$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/469dd2df-4576-34bd-923d-489a11adb222.roa File: 469dd2df-4576-34bd-923d-489a11adb222.roa (raw, json) Hash identifier: 1eLZXD4ypf0Fezm+uv6W+zOT9z7edb6jmuH+Um1kP8k= Subject key identifier: 08:83:16:8F:98:4C:11:4A:CB:26:06:8B:11:EB:1F:CD:73:65:E0:56 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F43285849D85F7DDEFADD20EC2F965CBC Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/469dd2df-4576-34bd-923d-489a11adb222.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 1280 IP address blocks: 149.20.90.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:7d:de:fa:dd:20:ec:2f:96:5c:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=09b88c2f-e7c8-4740-890d-6e3cb4ec7200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d2:b8:10:83:13:b0:44:91:31:15:7a:24:f8: 6b:60:43:c3:34:9f:36:3d:48:a1:e8:a3:53:f6:7e: e8:04:06:13:dd:9b:ee:00:1b:a8:4f:37:63:5f:2a: cb:f1:cc:7f:23:3d:d5:46:e1:9b:5c:18:9f:b9:c1: 62:91:ad:6d:7b:8e:c1:a8:ae:5d:34:d0:0d:46:42: 35:54:68:03:1f:0b:e3:64:6a:1e:b2:c7:47:20:e4: 67:d2:e3:69:4a:1e:76:2e:0d:28:56:f8:24:40:67: 18:53:5f:79:30:be:43:e5:a3:9d:37:62:0b:4b:cf: c3:59:f0:08:06:4b:3a:5f:31:3c:ce:a0:e2:13:4b: 94:ca:73:ff:6c:79:80:35:32:52:69:e9:b1:8a:cf: 8a:e5:7b:71:3e:b7:f5:e8:36:71:13:e4:f4:00:66: 2a:ab:03:5e:d4:bf:78:4e:d6:19:57:bb:f9:fc:49: 01:e9:92:8f:4f:a8:f7:47:fb:11:4e:32:df:68:2c: 0e:5a:4a:17:3b:c8:9c:9f:44:f7:6c:35:ff:86:d7: 89:53:7c:1e:f9:e8:1e:4d:14:96:c7:bb:c3:3b:95: 05:5d:ea:ea:17:c8:85:30:fa:de:a9:c6:38:3c:02: 64:8b:04:31:86:5a:78:fe:2d:64:17:10:20:78:eb: 30:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:83:16:8F:98:4C:11:4A:CB:26:06:8B:11:EB:1F:CD:73:65:E0:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/469dd2df-4576-34bd-923d-489a11adb222.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.90.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:d9:de:ad:eb:54:f0:81:ad:0f:84:09:5c:ae:03:89:91:48: 35:0b:84:9a:c9:12:d3:f8:67:be:1a:56:68:82:7d:54:96:44: fa:c0:6a:5c:55:ac:67:35:16:a0:93:16:a0:25:c6:6e:3a:cf: d8:a2:bd:b3:1c:29:db:f6:2e:ef:69:b5:36:2c:85:30:24:a6: 1d:cb:99:b7:68:1f:06:e5:b3:41:59:45:93:65:41:0a:07:69: 20:e3:3d:57:97:08:a8:a2:48:ee:63:23:f7:aa:1c:5c:15:43: b3:22:b6:8c:e9:80:03:1a:5c:99:10:6d:f4:ca:cc:93:ec:e5: c0:c4:55:13:9a:73:bf:89:e6:dd:13:1b:52:45:52:21:68:42: 20:a2:67:ef:a8:85:ba:c0:cb:37:67:b1:fe:fb:6a:9c:c0:66: 95:02:a7:e9:41:7c:ca:24:fd:11:18:e0:87:5f:d9:c9:4b:6b: 81:2e:ef:cc:a9:d0:87:a3:d2:73:37:00:1c:ed:ed:75:c6:48: cb:c4:19:1b:19:6c:5e:15:ef:88:f2:c2:4c:af:60:4c:af:86: 68:2d:8c:78:b3:f3:d1:cc:75:cf:94:ae:de:0e:57:57:10:0e: 73:08:8f:68:bb:7d:e9:64:05:19:21:ae:55:e7:a7:99:7d:26: 08:ce:64:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX33e+t0g7C+WXLwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk MDliODhjMmYtZTdjOC00NzQwLTg5MGQtNmUzY2I0ZWM3MjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNK4EIMTsESRMRV6JPhrYEPDNJ82PUih6KNT 9n7oBAYT3ZvuABuoTzdjXyrL8cx/Iz3VRuGbXBifucFika1te47BqK5dNNANRkI1 VGgDHwvjZGoessdHIORn0uNpSh52Lg0oVvgkQGcYU195ML5D5aOdN2ILS8/DWfAI Bks6XzE8zqDiE0uUynP/bHmANTJSaemxis+K5XtxPrf16DZxE+T0AGYqqwNe1L94 TtYZV7v5/EkB6ZKPT6j3R/sRTjLfaCwOWkoXO8icn0T3bDX/hteJU3we+egeTRSW x7vDO5UFXerqF8iFMPreqcY4PAJkiwQxhlp4/i1kFxAgeOsw9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAiDFo+YTBFKyyYGixHrH81zZeBWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvNDY5ZGQyZGYtNDU3Ni0z NGJkLTkyM2QtNDg5YTExYWRiMjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlRRaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnZ3q3rVPCBrQ+ECVyuA4mRSDULhJrJEtP4Z74aVmiCfVSWRPrAalxV rGc1FqCTFqAlxm46z9iivbMcKdv2Lu9ptTYshTAkph3LmbdoHwbls0FZRZNlQQoH aSDjPVeXCKiiSO5jI/eqHFwVQ7MitozpgAMaXJkQbfTKzJPs5cDEVROac7+J5t0T G1JFUiFoQiCiZ++ohbrAyzdnsf77apzAZpUCp+lBfMok/REY4Idf2clLa4Eu78yp 0Iej0nM3ABzt7XXGSMvEGRsZbF4V74jywkyvYEyvhmgtjHiz89HMdc+Urt4OV1cQ DnMIj2i7felkBRkhrlXnp5l9JgjOZAE= -----END CERTIFICATE-----Generated at Sun Jun 15 05:27:42 2025 by rpki-client