$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/45d41f15-8492-3fc0-95d1-32224912a7f9.roa File: 45d41f15-8492-3fc0-95d1-32224912a7f9.roa (raw, json) Hash identifier: yUlMMv1IqjxNoG9uaof6zRKkfAi5AhezZhBQ+gERho8= Subject key identifier: CA:92:24:77:2F:76:65:7C:C8:1E:DE:18:2B:57:15:28:24:52:12:26 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F43285849D85F7E09D75EC3BCE3E77780 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/45d41f15-8492-3fc0-95d1-32224912a7f9.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 1280 IP address blocks: 149.20.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:7e:09:d7:5e:c3:bc:e3:e7:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=f9a24913-99d4-4c01-8776-fa34c6fe3449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b4:74:34:2a:91:39:bb:c9:8d:c1:96:f1:c0: d5:5e:b9:c8:c7:3e:6e:83:21:7e:18:16:eb:c1:0f: f6:75:88:b4:a9:d1:31:e1:86:8c:23:4b:5b:5c:4c: f1:ac:83:81:bc:e5:a6:79:f8:60:7e:b3:71:03:03: e6:3b:54:f0:99:97:8a:d5:a3:e5:fa:fe:07:38:f4: da:d8:86:47:04:6e:aa:43:4f:f8:e3:71:10:a2:83: 20:bd:22:15:b3:11:91:a8:ec:27:f7:88:83:90:27: a1:d6:eb:9f:5d:a7:dd:2c:48:8b:48:78:80:19:8d: a4:ef:e2:43:d6:83:00:de:1a:7a:a1:36:c1:02:2d: 22:c0:91:e3:65:ac:54:7d:82:0b:a2:88:4d:fc:a5: ef:80:15:9e:30:86:f0:01:07:05:3b:7b:65:25:9f: f9:77:72:78:e4:d6:54:e7:fb:c7:84:01:3f:92:8b: e2:03:a0:f6:56:60:7c:4b:90:76:a1:35:fd:e7:db: 74:27:42:03:25:f5:bc:ad:c7:48:ae:be:e0:fd:89: b5:53:eb:f7:eb:26:f5:29:04:65:c4:c1:5d:da:52: a2:8f:57:53:92:9e:f7:23:a7:5a:6a:60:52:58:58: a7:1f:70:af:c9:10:67:b8:d7:bf:2b:18:e1:9e:d4: b1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:92:24:77:2F:76:65:7C:C8:1E:DE:18:2B:57:15:28:24:52:12:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/45d41f15-8492-3fc0-95d1-32224912a7f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:05:54:66:32:b9:22:de:a6:ef:86:9e:69:9a:c0:da:79:41: 68:33:40:e9:fe:4c:7d:9d:68:62:4c:b1:ee:ab:46:d3:ea:47: b3:48:47:fb:ca:c2:6d:55:50:b2:b6:fa:e2:68:61:27:02:4d: dc:97:3d:77:e8:b4:6f:23:cb:79:8a:26:2e:1c:07:ca:58:dc: 3f:e0:13:64:b5:82:59:4f:d3:a0:cf:75:5f:2e:48:41:4f:ce: 6a:a9:52:ec:94:45:ac:9e:d8:a6:1e:0c:5e:3b:a0:ad:3b:5b: 11:0d:85:d2:af:b9:c7:64:b0:5d:91:a4:12:9e:3f:54:34:79: 26:7f:23:ce:c7:57:7a:df:7a:23:46:d2:5a:c2:79:ff:05:64: 37:7d:ed:23:95:54:f4:fe:27:98:e1:8f:af:0a:b1:da:99:73: b5:bf:89:74:d7:6b:a5:65:ab:15:f0:de:7f:10:21:51:6d:db: 15:9d:eb:6a:17:18:0f:c7:06:3e:6a:f7:04:d8:bc:93:f1:5c: f5:b7:e3:39:05:88:e4:95:87:43:d6:7f:b5:37:ae:93:9f:a8: 4b:17:7d:9f:17:6d:9a:12:a3:a1:73:02:ec:1e:fa:d8:ac:15: 0d:15:94:98:42:7a:c0:72:d8:79:89:8a:c5:ca:4c:80:eb:46: 12:56:fe:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX34J117DvOPnd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk ZjlhMjQ5MTMtOTlkNC00YzAxLTg3NzYtZmEzNGM2ZmUzNDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirR0NCqRObvJjcGW8cDVXrnIxz5ugyF+GBbr wQ/2dYi0qdEx4YaMI0tbXEzxrIOBvOWmefhgfrNxAwPmO1TwmZeK1aPl+v4HOPTa 2IZHBG6qQ0/443EQooMgvSIVsxGRqOwn94iDkCeh1uufXafdLEiLSHiAGY2k7+JD 1oMA3hp6oTbBAi0iwJHjZaxUfYILoohN/KXvgBWeMIbwAQcFO3tlJZ/5d3J45NZU 5/vHhAE/koviA6D2VmB8S5B2oTX959t0J0IDJfW8rcdIrr7g/Ym1U+v36yb1KQRl xMFd2lKij1dTkp73I6daamBSWFinH3CvyRBnuNe/KxjhntSxtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqSJHcvdmV8yB7eGCtXFSgkUhImMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvNDVkNDFmMTUtODQ5Mi0z ZmMwLTk1ZDEtMzIyMjQ5MTJhN2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlRRIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcFVGYyuSLepu+GnmmawNp5QWgzQOn+TH2daGJMse6rRtPqR7NIR/vK wm1VULK2+uJoYScCTdyXPXfotG8jy3mKJi4cB8pY3D/gE2S1gllP06DPdV8uSEFP zmqpUuyURaye2KYeDF47oK07WxENhdKvucdksF2RpBKeP1Q0eSZ/I87HV3rfeiNG 0lrCef8FZDd97SOVVPT+J5jhj68KsdqZc7W/iXTXa6VlqxXw3n8QIVFt2xWd62oX GA/HBj5q9wTYvJPxXPW34zkFiOSVh0PWf7U3rpOfqEsXfZ8XbZoSo6FzAuwe+tis FQ0VlJhCesBy2HmJisXKTIDrRhJW/ic= -----END CERTIFICATE-----Generated at Sun Jun 15 05:02:41 2025 by rpki-client