$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a/c9aa9150-9841-397a-b807-599d98d7b122.roa File: c9aa9150-9841-397a-b807-599d98d7b122.roa (raw, json) Hash identifier: 2VlLu3gL048k/W8MmdJUt2a+DjjZkZ74IZIKu90T0NU= Subject key identifier: 9C:C8:E8:A5:13:F2:85:45:F0:B3:4F:AD:96:34:C7:42:E9:FB:44:02 Certificate issuer: /CN=1fec04c2-2b6c-4e9a-8062-e420ac1a257a Certificate serial: 010D0C9F4328584B41E706654B62116689A5D800 Authority key identifier: DA:A6:FB:CD:8D:FF:22:68:C4:1E:BA:AC:CE:80:24:86:BD:CD:D3:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a/c9aa9150-9841-397a-b807-599d98d7b122.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 25996 IP address blocks: 149.101.100.0/24 maxlen: 32 149.101.101.0/24 maxlen: 32 149.101.102.0/24 maxlen: 32 149.101.103.0/24 maxlen: 32 149.101.118.0/24 maxlen: 32 149.101.164.0/23 maxlen: 32 149.101.216.0/24 maxlen: 32 149.101.229.0/24 maxlen: 32 149.101.242.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a/1fec04c2-2b6c-4e9a-8062-e420ac1a257a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a/1fec04c2-2b6c-4e9a-8062-e420ac1a257a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:06:65:4b:62:11:66:89:a5:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fec04c2-2b6c-4e9a-8062-e420ac1a257a Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=7f356705-2bd4-4ba3-9299-4fa3672d0f3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:23:1a:44:3c:2a:17:eb:1f:a4:03:9d:68:2f: 61:59:5a:2d:18:39:7e:04:8e:7a:c0:9b:36:a9:bb: ca:c3:36:88:14:4b:f9:92:9b:f7:3d:6b:10:70:43: 26:4b:bb:9a:00:55:dd:57:1f:84:ee:e4:9a:90:9e: 4a:05:4f:94:4a:6a:09:8e:ba:24:fa:af:27:fb:25: 81:93:88:f0:a8:bb:f0:d4:9a:2d:9c:2c:3e:34:d5: 62:85:cf:a3:65:14:77:1d:f5:61:b4:4a:f5:fd:c2: 79:88:70:60:03:f9:31:ae:99:e0:3e:97:d1:17:74: a8:fa:bf:87:ef:62:d1:be:4c:ba:f4:9f:f0:1d:76: 77:e4:d5:76:01:69:0f:ab:57:cc:dd:85:83:61:56: b4:f5:ff:b4:45:8f:11:97:23:5c:5e:f6:76:e7:5f: b8:56:98:ea:81:cf:9a:dd:14:a2:5b:ff:3c:11:50: 55:7a:1e:65:f1:04:e1:a4:a2:89:7c:1e:67:52:f4: a7:04:37:fe:68:eb:a4:ce:6d:5e:17:16:b0:9f:fb: 70:98:a0:86:41:11:27:67:60:41:af:fb:20:cf:d9: 21:92:67:ee:58:85:14:d9:ee:70:ae:01:c4:02:7a: e5:0d:03:ab:07:3c:d6:49:28:64:78:be:f3:f3:27: 4e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C8:E8:A5:13:F2:85:45:F0:B3:4F:AD:96:34:C7:42:E9:FB:44:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a/c9aa9150-9841-397a-b807-599d98d7b122.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a/1fec04c2-2b6c-4e9a-8062-e420ac1a257a.crl X509v3 Authority Key Identifier: keyid:DA:A6:FB:CD:8D:FF:22:68:C4:1E:BA:AC:CE:80:24:86:BD:CD:D3:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a.cer sbgp-ipAddrBlock: critical IPv4: 149.101.100.0/22 149.101.118.0/24 149.101.164.0/23 149.101.216.0/24 149.101.229.0/24 149.101.