$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/61e047c0-059e-39d0-8a9c-aa85bb357fd0.roa File: 61e047c0-059e-39d0-8a9c-aa85bb357fd0.roa (raw, json) Hash identifier: wY9c4/Vq4OmALjXA34OQt6LWPXcgfhzjHJSd47L8My8= Subject key identifier: D3:F7:2D:6E:DB:39:3F:4F:39:40:CD:ED:E4:DF:0D:45:EA:C1:04:18 Certificate issuer: /CN=aa9d650e-309d-4772-a1ee-ed762e147583 Certificate serial: 010D0C9F4328584A0D6A83A370A8A4EC38D31CC0 Authority key identifier: 7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/61e047c0-059e-39d0-8a9c-aa85bb357fd0.roa Signing time: Mon 02 Jun 2025 01:00:49 +0000 ROA not before: Mon 02 Jun 2025 01:00:49 +0000 ROA not after: Sun 31 Aug 2025 01:00:49 +0000 asID: 54651 IP address blocks: 149.117.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0d:6a:83:a3:70:a8:a4:ec:38:d3:1c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa9d650e-309d-4772-a1ee-ed762e147583 Validity Not Before: Jun 2 01:00:49 2025 GMT Not After : Aug 31 01:00:49 2025 GMT Subject: CN=953cbfea-4433-4fdd-9358-937da07f7784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c4:f5:3f:e7:95:c8:a8:33:90:d1:0c:9d:23: 06:5c:01:0e:c5:1d:ba:6e:95:f0:9a:8e:b9:f7:32: f2:3b:c8:b3:0c:ae:91:02:ea:d2:11:b8:b5:da:6e: 81:da:eb:19:64:52:fe:1d:24:09:29:a9:f8:0c:8e: 23:fa:50:21:b9:db:bd:62:03:fa:e3:f6:19:86:87: b7:5f:46:c7:41:5a:88:e9:65:1d:0a:8a:da:85:c8: 22:ff:7c:87:76:a9:6e:5a:0d:06:1f:3e:5d:0f:06: dc:1c:22:37:b1:af:7a:af:eb:71:66:c1:1a:a2:c6: ea:0c:5b:54:7c:0f:10:f3:c7:66:67:da:59:b9:b6: ce:e1:22:95:b6:b9:df:7c:74:3c:f5:ba:c3:67:29: fa:01:81:78:d8:45:47:56:27:3b:cb:20:53:75:01: c7:25:0f:ff:e5:63:25:89:0b:3a:b0:05:7e:3e:12: f1:ca:2c:df:68:43:81:d8:27:51:b3:f7:c9:42:0b: da:ae:a2:be:24:58:6e:38:0b:9e:f0:46:2c:a2:73: 3f:ec:30:53:45:ba:2a:d2:aa:aa:55:32:f6:d6:24: 39:3d:ac:5e:16:43:22:a4:be:f6:95:aa:67:5b:76: af:b6:51:d3:1f:90:ef:33:7a:d7:ab:8b:cd:bc:25: 16:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:F7:2D:6E:DB:39:3F:4F:39:40:CD:ED:E4:DF:0D:45:EA:C1:04:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/61e047c0-059e-39d0-8a9c-aa85bb357fd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl X509v3 Authority Key Identifier: keyid:7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer sbgp-ipAddrBlock: critical IPv4: 149.117.