$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/800c5f2d-1ef2-3519-8a82-3303d1e0c2db.roa File: 800c5f2d-1ef2-3519-8a82-3303d1e0c2db.roa (raw, json) Hash identifier: r5YdOKf6+Uw6+Ga33bJNmoHXLJVOnBEmlHpcld1JQlI= Subject key identifier: 46:EF:B4:F1:74:68:D7:7B:2A:F0:F2:A5:5E:62:4A:31:CD:C1:71:AD Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F43285849912F282B76A62540A4640E80 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/800c5f2d-1ef2-3519-8a82-3303d1e0c2db.roa Signing time: Fri 18 Apr 2025 13:00:59 +0000 ROA not before: Fri 18 Apr 2025 13:00:59 +0000 ROA not after: Thu 17 Jul 2025 13:00:59 +0000 asID: 27321 IP address blocks: 149.20.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:2f:28:2b:76:a6:25:40:a4:64:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Apr 18 13:00:59 2025 GMT Not After : Jul 17 13:00:59 2025 GMT Subject: CN=a0bc1895-6465-4fc1-9050-626abeef07ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f5:21:6c:81:ff:53:75:c0:12:d4:ba:04:cb: 0e:45:e4:a0:20:43:1d:aa:35:cd:d9:f7:5d:8f:8f: 65:02:ab:c5:cb:14:88:33:7d:05:3a:61:a9:e9:06: 77:a4:95:35:4c:be:00:7e:ed:68:2f:53:e1:5d:4d: 51:9d:aa:46:74:bb:46:51:e3:eb:98:92:a0:1b:33: b8:47:0d:45:03:2a:1a:74:18:cc:b1:a6:9b:30:f0: cf:80:01:14:ff:00:21:c4:28:9c:f7:a6:d6:d0:19: 0e:aa:1e:94:9a:86:f7:1a:94:86:d3:06:76:dc:99: 82:9c:bf:ec:87:56:f0:91:b3:a0:fd:ec:9b:02:49: bc:a0:fa:84:2d:ea:0a:55:72:3a:f4:bf:23:93:95: 4b:f8:61:6c:cc:92:3b:5f:c8:ca:5a:a1:01:b8:87: fb:0d:ad:94:48:f3:d1:e5:a4:31:07:d1:1c:33:fd: f7:61:cd:3d:e5:57:9b:58:3f:70:fb:f5:43:8a:b3: 13:33:70:f6:96:15:82:2d:14:14:8c:36:fc:5e:01: 9c:18:c2:76:1e:a3:cb:ef:4b:87:3b:d3:84:b5:f6: 02:b0:de:da:82:65:b3:2d:be:bb:2b:2d:7f:0e:af: f8:72:9b:be:d5:08:32:d9:6f:72:cc:5e:83:3d:d0: 68:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:EF:B4:F1:74:68:D7:7B:2A:F0:F2:A5:5E:62:4A:31:CD:C1:71:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/800c5f2d-1ef2-3519-8a82-3303d1e0c2db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:89:df:7b:a2:a0:e0:f0:5d:4a:06:54:19:b3:0e:e5:3f:dc: 90:06:76:98:40:35:ad:2c:d8:89:8e:2c:a3:2f:08:ea:1e:63: d5:fb:34:4b:db:bc:44:fb:95:4b:7f:7f:89:b6:dd:ed:a0:c5: 0e:5f:ba:5f:97:49:b0:9e:47:04:6b:e7:22:5f:18:4b:a6:15: 6b:21:a7:1f:08:5b:84:b3:c4:6a:7b:98:bf:89:a7:5c:3b:a6: 83:66:9d:55:26:6f:8c:a6:d5:a0:0e:ad:01:98:8a:10:b1:19: 24:52:57:08:11:b5:a2:3d:00:41:4e:b2:cc:d8:c9:48:9f:7d: f8:cd:f9:66:c6:f7:1c:71:69:85:a5:ce:20:b2:f5:79:b7:6a: a4:47:dc:68:02:5c:0c:be:34:3c:39:46:37:b9:77:03:8f:7a: 0b:21:49:f4:e7:74:0d:cb:85:40:96:be:54:7a:4e:bc:46:23: 2a:29:72:09:37:05:3a:48:44:7d:a7:45:c3:9c:99:ff:58:09: a8:92:0c:30:69:84:87:c4:99:2f:d4:66:84:38:a1:38:1e:dc: 71:77:a6:bc:b0:78:4d:4a:fe:6f:ad:63:7b:39:e7:7f:eb:48: dd:82:6b:ee:70:11:ff:21:27:fb:d2:be:c4:ff:4a:f2:31:e9: 71:3e:fd:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRLygrdqYlQKRkDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk YTBiYzE4OTUtNjQ2NS00ZmMxLTkwNTAtNjI2YWJlZWYwN2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfUhbIH/U3XAEtS6BMsOReSgIEMdqjXN2fdd j49lAqvFyxSIM30FOmGp6QZ3pJU1TL4Afu1oL1PhXU1RnapGdLtGUePrmJKgGzO4 Rw1FAyoadBjMsaabMPDPgAEU/wAhxCic96bW0BkOqh6Umob3GpSG0wZ23JmCnL/s h1bwkbOg/eybAkm8oPqELeoKVXI69L8jk5VL+GFszJI7X8jKWqEBuIf7Da2USPPR 5aQxB9EcM/33Yc095VebWD9w+/VDirMTM3D2lhWCLRQUjDb8XgGcGMJ2HqPL70uH O9OEtfYCsN7agmWzLb67Ky1/Dq/4cpu+1Qgy2W9yzF6DPdBoMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEbvtPF0aNd7KvDypV5iSjHNwXGtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvODAwYzVmMmQtMWVmMi0z NTE5LThhODItMzMwM2QxZTBjMmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRQCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWJ33uioODwXUoGVBmzDuU/3JAGdphANa0s2ImOLKMvCOoeY9X7NEvb vET7lUt/f4m23e2gxQ5ful+XSbCeRwRr5yJfGEumFWshpx8IW4SzxGp7mL+Jp1w7 poNmnVUmb4ym1aAOrQGYihCxGSRSVwgRtaI9AEFOsszYyUifffjN+WbG9xxxaYWl ziCy9Xm3aqRH3GgCXAy+NDw5Rje5dwOPegshSfTndA3LhUCWvlR6TrxGIyopcgk3 BTpIRH2nRcOcmf9YCaiSDDBphIfEmS/UZoQ4oTge3HF3pryweE1K/m+tY3s553/r SN2Ca+5wEf8hJ/vSvsT/SvIx6XE+/ZA= -----END CERTIFICATE-----Generated at Sun Apr 27 22:13:54 2025 by rpki-client