$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/93ab46f4-a5fc-3c75-8e84-9dfb831e3646.roa File: 93ab46f4-a5fc-3c75-8e84-9dfb831e3646.roa (raw, json) Hash identifier: ZHMsq2POxdN3n1sXuQyoyug+1TxzLQux7UpQCcx63Hk= Subject key identifier: 87:CD:C9:05:FA:F8:F3:F4:E5:28:DF:97:FF:65:32:C8:0E:FF:42:12 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584AB91B8530D6814A028B3D9F00 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/93ab46f4-a5fc-3c75-8e84-9dfb831e3646.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 1280 IP address blocks: 149.20.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:85:30:d6:81:4a:02:8b:3d:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=2fef3ab0-d4fb-426c-b9df-4d99e9f8c5a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:67:88:c8:bc:43:65:f5:34:d0:5c:14:72:a4: 91:ed:a0:0b:70:0f:ca:b9:7b:1b:19:02:4e:2b:24: e0:37:0f:99:de:e4:f1:e4:88:67:58:67:93:69:ef: 29:ea:e8:ac:43:21:d8:c2:14:f1:cf:99:09:59:78: f5:61:81:fc:ee:a7:73:ee:68:6b:4b:e8:c5:ab:4a: 61:e2:f2:8d:eb:9e:77:4a:f1:bd:9f:76:1d:55:8a: 26:64:6a:01:f1:25:e9:f8:e7:b7:2e:f3:38:c8:e2: 84:80:90:15:5b:1e:8d:58:f9:46:ae:4e:b3:56:c3: 05:39:1c:a6:73:3f:25:cf:e8:4e:a3:24:19:ac:39: 7c:c4:c0:1f:01:92:c1:79:2b:15:af:9f:55:ec:73: 64:48:61:25:f3:79:6b:88:85:9c:b7:9d:9b:c2:2a: 3b:1c:93:b5:18:d0:80:a1:01:11:a1:7b:b5:05:4b: d5:65:63:a6:bc:83:12:54:66:68:3b:0f:cc:c9:1e: 4c:eb:2c:9c:7f:f4:cd:d8:4b:1d:5d:4b:bb:3e:5f: ec:41:39:54:34:79:ff:d6:32:ca:bb:43:42:18:42: a7:d4:5f:a6:23:71:a4:80:bf:52:66:a5:2d:ac:8f: 94:5f:57:03:03:b7:40:f5:a4:74:b4:ba:ea:36:b3: cc:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:CD:C9:05:FA:F8:F3:F4:E5:28:DF:97:FF:65:32:C8:0E:FF:42:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/93ab46f4-a5fc-3c75-8e84-9dfb831e3646.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:53:a7:18:aa:aa:f5:eb:1f:11:3a:a5:50:71:6b:57:77:c0: bf:81:c0:85:44:97:5a:b0:b8:a2:99:2c:fa:7c:34:10:c0:32: 72:cb:fb:1d:04:1c:bb:a8:15:f9:08:ac:87:a5:82:eb:97:fe: b9:0b:93:5c:93:1e:94:59:dc:58:2c:16:d6:87:a3:b1:b5:67: 72:3e:fd:ea:5f:51:63:28:12:07:24:f2:4a:93:68:f0:8e:83: f3:53:fb:cb:ae:53:17:8c:46:bc:eb:04:13:22:2b:84:23:9d: c8:ec:6b:9d:ed:04:6b:e9:7a:5d:f5:b6:4d:16:48:e1:5d:ca: 6c:d9:d7:93:25:ff:c5:f7:fb:1c:d6:d9:9f:9a:75:b6:8d:63: 31:98:28:21:e6:be:e1:ff:3d:5d:30:b7:e0:06:8a:44:36:51: a4:b7:ec:e4:dd:9c:3e:d6:0d:84:9b:43:85:88:ba:59:ad:70: b8:6a:49:41:6a:ee:c5:59:45:d2:7d:fa:59:a0:68:71:64:e6: 5c:57:59:5f:45:bf:ce:9c:59:0c:56:4b:6f:0a:04:e4:85:77: ac:de:8c:8a:9e:7e:73:66:53:52:04:d1:7d:e4:d6:3c:86:1c: 4e:64:b0:e7:7e:dd:fb:85:46:de:43:69:80:75:c3:c0:5c:a1: c8:4a:33:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G4Uw1oFKAos9nwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk MmZlZjNhYjAtZDRmYi00MjZjLWI5ZGYtNGQ5OWU5ZjhjNWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGeIyLxDZfU00FwUcqSR7aALcA/KuXsbGQJO KyTgNw+Z3uTx5IhnWGeTae8p6uisQyHYwhTxz5kJWXj1YYH87qdz7mhrS+jFq0ph 4vKN6553SvG9n3YdVYomZGoB8SXp+Oe3LvM4yOKEgJAVWx6NWPlGrk6zVsMFORym cz8lz+hOoyQZrDl8xMAfAZLBeSsVr59V7HNkSGEl83lriIWct52bwio7HJO1GNCA oQERoXu1BUvVZWOmvIMSVGZoOw/MyR5M6yycf/TN2EsdXUu7Pl/sQTlUNHn/1jLK u0NCGEKn1F+mI3GkgL9SZqUtrI+UX1cDA7dA9aR0tLrqNrPMMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIfNyQX6+PP05Sjfl/9lMsgO/0ISMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvOTNhYjQ2ZjQtYTVmYy0z Yzc1LThlODQtOWRmYjgzMWUzNjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRRXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxTpxiqqvXrHxE6pVBxa1d3wL+BwIVEl1qwuKKZLPp8NBDAMnLL+x0E HLuoFfkIrIelguuX/rkLk1yTHpRZ3FgsFtaHo7G1Z3I+/epfUWMoEgck8kqTaPCO g/NT+8uuUxeMRrzrBBMiK4Qjncjsa53tBGvpel31tk0WSOFdymzZ15Ml/8X3+xzW 2Z+adbaNYzGYKCHmvuH/PV0wt+AGikQ2UaS37OTdnD7WDYSbQ4WIulmtcLhqSUFq 7sVZRdJ9+lmgaHFk5lxXWV9Fv86cWQxWS28KBOSFd6zejIqefnNmU1IE0X3k1jyG HE5ksOd+3fuFRt5DaYB1w8BcochKM0c= -----END CERTIFICATE-----Generated at Mon Aug 4 15:34:43 2025 by rpki-client