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:43:df:18:35:ed:c5:88:fd:ba:e3:d5:68:d8:2b:6f:e8:ac: 43:a3:fc:ed:f9:e0:3f:f2:28:2a:1f:02:48:39:4c:0b:d1:bb: 44:91:1c:c7:a8:7f:a3:0b:6b:6b:56:1b:43:dc:31:56:f3:0c: fd:c7:8b:be:a9:40:59:7e:2d:77:e5:93:f0:2b:d9:c7:27:ec: d8:73:11:08:4b:e9:c8:c1:73:88:1c:66:e0:0e:f6:0c:85:d8: d9:c7:0e:7a:9c:92:5a:25:81:0e:87:94:19:6f:51:3e:f9:ca: d6:3f:1d:a8:65:f0:ed:d6:bb:22:6b:01:3e:94:e0:1a:9b:9f: 69:66:ac:48:dc:16:fa:e9:d2:3e:cd:40:62:9f:7e:ca:3c:6d: 1d:00:a6:d6:73:e2:ee:59:46:49:02:1d:cf:e1:c3:c1:83:f0: c9:d7:d5:cd:80:80:e8:1a:a0:bc:12:ef:d6:51:8c:e3:e6:43: b8:18:8d:b5:d6:dd:37:53:1d:b8:2a:f5:4f:3e:f4:c8:53:af: 01:0c:60:fd:fb:ec:01:0f:19:2d:a2:eb:9a:ca:09:46:bc:49: 21:7e:af:38:34:29:ce:53:22:ea:f8:f4:ca:9b:94:49:69:d8: 17:9e:82:9f:43:65:78:eb:10:50:d9:9d:23:b4:d1:e1:48:36: 13:85:3e:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoNaoOjcKik7DjTHMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5ZDY1MGUtMzA5ZC00NzcyLWExZWUtZWQ3NjJlMTQ3 NTgzMB4XDTI1MDYwMjAxMDA0OVoXDTI1MDgzMTAxMDA0OVowLzEtMCsGA1UEAxMk OTUzY2JmZWEtNDQzMy00ZmRkLTkzNTgtOTM3ZGEwN2Y3Nzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsT1P+eVyKgzkNEMnSMGXAEOxR26bpXwmo65 9zLyO8izDK6RAurSEbi12m6B2usZZFL+HSQJKan4DI4j+lAhudu9YgP64/YZhoe3 X0bHQVqI6WUdCorahcgi/3yHdqluWg0GHz5dDwbcHCI3sa96r+txZsEaosbqDFtU fA8Q88dmZ9pZubbO4SKVtrnffHQ89brDZyn6AYF42EVHVic7yyBTdQHHJQ//5WMl iQs6sAV+PhLxyizfaEOB2CdRs/fJQgvarqK+JFhuOAue8EYsonM/7DBTRboq0qqq VTL21iQ5PaxeFkMipL72lapnW3avtlHTH5DvM3rXq4vNvCUWIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNP3LW7bOT9POUDN7eTfDUXqwQQYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hYTlk NjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2MmUxNDc1ODMvNjFlMDQ3YzAtMDU5ZS0z OWQwLThhOWMtYWE4NWJiMzU3ZmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWE5ZDY1MGUtMzA5ZC00NzcyLWEx ZWUtZWQ3NjJlMTQ3NTgzL2FhOWQ2NTBlLTMwOWQtNDc3Mi1hMWVlLWVkNzYyZTE0 NzU4My5jcmwwHwYDVR0jBBgwFoAUencCh/DNiFExaNpq4tD1clhOOqwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hYTlkNjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2 MmUxNDc1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1D3xg17cWI/brj1WjYK2/orEOj/O354D/yKCofAkg5TAvRu0SRHMeo f6MLa2tWG0PcMVbzDP3Hi76pQFl+LXflk/Ar2ccn7NhzEQhL6cjBc4gcZuAO9gyF 2NnHDnqcklolgQ6HlBlvUT75ytY/Hahl8O3WuyJrAT6U4Bqbn2lmrEjcFvrp0j7N QGKffso8bR0AptZz4u5ZRkkCHc/hw8GD8MnX1c2AgOgaoLwS79ZRjOPmQ7gYjbXW 3TdTHbgq9U8+9MhTrwEMYP377AEPGS2i65rKCUa8SSF+rzg0Kc5TIur49MqblElp 2Beegp9DZXjrEFDZnSO00eFINhOFPlM= -----END CERTIFICATE-----Generated at Sun Jun 15 15:24:01 2025 by rpki-client