$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/f85ff5e7-a338-3d57-bcfe-00ac7ef54f8a.roa File: f85ff5e7-a338-3d57-bcfe-00ac7ef54f8a.roa (raw, json) Hash identifier: 45ThHpO6MA56AAhPjxSFz9uZgFo6yWfMPl8Vy81XUcs= Subject key identifier: 82:EB:96:E6:57:F2:FD:E3:86:71:E1:DA:1E:77:EB:0A:12:AC:68:89 Certificate issuer: /CN=9bc88207-e7c7-453e-a4ab-77b72152c33a Certificate serial: 010D0C9F4328584A1F901CC92E76F84983DD8580 Authority key identifier: 49:30:1E:1C:4D:A2:59:C8:C5:65:AF:94:7B:C5:60:74:D2:96:22:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/f85ff5e7-a338-3d57-bcfe-00ac7ef54f8a.roa Signing time: Sun 08 Jun 2025 13:01:01 +0000 ROA not before: Sun 08 Jun 2025 13:01:01 +0000 ROA not after: Sat 06 Sep 2025 13:01:01 +0000 asID: 22379 IP address blocks: 149.20.70.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1f:90:1c:c9:2e:76:f8:49:83:dd:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bc88207-e7c7-453e-a4ab-77b72152c33a Validity Not Before: Jun 8 13:01:01 2025 GMT Not After : Sep 6 13:01:01 2025 GMT Subject: CN=658e6545-8bef-44ab-8310-a23e61e0a574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:9e:22:ff:72:65:ee:a3:79:7a:8c:ae:9c:39: 1e:26:cf:55:62:a5:51:ad:8e:10:67:08:9d:37:f2: bc:03:5e:67:31:31:68:b3:2b:e9:67:a9:b1:c0:80: 79:22:e3:5b:0b:ce:a7:db:4b:63:87:79:f5:5b:85: 2f:67:b6:84:d7:35:40:e1:d3:bf:59:ab:b3:55:46: ff:01:be:fc:52:00:b2:02:ea:4b:15:aa:d1:96:23: a1:f7:f4:64:d3:e9:b4:0d:90:8e:c7:e4:cd:12:d6: 29:45:ae:37:06:c2:81:b6:f1:e6:17:37:ec:77:49: f9:46:5f:d8:22:59:d2:ac:7d:d7:ad:b8:91:82:f4: d7:05:b2:ff:06:48:c5:67:27:5d:53:9d:a5:ed:8a: 3a:9a:08:46:f6:88:24:b4:04:6e:62:7c:b3:aa:70: 74:f9:a8:d9:ee:01:f4:f9:19:7a:66:ef:3c:43:79: b6:e8:04:50:e4:ad:ca:0b:67:a4:be:18:c6:26:c6: 55:10:49:bf:62:ba:d3:81:54:b7:16:26:17:23:1b: 53:33:10:4d:5c:d3:39:e7:fe:40:22:86:4c:f4:58: bb:7a:cb:84:6f:e0:84:39:2c:cf:ef:1f:aa:8f:cd: a5:40:22:b9:9f:fd:f0:fa:93:8d:7d:8b:4b:44:81: 08:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:EB:96:E6:57:F2:FD:E3:86:71:E1:DA:1E:77:EB:0A:12:AC:68:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/f85ff5e7-a338-3d57-bcfe-00ac7ef54f8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.crl X509v3 Authority Key Identifier: keyid:49:30:1E:1C:4D:A2:59:C8:C5:65:AF:94:7B:C5:60:74:D2:96:22:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer sbgp-ipAddrBlock: critical IPv4: 149.20.