$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/3031b8ab-37d0-3807-a567-ad748c7b1712.roa File: 3031b8ab-37d0-3807-a567-ad748c7b1712.roa (raw, json) Hash identifier: rZ8igGJXHb/yXWHiIuj4rvAS5N1kifVIXWGI0SQqBIM= Subject key identifier: 9D:6B:BA:40:D7:1A:A8:22:9A:06:F8:8B:0C:83:22:F3:88:C3:82:A8 Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F432858496CE45076021C2DBCE2E31AC0 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/3031b8ab-37d0-3807-a567-ad748c7b1712.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 16509 IP address blocks: 149.23.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:50:76:02:1c:2d:bc:e2:e3:1a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=e2051a95-d7c8-4ece-aaa7-1c87f7c9da19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:fa:02:3d:67:38:05:97:92:da:8d:48:f1:8c: af:53:76:1a:3b:11:13:92:2e:6f:ba:f4:98:b3:f4: 30:b6:66:79:c3:c8:09:d5:22:35:bf:e6:e3:f2:65: d5:4e:c9:06:46:f1:07:18:bb:e1:06:6e:f2:a3:41: 54:ec:d8:2e:68:59:c0:dc:3c:eb:6b:02:80:3f:35: f6:21:56:68:69:66:60:79:e9:54:63:26:ce:e5:36: 3c:97:de:26:41:24:a8:e2:7b:87:6c:c5:67:a2:ab: 4e:10:0d:5c:04:f9:4a:15:3d:86:66:49:83:68:c0: 02:ef:2e:32:13:d0:50:2b:02:ca:ec:38:62:6f:a0: 15:54:b5:2f:cb:46:3f:59:f9:4c:70:d0:35:d6:f9: 4b:cb:f3:8f:91:8b:2c:57:70:7c:2b:65:d6:02:77: e0:b3:74:57:7d:32:eb:62:6b:f3:38:5d:cf:88:0e: 34:43:10:ca:16:4c:10:f9:e3:da:92:c4:0f:50:89: f8:7b:8b:6f:00:51:f2:ec:c3:32:3c:e3:05:4c:a4: 88:92:d7:8a:96:92:11:64:dd:3b:cd:2c:2d:96:bb: 05:9a:93:10:60:dd:97:17:47:d4:e4:dc:24:bc:49: ba:05:50:1f:d8:b1:cf:4e:9f:9d:d1:5c:e0:1b:3b: fd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:6B:BA:40:D7:1A:A8:22:9A:06:F8:8B:0C:83:22:F3:88:C3:82:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/3031b8ab-37d0-3807-a567-ad748c7b1712.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 149.23.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:f6:4e:ca:93:af:51:86:2b:51:d7:46:1c:d0:75:79:e0:d1: a2:17:39:9f:75:7f:4c:8d:c4:0b:9f:b4:28:9a:d3:b6:88:95: 8d:6b:ac:cf:42:fa:d9:38:4c:e4:fe:f1:50:e0:2b:16:b4:e7: 5e:3d:55:fe:08:44:1f:4b:7d:38:a8:d3:23:c5:91:84:70:e1: b9:ae:b5:57:59:74:15:ac:0a:a3:bd:62:fb:b5:b2:69:f8:68: 80:51:a3:26:21:5e:11:a3:39:8e:34:dd:89:3b:d6:14:fa:42: 84:07:d7:51:c3:a3:02:fb:36:65:a9:36:24:f6:e3:18:ed:b5: 1f:d2:78:73:33:1b:51:cf:44:85:e4:41:84:d4:86:f2:46:95: c7:f9:d0:06:87:7e:23:09:e8:f1:19:46:f6:ee:14:94:9f:10: e0:88:c1:a4:e0:a6:9b:e3:34:3a:49:9c:72:59:d3:d5:7e:48: 78:1c:9d:d5:95:ff:c4:1f:f2:22:e4:b0:91:e0:71:4c:d2:7c: 0f:8d:82:4c:0d:a5:b2:fb:7d:f8:f7:30:35:47:29:ee:b0:56: f5:cc:f7:fe:21:4d:28:5c:fc:43:22:56:6d:0f:56:99:a2:81: f5:ab:3c:4a:44:eb:6b:1e:74:f3:11:37:10:cd:8d:03:93:94: 97:4f:d7:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEls5FB2AhwtvOLjGsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk ZTIwNTFhOTUtZDdjOC00ZWNlLWFhYTctMWM4N2Y3YzlkYTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPoCPWc4BZeS2o1I8YyvU3YaOxETki5vuvSY s/QwtmZ5w8gJ1SI1v+bj8mXVTskGRvEHGLvhBm7yo0FU7NguaFnA3DzrawKAPzX2 IVZoaWZgeelUYybO5TY8l94mQSSo4nuHbMVnoqtOEA1cBPlKFT2GZkmDaMAC7y4y E9BQKwLK7Dhib6AVVLUvy0Y/WflMcNA11vlLy/OPkYssV3B8K2XWAnfgs3RXfTLr YmvzOF3PiA40QxDKFkwQ+ePaksQPUIn4e4tvAFHy7MMyPOMFTKSIkteKlpIRZN07 zSwtlrsFmpMQYN2XF0fU5NwkvEm6BVAf2LHPTp+d0VzgGzv9KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1rukDXGqgimgb4iwyDIvOIw4KoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvMzAzMWI4YWItMzdkMC0z ODA3LWE1NjctYWQ3NDhjN2IxNzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRdpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGb2TsqTr1GGK1HXRhzQdXng0aIXOZ91f0yNxAuftCia07aIlY1rrM9C +tk4TOT+8VDgKxa05149Vf4IRB9LfTio0yPFkYRw4bmutVdZdBWsCqO9Yvu1smn4 aIBRoyYhXhGjOY403Yk71hT6QoQH11HDowL7NmWpNiT24xjttR/SeHMzG1HPRIXk QYTUhvJGlcf50AaHfiMJ6PEZRvbuFJSfEOCIwaTgppvjNDpJnHJZ09V+SHgcndWV /8Qf8iLksJHgcUzSfA+NgkwNpbL7ffj3MDVHKe6wVvXM9/4hTShc/EMiVm0PVpmi gfWrPEpE62sedPMRNxDNjQOTlJdP1xk= -----END CERTIFICATE-----Generated at Mon May 5 05:43:05 2025 by rpki-client