$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/06825601-0577-34ba-a77c-44f90f012121.roa File: 06825601-0577-34ba-a77c-44f90f012121.roa (raw, json) Hash identifier: 6utZ3T1YfjfaQ6cakf4q019M7wPKBqPQg5ju5khQiTU= Subject key identifier: 22:89:62:3C:2F:46:AE:6C:72:2E:11:3A:72:F7:E8:39:25:91:B7:F6 Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F43285849A089CD4AD41143EECDAC6980 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/06825601-0577-34ba-a77c-44f90f012121.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 33442 IP address blocks: 149.23.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:cd:4a:d4:11:43:ee:cd:ac:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=9663dd2f-c4d3-4933-9e7f-fe23ba84ee09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d3:dd:2e:a6:e7:e7:be:64:08:54:cb:16:4c: 8a:44:ec:3e:3e:2b:fb:29:31:da:62:19:8c:7b:0a: 18:d9:ea:00:71:0f:39:24:23:ef:4d:07:b5:ad:2a: 8e:c9:ad:6b:12:20:6f:cf:d3:1d:03:75:39:4b:d3: 63:c4:33:fc:7e:7c:bc:db:5a:97:c3:b2:3d:be:97: 8f:59:ae:21:73:a4:57:4f:32:ba:57:49:61:90:3b: 7c:60:6b:76:b7:e9:1b:fc:2c:6b:81:0d:0d:6d:12: 4e:f1:4f:12:73:ae:ea:6f:a2:de:30:60:79:ae:74: 21:ee:aa:03:b6:53:fb:97:4c:d0:5b:23:3f:a8:6b: 12:82:2f:45:4a:04:6a:d0:98:80:4c:e4:75:e5:58: d6:8c:b3:8a:02:31:66:bf:8d:ed:51:92:81:ed:bd: 71:eb:5b:52:68:50:eb:23:9e:06:b0:cc:94:5a:ec: dc:0e:b7:59:26:62:50:8b:4d:2b:1b:92:e1:94:fe: 00:f8:96:03:da:ce:f1:28:a8:ef:18:d0:35:3a:fb: f4:8a:5f:76:14:59:a1:53:7e:1c:41:14:1b:22:28: 3e:a2:82:ec:65:d3:ce:85:ef:1f:46:e9:92:99:5d: 74:02:36:cd:11:30:e8:29:44:66:8e:ae:a3:d2:1f: 53:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:89:62:3C:2F:46:AE:6C:72:2E:11:3A:72:F7:E8:39:25:91:B7:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/06825601-0577-34ba-a77c-44f90f012121.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 149.23.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:cf:51:b4:70:a8:5f:30:a4:a9:36:4b:04:61:c8:af:08:27: 4c:59:95:5b:a5:45:c4:49:7c:85:23:05:62:bb:4f:25:e2:b9: 51:a8:c8:6c:2f:4c:d9:f7:c3:4f:fd:94:fd:9a:5d:c6:76:4d: fc:5f:1f:90:f5:80:d0:db:fd:65:aa:5f:4f:08:91:40:8f:f9: 94:e9:48:c4:78:e6:bb:6f:41:27:b4:2f:aa:c5:e2:ee:bb:51: 5e:96:08:5b:43:0e:c3:3b:b0:a3:aa:30:02:34:dc:c3:85:6f: 56:f1:f3:a8:59:7f:b3:98:9a:14:f5:3b:7e:8a:33:09:1c:c7: 5a:0b:9d:d7:98:83:a5:1c:3c:2a:fb:db:20:19:02:ac:29:83: eb:bd:39:1e:f9:ae:ed:0c:c2:2b:e0:42:ac:74:09:81:c4:3c: 0e:d2:b3:ee:82:dd:74:cd:78:4a:43:00:a2:a6:3b:fb:52:30: 5d:6f:49:18:d7:17:cd:c1:12:6a:c1:ce:b1:0e:98:0c:6d:b3: 6f:20:bb:b9:c2:90:b4:96:fe:a9:a5:2e:f5:d5:8d:c4:e4:79: a6:1b:2d:15:37:52:33:f2:89:c2:4d:f2:ec:ba:ea:58:4d:6c: cb:e2:db:8d:e5:50:d0:f2:f5:72:39:da:a9:8a:12:88:40:ef: 4e:91:6b:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgic1K1BFD7s2saYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk OTY2M2RkMmYtYzRkMy00OTMzLTllN2YtZmUyM2JhODRlZTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktPdLqbn575kCFTLFkyKROw+Piv7KTHaYhmM ewoY2eoAcQ85JCPvTQe1rSqOya1rEiBvz9MdA3U5S9NjxDP8fny821qXw7I9vpeP Wa4hc6RXTzK6V0lhkDt8YGt2t+kb/CxrgQ0NbRJO8U8Sc67qb6LeMGB5rnQh7qoD tlP7l0zQWyM/qGsSgi9FSgRq0JiATOR15VjWjLOKAjFmv43tUZKB7b1x61tSaFDr I54GsMyUWuzcDrdZJmJQi00rG5LhlP4A+JYD2s7xKKjvGNA1Ovv0il92FFmhU34c QRQbIig+ooLsZdPOhe8fRumSmV10AjbNETDoKURmjq6j0h9TOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKJYjwvRq5sci4ROnL36Dklkbf2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvMDY4MjU2MDEtMDU3Ny0z NGJhLWE3N2MtNDRmOTBmMDEyMTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRdkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfPUbRwqF8wpKk2SwRhyK8IJ0xZlVulRcRJfIUjBWK7TyXiuVGoyGwv TNn3w0/9lP2aXcZ2TfxfH5D1gNDb/WWqX08IkUCP+ZTpSMR45rtvQSe0L6rF4u67 UV6WCFtDDsM7sKOqMAI03MOFb1bx86hZf7OYmhT1O36KMwkcx1oLndeYg6UcPCr7 2yAZAqwpg+u9OR75ru0MwivgQqx0CYHEPA7Ss+6C3XTNeEpDAKKmO/tSMF1vSRjX F83BEmrBzrEOmAxts28gu7nCkLSW/qmlLvXVjcTkeaYbLRU3UjPyicJN8uy66lhN bMvi243lUNDy9XI52qmKEohA706RayU= -----END CERTIFICATE-----Generated at Sat May 10 08:55:28 2025 by rpki-client