$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/5d732c70-b840-307e-bacd-9752a58c0f29.roa File: 5d732c70-b840-307e-bacd-9752a58c0f29.roa (raw, json) Hash identifier: NDr4n7dSuGujWjprx3AamZere00wBkPAcwW+vrhFiYc= Subject key identifier: 17:B4:89:73:D4:9C:C6:51:5A:ED:C7:52:7A:52:B3:8A:88:6B:46:99 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F43285849D85F818FDD138E6A8A1B6850 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/5d732c70-b840-307e-bacd-9752a58c0f29.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 1280 IP address blocks: 149.20.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:81:8f:dd:13:8e:6a:8a:1b:68:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=39d79c3d-6e30-4c5c-b0db-9f463b26ce38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:7c:7a:c9:dd:17:12:f2:69:28:dd:02:8f:ca: a4:d4:51:10:15:1b:34:ad:a6:13:20:19:ea:18:1c: 63:6c:ed:6f:c6:b3:ea:9c:e4:9e:72:0d:2f:7e:97: 78:21:4b:fa:36:b8:4f:0a:5f:66:42:33:71:7f:cf: 2f:74:20:7d:99:8f:48:07:47:b3:d7:15:8b:18:2a: 0c:95:2c:ad:22:be:4c:1f:17:34:ca:59:9c:59:62: 2a:c8:c6:1d:e1:26:57:92:40:3c:51:28:7f:75:19: 0e:b2:7c:84:e1:c4:e4:37:8f:aa:d7:ce:21:40:46: 08:71:af:cb:15:5d:16:91:da:7f:d4:40:c7:7a:7b: a8:46:77:81:2b:2b:8a:f0:02:1e:3e:16:f3:32:da: f5:52:2c:76:2a:49:f2:4f:a2:bc:82:c0:ab:b0:6c: aa:4c:6d:90:b6:c6:32:b0:cc:09:52:3e:61:9f:91: 1c:66:0c:32:a2:91:5b:4f:5c:ba:e2:42:d7:19:50: 1d:7f:be:1f:bc:73:15:43:85:8b:3d:4f:9e:65:66: e4:f7:4f:48:88:48:3d:b8:b9:24:fd:6a:fc:37:00: 82:ec:01:9d:48:39:93:63:8e:53:79:be:55:1f:43: 89:ea:ba:d6:45:b4:14:8d:f7:32:3f:0a:6e:d3:bd: 95:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B4:89:73:D4:9C:C6:51:5A:ED:C7:52:7A:52:B3:8A:88:6B:46:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/5d732c70-b840-307e-bacd-9752a58c0f29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:c8:3d:8f:93:cf:0d:91:0d:1a:dd:36:eb:f7:ac:7b:2b:cd: fe:b0:44:ca:cd:95:02:d9:ad:06:e3:e2:cd:db:64:ff:b7:eb: 71:56:ee:b3:da:6d:68:6b:8b:c9:b9:a9:d6:14:3b:6f:d8:74: 95:e9:fa:c7:83:13:83:a7:c0:36:0b:9e:cb:84:eb:97:f6:d9: 62:41:e7:e9:ab:30:46:9d:57:5a:b3:98:f1:11:3e:d5:c1:53: ba:b1:46:02:a0:4f:0a:49:02:17:44:8e:4c:63:1a:3e:16:14: 55:de:44:a4:6d:74:16:f5:47:e9:aa:9f:84:ec:c9:86:24:84: b4:ce:3b:b4:bd:88:94:c5:4c:9e:01:a3:ee:f2:a2:58:70:82: 17:7c:41:5e:20:8d:b6:3f:3f:80:45:09:2c:f2:c1:bf:83:e5: 02:d6:cd:fe:a2:98:db:ff:d1:25:e0:27:68:fc:9e:83:1f:7e: ce:fe:9e:79:fd:78:34:25:1d:04:51:2b:34:bf:47:0c:7b:37: 1f:d4:ba:90:35:9c:8d:87:6c:ff:5e:d5:e6:ce:b4:e8:2e:17: ae:d7:b3:04:28:af:47:a7:45:92:a5:48:3e:c7:7b:6b:e8:c5: dd:9e:b3:8a:b4:ce:f1:1e:f3:ff:d0:5a:f7:92:2b:bb:cd:4b: ff:8d:6b:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX4GP3ROOaoobaFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk MzlkNzljM2QtNmUzMC00YzVjLWIwZGItOWY0NjNiMjZjZTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHx6yd0XEvJpKN0Cj8qk1FEQFRs0raYTIBnq GBxjbO1vxrPqnOSecg0vfpd4IUv6NrhPCl9mQjNxf88vdCB9mY9IB0ez1xWLGCoM lSytIr5MHxc0ylmcWWIqyMYd4SZXkkA8USh/dRkOsnyE4cTkN4+q184hQEYIca/L FV0Wkdp/1EDHenuoRneBKyuK8AIePhbzMtr1Uix2KknyT6K8gsCrsGyqTG2QtsYy sMwJUj5hn5EcZgwyopFbT1y64kLXGVAdf74fvHMVQ4WLPU+eZWbk909IiEg9uLkk /Wr8NwCC7AGdSDmTY45Teb5VH0OJ6rrWRbQUjfcyPwpu072VoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBe0iXPUnMZRWu3HUnpSs4qIa0aZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvNWQ3MzJjNzAtYjg0MC0z MDdlLWJhY2QtOTc1MmE1OGMwZjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRRRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjIPY+Tzw2RDRrdNuv3rHsrzf6wRMrNlQLZrQbj4s3bZP+363FW7rPa bWhri8m5qdYUO2/YdJXp+seDE4OnwDYLnsuE65f22WJB5+mrMEadV1qzmPERPtXB U7qxRgKgTwpJAhdEjkxjGj4WFFXeRKRtdBb1R+mqn4TsyYYkhLTOO7S9iJTFTJ4B o+7yolhwghd8QV4gjbY/P4BFCSzywb+D5QLWzf6imNv/0SXgJ2j8noMffs7+nnn9 eDQlHQRRKzS/Rwx7Nx/UupA1nI2HbP9e1ebOtOguF67XswQor0enRZKlSD7He2vo xd2es4q0zvEe8//QWveSK7vNS/+Na4w= -----END CERTIFICATE-----Generated at Sun Jun 15 04:52:01 2025 by rpki-client