$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/20ed8e04-a83d-3139-937f-62183b6e5173.roa File: 20ed8e04-a83d-3139-937f-62183b6e5173.roa (raw, json) Hash identifier: jSx6i4W/+ivVmsN0QN3Y46YX2jKxZONNPqqtDnpzJh4= Subject key identifier: 81:23:1F:57:7D:78:2F:65:0A:9B:77:11:6C:B7:51:48:AB:85:4A:62 Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F4328584A4C3B0699325A0FA8220ACF80 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/20ed8e04-a83d-3139-937f-62183b6e5173.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 33442 IP address blocks: 149.23.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:06:99:32:5a:0f:a8:22:0a:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=cd1430bb-66fe-423b-99d6-6df5f1be3dc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:88:ec:62:a4:35:5b:29:c9:f9:a9:6b:a5:83: 5e:88:9e:f5:4b:da:24:c5:bc:62:d9:19:38:c2:11: bc:77:2d:b2:44:8c:4f:ac:b0:2e:15:6b:dc:50:6f: 8d:34:3b:71:f3:da:f8:ea:5a:43:c2:f0:04:cf:85: 38:7b:62:d1:72:bc:f0:8f:49:01:f7:81:d1:4e:1d: 54:e8:1a:7c:af:a8:ab:b1:bd:b7:49:05:e4:67:6b: ed:3d:9d:4b:bb:17:db:d4:fd:28:7a:99:23:a5:6e: 66:de:26:11:ac:48:cf:4b:76:88:c6:ab:d1:c7:13: 4d:bf:a9:56:8c:14:17:89:81:88:0c:fe:3e:0c:1c: 11:d6:c8:fc:e4:fc:8e:3d:e9:6d:ce:bf:59:b1:ad: 76:77:c5:ba:8e:d3:5c:c3:77:92:39:70:ba:31:86: 0a:aa:6f:29:42:23:32:96:91:7f:cd:8c:2d:a5:e0: 5e:d2:98:85:b1:52:be:32:ed:ae:ec:f4:f6:21:9c: b3:da:75:aa:f2:55:50:f2:b7:a8:38:60:50:2c:e2: 91:aa:9f:e0:93:a4:78:b8:b2:d5:db:dd:97:21:d2: 36:80:ca:fa:b4:df:55:7d:b1:ee:68:4b:ef:54:b8: 9f:4b:e9:17:73:17:d7:db:c6:d0:fe:74:dd:0b:27: 83:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:23:1F:57:7D:78:2F:65:0A:9B:77:11:6C:B7:51:48:AB:85:4A:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/20ed8e04-a83d-3139-937f-62183b6e5173.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 149.23.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:a1:80:1f:70:30:f4:33:ab:90:a8:84:b6:ac:c8:2d:f9:5c: 4f:a8:d7:c6:8d:8e:17:4d:2e:45:97:85:00:d5:87:84:dc:5d: dd:59:45:57:3d:6f:df:be:b8:94:65:63:33:24:d3:e7:60:dd: a9:d1:03:fe:a6:31:29:4b:80:4e:4f:1d:68:f1:68:36:62:c5: 6f:2d:30:16:af:9a:38:c7:84:49:97:89:5b:99:4f:cf:73:4f: 0d:e1:78:dd:e6:ac:aa:b9:a2:42:97:08:3b:e4:00:98:30:4e: be:ea:62:74:a2:48:b3:7c:91:9c:ea:be:cf:71:19:e0:49:57: 09:68:c4:e3:28:59:66:b4:2c:03:ef:6f:e9:42:c1:90:b7:13: 96:d7:6f:d3:92:fb:76:d2:65:ea:45:dd:84:82:a8:57:31:7b: 1c:6f:71:a4:13:a0:59:18:bd:c6:ed:06:82:34:0a:65:e9:7a: 6a:7d:a6:02:c4:79:96:b3:e3:6a:e5:2c:3e:c8:32:d0:57:e2: ca:79:d8:11:28:ad:2d:5e:d1:bc:82:91:a5:14:1c:55:48:eb: 38:ae:29:df:ae:76:41:1d:b6:d0:50:d6:d1:6d:30:48:f9:9d: 12:cd:46:34:fa:2d:a2:cd:18:c5:f5:7e:e8:f3:cd:97:98:a2: ad:17:d3:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOwaZMloPqCIKz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk Y2QxNDMwYmItNjZmZS00MjNiLTk5ZDYtNmRmNWYxYmUzZGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYjsYqQ1WynJ+alrpYNeiJ71S9okxbxi2Rk4 whG8dy2yRIxPrLAuFWvcUG+NNDtx89r46lpDwvAEz4U4e2LRcrzwj0kB94HRTh1U 6Bp8r6irsb23SQXkZ2vtPZ1Luxfb1P0oepkjpW5m3iYRrEjPS3aIxqvRxxNNv6lW jBQXiYGIDP4+DBwR1sj85PyOPeltzr9Zsa12d8W6jtNcw3eSOXC6MYYKqm8pQiMy lpF/zYwtpeBe0piFsVK+Mu2u7PT2IZyz2nWq8lVQ8reoOGBQLOKRqp/gk6R4uLLV 292XIdI2gMr6tN9VfbHuaEvvVLifS+kXcxfX28bQ/nTdCyeD6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIEjH1d9eC9lCpt3EWy3UUirhUpiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvMjBlZDhlMDQtYTgzZC0z MTM5LTkzN2YtNjIxODNiNmU1MTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRc9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOhgB9wMPQzq5CohLasyC35XE+o18aNjhdNLkWXhQDVh4TcXd1ZRVc9 b9++uJRlYzMk0+dg3anRA/6mMSlLgE5PHWjxaDZixW8tMBavmjjHhEmXiVuZT89z Tw3heN3mrKq5okKXCDvkAJgwTr7qYnSiSLN8kZzqvs9xGeBJVwloxOMoWWa0LAPv b+lCwZC3E5bXb9OS+3bSZepF3YSCqFcxexxvcaQToFkYvcbtBoI0CmXpemp9pgLE eZaz42rlLD7IMtBX4sp52BEorS1e0byCkaUUHFVI6ziuKd+udkEdttBQ1tFtMEj5 nRLNRjT6LaLNGMX1fujzzZeYoq0X0/k= -----END CERTIFICATE-----Generated at Sun Jun 29 14:32:21 2025 by rpki-client