$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/84bba587-44c9-3c7e-8494-16b9196e9d75.roa File: 84bba587-44c9-3c7e-8494-16b9196e9d75.roa (raw, json) Hash identifier: 4SWJCAwMunIOSQdLduGT2TWoXInSAxo5P2eHvueMV3c= Subject key identifier: D2:B3:CB:A6:8B:AA:7D:75:66:4E:54:02:52:BE:0A:F1:4D:1C:59:21 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584AB91B8AD615C1DAC411B08900 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/84bba587-44c9-3c7e-8494-16b9196e9d75.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 1280 IP address blocks: 149.20.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:8a:d6:15:c1:da:c4:11:b0:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=f4fa6bf7-3342-4770-bae8-6a578d77378b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:0c:99:0e:ca:90:82:44:54:97:d1:ad:bf:a6: bb:b1:2d:5a:d7:4e:d5:55:e0:10:8e:d5:f7:a4:cd: cd:c6:01:db:37:3e:7b:86:ef:0a:66:5d:07:37:f6: 21:e6:8c:63:e2:01:c3:e7:9d:ed:d1:f8:ec:bd:8d: 71:79:41:be:f2:c4:17:46:9f:dc:a4:9b:ae:28:2d: c5:53:d8:a3:24:1d:8e:4d:ed:a8:10:6f:48:25:17: 7b:7a:f5:a9:6c:f1:30:52:c4:ed:aa:23:b5:23:2d: 05:8a:1a:92:c2:a1:57:14:5a:74:6d:0e:dc:6e:45: 3c:c6:28:be:9e:3a:3a:d7:e8:f8:fc:4a:68:ea:4d: 11:47:32:f5:9e:b8:ee:bc:bc:c8:a5:97:51:f7:fb: 94:e3:5d:b6:0e:c7:57:45:1b:5f:01:bc:89:c2:98: f9:1f:98:c8:22:93:be:b5:f2:59:b0:36:54:0e:72: 1b:78:73:b5:12:9e:69:e8:f4:9b:20:5d:06:eb:77: 16:bd:9c:64:08:47:94:73:25:c3:d9:5b:17:74:11: 32:84:97:11:8e:c2:bb:b9:17:c6:4c:e5:0b:c5:60: df:e6:79:99:87:3d:47:d7:c6:66:e9:ab:d1:fd:c1: cb:54:43:b8:fc:de:0a:32:79:2d:df:d3:51:0e:d0: 24:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:B3:CB:A6:8B:AA:7D:75:66:4E:54:02:52:BE:0A:F1:4D:1C:59:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/84bba587-44c9-3c7e-8494-16b9196e9d75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:21:fe:c7:c5:b6:27:4b:01:85:4d:b0:58:27:75:c4:51:4a: 98:fa:3d:77:8c:7f:d8:73:a6:a2:22:e2:6b:54:38:72:98:a6: 17:ec:d4:15:2c:16:85:40:2e:2b:ab:cf:bf:b0:a4:6c:01:61: d5:60:7b:67:84:28:ae:ae:3a:2c:85:bb:8a:ad:45:a5:d3:50: 35:53:0f:a5:7f:4c:54:9e:09:07:d4:1b:0e:1a:c5:3d:78:e8: d9:9f:ad:9d:7b:13:a7:ea:44:bd:31:85:bb:83:09:26:89:ac: 6a:cd:3b:c6:a3:8d:3a:25:f7:6f:41:dc:3c:4e:d1:d0:bb:6d: 46:df:56:b5:0d:dd:63:63:75:70:d9:a7:71:99:bb:b0:8c:72: c3:a0:3d:b2:2f:47:07:35:8d:d7:39:85:b3:9b:ec:55:9a:0e: fe:63:b4:6b:e5:2f:5b:f9:38:63:84:ca:82:79:49:d8:c8:9c: 3a:4d:41:2e:f4:83:c3:d5:5d:83:2b:48:d9:e7:b1:31:1b:75: 4b:e1:01:28:8c:5a:14:10:22:96:e8:ab:f1:d6:d3:96:4b:b7: f7:6d:88:a0:16:41:c8:36:bb:c1:60:c1:f0:14:0c:b6:51:e8: 69:f7:5a:d3:86:7c:6b:8f:0a:35:64:92:f4:b5:a3:ab:e7:22: fd:55:b1:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G4rWFcHaxBGwiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk ZjRmYTZiZjctMzM0Mi00NzcwLWJhZTgtNmE1NzhkNzczNzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAyZDsqQgkRUl9Gtv6a7sS1a107VVeAQjtX3 pM3NxgHbNz57hu8KZl0HN/Yh5oxj4gHD553t0fjsvY1xeUG+8sQXRp/cpJuuKC3F U9ijJB2OTe2oEG9IJRd7evWpbPEwUsTtqiO1Iy0FihqSwqFXFFp0bQ7cbkU8xii+ njo61+j4/Epo6k0RRzL1nrjuvLzIpZdR9/uU4122DsdXRRtfAbyJwpj5H5jIIpO+ tfJZsDZUDnIbeHO1Ep5p6PSbIF0G63cWvZxkCEeUcyXD2VsXdBEyhJcRjsK7uRfG TOULxWDf5nmZhz1H18Zm6avR/cHLVEO4/N4KMnkt39NRDtAkywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNKzy6aLqn11Zk5UAlK+CvFNHFkhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvODRiYmE1ODctNDRjOS0z YzdlLTg0OTQtMTZiOTE5NmU5ZDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGlRQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUh/sfFtidLAYVNsFgndcRRSpj6PXeMf9hzpqIi4mtUOHKYphfs1BUs FoVALiurz7+wpGwBYdVge2eEKK6uOiyFu4qtRaXTUDVTD6V/TFSeCQfUGw4axT14 6NmfrZ17E6fqRL0xhbuDCSaJrGrNO8ajjTol929B3DxO0dC7bUbfVrUN3WNjdXDZ p3GZu7CMcsOgPbIvRwc1jdc5hbOb7FWaDv5jtGvlL1v5OGOEyoJ5SdjInDpNQS70 g8PVXYMrSNnnsTEbdUvhASiMWhQQIpboq/HW05ZLt/dtiKAWQcg2u8FgwfAUDLZR 6Gn3WtOGfGuPCjVkkvS1o6vnIv1VsT4= -----END CERTIFICATE-----Generated at Mon Aug 4 16:06:25 2025 by rpki-client