$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d51efe24-e752-4f95-a889-f158e2563630/b5d2d896-5c3b-38af-917c-2ff50b6d7281.roa File: b5d2d896-5c3b-38af-917c-2ff50b6d7281.roa (raw, json) Hash identifier: /K2k5Nis3IVObdRrvTYtwp3OJP9OfEVdysgNcgKETiU= Subject key identifier: E1:36:10:2A:4B:0E:F1:19:7D:C0:3C:5A:D0:83:A5:3A:52:2B:C5:71 Certificate issuer: /CN=d51efe24-e752-4f95-a889-f158e2563630 Certificate serial: 010D0C9F4328584AB10E5B09786CDBDC7FC40480 Authority key identifier: CB:7B:23:3A:34:67:4D:2C:CC:6A:68:89:99:C0:87:D9:75:59:0C:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d51efe24-e752-4f95-a889-f158e2563630.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d51efe24-e752-4f95-a889-f158e2563630/b5d2d896-5c3b-38af-917c-2ff50b6d7281.roa Signing time: Wed 30 Jul 2025 15:47:46 +0000 ROA not before: Wed 30 Jul 2025 15:47:46 +0000 ROA not after: Tue 28 Oct 2025 15:47:46 +0000 asID: 3333 IP address blocks: 149.112.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d51efe24-e752-4f95-a889-f158e2563630/d51efe24-e752-4f95-a889-f158e2563630.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d51efe24-e752-4f95-a889-f158e2563630/d51efe24-e752-4f95-a889-f158e2563630.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d51efe24-e752-4f95-a889-f158e2563630.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b1:0e:5b:09:78:6c:db:dc:7f:c4:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d51efe24-e752-4f95-a889-f158e2563630 Validity Not Before: Jul 30 15:47:46 2025 GMT Not After : Oct 28 15:47:46 2025 GMT Subject: CN=429fd0f5-13ab-4357-a152-9797acc55c8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:63:31:f0:68:5e:69:62:13:13:94:ed:13:e0: d4:6d:13:a4:99:19:d8:92:9f:bc:32:c3:e2:96:91: a0:59:67:51:a2:fe:e2:2d:e6:3c:31:c0:ba:98:a3: e7:71:d1:21:0f:6c:10:ee:ea:75:3d:cb:86:98:ea: 8b:bb:2e:ed:a2:7a:36:ab:59:0d:13:19:0a:5a:71: 37:68:fe:d1:ab:7b:8a:32:7a:d3:38:3f:6e:be:f9: ef:bd:ea:27:60:30:fc:05:19:bd:0e:50:59:9c:4f: 78:86:77:c7:62:02:13:78:a7:78:22:6f:b0:58:57: 62:c5:10:d6:d4:6e:c0:85:0a:cf:90:55:4f:04:eb: 03:0c:18:01:f6:9e:2a:2a:f9:5a:3c:85:64:8b:47: 82:66:ca:b5:8c:47:ba:39:bf:e6:84:42:e4:41:07: 22:71:05:69:1e:6a:91:68:56:99:41:95:50:fa:1e: 54:f7:a3:84:0e:52:f1:f0:c0:5d:e2:38:3d:7d:ef: d6:6b:86:b3:35:8c:64:79:98:32:53:49:b1:e8:4d: ea:1f:53:d7:86:8d:8f:a2:88:21:e7:5f:ea:46:97: f2:61:80:e4:00:a4:0a:66:7b:fd:be:a5:3b:76:df: 58:7d:0d:35:62:59:7b:49:4c:4b:cb:3c:73:26:2d: 83:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:36:10:2A:4B:0E:F1:19:7D:C0:3C:5A:D0:83:A5:3A:52:2B:C5:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d51efe24-e752-4f95-a889-f158e2563630/b5d2d896-5c3b-38af-917c-2ff50b6d7281.