$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/239f9ee1-7d02-3155-ac48-c07b2ad31858.roa File: 239f9ee1-7d02-3155-ac48-c07b2ad31858.roa (raw, json) Hash identifier: fMA+nO6aiT/DaWHTiXTv7NnpnaKA7avgXNxRJiBLn/g= Subject key identifier: 6E:70:91:37:8B:9C:F3:0D:C4:DE:0B:E2:AD:29:8C:7D:CC:AA:66:78 Certificate issuer: /CN=aa9d650e-309d-4772-a1ee-ed762e147583 Certificate serial: 010D0C9F4328584A0D6A83648880BA8AF87B4C90 Authority key identifier: 7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/239f9ee1-7d02-3155-ac48-c07b2ad31858.roa Signing time: Mon 02 Jun 2025 01:00:49 +0000 ROA not before: Mon 02 Jun 2025 01:00:49 +0000 ROA not after: Sun 31 Aug 2025 01:00:49 +0000 asID: 54651 IP address blocks: 149.117.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0d:6a:83:64:88:80:ba:8a:f8:7b:4c:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa9d650e-309d-4772-a1ee-ed762e147583 Validity Not Before: Jun 2 01:00:49 2025 GMT Not After : Aug 31 01:00:49 2025 GMT Subject: CN=e9d5edc7-7c3d-48f7-b429-868fede403d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e6:31:b0:14:83:dd:0e:68:c5:0b:1b:fe:85: 94:3e:2b:32:44:b6:f5:75:6b:ed:35:b0:8e:24:55: 72:d1:c5:98:b1:17:cf:de:90:98:aa:fc:e0:dd:9f: d4:26:b5:11:c7:7d:51:c4:02:f6:ac:ee:f6:cf:06: ac:88:bb:9d:8d:8f:89:c4:76:45:a0:4f:56:4e:d9: 20:7b:98:86:3f:d9:03:f6:b9:ce:d2:37:b7:74:4a: 85:88:aa:75:de:19:03:16:83:cd:ac:9c:50:30:f3: 00:64:6f:fd:ba:df:dc:f1:86:02:be:54:b6:54:9c: b2:75:4d:41:1e:4b:ac:e4:1b:93:83:38:ac:46:8e: e9:45:b8:a2:bc:4f:cf:14:19:5c:53:a4:b5:85:89: 39:39:31:bf:6e:0f:3d:fb:a6:58:22:9c:6e:d1:ab: 12:32:17:aa:ee:fd:db:84:59:de:56:ec:3a:a8:aa: 59:f8:9f:8e:04:e5:9c:d4:55:75:c7:61:8b:21:03: 52:e8:e0:8c:ad:6a:ba:85:c2:a5:98:95:66:f5:ee: 54:b9:68:69:36:2e:1f:49:71:2f:14:15:fa:2f:e6: 5f:12:70:4c:4f:cf:9f:13:a8:7d:6a:58:58:e7:74: cd:e9:f3:c8:18:70:a8:c5:0e:44:ce:91:05:4d:6e: 79:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:70:91:37:8B:9C:F3:0D:C4:DE:0B:E2:AD:29:8C:7D:CC:AA:66:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/239f9ee1-7d02-3155-ac48-c07b2ad31858.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl X509v3 Authority Key Identifier: keyid:7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer sbgp-ipAddrBlock: critical IPv4: 149.117.