$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/2/3134322e3234382e39302e302f32332d3234203d3e203631393631.roa File: 3134322e3234382e39302e302f32332d3234203d3e203631393631.roa (raw, json) Hash identifier: SEfJJW0oCHWn/xdi75zWLDupC/cjkqW/OUbAiUPdXMo= Subject key identifier: B3:F0:19:A1:18:E2:CE:93:DA:B9:31:85:FE:83:15:A5:72:C9:05:FC Certificate issuer: /CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3 Certificate serial: 54538A43F62866714041FEDC3E8A6C8F0FDA0415 Authority key identifier: 20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer Subject info access: rsync://rpki.nellicus.net/repo/nellicus/2/3134322e3234382e39302e302f32332d3234203d3e203631393631.roa Signing time: Sat 11 Oct 2025 01:52:27 +0000 ROA not before: Sat 11 Oct 2025 01:47:27 +0000 ROA not after: Sat 10 Oct 2026 01:52:27 +0000 asID: 61961 IP address blocks: 142.248.90.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:17:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:53:8a:43:f6:28:66:71:40:41:fe:dc:3e:8a:6c:8f:0f:da:04:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3 Validity Not Before: Oct 11 01:47:27 2025 GMT Not After : Oct 10 01:52:27 2026 GMT Subject: CN=B3F019A118E2CE93DAB93185FE8315A572C905FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:03:37:7e:e2:1c:ce:db:dc:0d:00:d2:f1:4a: f9:af:51:cf:e1:31:40:a6:2d:6f:02:65:87:8d:89: 06:da:31:67:57:d7:08:b3:60:4c:ef:e6:40:4d:ed: 3f:7d:bd:c3:3d:14:25:3c:f0:ef:45:ea:64:83:fe: 75:af:5c:20:44:34:c5:60:73:d3:6d:24:d2:b0:9d: 77:0e:3d:53:1b:ae:56:08:54:26:34:b3:29:c8:b9: af:ad:65:77:9e:fa:f5:c5:74:3d:8f:f9:0b:0b:24: b3:70:8d:5c:34:93:91:ca:90:7e:08:50:04:45:dc: cb:0d:da:30:6a:10:9c:cd:9b:68:56:c7:39:ce:db: 79:4b:eb:f4:a6:c5:33:40:7e:fb:84:17:a2:e7:24: c7:41:ed:ab:2a:13:fa:78:ab:da:6c:a9:83:6f:55: 0d:be:77:00:00:4e:14:06:27:4b:74:c2:b3:61:f8: 24:88:c8:d8:e9:7f:91:2a:e8:a3:22:ea:05:a0:61: 38:30:49:6a:1f:d5:7c:49:26:e6:41:2a:1a:66:90: c0:44:b1:28:87:77:d0:de:05:57:f4:3f:04:bf:99: 31:44:52:91:0b:e0:b3:cf:83:82:f2:ef:2c:bd:0d: 89:ba:97:13:0a:f6:7d:00:03:e8:46:0d:0c:99:08: 18:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F0:19:A1:18:E2:CE:93:DA:B9:31:85:FE:83:15:A5:72:C9:05:FC X509v3 Authority Key Identifier: keyid:20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer Subject Information Access: Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/2/3134322e3234382e39302e302f32332d3234203d3e203631393631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 142.248.90.0/23 Signature Algorithm: sha256WithRSAEncryption 3f:db:6d:33:ee:78:fe:98:39:63:c6:3a:45:f6:f6:eb:df:73: 0a:c1:d8:1e:b9:bf:64:64:e4:5d:2a:38:68:e7:b0:6b:3b:a7: ed:76:ab:25:1d:30:61:88:02:93:59:bb:1e:cf:c7:25:9b:6f: