$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/4bfba0d7-8739-3f45-a18a-99f16f93e756.roa File: 4bfba0d7-8739-3f45-a18a-99f16f93e756.roa (raw, json) Hash identifier: LrgjAfmyZwfYPRlZJz+tNbbfU0sFv1zK26Euk3NxgHc= Subject key identifier: 23:B2:1E:5A:D9:7A:38:06:25:76:12:7D:AF:68:25:44:BB:9D:8B:B6 Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F4328584A4C3B106DA123ED9E1444EA80 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/4bfba0d7-8739-3f45-a18a-99f16f93e756.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 14618 IP address blocks: 149.23.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:10:6d:a1:23:ed:9e:14:44:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=dceace3a-9343-439e-beea-a6e9831aa271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3b:7a:a6:64:37:3e:ce:21:fc:8c:37:08:68: 7a:41:99:91:30:32:99:97:ea:64:95:64:a9:b4:33: 55:68:fa:5d:50:00:f3:48:f3:b7:30:a2:99:96:37: fd:9d:61:fe:14:eb:6a:69:5a:7e:d0:6e:90:c3:83: ec:e3:42:70:66:9d:49:f7:9a:ab:85:6b:fa:36:a5: 9a:3e:56:61:2a:43:f9:b0:4a:cd:4a:5b:05:53:c5: 3a:b2:f7:75:7a:eb:ad:03:2a:24:aa:a8:ea:42:75: ef:9b:2e:6f:5c:1b:b9:96:21:b0:10:12:20:de:c4: 8f:58:8e:5a:a2:5d:9d:ab:8c:aa:21:58:b0:13:06: 4a:b4:e4:49:63:e3:49:6c:5f:a3:6a:ff:aa:00:41: 70:f7:d5:4e:02:42:02:77:af:a2:10:76:83:e4:e5: 35:40:b1:fa:81:4e:42:11:93:dd:05:98:c1:d1:c2: 21:7a:1c:cc:44:9b:9a:31:95:1b:6f:18:85:df:78: 4a:18:aa:0e:17:79:dd:c6:c2:73:3f:b4:11:a1:ea: 5e:69:b5:da:77:55:33:b4:30:a0:07:4a:d9:37:c6: 61:92:a4:bb:e1:2b:3e:61:d5:57:e4:15:fc:35:e0: 1b:8d:ef:59:74:34:35:53:bc:9e:16:a1:32:3b:fb: ae:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:B2:1E:5A:D9:7A:38:06:25:76:12:7D:AF:68:25:44:BB:9D:8B:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/4bfba0d7-8739-3f45-a18a-99f16f93e756.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 149.23.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:36:00:d9:63:bc:cb:17:44:92:c7:0b:86:87:b9:e5:83:0a: 86:84:02:21:9a:c6:1d:f6:65:2d:43:6c:2f:59:cf:6d:b2:85: 5e:c6:4d:c8:8d:a4:72:ef:45:0f:0f:cf:13:b2:f9:be:9f:a0: a1:e1:4f:a6:5d:cf:6f:47:5c:96:55:a0:6f:d7:ab:d3:61:40: e5:bf:78:de:34:d9:aa:f6:ad:3f:21:70:df:68:1c:2d:58:1b: 9b:0f:00:ed:63:9b:58:a9:b2:c8:0e:37:91:8a:df:da:19:23: ae:c8:5c:76:45:92:9b:da:f2:d3:8e:0a:06:56:4f:76:4a:23: 72:18:7a:75:c2:59:41:eb:1e:f3:7a:dd:8c:63:11:be:a1:03: 10:69:23:47:8b:f8:a9:1a:c3:9c:5d:1f:69:e2:ee:57:56:ad: 69:64:34:e1:3b:75:d1:d4:8e:bf:42:99:35:f5:95:ee:c1:04: 2a:36:a6:5a:e2:99:39:50:3f:9e:db:cb:b8:15:f7:6d:13:0a: cf:82:fd:cc:5d:f1:d7:da:9e:c6:41:ff:8e:c0:19:d1:90:6e: a1:10:80:09:1e:98:f3:b0:34:04:e8:4e:aa:bc:c9:8e:cc:0e: 51:35:79:51:92:24:87:ea:df:2d:86:75:64:06:c8:31:cd:40: c1:33:27:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOxBtoSPtnhRE6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk ZGNlYWNlM2EtOTM0My00MzllLWJlZWEtYTZlOTgzMWFhMjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojt6pmQ3Ps4h/Iw3CGh6QZmRMDKZl+pklWSp tDNVaPpdUADzSPO3MKKZljf9nWH+FOtqaVp+0G6Qw4Ps40JwZp1J95qrhWv6NqWa PlZhKkP5sErNSlsFU8U6svd1euutAyokqqjqQnXvmy5vXBu5liGwEBIg3sSPWI5a ol2dq4yqIViwEwZKtORJY+NJbF+jav+qAEFw99VOAkICd6+iEHaD5OU1QLH6gU5C EZPdBZjB0cIhehzMRJuaMZUbbxiF33hKGKoOF3ndxsJzP7QRoepeabXad1UztDCg B0rZN8ZhkqS74Ss+YdVX5BX8NeAbje9ZdDQ1U7yeFqEyO/uudQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCOyHlrZejgGJXYSfa9oJUS7nYu2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvNGJmYmEwZDctODczOS0z ZjQ1LWExOGEtOTlmMTZmOTNlNzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRdpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC42ANljvMsXRJLHC4aHueWDCoaEAiGaxh32ZS1DbC9Zz22yhV7GTciN pHLvRQ8PzxOy+b6foKHhT6Zdz29HXJZVoG/Xq9NhQOW/eN402ar2rT8hcN9oHC1Y G5sPAO1jm1ipssgON5GK39oZI67IXHZFkpva8tOOCgZWT3ZKI3IYenXCWUHrHvN6 3YxjEb6hAxBpI0eL+Kkaw5xdH2ni7ldWrWlkNOE7ddHUjr9CmTX1le7BBCo2plri mTlQP57by7gV920TCs+C/cxd8dfansZB/47AGdGQbqEQgAkemPOwNAToTqq8yY7M DlE1eVGSJIfq3y2GdWQGyDHNQMEzJ90= -----END CERTIFICATE-----Generated at Sun Jun 29 01:38:39 2025 by rpki-client