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:d3:e4:c1:00:1d:75:d8:02:6e:4c:60:d1:ba:9c:f3:a2:59: f9:27:84:3e:80:e3:76:d4:33:eb:60:f0:bb:8c:70:51:5c:9a: 34:16:7c:e8:a7:b6:04:ac:75:d9:d8:a0:49:02:41:87:61:30: 0b:2d:c4:1b:25:d1:19:62:b5:9b:35:3a:0f:7c:92:8f:40:fc: e1:bf:dc:8e:76:ee:9e:4e:fd:b8:57:3e:2e:30:39:1a:72:14: 51:e2:4c:b8:3b:c5:e8:0b:7a:a1:92:3b:bd:63:9e:ad:59:77: 61:69:f9:2d:b7:20:1c:0f:f6:20:21:3a:81:6f:9f:26:6b:5e: 2c:04:d9:f2:5a:11:58:c5:4e:1b:63:0e:43:a9:00:4a:07:3d: 05:68:c9:58:2d:f9:46:e6:bd:7d:b9:59:6c:22:36:6a:fa:34: d5:0c:f7:c0:77:40:c0:99:97:78:16:f2:73:7d:d6:42:e4:c2: 5e:f8:79:0c:1f:70:dd:f1:36:28:c6:b8:66:de:04:06:b7:8a: f2:8e:61:d2:c6:21:13:6e:71:1e:99:35:c7:6f:a8:52:9a:b9: 2a:f5:19:4b:d6:9e:eb:b6:f1:f9:1e:17:39:67:d0:b8:4b:51: 6a:9a:fb:02:53:7e:bf:d2:a4:21:4c:7b:cf:bf:79:5e:31:7f: 6c:b7:dc:84 -----BEGIN CERTIFICATE----- MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWEtB5wZlS2IRZoml2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZlYzA0YzItMmI2Yy00ZTlhLTgwNjItZTQyMGFjMWEy NTdhMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk N2YzNTY3MDUtMmJkNC00YmEzLTkyOTktNGZhMzY3MmQwZjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyMaRDwqF+sfpAOdaC9hWVotGDl+BI56wJs2 qbvKwzaIFEv5kpv3PWsQcEMmS7uaAFXdVx+E7uSakJ5KBU+USmoJjrok+q8n+yWB k4jwqLvw1JotnCw+NNVihc+jZRR3HfVhtEr1/cJ5iHBgA/kxrpngPpfRF3So+r+H 72LRvky69J/wHXZ35NV2AWkPq1fM3YWDYVa09f+0RY8RlyNcXvZ251+4Vpjqgc+a 3RSiW/88EVBVeh5l8QThpKKJfB5nUvSnBDf+aOukzm1eFxawn/twmKCGQREnZ2BB r/sgz9khkmfuWIUU2e5wrgHEAnrlDQOrBzzWSShkeL7z8ydOfwIDAQABo4IDczCC A28wHQYDVR0OBBYEFJzI6KUT8oVF8LNPrZY0x0Lp+0QCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xZmVj MDRjMi0yYjZjLTRlOWEtODA2Mi1lNDIwYWMxYTI1N2EvYzlhYTkxNTAtOTg0MS0z OTdhLWI4MDctNTk5ZDk4ZDdiMTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWZlYzA0YzItMmI2Yy00ZTlhLTgw NjItZTQyMGFjMWEyNTdhLzFmZWMwNGMyLTJiNmMtNGU5YS04MDYyLWU0MjBhYzFh MjU3YS5jcmwwHwYDVR0jBBgwFoAU2qb7zY3/ImjEHrqszoAkhr3N00QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xZmVjMDRjMi0yYjZjLTRlOWEtODA2Mi1lNDIw YWMxYTI1N2EuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQClWVkAwQA lWV2AwQBlWWkAwQAlWXYAwQAlWXlAwQAlWXyMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGXT5MEAHXXYAm5M YNG6nPOiWfknhD6A43bUM+tg8LuMcFFcmjQWfOintgSsddnYoEkCQYdhMAstxBsl 0RlitZs1Og98ko9A/OG/3I527p5O/bhXPi4wORpyFFHiTLg7xegLeqGSO71jnq1Z d2Fp+S23IBwP9iAhOoFvnyZrXiwE2fJaEVjFThtjDkOpAEoHPQVoyVgt+UbmvX25 WWwiNmr6NNUM98B3QMCZl3gW8nN91kLkwl74eQwfcN3xNijGuGbeBAa3ivKOYdLG IRNucR6ZNcdvqFKauSr1GUvWnuu28fkeFzln0LhLUWqa+wJTfr/SpCFMe8+/eV4x f2y33IQ= -----END CERTIFICATE-----Generated at Wed Nov 5 11:14:36 2025 by rpki-client