$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/0a6b9e12-508e-3568-a4d7-afb6ad62cc87.roa File: 0a6b9e12-508e-3568-a4d7-afb6ad62cc87.roa (raw, json) Hash identifier: bffM6bIqU8JsdxfYTzOfsaQcyB/wyRmPdhMziQxX22g= Subject key identifier: B5:CA:AC:DE:06:2B:80:9F:FB:0B:66:74:3C:45:20:61:C8:2F:D3:76 Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F432858498FC9C03BEFCF343E60F8D280 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/0a6b9e12-508e-3568-a4d7-afb6ad62cc87.roa Signing time: Fri 18 Apr 2025 01:00:47 +0000 ROA not before: Fri 18 Apr 2025 01:00:47 +0000 ROA not after: Thu 17 Jul 2025 01:00:47 +0000 asID: 33442 IP address blocks: 149.23.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8f:c9:c0:3b:ef:cf:34:3e:60:f8:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Apr 18 01:00:47 2025 GMT Not After : Jul 17 01:00:47 2025 GMT Subject: CN=a195ae2b-443e-436a-adb3-fe31de229937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:bd:a1:08:bf:13:b7:9f:9f:45:28:3e:95:af: 68:fd:c0:e1:b1:f7:80:67:f6:37:ae:49:c7:57:df: 3e:9e:e6:87:54:f8:88:b2:d5:79:ec:90:b1:cb:43: 55:ff:5e:57:5e:54:51:7a:9e:be:40:a0:f4:72:c9: 9b:d4:e7:22:b5:c2:ab:7a:39:d5:37:6a:e5:6d:43: 11:76:6f:2d:81:72:96:da:a9:e6:ec:b4:a6:cb:25: bc:72:c3:b8:f7:86:e7:22:b0:94:c8:2f:3f:b2:d0: e8:e9:bb:72:e1:b3:cc:de:a8:db:3d:80:46:ba:31: eb:ba:ac:5c:a6:0c:f8:bc:7e:ca:5e:af:67:b1:76: 9b:f7:58:f9:18:72:a5:7f:b9:df:90:1f:f8:8e:6c: e8:a2:82:b7:2c:f7:3a:2a:da:7d:3d:bf:35:c2:92: 80:75:a5:5c:24:11:d0:37:63:59:12:95:a8:40:cf: 85:98:01:ec:82:4f:dc:c7:36:1f:2a:54:aa:69:3f: dc:56:c8:e2:29:28:53:b6:09:a5:d7:06:db:9b:f8: 2d:a7:d1:c9:ca:f6:64:2a:82:2d:be:7e:39:86:34: 08:26:9d:f4:68:3c:7d:1b:35:15:ab:40:4b:d9:9c: 63:a6:f6:06:86:0e:65:b9:78:cc:5e:fa:45:c1:e5: 61:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:CA:AC:DE:06:2B:80:9F:FB:0B:66:74:3C:45:20:61:C8:2F:D3:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/0a6b9e12-508e-3568-a4d7-afb6ad62cc87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 149.23.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:38:aa:33:16:6a:fa:bf:52:de:c1:1f:d3:9a:55:c3:4a:5b: 50:9f:7e:2c:63:21:4b:05:b7:64:11:8e:1f:31:de:0d:9f:62: df:89:c2:6d:26:59:75:8d:01:85:e6:77:67:a0:18:06:f8:aa: a5:5a:a6:06:85:23:97:de:5c:80:c5:52:0b:42:82:b6:b5:1f: 22:f9:5d:f4:0b:4e:ec:2b:05:b9:d7:1f:c5:70:15:e3:16:ed: 13:45:6d:83:08:2c:4b:d2:28:3b:45:07:a5:f4:ef:c6:05:b0: a1:fa:66:27:14:de:cc:54:26:df:b7:30:f8:d4:7b:c9:7c:e8: 22:14:09:9d:0d:7e:0e:2e:97:dd:4d:ea:08:4f:12:48:2f:1f: b9:af:17:93:bd:7e:ec:5b:06:e4:99:77:9f:f4:e5:14:72:a7: 77:39:06:fe:c5:49:5c:da:30:fb:ef:88:8a:b8:42:f9:01:05: 35:3c:62:3e:07:23:b6:74:e4:4d:2f:81:e0:20:12:fc:7a:29: 04:03:17:ff:90:7a:e3:91:55:a9:64:82:10:9d:15:99:fd:c5: bb:d6:6d:59:2f:51:e9:18:34:9b:e4:70:8e:20:c8:0c:50:66: 28:33:99:6b:7c:7d:12:93:77:34:cc:5b:d9:b9:4d:94:d5:28: 6a:ac:94:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmPycA77880PmD40oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI1MDQxODAxMDA0N1oXDTI1MDcxNzAxMDA0N1owLzEtMCsGA1UEAxMk YTE5NWFlMmItNDQzZS00MzZhLWFkYjMtZmUzMWRlMjI5OTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6b2hCL8Tt5+fRSg+la9o/cDhsfeAZ/Y3rknH V98+nuaHVPiIstV57JCxy0NV/15XXlRRep6+QKD0csmb1OcitcKrejnVN2rlbUMR dm8tgXKW2qnm7LSmyyW8csO494bnIrCUyC8/stDo6bty4bPM3qjbPYBGujHruqxc pgz4vH7KXq9nsXab91j5GHKlf7nfkB/4jmzoooK3LPc6Ktp9Pb81wpKAdaVcJBHQ N2NZEpWoQM+FmAHsgk/cxzYfKlSqaT/cVsjiKShTtgml1wbbm/gtp9HJyvZkKoIt vn45hjQIJp30aDx9GzUVq0BL2ZxjpvYGhg5luXjMXvpFweVhgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLXKrN4GK4Cf+wtmdDxFIGHIL9N2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvMGE2YjllMTItNTA4ZS0z NTY4LWE0ZDctYWZiNmFkNjJjYzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRcOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGA4qjMWavq/Ut7BH9OaVcNKW1CffixjIUsFt2QRjh8x3g2fYt+Jwm0m WXWNAYXmd2egGAb4qqVapgaFI5feXIDFUgtCgra1HyL5XfQLTuwrBbnXH8VwFeMW 7RNFbYMILEvSKDtFB6X078YFsKH6ZicU3sxUJt+3MPjUe8l86CIUCZ0Nfg4ul91N 6ghPEkgvH7mvF5O9fuxbBuSZd5/05RRyp3c5Bv7FSVzaMPvviIq4QvkBBTU8Yj4H I7Z05E0vgeAgEvx6KQQDF/+QeuORValkghCdFZn9xbvWbVkvUekYNJvkcI4gyAxQ ZigzmWt8fRKTdzTMW9m5TZTVKGqslP0= -----END CERTIFICATE-----Generated at Sun Jun 15 05:09:35 2025 by rpki-client