$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/ff0084c6-b5ca-3f33-9a00-23a7ffef8353.roa File: ff0084c6-b5ca-3f33-9a00-23a7ffef8353.roa (raw, json) Hash identifier: ELXO551ajS68dJLWojToPDTcinxCrs09tk2rHe6O/Vo= Subject key identifier: DC:D2:C1:94:54:53:B6:15:39:EF:A5:11:7C:E7:A1:8E:3E:25:EC:5E Certificate issuer: /CN=aa9d650e-309d-4772-a1ee-ed762e147583 Certificate serial: 010D0C9F43285849EA851F829348F055DED5BB80 Authority key identifier: 7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/ff0084c6-b5ca-3f33-9a00-23a7ffef8353.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 397635 IP address blocks: 149.117.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:1f:82:93:48:f0:55:de:d5:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa9d650e-309d-4772-a1ee-ed762e147583 Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=11fb33d5-a368-42da-b50b-08a4517914cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:19:1d:51:cd:18:aa:7a:f7:37:23:37:ce:ec: 70:59:92:25:59:bf:85:44:1b:90:11:06:95:b5:1d: 22:1d:c2:e3:25:37:35:8e:1d:4b:6a:67:6c:49:57: 00:d2:ef:a9:4d:06:87:a3:82:77:3f:50:44:ac:41: 28:83:13:57:29:b6:be:e3:2d:55:66:f7:02:f3:58: 94:5c:63:92:c9:2d:57:d9:cf:65:bb:c9:de:22:04: 66:ff:d0:db:9b:23:11:b6:9c:35:1a:fd:90:4b:a3: 57:c3:53:dc:70:53:a2:0c:3e:c8:ab:f8:6e:f5:7f: fc:fd:a2:3a:57:63:7d:31:e5:76:a9:da:c6:b9:0f: ff:6a:e4:03:bb:52:40:d4:83:1b:37:77:67:e3:77: 41:45:a9:7f:45:1c:a0:4f:1d:a6:8c:56:4d:0d:75: 13:bd:4f:57:01:10:7e:dc:eb:99:d8:d1:ad:f4:52: 0a:a8:74:bb:e7:97:55:7b:cd:80:d4:56:df:f1:0d: 38:54:bf:ac:b5:25:05:ad:69:47:83:ae:f0:b5:1c: 46:6e:db:c0:ac:35:bc:32:df:11:ff:4b:c8:f6:21: b2:fe:29:18:2c:28:3a:ae:1e:1c:2b:fd:43:ef:7a: 7b:95:59:b5:d1:87:5d:eb:f8:24:58:31:a3:fd:79: 5b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D2:C1:94:54:53:B6:15:39:EF:A5:11:7C:E7:A1:8E:3E:25:EC:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/ff0084c6-b5ca-3f33-9a00-23a7ffef8353.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl X509v3 Authority Key Identifier: keyid:7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer sbgp-ipAddrBlock: critical IPv4: 149.117.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:bb:d6:de:6a:f5:5c:65:38:d4:37:57:a3:59:c7:b0:8b:44: 7a:79:29:95:42:b6:e2:ca:e8:e2:91:3f:1f:fc:08:2d:8d:69: 6b:4d:91:bc:fd:f2:6f:b3:81:e3:52:23:6c:d6:ea:5d:5d:c6: ba:fc:bc:21:e3:33:75:2b:d3:e3:51:8d:42:65:8c:5d:d7:9b: de:bc:1e:e0:0f:d8:23:42:31:0b:ea:19:c4:a0:20:7a:1d:2a: 83:aa:e3:a4:0e:05:63:aa:4c:67:8b:d7:26:62:f5:90:72:24: c5:71:0b:60:25:31:26:73:51:39:22:56:c6:87:94:dc:12:ef: 05:e1:16:b7:85:67:d7:1e:99:c9:b2:fe:99:df:46:07:4c:2e: e6:f6:62:6e:17:df:53:01:34:4d:6e:ca:58:38:14:1f:ab:d1: e1:d2:c1:be:b4:4f:39:d8:66:44:8e:ea:c2:1d:32:be:a0:22: 79:46:fd:09:52:39:29:90:b6:d2:68:f6:c2:e7:96:fb:9b:4f: 92:f8:8e:d5:1e:13:b2:aa:2f:3f:4b:a5:fe:30:06:af:93:46: 53:43:35:b2:a9:fd:0a:a0:e7:4f:86:1d:9a:32:07:2c:67:2e: be:10:60:19:ba:6b:93:b0:36:e5:35:0c:d6:60:d7:77:74:27: 9c:28:01:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhR+Ck0jwVd7Vu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5ZDY1MGUtMzA5ZC00NzcyLWExZWUtZWQ3NjJlMTQ3 NTgzMB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk MTFmYjMzZDUtYTM2OC00MmRhLWI1MGItMDhhNDUxNzkxNGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBkdUc0Yqnr3NyM3zuxwWZIlWb+FRBuQEQaV tR0iHcLjJTc1jh1LamdsSVcA0u+pTQaHo4J3P1BErEEogxNXKba+4y1VZvcC81iU XGOSyS1X2c9lu8neIgRm/9DbmyMRtpw1Gv2QS6NXw1PccFOiDD7Iq/hu9X/8/aI6 V2N9MeV2qdrGuQ//auQDu1JA1IMbN3dn43dBRal/RRygTx2mjFZNDXUTvU9XARB+ 3OuZ2NGt9FIKqHS755dVe82A1Fbf8Q04VL+stSUFrWlHg67wtRxGbtvArDW8Mt8R /0vI9iGy/ikYLCg6rh4cK/1D73p7lVm10Ydd6/gkWDGj/XlbrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNzSwZRUU7YVOe+lEXznoY4+JexeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hYTlk NjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2MmUxNDc1ODMvZmYwMDg0YzYtYjVjYS0z ZjMzLTlhMDAtMjNhN2ZmZWY4MzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWE5ZDY1MGUtMzA5ZC00NzcyLWEx ZWUtZWQ3NjJlMTQ3NTgzL2FhOWQ2NTBlLTMwOWQtNDc3Mi1hMWVlLWVkNzYyZTE0 NzU4My5jcmwwHwYDVR0jBBgwFoAUencCh/DNiFExaNpq4tD1clhOOqwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hYTlkNjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2 MmUxNDc1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIG71t5q9VxlONQ3V6NZx7CLRHp5KZVCtuLK6OKRPx/8CC2NaWtNkbz9 8m+zgeNSI2zW6l1dxrr8vCHjM3Ur0+NRjUJljF3Xm968HuAP2CNCMQvqGcSgIHod KoOq46QOBWOqTGeL1yZi9ZByJMVxC2AlMSZzUTkiVsaHlNwS7wXhFreFZ9cemcmy /pnfRgdMLub2Ym4X31MBNE1uylg4FB+r0eHSwb60TznYZkSO6sIdMr6gInlG/QlS OSmQttJo9sLnlvubT5L4jtUeE7KqLz9Lpf4wBq+TRlNDNbKp/Qqg50+GHZoyByxn Lr4QYBm6a5OwNuU1DNZg13d0J5woAew= -----END CERTIFICATE-----Generated at Sun Jun 15 16:07:32 2025 by rpki-client