$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/721773b3-ff70-4a20-99dc-aaba81c23ebf/98d5d8c2-c69d-38c6-b0c4-05dbdfb27eb8.roa File: 98d5d8c2-c69d-38c6-b0c4-05dbdfb27eb8.roa (raw, json) Hash identifier: iCC5RfkPPiSPS1+JeKLvLSko8tpflqOGKVMwshbAosA= Subject key identifier: 68:2D:94:95:75:FE:88:67:36:79:D4:63:26:A0:03:F3:A3:B3:A1:D6 Certificate issuer: /CN=721773b3-ff70-4a20-99dc-aaba81c23ebf Certificate serial: 010D0C9F4328584A9D30DFDFE5997AA5B1267D10 Authority key identifier: 86:5C:EF:82:0B:58:4C:55:1B:A5:0E:9E:AE:E6:B3:17:9D:70:C9:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/721773b3-ff70-4a20-99dc-aaba81c23ebf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/721773b3-ff70-4a20-99dc-aaba81c23ebf/98d5d8c2-c69d-38c6-b0c4-05dbdfb27eb8.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 40519 IP address blocks: 149.112.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/721773b3-ff70-4a20-99dc-aaba81c23ebf/721773b3-ff70-4a20-99dc-aaba81c23ebf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/721773b3-ff70-4a20-99dc-aaba81c23ebf/721773b3-ff70-4a20-99dc-aaba81c23ebf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/721773b3-ff70-4a20-99dc-aaba81c23ebf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:df:df:e5:99:7a:a5:b1:26:7d:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=721773b3-ff70-4a20-99dc-aaba81c23ebf Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=ac66bae6-796d-4140-a950-6122ef42b1e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d4:e2:46:73:2e:f2:d6:34:d4:16:2d:1a:e1: 2d:d2:68:fe:eb:d2:04:fc:b2:4e:62:64:79:db:d8: 5a:63:7a:5d:89:cc:8e:f4:fb:fe:28:d3:79:b7:c1: e8:c0:b4:f7:be:d2:3a:35:82:72:e8:4e:39:a1:79: 52:eb:4d:4d:a6:b5:e1:94:a4:ce:a9:92:36:6f:9f: a4:01:c5:4c:ae:0e:ed:4c:b8:b3:24:9b:94:20:ad: 9b:bc:5b:b2:86:aa:b2:72:21:8f:39:fe:ba:2c:35: 45:2a:21:4f:5a:b7:68:d9:2e:fe:84:9e:93:f5:e1: b7:d3:74:93:e8:f8:69:30:ce:63:b2:e3:b8:df:0c: 1b:2a:c0:4d:5f:51:fa:b9:bc:3a:b0:b7:ff:87:5b: f2:63:b1:e6:98:12:f1:5e:ed:75:c9:47:6e:ad:d7: 59:f4:70:09:59:31:53:a1:59:a3:89:00:33:23:84: b8:e9:54:40:06:95:c1:7f:b0:00:70:1c:9d:88:fe: 43:f4:63:d5:14:b5:84:50:d9:d9:4b:fd:0a:f5:75: b7:ea:7d:83:29:45:19:6a:80:28:5f:34:71:f1:09: 10:ea:67:8a:0b:ad:6f:e3:0c:89:14:e0:6d:3d:04: 58:58:48:ae:d8:31:0c:1a:22:af:6a:85:4a:fe:d0: de:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:2D:94:95:75:FE:88:67:36:79:D4:63:26:A0:03:F3:A3:B3:A1:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/721773b3-ff70-4a20-99dc-aaba81c23ebf/98d5d8c2-c69d-38c6-b0c4-05dbdfb27eb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/721773b3-ff70-4a20-99dc-aaba81c23ebf/721773b3-ff70-4a20-99dc-aaba81c23ebf.crl X509v3 Authority Key Identifier: keyid:86:5C:EF:82:0B:58:4C:55:1B:A5:0E:9E:AE:E6:B3:17:9D:70:C9:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/721773b3-ff70-4a20-99dc-aaba81c23ebf.cer sbgp-ipAddrBlock: critical IPv4: 149.112.