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d51efe24-e752-4f95-a889-f158e2563630/d51efe24-e752-4f95-a889-f158e2563630.crl X509v3 Authority Key Identifier: keyid:CB:7B:23:3A:34:67:4D:2C:CC:6A:68:89:99:C0:87:D9:75:59:0C:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d51efe24-e752-4f95-a889-f158e2563630.cer sbgp-ipAddrBlock: critical IPv4: 149.112.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:14:cb:15:79:53:38:37:dd:4a:e0:35:86:24:b3:6b:ba:88: 89:2c:eb:f1:d7:3f:e4:84:52:0a:2e:2d:a7:f4:a3:a3:a5:bf: 23:c3:d3:4a:b8:4f:22:4b:8a:df:ab:01:14:27:67:ba:78:4a: 80:aa:5b:6d:d2:d5:7c:f6:4b:47:97:5a:83:db:1f:a3:d8:fa: 29:7a:36:99:ad:74:36:7b:e5:71:4f:29:fa:4f:f7:d8:b9:a4: 44:e3:a2:86:5b:b8:44:c9:7d:4b:fe:29:42:0b:22:d6:5c:37: 79:55:2c:a4:65:e4:4d:3c:df:0f:cf:3b:8a:a2:e9:b7:b2:98: c0:0e:fa:9f:ca:89:74:7e:60:51:a8:fb:20:43:e9:4f:80:ee: 91:a4:63:17:e4:5d:04:82:f9:5e:b3:23:b0:53:eb:97:60:7d: 5b:a8:fd:68:bb:ec:c0:87:54:ad:5c:ac:e2:b1:10:ed:84:60: 4b:d1:82:12:8e:4c:df:c8:4d:06:09:a4:12:11:7e:27:4b:27: d5:ee:6e:b8:e9:7a:f1:ba:84:5c:5b:43:43:24:95:72:a1:76: 2e:56:f4:02:b0:1c:a5:90:98:ee:cb:20:1a:33:d2:b7:75:ed: 44:2b:d3:5f:b4:bd:67:04:a8:09:15:09:81:52:28:d2:84:70: 8d:15:c8:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqxDlsJeGzb3H/EBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDUxZWZlMjQtZTc1Mi00Zjk1LWE4ODktZjE1OGUyNTYz NjMwMB4XDTI1MDczMDE1NDc0NloXDTI1MTAyODE1NDc0NlowLzEtMCsGA1UEAxMk NDI5ZmQwZjUtMTNhYi00MzU3LWExNTItOTc5N2FjYzU1YzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmMx8GheaWITE5TtE+DUbROkmRnYkp+8MsPi lpGgWWdRov7iLeY8McC6mKPncdEhD2wQ7up1PcuGmOqLuy7tono2q1kNExkKWnE3 aP7Rq3uKMnrTOD9uvvnvveonYDD8BRm9DlBZnE94hnfHYgITeKd4Im+wWFdixRDW 1G7AhQrPkFVPBOsDDBgB9p4qKvlaPIVki0eCZsq1jEe6Ob/mhELkQQcicQVpHmqR aFaZQZVQ+h5U96OEDlLx8MBd4jg9fe/Wa4azNYxkeZgyU0mx6E3qH1PXho2Poogh 51/qRpfyYYDkAKQKZnv9vqU7dt9YfQ01Yll7SUxLyzxzJi2DswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOE2ECpLDvEZfcA8WtCDpTpSK8VxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kNTFl ZmUyNC1lNzUyLTRmOTUtYTg4OS1mMTU4ZTI1NjM2MzAvYjVkMmQ4OTYtNWMzYi0z OGFmLTkxN2MtMmZmNTBiNmQ3MjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDUxZWZlMjQtZTc1Mi00Zjk1LWE4 ODktZjE1OGUyNTYzNjMwL2Q1MWVmZTI0LWU3NTItNGY5NS1hODg5LWYxNThlMjU2 MzYzMC5jcmwwHwYDVR0jBBgwFoAUy3sjOjRnTSzMamiJmcCH2XVZDDswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kNTFlZmUyNC1lNzUyLTRmOTUtYTg4OS1mMTU4 ZTI1NjM2MzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlXCaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALMUyxV5Uzg33UrgNYYks2u6iIks6/HXP+SEUgouLaf0o6OlvyPD00q4 TyJLit+rARQnZ7p4SoCqW23S1Xz2S0eXWoPbH6PY+il6NpmtdDZ75XFPKfpP99i5 pETjooZbuETJfUv+KUILItZcN3lVLKRl5E083w/PO4qi6beymMAO+p/KiXR+YFGo +yBD6U+A7pGkYxfkXQSC+V6zI7BT65dgfVuo/Wi77MCHVK1crOKxEO2EYEvRghKO TN/ITQYJpBIRfidLJ9XubrjpevG6hFxbQ0MklXKhdi5W9AKwHKWQmO7LIBoz0rd1 7UQr01+0vWcEqAkVCYFSKNKEcI0VyHw= -----END CERTIFICATE-----Generated at Tue Aug 5 08:19:22 2025 by rpki-client