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/4acfbd79-bf73-3109-a7d6-3478fd447c0e.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 13538 IP address blocks: 149.112.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/111c4633-f730-480a-8516-3382e9a5eda3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/111c4633-f730-480a-8516-3382e9a5eda3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:14:0b:85:de:bd:62:b5:fc:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=111c4633-f730-480a-8516-3382e9a5eda3 Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=71d22c9f-07dc-4814-97fb-418c3b78f442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0d:a1:9c:0a:14:c0:6f:0d:37:aa:f4:21:e1: 7a:82:14:1b:bb:02:27:ad:e2:c0:e6:5a:76:60:d5: a1:d9:7f:48:7e:17:9c:40:3f:6c:ff:25:65:8e:3a: 96:e5:9d:db:d6:25:b2:15:d9:30:a8:85:0e:d8:4d: 40:ae:97:a1:8c:58:73:61:33:5c:14:97:a9:f0:60: a0:5e:38:8e:3a:02:ef:e9:d0:3a:84:bc:e2:68:b8: f2:15:62:65:b7:38:b1:f9:7d:14:ec:0a:70:48:7d: 5c:d9:3f:ec:7d:0b:f8:c2:ec:e7:be:b9:de:38:99: 32:21:31:79:2f:45:1a:0e:02:03:b6:ca:6a:b3:cd: 9f:9d:ba:3a:0a:f0:67:3d:2c:2f:c9:6a:ac:98:0c: 89:3e:61:83:42:c2:72:73:f9:26:1c:b6:1f:76:8e: 6e:d0:c3:68:a9:db:80:5e:c4:04:7e:48:50:08:fc: 0e:97:08:68:af:42:f3:9f:65:c4:85:41:67:2a:b0: be:a0:80:a8:64:a8:2f:25:dd:ce:95:36:42:9c:23: bf:76:64:ce:e0:0f:bc:f4:46:d6:43:48:81:4b:53: 63:f8:34:4d:a8:b0:3b:81:33:34:5a:59:4b:88:ea: 9b:aa:0b:67:05:76:6a:07:6f:19:92:70:16:4d:fa: 0a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:BC:19:DB:7C:5A:EE:9A:76:5F:9C:3C:80:80:B1:9E:4F:A7:40:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/4acfbd79-bf73-3109-a7d6-3478fd447c0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/111c4633-f730-480a-8516-3382e9a5eda3.crl X509v3 Authority Key Identifier: keyid:4D:ED:C7:C0:B0:EB:0A:39:CC:65:17:32:30:C8:B6:53:88:23:6C:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3.cer sbgp-ipAddrBlock: critical IPv4: 149.112.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:f9:8f:5e:9b:b2:7b:c1:e1:2d:6b:23:68:76:77:a6:4a:75: fa:7b:43:b0:d7:49:5e:24:bb:0c:4d:ee:b1:8f:96:48:b7:80: 04:9e:9b:5a:8f:2a:3a:66:d7:0c:da:fa:86:fa:f0:85:07:13: 3f:3b:9e:80:56:f5:30:33:eb:78:f0:02:74:0a:73:c9:f6:63: a6:1e:1d:b5:57:cd:dd:95:22:4e:2c:67:e1:61:83:dc:dc:72: aa:66:48:05:4d:33:2d:ea:05:73:68:0b:f1:43:b5:c7:ba:4c: 28:89:d7:b7:8d:9e:a5:b4:c1:73:d8:cd:99:7d:cc:5d:70:29: 02:d8:6a:9a:99:cb:24:e4:af:c1:f0:22:d1:e1:df:68:d6:59: be:0d:41:d9:b8:a2:1f:29:42:ce:29:be:4a:7e:1b:33:b4:dc: 32:5b:17:f5:24:d5:8f:cf:48:ba:85:e2:86:22:80:72:4d:40: c6:df:7c:d3:af:2e:3a:33:37:64:21:9a:98:90:c9:cc:35:78: cd:ec:20:22:db:88:a7:7c:62:9d:31:cf:f3:4c:43:52:b5:39: bb:1f:e4:a5:b7:ea:4d:ae:30:0b:da:5c:8f:64:d2:87:a4:b2: 1b:ff:b5:a2:10:43:96:f4:0f:63:ed:50:c2:8a:52:04:eb:80: 81:ce:25:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPBQLhd69YrX89gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTExYzQ2MzMtZjczMC00ODBhLTg1MTYtMzM4MmU5YTVl ZGEzMB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk NzFkMjJjOWYtMDdkYy00ODE0LTk3ZmItNDE4YzNiNzhmNDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxg2hnAoUwG8NN6r0IeF6ghQbuwInreLA5lp2 YNWh2X9IfhecQD9s/yVljjqW5Z3b1iWyFdkwqIUO2E1ArpehjFhzYTNcFJep8GCg XjiOOgLv6dA6hLziaLjyFWJltzix+X0U7ApwSH1c2T/sfQv4wuznvrneOJkyITF5 L0UaDgIDtspqs82fnbo6CvBnPSwvyWqsmAyJPmGDQsJyc/kmHLYfdo5u0MNoqduA XsQEfkhQCPwOlwhor0Lzn2XEhUFnKrC+oICoZKgvJd3OlTZCnCO/dmTO4A+89EbW Q0iBS1Nj+DRNqLA7gTM0WllLiOqbqgtnBXZqB28ZknAWTfoK8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC28Gdt8Wu6adl+cPICAsZ5Pp0DtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xMTFj NDYzMy1mNzMwLTQ4MGEtODUxNi0zMzgyZTlhNWVkYTMvNGFjZmJkNzktYmY3My0z MTA5LWE3ZDYtMzQ3OGZkNDQ3YzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMTExYzQ2MzMtZjczMC00ODBhLTg1 MTYtMzM4MmU5YTVlZGEzLzExMWM0NjMzLWY3MzAtNDgwYS04NTE2LTMzODJlOWE1 ZWRhMy5jcmwwHwYDVR0jBBgwFoAUTe3HwLDrCjnMZRcyMMi2U4gjbEQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xMTFjNDYzMy1mNzMwLTQ4MGEtODUxNi0zMzgy ZTlhNWVkYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlXBoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEb5j16bsnvB4S1rI2h2d6ZKdfp7Q7DXSV4kuwxN7rGPlki3gASem1qP Kjpm1wza+ob68IUHEz87noBW9TAz63jwAnQKc8n2Y6YeHbVXzd2VIk4sZ+Fhg9zc cqpmSAVNMy3qBXNoC/FDtce6TCiJ17eNnqW0wXPYzZl9zF1wKQLYapqZyyTkr8Hw ItHh32jWWb4NQdm4oh8pQs4pvkp+GzO03DJbF/Uk1Y/PSLqF4oYigHJNQMbffNOv LjozN2QhmpiQycw1eM3sICLbiKd8Yp0xz/NMQ1K1Obsf5KW36k2uMAvaXI9k0oek shv/taIQQ5b0D2PtUMKKUgTrgIHOJcI= -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:00 2025 by rpki-client