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:03:5c:ee:e1:aa:2b:a7:a9:26:18:1a:8c:29:19:af:7b:9f: 57:f9:06:50:d5:47:74:a1:d9:8e:29:43:f5:ab:66:fa:fd:1c: b2:49:97:4d:fd:8e:f5:c7:e0:d9:c7:e6:94:44:3c:9d:18:c9: d1:e8:c3:be:89:e0:bb:a2:f2:04:1d:bd:e4:ce:84:cc:ac:bd: 7b:cb:87:94:55:ac:14:12:d0:bc:e6:d7:26:77:57:78:21:b2: 00:4d:55:e5:be:a7:27:d3:28:df:9e:80:e7:7f:31:68:65:29: c7:64:57:27:90:84:74:0f:bc:78:c5:5b:35:3e:cc:34:b1:bd: 2b:08:2f:02:5d:ae:c0:ac:50:cb:f6:6a:f4:18:f7:18:ae:a9: a5:6b:e4:c6:6e:2b:f7:13:66:e1:62:ba:18:17:7e:cc:f4:84: fe:b9:89:15:14:0c:ba:96:06:5e:2d:22:91:17:e0:5c:8b:4a: 3b:c2:da:0f:9d:09:7a:16:18:5d:a2:cd:44:c7:87:19:ba:cb: ef:dd:ed:e8:d1:20:73:18:0d:d8:3d:9f:28:53:a4:17:c7:f1: 4f:5a:68:8c:db:87:66:6f:fe:3a:33:73:15:64:32:a2:bd:38: 1b:d1:0f:6d:25:66:d4:8a:1a:a7:fb:da:bb:3c:7e:ba:96:2c: a2:44:7f:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoNaoNkiIC6ivh7TJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5ZDY1MGUtMzA5ZC00NzcyLWExZWUtZWQ3NjJlMTQ3 NTgzMB4XDTI1MDYwMjAxMDA0OVoXDTI1MDgzMTAxMDA0OVowLzEtMCsGA1UEAxMk ZTlkNWVkYzctN2MzZC00OGY3LWI0MjktODY4ZmVkZTQwM2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+YxsBSD3Q5oxQsb/oWUPisyRLb1dWvtNbCO JFVy0cWYsRfP3pCYqvzg3Z/UJrURx31RxAL2rO72zwasiLudjY+JxHZFoE9WTtkg e5iGP9kD9rnO0je3dEqFiKp13hkDFoPNrJxQMPMAZG/9ut/c8YYCvlS2VJyydU1B Hkus5BuTgzisRo7pRbiivE/PFBlcU6S1hYk5OTG/bg89+6ZYIpxu0asSMheq7v3b hFneVuw6qKpZ+J+OBOWc1FV1x2GLIQNS6OCMrWq6hcKlmJVm9e5UuWhpNi4fSXEv FBX6L+ZfEnBMT8+fE6h9alhY53TN6fPIGHCoxQ5EzpEFTW554wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG5wkTeLnPMNxN4L4q0pjH3MqmZ4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hYTlk NjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2MmUxNDc1ODMvMjM5ZjllZTEtN2QwMi0z MTU1LWFjNDgtYzA3YjJhZDMxODU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWE5ZDY1MGUtMzA5ZC00NzcyLWEx ZWUtZWQ3NjJlMTQ3NTgzL2FhOWQ2NTBlLTMwOWQtNDc3Mi1hMWVlLWVkNzYyZTE0 NzU4My5jcmwwHwYDVR0jBBgwFoAUencCh/DNiFExaNpq4tD1clhOOqwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hYTlkNjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2 MmUxNDc1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXVEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwDXO7hqiunqSYYGowpGa97n1f5BlDVR3Sh2Y4pQ/WrZvr9HLJJl039 jvXH4NnH5pREPJ0YydHow76J4Lui8gQdveTOhMysvXvLh5RVrBQS0Lzm1yZ3V3gh sgBNVeW+pyfTKN+egOd/MWhlKcdkVyeQhHQPvHjFWzU+zDSxvSsILwJdrsCsUMv2 avQY9xiuqaVr5MZuK/cTZuFiuhgXfsz0hP65iRUUDLqWBl4tIpEX4FyLSjvC2g+d CXoWGF2izUTHhxm6y+/d7ejRIHMYDdg9nyhTpBfH8U9aaIzbh2Zv/jozcxVkMqK9 OBvRD20lZtSKGqf72rs8frqWLKJEf58= -----END CERTIFICATE-----Generated at Sun Jun 15 23:06:25 2025 by rpki-client