$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/8291b825-526c-3dc2-ba9f-af6d7f6607fb.roa File: 8291b825-526c-3dc2-ba9f-af6d7f6607fb.roa (raw, json) Hash identifier: bLuI3k19fruDz/3hFU4Z9ZgMD+VxgE8IMrIxbE6SfR4= Subject key identifier: CB:F7:EE:77:37:82:0D:E9:92:F8:3D:76:17:AE:FC:52:B2:E5:12:0F Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584AB91B856228316EC300EEFC00 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/8291b825-526c-3dc2-ba9f-af6d7f6607fb.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 1280 IP address blocks: 149.20.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:85:62:28:31:6e:c3:00:ee:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=4064463e-c80b-4d0a-8e5f-d193ce47e5b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:40:ca:e6:a9:56:f1:9e:f7:21:62:cd:4f:74: 9c:90:10:cd:b7:3c:98:46:69:ca:82:b6:2d:8d:e1: 74:5c:06:7d:b6:b1:78:35:89:5d:d0:96:32:41:f7: 99:b8:80:c0:2b:90:33:f5:73:05:1f:a7:6d:03:bf: e9:22:3c:03:1b:d4:77:3f:70:fc:f4:c4:a3:f4:2a: cc:6e:b5:15:fc:67:ea:3a:c5:78:d1:c3:25:e0:c1: 69:67:6a:57:63:cd:46:31:9b:bf:20:1f:18:5f:0b: 20:f4:7e:85:97:98:e6:d0:76:58:8f:58:f2:74:81: 88:56:3d:10:8c:73:43:d9:16:80:a5:51:b1:a5:f9: 15:a9:24:62:67:64:2e:71:9c:93:d1:4c:8d:2e:cb: 66:06:dc:2b:66:02:84:c4:c0:2b:b9:c0:c5:74:84: a6:a8:ea:48:55:e9:92:51:50:2f:fe:31:61:73:38: 24:9f:a6:74:a1:4b:1d:df:a2:f8:02:f6:12:dd:16: 4d:37:a2:e8:0b:ce:b6:be:04:e4:12:6c:fd:ce:d1: 35:7a:0a:bf:1d:fa:07:c4:a0:cb:a5:13:51:78:bf: 71:e4:e3:9d:cd:ce:d1:aa:ad:ed:a2:a5:63:6c:49: 1e:df:ad:d0:2e:9a:94:51:9d:ee:ff:e1:a6:11:89: 4a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F7:EE:77:37:82:0D:E9:92:F8:3D:76:17:AE:FC:52:B2:E5:12:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/8291b825-526c-3dc2-ba9f-af6d7f6607fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:36:bb:0d:12:64:25:88:9c:41:30:b8:bb:2c:91:88:27:55: c8:5b:54:94:aa:b5:51:48:6b:ef:85:3f:24:0b:2a:57:16:04: 1e:de:a0:1e:15:46:02:03:3c:23:1d:4f:84:d9:ed:a0:ba:c5: 26:79:95:4f:dd:00:cd:a7:09:9a:71:09:95:b6:bd:f4:93:38: bb:3c:09:45:a0:47:b3:69:d0:60:8e:57:0f:03:6f:a8:12:0d: e1:d9:6b:61:10:9f:ec:a6:79:bb:d2:e0:45:2c:f7:37:3d:57: 1b:19:a3:5c:c2:1e:7b:bb:15:5c:70:b6:32:ae:b2:45:e6:15: 4d:c6:76:2a:7c:3e:11:14:fd:4d:29:63:ec:66:8b:9b:20:aa: 6b:28:68:82:18:43:99:37:3c:d9:93:5b:92:02:98:9a:81:6a: cc:18:39:a1:c2:64:dc:40:fa:d5:d2:e0:92:8f:1d:49:bd:37: 92:3c:e6:19:48:9f:60:ba:82:b3:7d:cc:e3:4e:5d:d7:26:56: ad:6f:cf:43:cf:d1:25:f7:46:f5:e5:d5:1a:41:ca:7a:9c:f2: 9a:80:86:5f:20:c7:c1:8a:a0:bf:39:98:d0:c8:d2:ff:cd:2b: 56:ab:d0:4b:70:7f:b2:e9:c8:cd:54:91:2c:44:af:77:82:c3: 74:9e:c9:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G4ViKDFuwwDu/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk NDA2NDQ2M2UtYzgwYi00ZDBhLThlNWYtZDE5M2NlNDdlNWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0DK5qlW8Z73IWLNT3SckBDNtzyYRmnKgrYt jeF0XAZ9trF4NYld0JYyQfeZuIDAK5Az9XMFH6dtA7/pIjwDG9R3P3D89MSj9CrM brUV/GfqOsV40cMl4MFpZ2pXY81GMZu/IB8YXwsg9H6Fl5jm0HZYj1jydIGIVj0Q jHND2RaApVGxpfkVqSRiZ2QucZyT0UyNLstmBtwrZgKExMArucDFdISmqOpIVemS UVAv/jFhczgkn6Z0oUsd36L4AvYS3RZNN6LoC862vgTkEmz9ztE1egq/HfoHxKDL pRNReL9x5OOdzc7Rqq3toqVjbEke363QLpqUUZ3u/+GmEYlKgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMv37nc3gg3pkvg9dheu/FKy5RIPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvODI5MWI4MjUtNTI2Yy0z ZGMyLWJhOWYtYWY2ZDdmNjYwN2ZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRQ8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI82uw0SZCWInEEwuLsskYgnVchbVJSqtVFIa++FPyQLKlcWBB7eoB4V RgIDPCMdT4TZ7aC6xSZ5lU/dAM2nCZpxCZW2vfSTOLs8CUWgR7Np0GCOVw8Db6gS DeHZa2EQn+ymebvS4EUs9zc9VxsZo1zCHnu7FVxwtjKuskXmFU3Gdip8PhEU/U0p Y+xmi5sgqmsoaIIYQ5k3PNmTW5ICmJqBaswYOaHCZNxA+tXS4JKPHUm9N5I85hlI n2C6grN9zONOXdcmVq1vz0PP0SX3RvXl1RpBynqc8pqAhl8gx8GKoL85mNDI0v/N K1ar0Etwf7LpyM1UkSxEr3eCw3SeyeU= -----END CERTIFICATE-----Generated at Mon Aug 4 19:06:36 2025 by rpki-client