$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/43a42b62-e89e-3f29-b54d-b211a483d882.roa File: 43a42b62-e89e-3f29-b54d-b211a483d882.roa (raw, json) Hash identifier: lJHx/9reQjadwubURbMwLmf1nftlTdYfTPuocUhd4is= Subject key identifier: 12:C7:97:99:04:83:DA:44:82:6A:BE:B8:86:53:31:2B:14:5B:0B:19 Certificate issuer: /CN=004321a8-393d-4f7f-add9-dddc07a1320d Certificate serial: 010D0C9F4328584A2907C658354B9A6F55ECFB30 Authority key identifier: FE:D8:E1:5B:23:CE:B0:9B:2E:84:87:9B:FF:67:16:5D:DA:D5:FD:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/43a42b62-e89e-3f29-b54d-b211a483d882.roa Signing time: Wed 11 Jun 2025 01:55:46 +0000 ROA not before: Wed 11 Jun 2025 01:55:46 +0000 ROA not after: Tue 09 Sep 2025 01:55:46 +0000 asID: 399970 IP address blocks: 149.112.152.0/23 maxlen: 23 149.112.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/004321a8-393d-4f7f-add9-dddc07a1320d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/004321a8-393d-4f7f-add9-dddc07a1320d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:29:07:c6:58:35:4b:9a:6f:55:ec:fb:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=004321a8-393d-4f7f-add9-dddc07a1320d Validity Not Before: Jun 11 01:55:46 2025 GMT Not After : Sep 9 01:55:46 2025 GMT Subject: CN=99aa8a1c-dec1-4ca3-bca3-b2e280f8950c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5f:b3:ab:a7:d1:71:49:e2:4c:2b:c2:5d:f1: 12:04:52:1c:32:5a:c8:fc:51:ca:dd:45:38:8f:37: f1:56:0d:cf:66:72:73:ed:f6:0e:10:5b:b5:15:c3: 9a:7b:b0:08:f8:81:01:f4:5e:81:3f:87:ec:f6:69: 9e:04:8c:d6:f2:eb:e0:3c:26:1d:eb:d2:d2:58:d8: 6f:e0:48:53:43:b5:a1:5e:c1:32:f0:0c:e3:19:b7: 8f:bb:a5:4f:d3:2a:0e:3d:79:86:18:66:02:65:49: 9b:ab:69:d6:f7:5c:f6:08:1a:d7:c7:d9:60:bd:76: ae:aa:63:c2:ef:f4:50:59:b0:cc:12:f5:56:c2:c9: a2:d8:a9:8e:5d:f4:df:2b:a4:15:85:00:a0:b4:bb: ab:5b:5d:d6:2e:fb:03:92:ab:83:52:0a:c1:b3:c9: 03:eb:42:20:03:70:7c:1f:ec:b2:9b:68:9d:66:a9: 22:82:e2:e8:c2:38:39:d1:1e:00:24:21:22:ac:a5: a2:bb:3d:43:e8:cf:7f:5a:3a:d4:b0:69:ed:7a:9f: ff:81:18:38:ad:61:94:5c:69:9e:15:c1:57:57:93: 90:c3:8a:d6:e6:37:22:e6:98:ab:d0:f0:46:18:8d: 28:43:8b:9c:08:81:a4:ac:54:9a:27:67:e5:e7:41: 8f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:C7:97:99:04:83:DA:44:82:6A:BE:B8:86:53:31:2B:14:5B:0B:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/43a42b62-e89e-3f29-b54d-b211a483d882.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/004321a8-393d-4f7f-add9-dddc07a1320d.crl X509v3 Authority Key Identifier: keyid:FE:D8:E1:5B:23:CE:B0:9B:2E:84:87:9B:FF:67:16:5D:DA:D5:FD:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d.cer sbgp-ipAddrBlock: critical IPv4: 149.112.