$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/fd1f75bb-b322-31d2-97d8-2837137ee140.roa File: fd1f75bb-b322-31d2-97d8-2837137ee140.roa (raw, json) Hash identifier: J7dBsvHpKhZqftmhsFQ5k31TYOdzl/KWnjQXcl3zLWs= Subject key identifier: 5A:F9:F4:64:6E:45:BB:1A:66:5B:90:63:05:65:3C:E0:82:5C:E8:4B Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584AB91B8B793CE1D27046E01280 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/fd1f75bb-b322-31d2-97d8-2837137ee140.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 1280 IP address blocks: 149.20.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:8b:79:3c:e1:d2:70:46:e0:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=5cb113a2-427a-4f57-b867-63a7b1dc8de2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c5:8b:a0:25:01:21:41:0a:05:e4:2f:d4:89: a4:2a:71:23:ad:be:8e:8f:05:ae:f8:f3:68:ba:1f: ef:4e:e2:e1:bb:a4:a0:e3:7b:05:2d:14:e2:d6:61: 5b:65:be:62:b2:28:ab:20:c5:a5:fd:36:90:90:40: c6:44:87:d0:45:ac:c3:01:36:3f:19:5f:c7:b2:11: 20:4a:c7:21:a3:f5:36:d0:b1:25:c8:58:d1:dc:12: c2:4d:ef:2b:de:1f:12:bd:e0:ea:7d:35:b2:8d:ea: f9:cd:55:00:ba:06:05:4f:cd:13:c8:12:b4:00:c6: 9b:41:bc:a1:07:34:e2:f8:43:fe:6f:ee:b0:27:67: 22:96:8b:75:ee:cc:f6:42:bb:1d:61:f3:67:41:1a: fd:41:e4:c3:e0:ef:80:46:e6:51:e6:d2:86:cb:ec: 76:92:ea:0a:f7:17:5d:16:6a:54:98:a6:08:9c:74: 28:55:c2:db:98:40:00:f4:11:34:c5:bc:fd:ba:f0: 7d:64:d0:0b:61:17:6d:b6:d2:91:df:fe:d2:dc:0b: 9c:c8:65:91:44:37:26:97:74:a5:e5:46:b1:14:15: 17:45:d6:22:0e:dd:76:03:dc:ea:66:fc:86:53:8f: 76:e4:13:72:da:f2:03:7e:cf:47:e0:9f:7d:99:20: 86:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:F9:F4:64:6E:45:BB:1A:66:5B:90:63:05:65:3C:E0:82:5C:E8:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/fd1f75bb-b322-31d2-97d8-2837137ee140.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:38:1a:f2:a9:ad:e3:0f:19:d7:c6:a3:de:01:60:d4:ec:2f: bd:63:ef:45:ad:aa:0f:0f:37:8f:93:f9:6e:df:aa:4e:d1:ef: 4e:55:60:0e:d5:a8:96:9b:2a:18:15:48:1d:4e:59:d7:94:5d: 8a:c8:24:1c:92:10:de:3a:0a:4a:b2:f1:ba:d8:5d:c0:30:e1: 2d:1f:46:b4:a7:44:a4:6a:d6:78:fd:4e:0c:0e:28:4d:dd:b5: 88:53:de:ed:f3:ba:27:e1:31:21:fa:df:07:13:ee:67:23:4d: f0:17:ad:e9:44:b3:ee:33:10:aa:78:be:7b:ae:b7:a3:9c:fe: 81:a8:ba:e8:f0:87:ce:44:70:77:3f:13:35:c6:24:97:a8:82: 7f:c7:c7:8f:bf:b4:ba:54:73:be:0a:cc:df:5a:63:48:52:88: 16:69:e9:51:c9:8b:18:39:5e:93:77:12:57:75:49:dd:ba:76: 33:10:a2:db:cd:50:f3:ca:c7:8a:ba:5c:e2:38:0a:99:c5:47: f2:4e:89:c2:c6:72:9f:9b:f8:cf:13:a9:5d:ea:0c:97:b0:ab: 6c:13:80:79:95:8a:30:be:fe:3e:88:1a:69:57:52:1b:f7:67: cf:cc:9a:dd:12:42:e9:89:75:83:6a:c9:d4:2e:7c:d7:ac:fe: c5:37:44:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G4t5POHScEbgEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk NWNiMTEzYTItNDI3YS00ZjU3LWI4NjctNjNhN2IxZGM4ZGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMWLoCUBIUEKBeQv1ImkKnEjrb6OjwWu+PNo uh/vTuLhu6Sg43sFLRTi1mFbZb5isiirIMWl/TaQkEDGRIfQRazDATY/GV/HshEg Sscho/U20LElyFjR3BLCTe8r3h8SveDqfTWyjer5zVUAugYFT80TyBK0AMabQbyh BzTi+EP+b+6wJ2cilot17sz2QrsdYfNnQRr9QeTD4O+ARuZR5tKGy+x2kuoK9xdd FmpUmKYInHQoVcLbmEAA9BE0xbz9uvB9ZNALYRdtttKR3/7S3AucyGWRRDcml3Sl 5UaxFBUXRdYiDt12A9zqZvyGU4925BNy2vIDfs9H4J99mSCG9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFr59GRuRbsaZluQYwVlPOCCXOhLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvZmQxZjc1YmItYjMyMi0z MWQyLTk3ZDgtMjgzNzEzN2VlMTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRRYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABU4GvKpreMPGdfGo94BYNTsL71j70Wtqg8PN4+T+W7fqk7R705VYA7V qJabKhgVSB1OWdeUXYrIJBySEN46Ckqy8brYXcAw4S0fRrSnRKRq1nj9TgwOKE3d tYhT3u3zuifhMSH63wcT7mcjTfAXrelEs+4zEKp4vnuut6Oc/oGouujwh85EcHc/ EzXGJJeogn/Hx4+/tLpUc74KzN9aY0hSiBZp6VHJixg5XpN3Eld1Sd26djMQotvN UPPKx4q6XOI4CpnFR/JOicLGcp+b+M8TqV3qDJewq2wTgHmVijC+/j6IGmlXUhv3 Z8/Mmt0SQumJdYNqydQufNes/sU3RCw= -----END CERTIFICATE-----Generated at Wed Aug 6 07:51:03 2025 by rpki-client