$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/774a050a-18b3-390e-8bca-f3119f67dd8a.roa File: 774a050a-18b3-390e-8bca-f3119f67dd8a.roa (raw, json) Hash identifier: qBJ/9YrbEK4lRR7e45NP5j7uKA2usoOzVHwYmf6eOYs= Subject key identifier: 21:1B:BE:0F:C1:C6:52:78:1D:DA:07:D3:B7:26:FD:BD:E7:10:0F:0F Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584AB91B851CC0DA74A8EBC56B80 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/774a050a-18b3-390e-8bca-f3119f67dd8a.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 1280 IP address blocks: 149.20.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:85:1c:c0:da:74:a8:eb:c5:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=394f6c84-161c-4e8f-b413-a317192cc4bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fc:b4:b5:21:4b:ae:9a:10:bd:4c:26:64:38: 61:be:d5:8b:84:89:29:3b:be:02:91:09:bf:53:75: c5:1b:ec:30:fd:19:ac:7c:99:76:bf:40:58:80:2f: 14:f4:34:75:de:16:bb:0e:03:aa:12:b1:8b:e9:25: 8d:9b:14:23:e0:a3:d1:21:ed:11:99:c1:e7:b5:32: 83:3d:98:6a:d0:84:88:e2:02:5b:fc:3d:c8:fd:42: b2:53:13:b2:90:d6:62:0c:10:3c:e0:48:83:9b:60: 9f:99:66:1d:70:63:f4:ca:fa:90:36:2a:f0:64:a7: 26:11:b4:ad:4f:01:27:20:d4:a1:4c:46:8e:2f:31: fd:b6:63:f7:7b:3d:6a:07:24:33:80:73:b6:5c:50: f1:0d:d6:52:93:44:0b:03:fb:fe:ed:b9:4e:4d:e3: 34:28:cd:68:ac:6c:09:55:b2:96:0e:c7:43:2e:21: 23:73:63:c6:f1:4e:12:45:35:9f:57:fd:a5:f7:3f: 2f:3f:18:e3:60:a0:1e:a4:af:0a:51:6f:a5:ea:a8: 9b:4f:d5:93:d0:d2:95:87:3c:22:6b:14:9e:e3:0b: 25:88:b9:cc:10:1e:93:d5:9a:fc:8a:09:a4:92:dc: d5:f9:84:b4:30:67:2f:53:e2:49:16:79:09:a2:6c: 53:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:1B:BE:0F:C1:C6:52:78:1D:DA:07:D3:B7:26:FD:BD:E7:10:0F:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/774a050a-18b3-390e-8bca-f3119f67dd8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:b4:f8:96:02:7d:97:f0:74:ec:fb:fe:e8:83:e6:71:26:c4: 15:3a:e7:20:50:49:82:16:07:03:6e:ca:aa:9a:22:9a:7c:39: 79:04:f1:21:33:2f:51:82:13:48:f2:ef:31:5f:e3:cd:c0:16: b2:9c:5f:b4:37:8d:ba:a9:da:1e:b3:d7:69:c7:18:65:0c:00: a8:92:13:4d:ac:5c:45:f5:d2:ac:4b:19:de:0d:cc:69:e7:45: 1b:76:70:ad:17:d4:84:8c:81:c5:e4:7f:ab:4f:71:c4:94:b7: 4d:37:a2:bd:9f:27:74:8b:bb:00:b3:9a:1b:42:97:d1:42:e2: ae:6a:06:a9:58:61:71:bb:25:33:d6:73:5d:ca:d4:8d:7a:ba: 85:5c:1c:c3:f5:b9:7f:a1:c8:3f:c6:fa:55:68:5f:3a:fa:bd: cb:87:1e:48:bd:2b:36:f9:f8:9c:1f:ca:e4:d1:a2:f2:54:9e: 01:a4:2c:c2:f3:27:be:f4:5b:18:73:15:1d:06:ac:53:f8:ca: 99:44:c2:85:0f:7f:8c:c7:38:02:1a:e5:2e:b6:0b:4a:0b:7c: 51:9e:f9:91:a7:93:06:f3:a4:b3:bb:91:c7:6e:9f:1d:b9:90: 3d:e3:79:78:ce:9e:c1:b1:07:4a:b1:5b:83:52:03:da:cd:5b: e2:fa:c0:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G4UcwNp0qOvFa4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk Mzk0ZjZjODQtMTYxYy00ZThmLWI0MTMtYTMxNzE5MmNjNGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/y0tSFLrpoQvUwmZDhhvtWLhIkpO74CkQm/ U3XFG+ww/RmsfJl2v0BYgC8U9DR13ha7DgOqErGL6SWNmxQj4KPRIe0RmcHntTKD PZhq0ISI4gJb/D3I/UKyUxOykNZiDBA84EiDm2CfmWYdcGP0yvqQNirwZKcmEbSt TwEnINShTEaOLzH9tmP3ez1qByQzgHO2XFDxDdZSk0QLA/v+7blOTeM0KM1orGwJ VbKWDsdDLiEjc2PG8U4SRTWfV/2l9z8vPxjjYKAepK8KUW+l6qibT9WT0NKVhzwi axSe4wsliLnMEB6T1Zr8igmkktzV+YS0MGcvU+JJFnkJomxTnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCEbvg/BxlJ4HdoH07cm/b3nEA8PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvNzc0YTA1MGEtMThiMy0z OTBlLThiY2EtZjMxMTlmNjdkZDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRRWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAC0+JYCfZfwdOz7/uiD5nEmxBU65yBQSYIWBwNuyqqaIpp8OXkE8SEz L1GCE0jy7zFf483AFrKcX7Q3jbqp2h6z12nHGGUMAKiSE02sXEX10qxLGd4NzGnn RRt2cK0X1ISMgcXkf6tPccSUt003or2fJ3SLuwCzmhtCl9FC4q5qBqlYYXG7JTPW c13K1I16uoVcHMP1uX+hyD/G+lVoXzr6vcuHHki9Kzb5+JwfyuTRovJUngGkLMLz J770WxhzFR0GrFP4yplEwoUPf4zHOAIa5S62C0oLfFGe+ZGnkwbzpLO7kcdunx25 kD3jeXjOnsGxB0qxW4NSA9rNW+L6wNQ= -----END CERTIFICATE-----Generated at Wed Aug 6 07:49:10 2025 by rpki-client