ea:b1:0a:18:79:3c:b3:39:0b:75:b7:8f:81:d7:7a:32:de:bd: 6e:c0:42:eb:dc:0e:55:62:31:44:5d:06:3b:5f:32:25:c7:e5: 9f:92:ff:24:e0:28:4c:46:2b:0a:4b:33:79:33:df:18:71:d3: 23:d2:d8:e5:fa:ad:16:7d:6f:dd:25:4a:de:d1:4f:79:c4:57: 32:ff:4e:88:be:7d:5a:20:ec:44:d8:6e:bf:9e:8c:7a:b8:f7: 1f:c6:87:22:01:a1:10:27:03:85:25:c8:44:ea:e7:c5:85:c0: 7b:c1:82:26:34:bc:fd:4c:30:00:84:a1:67:e6:aa:de:16:94: c5:5e:eb:46:cd:8b:06:35:3a:2a:62:36:8c:3f:de:81:b4:e2: db:98:d7:29:45:7d:42:81:4b:b1:77:4d:10:c8:ea:8b:0d:ef: 01:3a:17:36:93:63:7b:0a:10:b7:b8:24:fb:1c:9a:56:cd:fb: ae:bd:ed:33:cf:a8:af:5d:e3:ce:12:d6:00:01:42:22:01:a5: fa:7a:72:58 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIUVFOKQ/YoZnFAQf7cPopsjw/aBBUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNjNkYTU0NjI1ZmQ4NWU1MjM5NWM0NGI3MTJlZmMyYTdk Mzk5YjE5Y2JjY2U2ODYzYTMwHhcNMjUxMDExMDE0NzI3WhcNMjYxMDEwMDE1MjI3 WjAzMTEwLwYDVQQDEyhCM0YwMTlBMTE4RTJDRTkzREFCOTMxODVGRTgzMTVBNTcy QzkwNUZDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAM3fuIcztvc DQDS8Ur5r1HP4TFApi1vAmWHjYkG2jFnV9cIs2BM7+ZATe0/fb3DPRQlPPDvRepk g/51r1wgRDTFYHPTbSTSsJ13Dj1TG65WCFQmNLMpyLmvrWV3nvr1xXQ9j/kLCySz cI1cNJORypB+CFAERdzLDdowahCczZtoVsc5ztt5S+v0psUzQH77hBei5yTHQe2r KhP6eKvabKmDb1UNvncAAE4UBidLdMKzYfgkiMjY6X+RKuijIuoFoGE4MElqH9V8 SSbmQSoaZpDARLEoh3fQ3gVX9D8Ev5kxRFKRC+Czz4OC8u8svQ2JupcTCvZ9AAPo Rg0MmQgYbwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFLPwGaEY4s6T2rkxhf6DFaVy yQX8MB8GA1UdIwQYMBaAFCDCKXvGfSHDJUOE072IZQagbjCiMA4GA1UdDwEB/wQE AwIHgDBnBgNVHR8EYDBeMFygWqBYhlZyc3luYzovL3Jwa2kubmVsbGljdXMubmV0 L3JlcG8vbmVsbGljdXMvMi8yMEMyMjk3QkM2N0QyMUMzMjU0Mzg0RDNCRDg4NjUw NkEwNkUzMEEyLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHT cnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVl NGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02Y2Ji LTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMGEwODAxNjgtYzE0Ni00MWM2LTkzNjct MzkxY2Q0MjliODU2LzYzZGE1NDYyNWZkODVlNTIzOTVjNDRiNzEyZWZjMmE3ZDM5 OWIxOWNiY2NlNjg2M2EzLmNlcjCBgAYIKwYBBQUHAQsEdDByMHAGCCsGAQUFBzAL hmRyc3luYzovL3Jwa2kubmVsbGljdXMubmV0L3JlcG8vbmVsbGljdXMvMi8zMTM0 MzIyZTMyMzQzODJlMzkzMDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM2MzEzOTM2 MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGO+FowDQYJKoZIhvcNAQELBQADggEBAD/bbTPueP6YOWPG OkX29uvfcwrB2B65v2Rk5F0qOGjnsGs7p+12qyUdMGGIApNZux7PxyWbb+qxChh5 PLM5C3W3j4HXejLevW7AQuvcDlViMURdBjtfMiXH5Z+S/yTgKExGKwpLM3kz3xhx 0yPS2OX6rRZ9b90lSt7RT3nEVzL/Toi+fVog7ETYbr+ejHq49x/GhyIBoRAnA4Ul yETq58WFwHvBgiY0vP1MMACEoWfmqt4WlMVe60bNiwY1OipiNow/3oG04tuY1ylF fUKBS7F3TRDI6osN7wE6FzaTY3sKELe4JPscmlbN+6697TPPqK9d484S1gABQiIB pfp6clg= -----END CERTIFICATE-----Generated at Wed Nov 5 21:45:40 2025 by rpki-client