$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/a4ca86cf-fd4c-33b7-9c65-4d414a84835e.roa File: a4ca86cf-fd4c-33b7-9c65-4d414a84835e.roa (raw, json) Hash identifier: xkdqlnh90voodC5QIkb9v0Yg7otqXR6/BLyRo/WdRzc= Subject key identifier: 62:45:F1:89:3D:44:2A:0B:C6:66:8C:C3:38:48:C4:5F:37:82:67:A9 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F43285849D85F7D732174FE496B9E9DC0 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/a4ca86cf-fd4c-33b7-9c65-4d414a84835e.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 30132 IP address blocks: 149.20.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:7d:73:21:74:fe:49:6b:9e:9d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=9464103a-0075-4863-b7f8-6ff3e3bba0fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:00:1c:bf:95:20:51:f3:e4:a2:39:fa:31:5b: 71:b9:d5:98:4a:83:28:0a:3e:19:9a:d0:6e:20:b2: cc:14:86:fb:06:f5:c8:66:b5:bb:d5:48:76:8f:18: 29:7a:a0:79:f0:2b:68:ae:a4:84:66:80:4e:51:72: af:8b:b1:6b:bf:f2:91:1d:28:c3:33:dd:1c:48:1c: 5b:c4:4c:5c:8c:4e:03:3c:5e:0c:af:33:6e:b4:74: 01:22:d8:a3:9e:4c:6a:0c:c9:5a:20:f7:f8:40:bf: f0:74:66:b2:79:28:81:2c:d9:dd:b9:b4:6f:57:92: 31:a4:8e:e4:ef:25:d0:d9:33:5f:d3:8a:a3:9c:28: f1:04:54:77:87:d8:e8:4f:b5:1e:f7:25:d5:21:f2: 71:0c:fc:f4:2c:8d:8b:96:45:76:50:cb:53:70:67: b6:10:16:4d:c5:03:ad:d1:29:b6:6d:da:1d:2b:66: a8:49:4c:7e:ef:07:a4:40:65:ea:ca:19:af:f2:65: eb:ae:03:47:08:13:ef:20:ff:f6:a2:46:20:86:32: 2c:0f:82:4f:fa:59:7c:59:a9:14:da:a1:4a:ec:3f: 8f:45:07:e8:7d:0b:cb:63:25:d1:20:4c:47:e7:50: ef:21:1e:9f:d0:02:86:f1:de:2e:70:08:46:1c:39: f0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:45:F1:89:3D:44:2A:0B:C6:66:8C:C3:38:48:C4:5F:37:82:67:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/a4ca86cf-fd4c-33b7-9c65-4d414a84835e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:dd:bb:7d:d8:c5:43:e1:df:73:04:15:47:ba:18:b5:04:23: 9e:3d:99:38:64:b3:7d:b3:af:8a:51:98:bd:be:ed:10:81:b0: 06:7f:2d:32:1b:d4:de:96:30:d5:12:44:2c:36:09:c9:12:90: e1:3d:6b:12:bb:47:f5:d4:ad:38:62:40:47:fb:79:5b:65:71: fc:99:2d:fb:09:55:f7:15:c6:10:a5:fd:f2:b8:c1:c2:23:96: 2f:8f:c8:5d:09:97:2c:3a:74:d4:5c:d9:db:7c:ec:0a:37:57: b9:df:cd:4d:d0:07:b0:76:af:80:3f:79:d9:1d:c2:77:68:da: 15:0f:fc:4b:31:24:66:80:93:a2:2d:84:6c:6c:6d:08:c9:cd: 75:8a:c5:eb:63:33:2a:52:c1:f4:ed:cc:f9:3d:24:92:0a:2e: f9:0c:8a:de:86:24:72:ab:57:4f:84:1d:3f:6b:4f:a9:a6:e9: 4f:26:8a:b2:aa:09:62:26:ea:7e:c4:ac:a3:08:cc:3c:3c:75: de:9a:93:d8:cc:b4:3e:d1:58:09:05:4e:f4:70:a4:fd:78:57: 0c:8c:17:b7:5d:cf:9c:3d:dd:0e:dd:74:92:c0:3a:90:a0:ca: fe:82:28:5c:40:50:a4:04:fc:e7:3e:44:2f:a6:23:9a:85:3f: d6:8c:4b:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX31zIXT+SWuencAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk OTQ2NDEwM2EtMDA3NS00ODYzLWI3ZjgtNmZmM2UzYmJhMGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AAcv5UgUfPkojn6MVtxudWYSoMoCj4ZmtBu ILLMFIb7BvXIZrW71Uh2jxgpeqB58CtorqSEZoBOUXKvi7Frv/KRHSjDM90cSBxb xExcjE4DPF4MrzNutHQBItijnkxqDMlaIPf4QL/wdGayeSiBLNndubRvV5IxpI7k 7yXQ2TNf04qjnCjxBFR3h9joT7Ue9yXVIfJxDPz0LI2LlkV2UMtTcGe2EBZNxQOt 0Sm2bdodK2aoSUx+7wekQGXqyhmv8mXrrgNHCBPvIP/2okYghjIsD4JP+ll8WakU 2qFK7D+PRQfofQvLYyXRIExH51DvIR6f0AKG8d4ucAhGHDnwNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGJF8Yk9RCoLxmaMwzhIxF83gmepMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvYTRjYTg2Y2YtZmQ0Yy0z M2I3LTljNjUtNGQ0MTRhODQ4MzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRQJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjdu33YxUPh33MEFUe6GLUEI549mThks32zr4pRmL2+7RCBsAZ/LTIb 1N6WMNUSRCw2CckSkOE9axK7R/XUrThiQEf7eVtlcfyZLfsJVfcVxhCl/fK4wcIj li+PyF0Jlyw6dNRc2dt87Ao3V7nfzU3QB7B2r4A/edkdwndo2hUP/EsxJGaAk6It hGxsbQjJzXWKxetjMypSwfTtzPk9JJIKLvkMit6GJHKrV0+EHT9rT6mm6U8mirKq CWIm6n7ErKMIzDw8dd6ak9jMtD7RWAkFTvRwpP14VwyMF7ddz5w93Q7ddJLAOpCg yv6CKFxAUKQE/Oc+RC+mI5qFP9aMS7M= -----END CERTIFICATE-----Generated at Mon Jun 16 10:57:52 2025 by rpki-client