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:cf:c2:b7:3c:25:4e:28:b0:00:04:a5:bf:a9:a2:40:48:38: 54:ed:6f:c1:25:98:5d:53:f1:a2:fe:0f:f6:70:e9:4a:21:31: 77:1b:0a:f4:0b:ab:63:cb:0a:aa:d4:26:0d:5a:d8:bb:31:70: ad:87:ab:1a:44:21:b3:e2:4b:32:21:88:60:3d:1a:71:33:65: ce:c9:ab:ae:f8:84:4d:2f:a3:e6:3b:70:02:f7:89:17:53:ce: 52:f8:e9:68:db:d4:6e:d4:b6:dd:ce:82:5d:b8:ef:82:91:fb: fc:0d:26:22:4d:47:22:eb:82:e7:90:36:99:d9:e7:91:3d:34: 18:0d:75:46:5a:51:3d:75:62:7f:af:c3:4e:37:2d:19:e2:de: 50:98:07:54:9b:b2:87:97:82:a3:b8:ea:21:36:1d:d0:40:20: 1b:f4:f1:d0:25:7e:a3:ee:c9:53:9a:5a:fe:b2:a7:12:ba:74: db:68:c9:c7:9d:4b:bb:60:50:47:4a:54:3a:18:eb:bc:10:1b: d4:3f:4e:d1:21:2f:cf:da:dd:8d:65:a1:b3:6f:b3:19:a0:0e: 6a:5b:3b:f1:55:aa:50:32:ad:8e:70:7d:34:d6:ae:63:69:f5: a4:6b:7e:42:64:64:27:c2:f6:e4:ab:84:86:f1:8e:69:7b:df: 0a:5d:e8:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEopB8ZYNUuab1Xs+zAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA0MzIxYTgtMzkzZC00ZjdmLWFkZDktZGRkYzA3YTEz MjBkMB4XDTI1MDYxMTAxNTU0NloXDTI1MDkwOTAxNTU0NlowLzEtMCsGA1UEAxMk OTlhYThhMWMtZGVjMS00Y2EzLWJjYTMtYjJlMjgwZjg5NTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAll+zq6fRcUniTCvCXfESBFIcMlrI/FHK3UU4 jzfxVg3PZnJz7fYOEFu1FcOae7AI+IEB9F6BP4fs9mmeBIzW8uvgPCYd69LSWNhv 4EhTQ7WhXsEy8AzjGbePu6VP0yoOPXmGGGYCZUmbq2nW91z2CBrXx9lgvXauqmPC 7/RQWbDMEvVWwsmi2KmOXfTfK6QVhQCgtLurW13WLvsDkquDUgrBs8kD60IgA3B8 H+yym2idZqkiguLowjg50R4AJCEirKWiuz1D6M9/WjrUsGntep//gRg4rWGUXGme FcFXV5OQw4rW5jci5pir0PBGGI0oQ4ucCIGkrFSaJ2fl50GPVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBLHl5kEg9pEgmq+uIZTMSsUWwsZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wMDQz MjFhOC0zOTNkLTRmN2YtYWRkOS1kZGRjMDdhMTMyMGQvNDNhNDJiNjItZTg5ZS0z ZjI5LWI1NGQtYjIxMWE0ODNkODgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMDA0MzIxYTgtMzkzZC00ZjdmLWFk ZDktZGRkYzA3YTEzMjBkLzAwNDMyMWE4LTM5M2QtNGY3Zi1hZGQ5LWRkZGMwN2Ex MzIwZC5jcmwwHwYDVR0jBBgwFoAU/tjhWyPOsJsuhIeb/2cWXdrV/fUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wMDQzMjFhOC0zOTNkLTRmN2YtYWRkOS1kZGRj MDdhMTMyMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClXCYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjPwrc8JU4osAAEpb+pokBIOFTtb8ElmF1T8aL+D/Zw6UohMXcbCvQL q2PLCqrUJg1a2LsxcK2HqxpEIbPiSzIhiGA9GnEzZc7Jq674hE0vo+Y7cAL3iRdT zlL46Wjb1G7Utt3Ogl2474KR+/wNJiJNRyLrgueQNpnZ55E9NBgNdUZaUT11Yn+v w043LRni3lCYB1SbsoeXgqO46iE2HdBAIBv08dAlfqPuyVOaWv6ypxK6dNtoyced S7tgUEdKVDoY67wQG9Q/TtEhL8/a3Y1lobNvsxmgDmpbO/FVqlAyrY5wfTTWrmNp 9aRrfkJkZCfC9uSrhIbxjml73wpd6Ew= -----END CERTIFICATE-----Generated at Mon Jun 16 04:31:19 2025 by rpki-client