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:84:bb:9f:8b:f7:0e:4e:10:c4:68:54:0b:69:db:3e:bc:2d: 37:c8:33:01:2c:17:36:d1:7c:b7:50:d2:ea:ef:bf:f7:81:1f: 55:6c:69:ad:70:11:6b:8e:05:0f:64:cc:04:9e:bf:e8:be:41: 37:b8:78:7d:d5:79:11:99:d2:08:ee:7e:4b:e2:c9:40:1c:6d: d1:dd:c1:32:12:10:7e:9c:2a:c6:b1:2c:9a:f2:cc:a9:50:1a: 39:6a:84:c4:a1:d9:1a:61:9b:85:ae:b4:86:a6:a1:f0:24:9b: 88:ec:fe:67:93:53:25:9a:82:83:68:3a:aa:68:85:5b:4f:44: 94:7b:5d:76:e3:72:5a:6d:cf:94:06:de:32:97:59:ea:9f:04: 3e:3b:8a:e7:82:f9:fc:2a:64:9a:99:65:86:11:b8:18:13:e5: 5b:a9:d4:a6:fa:0a:85:46:f6:d0:ff:e4:91:93:e6:e2:0e:93: b0:43:32:05:f0:b1:3e:1a:51:aa:cd:c0:56:f9:d2:09:6d:8e: 70:f1:5e:94:58:55:1a:3a:9f:cc:d6:57:6f:03:f6:c7:eb:3d: f7:ff:28:07:91:0f:f8:f9:bd:4a:4d:ca:c9:da:b1:19:f2:b1: 36:21:9e:54:c7:e2:c6:3e:97:d4:f8:38:10:81:7e:76:41:97: cf:b6:2b:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEofkBzJLnb4SYPdhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWJjODgyMDctZTdjNy00NTNlLWE0YWItNzdiNzIxNTJj MzNhMB4XDTI1MDYwODEzMDEwMVoXDTI1MDkwNjEzMDEwMVowLzEtMCsGA1UEAxMk NjU4ZTY1NDUtOGJlZi00NGFiLTgzMTAtYTIzZTYxZTBhNTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZ4i/3Jl7qN5eoyunDkeJs9VYqVRrY4QZwid N/K8A15nMTFosyvpZ6mxwIB5IuNbC86n20tjh3n1W4UvZ7aE1zVA4dO/WauzVUb/ Ab78UgCyAupLFarRliOh9/Rk0+m0DZCOx+TNEtYpRa43BsKBtvHmFzfsd0n5Rl/Y IlnSrH3XrbiRgvTXBbL/BkjFZyddU52l7Yo6mghG9ogktARuYnyzqnB0+ajZ7gH0 +Rl6Zu88Q3m26ARQ5K3KC2ekvhjGJsZVEEm/YrrTgVS3FiYXIxtTMxBNXNM55/5A IoZM9Fi7esuEb+CEOSzP7x+qj82lQCK5n/3w+pONfYtLRIEICwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFILrluZX8v3jhnHh2h536woSrGiJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85YmM4 ODIwNy1lN2M3LTQ1M2UtYTRhYi03N2I3MjE1MmMzM2EvZjg1ZmY1ZTctYTMzOC0z ZDU3LWJjZmUtMDBhYzdlZjU0ZjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWJjODgyMDctZTdjNy00NTNlLWE0 YWItNzdiNzIxNTJjMzNhLzliYzg4MjA3LWU3YzctNDUzZS1hNGFiLTc3YjcyMTUy YzMzYS5jcmwwHwYDVR0jBBgwFoAUSTAeHE2iWcjFZa+Ue8VgdNKWIv8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85YmM4ODIwNy1lN2M3LTQ1M2UtYTRhYi03N2I3 MjE1MmMzM2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlRRGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAaEu5+L9w5OEMRoVAtp2z68LTfIMwEsFzbRfLdQ0urvv/eBH1Vsaa1w EWuOBQ9kzASev+i+QTe4eH3VeRGZ0gjufkviyUAcbdHdwTISEH6cKsaxLJryzKlQ GjlqhMSh2Rphm4WutIamofAkm4js/meTUyWagoNoOqpohVtPRJR7XXbjclptz5QG 3jKXWeqfBD47iueC+fwqZJqZZYYRuBgT5Vup1Kb6CoVG9tD/5JGT5uIOk7BDMgXw sT4aUarNwFb50gltjnDxXpRYVRo6n8zWV28D9sfrPff/KAeRD/j5vUpNysnasRny sTYhnlTH4sY+l9T4OBCBfnZBl8+2K2I= -----END CERTIFICATE-----Generated at Sun Jun 15 20:59:00 2025 by rpki-client