$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/774a050a-18b3-390e-8bca-f3119f67dd8a.roa File: 774a050a-18b3-390e-8bca-f3119f67dd8a.roa (raw, json) Hash identifier: 6IOwvPV+hh8jbLsDcdhjBZqdJhEVfyymsnj5fuYJ6k4= Subject key identifier: 94:20:45:AD:FA:4E:4B:8F:6D:DB:4D:FF:57:5D:D0:0E:CB:A6:7C:AA Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F43285849D85F816C223EA644A1DDFE00 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/774a050a-18b3-390e-8bca-f3119f67dd8a.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 1280 IP address blocks: 149.20.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:81:6c:22:3e:a6:44:a1:dd:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=2eab30a8-490b-48dc-9ac3-9e6bfe55d110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1e:1a:4f:d7:15:31:6e:b8:f6:2f:ae:4b:55: 10:79:89:07:b4:16:54:b7:e5:ce:79:16:fb:7e:f4: ee:63:c1:c7:93:a8:f9:bd:a5:62:b9:5a:75:b9:a8: 07:9e:94:54:7d:39:67:94:74:b8:64:8b:2c:a9:0a: 11:33:89:cb:60:92:65:68:ef:9f:78:64:c7:c0:e1: a9:d3:01:f1:f2:45:ac:11:01:26:5a:b4:63:83:b7: d2:15:03:97:9c:c1:7c:ac:43:16:5c:c4:03:85:7a: 24:f4:b4:f1:7b:69:bb:c1:62:8d:f3:11:cc:00:2f: 9a:ee:40:0c:5f:97:d3:ba:fd:11:a8:42:00:fd:92: 72:db:31:69:b3:c9:14:c9:99:41:77:23:95:7a:21: 68:82:35:75:5e:27:d2:78:c8:1c:5c:25:c6:e1:e8: 27:79:46:95:83:c6:56:65:45:28:cd:ff:95:2c:3f: 09:2f:e3:7c:ef:9b:a9:a9:a7:f5:fb:40:d2:1c:00: f6:e9:51:46:47:72:6c:bc:1c:07:3e:58:0e:ad:11: b6:fe:fc:c6:59:b2:81:c3:4e:57:0f:7a:a5:30:63: ac:64:d8:72:91:90:b0:45:0b:f8:cf:5d:d1:35:4f: b6:05:2a:ec:27:3a:db:4e:52:c8:e8:fe:63:f5:73: dc:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:20:45:AD:FA:4E:4B:8F:6D:DB:4D:FF:57:5D:D0:0E:CB:A6:7C:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/774a050a-18b3-390e-8bca-f3119f67dd8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:f1:6f:d1:8f:a9:b1:6f:39:43:d5:7f:60:e1:5a:e6:c8:89: 65:b4:56:3f:57:75:60:30:10:b4:c2:4b:9d:f0:d5:59:d1:40: 36:74:31:40:b7:65:92:89:2a:3e:11:37:02:16:e3:3d:41:df: 40:aa:04:2a:9c:bf:41:68:1a:8a:e3:b9:fb:1c:e5:80:9d:04: 85:ee:59:a0:5c:0a:2d:bf:b1:19:50:00:50:ad:4a:28:e0:77: 85:91:ac:d9:f4:50:9c:c1:03:90:d6:9c:7f:7b:1f:17:a3:0f: 93:6b:5b:64:82:8d:85:7b:09:2e:54:3b:a1:9f:8e:08:a9:23: 05:fd:c9:ca:55:48:f5:cd:cd:2c:91:a6:20:3c:1c:fb:82:bf: b2:67:f8:e8:9b:f2:59:9a:c1:a7:c8:b1:85:d8:b6:1e:28:50: d8:9a:00:7a:75:83:51:34:ee:eb:b8:86:24:32:86:6c:af:99: c5:5b:25:8c:0d:e6:e7:fd:8e:95:b6:70:b8:ef:95:dd:b9:dc: e6:2d:f4:75:e5:c0:c8:0f:1b:94:b8:d8:f2:9a:8b:f8:fa:fa: f5:9d:70:4b:16:6e:7c:28:49:5c:64:46:2d:d6:8e:93:c3:10: e3:6d:e9:48:ac:c5:b5:1a:c4:98:f7:fd:34:a7:9c:9e:f9:9f: 43:46:ae:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX4FsIj6mRKHd/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk MmVhYjMwYTgtNDkwYi00OGRjLTlhYzMtOWU2YmZlNTVkMTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoR4aT9cVMW649i+uS1UQeYkHtBZUt+XOeRb7 fvTuY8HHk6j5vaViuVp1uagHnpRUfTlnlHS4ZIssqQoRM4nLYJJlaO+feGTHwOGp 0wHx8kWsEQEmWrRjg7fSFQOXnMF8rEMWXMQDhXok9LTxe2m7wWKN8xHMAC+a7kAM X5fTuv0RqEIA/ZJy2zFps8kUyZlBdyOVeiFogjV1XifSeMgcXCXG4egneUaVg8ZW ZUUozf+VLD8JL+N875upqaf1+0DSHAD26VFGR3JsvBwHPlgOrRG2/vzGWbKBw05X D3qlMGOsZNhykZCwRQv4z13RNU+2BSrsJzrbTlLI6P5j9XPcDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJQgRa36TkuPbdtN/1dd0A7LpnyqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvNzc0YTA1MGEtMThiMy0z OTBlLThiY2EtZjMxMTlmNjdkZDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRRWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7xb9GPqbFvOUPVf2DhWubIiWW0Vj9XdWAwELTCS53w1VnRQDZ0MUC3 ZZKJKj4RNwIW4z1B30CqBCqcv0FoGorjufsc5YCdBIXuWaBcCi2/sRlQAFCtSijg d4WRrNn0UJzBA5DWnH97HxejD5NrW2SCjYV7CS5UO6GfjgipIwX9ycpVSPXNzSyR piA8HPuCv7Jn+Oib8lmawafIsYXYth4oUNiaAHp1g1E07uu4hiQyhmyvmcVbJYwN 5uf9jpW2cLjvld253OYt9HXlwMgPG5S42PKai/j6+vWdcEsWbnwoSVxkRi3WjpPD EONt6UisxbUaxJj3/TSnnJ75n0NGrtQ= -----END CERTIFICATE-----Generated at Sun Jun 15 05:18:29 2025 by rpki-client