$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/3d20ffca-28cc-3da3-9daa-32ebcb7b038b.roa File: 3d20ffca-28cc-3da3-9daa-32ebcb7b038b.roa (raw, json) Hash identifier: GZJgD/PpK/HrNHUAHJa/WbJPJy6+4v4YBe4IsDJBhUc= Subject key identifier: FB:1F:FE:5A:2B:B2:7B:14:81:F6:0D:83:93:7F:BA:EB:97:A3:15:6A Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F4328584A4C3B109C379DD217960A5E00 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/3d20ffca-28cc-3da3-9daa-32ebcb7b038b.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 33442 IP address blocks: 149.23.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:10:9c:37:9d:d2:17:96:0a:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=5f28b0f4-3b71-4786-8be6-1333392d20f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ef:d9:3e:b0:68:7b:28:0a:64:af:f9:5d:c1: ae:8d:75:bf:ac:96:0a:77:9a:c0:09:28:9d:5a:a4: 92:de:cd:8e:e4:96:a8:a5:9d:bc:df:05:d9:28:5c: d0:d8:87:65:90:8e:ad:1f:9e:2a:6f:2f:8f:3d:5f: ee:59:b9:8d:84:a8:a1:63:fa:be:58:d3:a7:f8:fa: e7:f0:48:ca:40:14:17:79:05:de:df:8a:44:bf:ca: 98:ab:06:99:cd:b1:50:0b:e9:76:b6:a7:e8:81:16: 26:40:6f:ee:0b:b6:18:6e:dd:cf:b6:64:0d:13:c5: 9a:5e:12:80:49:97:07:b6:0a:81:2a:32:d7:f7:84: ba:76:ed:b0:53:45:03:4b:6d:3a:9f:79:f6:79:ae: 4f:19:24:e7:05:66:c1:d3:5b:71:48:80:be:10:ec: ff:fa:dd:1f:c6:61:5c:53:20:c3:0f:e1:df:14:7a: 8e:4f:64:13:49:31:52:80:4d:c3:c4:ac:12:62:2b: 57:3c:c8:f4:d7:55:05:d6:77:bd:e8:bd:bd:6c:4f: 9f:d3:a3:58:2a:97:48:18:30:c1:4f:09:14:5e:4b: 65:b4:b1:3a:b8:45:a2:a5:3c:cc:7e:39:d3:f5:61: 07:7f:80:44:f0:e8:9e:75:16:06:7c:e6:ff:31:6d: 6a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:1F:FE:5A:2B:B2:7B:14:81:F6:0D:83:93:7F:BA:EB:97:A3:15:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/3d20ffca-28cc-3da3-9daa-32ebcb7b038b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 149.23.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:84:ec:92:2d:9a:0a:0e:6e:b3:71:70:a2:65:0a:11:1b:16: d3:ec:11:92:af:75:4f:9f:5f:45:a1:1d:64:f5:c7:07:ed:70: b0:1c:8d:33:77:4e:09:9a:23:a4:a7:63:2c:fa:47:dd:63:33: f4:90:0e:46:67:90:ca:a4:9d:97:33:af:47:79:ca:86:f0:18: 1d:07:3b:b1:ba:d9:e8:e1:a5:79:ed:f3:21:1c:13:df:13:e2: bf:20:a9:7d:e3:32:a9:b2:7a:ab:55:38:18:b3:79:b9:70:be: 91:7d:4d:ca:71:41:71:cf:78:a3:44:05:b2:38:34:68:a0:4f: e9:31:1e:5e:44:2d:a8:94:2e:37:4d:77:7a:fe:56:47:f1:33: 6a:38:47:8e:c4:26:d1:e8:61:c5:71:9d:59:98:1e:ee:db:c1: a7:d6:0a:c9:f2:30:3d:9f:c2:b2:0d:6b:a9:3e:85:f9:00:67: 8c:d3:5e:10:3d:2a:af:3e:c2:5b:48:03:f2:60:b7:66:a2:c6: 3e:7e:dc:4d:d7:84:4e:41:10:cd:e1:91:41:2d:92:07:7a:dc: 5c:7f:cb:50:0b:39:e2:12:20:87:47:5a:a6:44:2e:cd:cb:73: 19:ba:19:2c:38:cf:b0:04:b3:fb:34:52:07:e7:19:0c:06:9c: 57:95:0c:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOxCcN53SF5YKXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk NWYyOGIwZjQtM2I3MS00Nzg2LThiZTYtMTMzMzM5MmQyMGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjO/ZPrBoeygKZK/5XcGujXW/rJYKd5rACSid WqSS3s2O5JaopZ283wXZKFzQ2IdlkI6tH54qby+PPV/uWbmNhKihY/q+WNOn+Prn 8EjKQBQXeQXe34pEv8qYqwaZzbFQC+l2tqfogRYmQG/uC7YYbt3PtmQNE8WaXhKA SZcHtgqBKjLX94S6du2wU0UDS206n3n2ea5PGSTnBWbB01txSIC+EOz/+t0fxmFc UyDDD+HfFHqOT2QTSTFSgE3DxKwSYitXPMj011UF1ne96L29bE+f06NYKpdIGDDB TwkUXktltLE6uEWipTzMfjnT9WEHf4BE8OiedRYGfOb/MW1qTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPsf/lorsnsUgfYNg5N/uuuXoxVqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvM2QyMGZmY2EtMjhjYy0z ZGEzLTlkYWEtMzJlYmNiN2IwMzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRcLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2E7JItmgoObrNxcKJlChEbFtPsEZKvdU+fX0WhHWT1xwftcLAcjTN3 TgmaI6SnYyz6R91jM/SQDkZnkMqknZczr0d5yobwGB0HO7G62ejhpXnt8yEcE98T 4r8gqX3jMqmyeqtVOBizeblwvpF9TcpxQXHPeKNEBbI4NGigT+kxHl5ELaiULjdN d3r+VkfxM2o4R47EJtHoYcVxnVmYHu7bwafWCsnyMD2fwrINa6k+hfkAZ4zTXhA9 Kq8+wltIA/Jgt2aixj5+3E3XhE5BEM3hkUEtkgd63Fx/y1ALOeISIIdHWqZELs3L cxm6GSw4z7AEs/s0UgfnGQwGnFeVDCM= -----END CERTIFICATE-----Generated at Sun Jun 29 14:03:33 2025 by rpki-client