$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/0c6a5ba2-e8ea-3112-a3e5-7f3b0efc866d.roa File: 0c6a5ba2-e8ea-3112-a3e5-7f3b0efc866d.roa (raw, json) Hash identifier: Ar7b3RGP9paRNGO3yZ5lVZsEZMLs69PpoI2kNz10M6g= Subject key identifier: 00:28:C5:E4:53:30:F2:4A:4A:5B:24:33:FB:74:89:8E:13:8A:D2:01 Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F43285849C0A4D10CF83305819AE72380 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/0c6a5ba2-e8ea-3112-a3e5-7f3b0efc866d.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 33442 IP address blocks: 149.23.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:d1:0c:f8:33:05:81:9a:e7:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=adeccea4-6038-4e4a-966d-03c9fe4d8b80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a4:ba:f9:a4:7d:52:0b:13:aa:32:5d:98:8d: 1f:10:3b:60:9a:cf:17:32:88:d9:b8:80:c5:21:0a: f9:a8:a3:96:d9:53:46:b4:af:18:10:24:47:5c:78: 15:29:2f:96:14:9c:a8:d5:f8:b5:87:81:ea:9b:cd: af:ed:c5:d0:08:b9:bc:12:6c:e4:2a:b6:fa:9e:ef: 24:42:ab:0d:e3:a0:6b:41:34:fb:59:34:b3:33:95: 1c:5a:11:57:ae:8c:85:e9:4c:9e:e0:89:75:19:ec: 12:8c:6c:b0:3b:b7:b5:a6:ea:a6:55:c3:00:62:fc: 0c:91:f1:16:54:00:74:20:8d:5f:ef:34:8a:1e:5a: 61:e1:03:f5:b7:9c:0c:5e:8a:75:a1:c8:ea:03:ee: 04:c4:26:6e:c4:82:4f:4d:c7:5c:6a:95:fb:35:0e: ce:32:f1:cc:35:14:5e:5d:61:5b:e6:65:e9:e4:45: ee:a7:ea:f9:f6:cc:39:1d:10:88:6c:d6:c3:93:30: 22:d8:3d:2c:14:ac:0d:f5:94:d5:04:7c:5d:72:fc: c3:84:85:5b:47:8f:c7:cd:9e:36:d6:3c:b3:5f:b9: 3e:65:4f:b4:d8:b2:f3:65:7c:a2:ef:8b:0e:8a:df: e3:47:03:f2:0d:55:a5:82:de:22:03:c6:a4:ef:a1: 12:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:28:C5:E4:53:30:F2:4A:4A:5B:24:33:FB:74:89:8E:13:8A:D2:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/0c6a5ba2-e8ea-3112-a3e5-7f3b0efc866d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 149.23.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:82:4e:2f:b6:c5:67:20:7c:bf:6a:3a:c6:04:63:1e:6d:07: ac:13:63:5c:a2:8b:ab:07:c9:96:46:d2:0e:0c:6e:d7:68:a3: c8:25:95:09:49:8d:43:6b:03:e2:59:64:c6:2e:40:2e:36:23: ad:5a:33:73:be:bf:f1:07:32:3b:a7:76:15:01:5d:96:56:87: 74:ac:54:ec:d3:47:ae:22:7a:b4:6e:76:5c:57:44:d3:e0:35: bd:4c:10:f3:5c:5e:53:9d:54:02:e6:b1:c2:10:83:c5:08:82: 97:5a:53:b3:16:8a:ef:a0:5e:e9:3d:1a:11:54:71:d2:52:0a: 7f:2a:bc:e1:b6:c6:dd:f5:75:f1:98:cf:23:40:f5:44:7f:00: 0a:f2:c4:75:a9:d1:32:7d:a6:16:84:5c:74:b8:0d:d4:7d:2f: 72:93:e4:16:b9:a9:b0:18:8c:11:9b:0e:db:b2:c5:17:c8:d2: 8a:a5:ba:02:16:9d:58:2c:0f:15:fd:ae:86:da:86:14:ce:7c: 2c:f7:71:f5:39:69:62:cb:7f:96:4d:68:0c:df:62:78:3f:ba: 11:cc:92:69:82:59:c7:f1:b9:29:68:eb:02:40:15:12:b0:65: 26:40:1b:a9:aa:4b:e7:95:20:76:69:f4:b9:b8:45:56:02:99: ec:fc:7f:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnApNEM+DMFgZrnI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk YWRlY2NlYTQtNjAzOC00ZTRhLTk2NmQtMDNjOWZlNGQ4YjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKS6+aR9UgsTqjJdmI0fEDtgms8XMojZuIDF IQr5qKOW2VNGtK8YECRHXHgVKS+WFJyo1fi1h4Hqm82v7cXQCLm8EmzkKrb6nu8k QqsN46BrQTT7WTSzM5UcWhFXroyF6Uye4Il1GewSjGywO7e1puqmVcMAYvwMkfEW VAB0II1f7zSKHlph4QP1t5wMXop1ocjqA+4ExCZuxIJPTcdcapX7NQ7OMvHMNRRe XWFb5mXp5EXup+r59sw5HRCIbNbDkzAi2D0sFKwN9ZTVBHxdcvzDhIVbR4/HzZ42 1jyzX7k+ZU+02LLzZXyi74sOit/jRwPyDVWlgt4iA8ak76ESnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAAoxeRTMPJKSlskM/t0iY4TitIBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvMGM2YTViYTItZThlYS0z MTEyLWEzZTUtN2YzYjBlZmM4NjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRcpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACeCTi+2xWcgfL9qOsYEYx5tB6wTY1yii6sHyZZG0g4Mbtdoo8gllQlJ jUNrA+JZZMYuQC42I61aM3O+v/EHMjundhUBXZZWh3SsVOzTR64ierRudlxXRNPg Nb1MEPNcXlOdVALmscIQg8UIgpdaU7MWiu+gXuk9GhFUcdJSCn8qvOG2xt31dfGY zyNA9UR/AAryxHWp0TJ9phaEXHS4DdR9L3KT5Ba5qbAYjBGbDtuyxRfI0oqlugIW nVgsDxX9robahhTOfCz3cfU5aWLLf5ZNaAzfYng/uhHMkmmCWcfxuSlo6wJAFRKw ZSZAG6mqS+eVIHZp9Lm4RVYCmez8f80= -----END CERTIFICATE-----Generated at Sat May 10 06:19:07 2025 by rpki-client