$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/3d8b42a3-eae4-3fe6-b365-6bf888dd670d.roa File: 3d8b42a3-eae4-3fe6-b365-6bf888dd670d.roa (raw, json) Hash identifier: EF3//TmL4MCmEEX+NB9qmJIXrbkq7bimNL6raRzMQGU= Subject key identifier: BD:36:4A:03:EB:47:85:34:58:99:CF:0D:0E:B4:43:2A:F7:A5:66:97 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584AB91B8AED62E3B2B5029D3480 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/3d8b42a3-eae4-3fe6-b365-6bf888dd670d.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 1280 IP address blocks: 149.20.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:8a:ed:62:e3:b2:b5:02:9d:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=bffe1e6d-6071-4d81-b2c2-de9fbf0827df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:07:71:fb:16:05:f0:ba:62:9c:6e:7a:12:8e: a8:04:a0:44:72:4f:cd:d9:f5:48:73:01:37:01:f6: 96:7c:6e:db:aa:11:25:0f:fc:27:7a:08:53:c7:a8: 5b:cb:c2:76:20:3d:7c:6d:48:58:35:29:6d:d3:ac: 74:04:ff:1e:b6:27:a6:e1:51:0f:75:46:ff:08:fc: 8e:85:89:11:3f:0c:69:7e:36:47:a0:aa:c2:a9:ab: 20:4f:4b:f2:70:27:64:e7:cc:c4:9e:af:90:16:60: 4a:04:1d:67:54:86:1c:9f:0b:25:be:2c:9d:99:d0: 38:c6:df:90:16:48:8b:ff:cd:7b:c1:be:9d:51:69: ea:c8:33:4b:4d:3e:b2:1a:99:6b:96:5e:d1:87:96: 5f:0c:ff:e9:4b:94:e3:86:04:92:44:60:7a:45:9d: 99:a9:c2:3c:f7:d0:b4:89:59:f6:d9:3e:f5:66:1a: 66:d3:79:bd:07:37:82:6f:42:80:81:61:a8:e4:16: e8:d5:be:04:81:d0:e9:ee:36:f1:4e:6d:69:4a:9e: 51:40:0d:dd:ea:42:b3:60:07:74:cc:cb:c8:bd:2b: f8:f9:30:ed:8d:c1:22:83:9b:a2:92:2b:c4:7b:40: c4:e9:61:35:6d:8f:01:b1:0f:e2:64:a1:13:b1:44: 96:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:36:4A:03:EB:47:85:34:58:99:CF:0D:0E:B4:43:2A:F7:A5:66:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/3d8b42a3-eae4-3fe6-b365-6bf888dd670d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:51:2f:d5:0b:17:db:b2:13:b7:3e:f0:7d:0d:51:c4:4a:e1: 82:d1:ec:27:4c:1c:a0:4e:23:cb:fc:c5:44:7b:aa:fd:1f:07: 29:c6:6e:84:24:bf:9e:66:eb:ca:73:4e:c7:af:6f:b2:84:87: a2:4f:c0:86:ee:5c:a8:96:ce:79:18:1b:7d:6f:a3:7c:b6:d8: 9c:4d:af:c6:2a:59:bd:c6:f3:f3:98:26:ec:b0:41:3e:94:6c: 39:15:5b:81:34:63:ac:3c:8a:ef:a2:dc:f3:44:bd:6e:e4:9d: d7:fc:1f:b3:fa:cb:8e:7f:91:6d:26:4b:ab:94:55:66:7f:74: 98:62:bc:94:b0:a9:22:02:bc:ae:df:f6:ad:92:b4:be:fa:69: 78:78:9f:8b:24:82:96:49:b6:01:49:47:4a:50:13:2d:4c:46: 05:6c:93:b3:50:a2:eb:f9:68:bc:54:dc:da:eb:35:4e:07:69: 37:ba:b9:be:af:3e:f3:92:9d:aa:a1:3e:73:d0:92:dc:55:ba: ed:a7:30:3a:82:9c:31:e9:0d:83:7b:4c:f4:dd:3b:d2:0e:e4: 88:d3:3b:e4:ee:52:f5:e7:7d:1b:dc:1b:14:28:34:d3:e9:c2: ee:a3:25:0a:8f:ab:13:ff:69:f3:57:94:5b:e4:48:05:58:93: 57:97:e1:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G4rtYuOytQKdNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk YmZmZTFlNmQtNjA3MS00ZDgxLWIyYzItZGU5ZmJmMDgyN2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgdx+xYF8LpinG56Eo6oBKBEck/N2fVIcwE3 AfaWfG7bqhElD/wneghTx6hby8J2ID18bUhYNSlt06x0BP8etiem4VEPdUb/CPyO hYkRPwxpfjZHoKrCqasgT0vycCdk58zEnq+QFmBKBB1nVIYcnwslviydmdA4xt+Q FkiL/817wb6dUWnqyDNLTT6yGplrll7Rh5ZfDP/pS5TjhgSSRGB6RZ2ZqcI899C0 iVn22T71Zhpm03m9BzeCb0KAgWGo5Bbo1b4EgdDp7jbxTm1pSp5RQA3d6kKzYAd0 zMvIvSv4+TDtjcEig5uikivEe0DE6WE1bY8BsQ/iZKETsUSWQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL02SgPrR4U0WJnPDQ60Qyr3pWaXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvM2Q4YjQyYTMtZWFlNC0z ZmU2LWIzNjUtNmJmODg4ZGQ2NzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClRRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhRL9ULF9uyE7c+8H0NUcRK4YLR7CdMHKBOI8v8xUR7qv0fBynGboQk v55m68pzTsevb7KEh6JPwIbuXKiWznkYG31vo3y22JxNr8YqWb3G8/OYJuywQT6U bDkVW4E0Y6w8iu+i3PNEvW7kndf8H7P6y45/kW0mS6uUVWZ/dJhivJSwqSICvK7f 9q2StL76aXh4n4skgpZJtgFJR0pQEy1MRgVsk7NQouv5aLxU3NrrNU4HaTe6ub6v PvOSnaqhPnPQktxVuu2nMDqCnDHpDYN7TPTdO9IO5IjTO+TuUvXnfRvcGxQoNNPp wu6jJQqPqxP/afNXlFvkSAVYk1eX4RA= -----END CERTIFICATE-----Generated at Mon Aug 4 14:57:35 2025 by rpki-client