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:4c:9e:72:0a:0d:56:60:e4:86:b7:57:64:82:20:e2:20:4c: cc:95:9a:b6:df:ca:bb:f7:06:fa:45:ff:cc:7d:03:a6:7e:f5: f6:df:84:47:59:71:63:45:a4:1e:8e:d2:90:78:d2:d1:19:cf: 47:bb:11:ea:ee:f0:e8:9b:f7:7b:47:ca:e0:0c:e6:a4:3d:26: 6f:2c:19:0c:07:0c:3d:e7:a0:51:ca:e6:06:ca:a3:12:b2:1d: dc:88:62:08:d0:66:73:fb:a1:ec:ec:af:ea:1c:4b:93:b5:8a: 16:dc:c4:ee:65:09:85:2e:67:4c:53:cd:97:c5:3d:1b:f5:76: 7c:f9:80:02:f4:a6:10:a0:93:9d:d7:ec:5b:dd:f1:4c:82:be: 96:41:b0:08:a9:84:75:90:ab:23:a9:0d:c2:a9:bf:9f:3a:be: 5f:0a:23:bb:40:91:a9:c4:ab:85:da:7f:a4:32:fa:40:da:77: df:ef:b1:31:13:b2:01:79:c5:68:b4:da:bc:a3:f7:da:1f:8f: f6:6e:28:30:f2:28:ec:ff:9d:97:ec:4b:96:16:69:b5:66:c9: fb:68:ba:e2:f0:bb:96:c4:92:af:b9:d4:e4:46:d6:a1:ed:67: b1:6b:15:45:53:b1:7a:35:39:14:85:61:ef:6a:b1:e3:05:7d: 30:79:ab:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMN/f5Zl6pbEmfRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzIxNzczYjMtZmY3MC00YTIwLTk5ZGMtYWFiYTgxYzIz ZWJmMB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk YWM2NmJhZTYtNzk2ZC00MTQwLWE5NTAtNjEyMmVmNDJiMWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9TiRnMu8tY01BYtGuEt0mj+69IE/LJOYmR5 29haY3pdicyO9Pv+KNN5t8HowLT3vtI6NYJy6E45oXlS601NprXhlKTOqZI2b5+k AcVMrg7tTLizJJuUIK2bvFuyhqqyciGPOf66LDVFKiFPWrdo2S7+hJ6T9eG303ST 6PhpMM5jsuO43wwbKsBNX1H6ubw6sLf/h1vyY7HmmBLxXu11yUdurddZ9HAJWTFT oVmjiQAzI4S46VRABpXBf7AAcBydiP5D9GPVFLWEUNnZS/0K9XW36n2DKUUZaoAo XzRx8QkQ6meKC61v4wyJFOBtPQRYWEiu2DEMGiKvaoVK/tDe3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgtlJV1/ohnNnnUYyagA/Ojs6HWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83MjE3 NzNiMy1mZjcwLTRhMjAtOTlkYy1hYWJhODFjMjNlYmYvOThkNWQ4YzItYzY5ZC0z OGM2LWIwYzQtMDVkYmRmYjI3ZWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzIxNzczYjMtZmY3MC00YTIwLTk5 ZGMtYWFiYTgxYzIzZWJmLzcyMTc3M2IzLWZmNzAtNGEyMC05OWRjLWFhYmE4MWMy M2ViZi5jcmwwHwYDVR0jBBgwFoAUhlzvggtYTFUbpQ6eruazF51wyf4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83MjE3NzNiMy1mZjcwLTRhMjAtOTlkYy1hYWJh ODFjMjNlYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXANMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxMnnIKDVZg5Ia3V2SCIOIgTMyVmrbfyrv3BvpF/8x9A6Z+9fbfhEdZ cWNFpB6O0pB40tEZz0e7Eeru8Oib93tHyuAM5qQ9Jm8sGQwHDD3noFHK5gbKoxKy HdyIYgjQZnP7oezsr+ocS5O1ihbcxO5lCYUuZ0xTzZfFPRv1dnz5gAL0phCgk53X 7Fvd8UyCvpZBsAiphHWQqyOpDcKpv586vl8KI7tAkanEq4Xaf6Qy+kDad9/vsTET sgF5xWi02ryj99ofj/ZuKDDyKOz/nZfsS5YWabVmyftouuLwu5bEkq+51ORG1qHt Z7FrFUVTsXo1ORSFYe9qseMFfTB5q98= -----END CERTIFICATE-----Generated at Mon Aug 4 14:21:06 2025 by rpki-client