$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/45d41f15-8492-3fc0-95d1-32224912a7f9.roa File: 45d41f15-8492-3fc0-95d1-32224912a7f9.roa (raw, json) Hash identifier: jiQFT8Jfwlq/C0PRwdqQyZfKQYIIzV5q/yrQHbBHzbc= Subject key identifier: 04:4C:2F:7A:66:F2:93:F2:0F:F5:BA:0D:DF:B9:FB:F1:7A:B2:61:68 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584AB91B8124D92BA6460BF93AB0 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/45d41f15-8492-3fc0-95d1-32224912a7f9.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 1280 IP address blocks: 149.20.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:81:24:d9:2b:a6:46:0b:f9:3a:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=342f01b2-b704-4e3d-9922-d8e6d148d59d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6b:69:d7:64:da:1c:6b:06:0a:08:52:37:76: 05:e8:11:21:70:43:63:d2:5c:56:49:d7:41:25:5a: 64:91:74:33:27:2c:35:6e:48:a8:b0:f9:f6:92:a6: fd:b1:bc:f1:4a:64:ea:91:86:3a:4f:d7:f9:2a:73: f6:3e:73:19:be:36:78:cd:f4:4a:fb:13:97:2d:b2: 3b:50:70:90:72:5c:b6:70:57:dd:d4:ce:74:ed:82: 51:19:22:bf:66:eb:e6:83:5c:f7:bd:c4:ff:f3:fc: b3:7a:13:ab:a3:1c:f5:b9:9a:5a:fa:9c:06:aa:22: f6:20:d8:82:42:9b:c0:50:2c:3b:5d:fc:49:f6:73: d6:b9:08:c0:78:23:d2:d5:35:41:a8:f1:b2:b8:4d: fb:54:bb:47:63:96:bf:54:15:f9:fd:14:cd:32:40: f6:b9:1d:ed:52:4f:83:9f:73:86:36:73:a2:8a:c9: 7f:af:12:88:30:af:c6:1f:64:20:b3:fd:92:56:f4: 4f:68:84:ab:b0:bf:e3:04:fd:af:50:ef:19:a9:be: 2b:79:58:93:97:7e:37:48:8a:c4:2f:29:d9:56:7c: 40:ae:f9:18:f9:12:f6:21:a1:67:7e:69:ec:8b:05: 65:e6:fa:89:fc:43:e7:c2:95:34:39:ee:f9:d7:6e: 09:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:4C:2F:7A:66:F2:93:F2:0F:F5:BA:0D:DF:B9:FB:F1:7A:B2:61:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/45d41f15-8492-3fc0-95d1-32224912a7f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:10:c3:99:4f:e1:3a:31:48:88:91:be:32:0f:c5:f7:61:2c: e0:af:a2:03:b9:6f:93:5d:f8:b6:93:cf:3a:87:c0:39:8f:c7: ff:20:2d:f7:33:18:34:81:6b:1e:03:87:d9:7d:85:77:05:3a: 11:18:44:39:ce:10:45:10:19:50:b9:9e:6e:2f:02:39:1e:d8: 70:50:2a:d2:30:cb:98:26:ac:5c:3b:86:0e:64:e2:e5:88:3b: ac:38:3c:94:76:6f:4a:6f:b2:e3:56:98:5e:dd:da:b1:35:04: fc:57:21:c9:4a:2d:eb:82:27:02:82:96:a8:6f:7d:74:29:af: 12:a0:f1:16:e9:d7:ef:10:33:98:ef:d6:7e:0c:a5:3f:ad:f3: 8f:77:6d:d4:93:18:48:d5:c1:54:a1:ce:23:47:d4:6a:54:85: 81:f8:c6:6f:f5:58:60:ec:01:51:c3:26:15:cd:07:c0:33:49: 82:6e:52:84:a6:50:28:1b:c4:d2:57:a6:b6:db:a8:83:ba:fd: 32:0c:d9:4a:f9:ad:15:ef:ff:55:5d:f0:20:98:5b:ca:e8:20: 0f:ea:43:29:9e:0a:d1:24:a9:56:be:30:5a:69:b2:67:10:3d: b2:7d:b0:11:75:6a:4b:61:e7:93:f7:6f:85:bd:64:cc:af:24: c9:c8:3f:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G4Ek2SumRgv5OrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk MzQyZjAxYjItYjcwNC00ZTNkLTk5MjItZDhlNmQxNDhkNTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWtp12TaHGsGCghSN3YF6BEhcENj0lxWSddB JVpkkXQzJyw1bkiosPn2kqb9sbzxSmTqkYY6T9f5KnP2PnMZvjZ4zfRK+xOXLbI7 UHCQcly2cFfd1M507YJRGSK/Zuvmg1z3vcT/8/yzehOroxz1uZpa+pwGqiL2INiC QpvAUCw7XfxJ9nPWuQjAeCPS1TVBqPGyuE37VLtHY5a/VBX5/RTNMkD2uR3tUk+D n3OGNnOiisl/rxKIMK/GH2Qgs/2SVvRPaISrsL/jBP2vUO8Zqb4reViTl343SIrE LynZVnxArvkY+RL2IaFnfmnsiwVl5vqJ/EPnwpU0Oe75124JAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFARML3pm8pPyD/W6Dd+5+/F6smFoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvNDVkNDFmMTUtODQ5Mi0z ZmMwLTk1ZDEtMzIyMjQ5MTJhN2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlRRIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMQw5lP4ToxSIiRvjIPxfdhLOCvogO5b5Nd+LaTzzqHwDmPx/8gLfcz GDSBax4Dh9l9hXcFOhEYRDnOEEUQGVC5nm4vAjke2HBQKtIwy5gmrFw7hg5k4uWI O6w4PJR2b0pvsuNWmF7d2rE1BPxXIclKLeuCJwKClqhvfXQprxKg8Rbp1+8QM5jv 1n4MpT+t8493bdSTGEjVwVShziNH1GpUhYH4xm/1WGDsAVHDJhXNB8AzSYJuUoSm UCgbxNJXprbbqIO6/TIM2Ur5rRXv/1Vd8CCYW8roIA/qQymeCtEkqVa+MFppsmcQ PbJ9sBF1akth55P3b4W9ZMyvJMnIPwA= -----END CERTIFICATE-----Generated at Tue Aug 5 17:09:30 2025 by rpki-client