$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/54fd4066-0f9a-3f61-9122-ac13547aeb65.roa File: 54fd4066-0f9a-3f61-9122-ac13547aeb65.roa (raw, json) Hash identifier: GaL8KrqX9B7uIN0gXzzeRoxxXqrQ6SWt8FniWVzrkGY= Subject key identifier: A9:E5:8D:BF:0C:86:34:9E:AD:63:20:B5:39:CD:56:C4:E7:C2:D1:70 Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F4328584A4C3B05F93A90E4F84DAE7D08 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/54fd4066-0f9a-3f61-9122-ac13547aeb65.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 33442 IP address blocks: 149.23.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:05:f9:3a:90:e4:f8:4d:ae:7d:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=f3dda21d-9106-4614-bf59-e7831d272a19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:9a:05:c9:57:15:29:fa:5e:73:56:30:59:51: f1:42:79:90:8a:6a:73:bf:9a:d4:ea:47:4e:ab:9c: d8:07:c3:e6:ec:07:8d:af:4a:e9:c1:c7:62:ec:7a: db:d0:4a:ba:f9:cc:ff:ea:53:77:d3:79:9b:40:c1: fd:5d:7c:29:69:0a:60:7d:16:9f:b5:0b:1f:e1:d2: cf:21:32:5b:dd:f5:3e:b8:58:43:65:0d:3a:3d:6d: 2f:b1:ca:d6:35:29:a8:80:f2:48:45:f1:96:e3:01: ca:d2:c7:05:4d:86:22:0c:34:25:88:2b:f5:c5:ff: de:7d:1d:15:28:07:8b:20:e0:9a:44:01:2a:62:9f: b1:92:41:89:5d:d7:d1:01:12:4a:78:a5:c9:fb:45: 95:04:d1:98:cb:28:ff:0e:4b:46:85:26:0c:18:d1: 7b:a8:21:9a:e8:18:2c:71:f3:b3:fe:50:b8:e6:c7: 3c:52:f2:25:4a:2d:63:6f:e1:11:55:9d:56:91:e4: 89:08:63:21:5e:09:88:64:cb:47:7a:c6:97:b9:79: 9e:c2:95:20:27:3f:b1:b6:6c:82:c6:d4:a1:a0:9f: 5b:89:6a:85:33:a4:dd:77:8a:98:30:51:b7:28:7d: 44:a8:40:80:4e:38:b1:d1:24:20:5a:5e:5f:f0:05: 01:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E5:8D:BF:0C:86:34:9E:AD:63:20:B5:39:CD:56:C4:E7:C2:D1:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/54fd4066-0f9a-3f61-9122-ac13547aeb65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 149.23.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:41:f0:fe:b6:87:5a:15:6d:91:c1:74:62:b2:38:8b:2b:10: da:6e:54:1c:f2:5e:62:3d:99:b8:f9:b5:c9:7b:cd:78:3c:39: 60:4e:c2:f7:b2:59:0a:ad:41:07:83:b3:1a:95:1a:fa:d2:18: 6a:7e:fe:94:1b:e0:27:e2:5c:d3:79:76:4e:9f:45:2d:2c:37: 9b:2a:6f:c7:27:8e:47:04:c5:83:ae:9e:65:ed:59:d5:bd:f2: af:eb:50:3a:c2:f9:d1:3d:be:15:a4:d0:7c:23:b4:99:e5:ef: 78:e5:61:d4:6e:29:78:60:95:37:97:f2:d3:ac:44:65:f9:17: b7:24:da:38:25:8e:38:ab:30:6d:42:f6:ca:31:1f:6c:21:98: 77:59:48:f7:5f:b7:ca:eb:06:7f:36:98:ef:09:ae:0e:0b:4b: 2c:06:c4:d2:d1:4b:a0:ae:11:45:e7:19:c7:87:26:6d:e9:9a: dc:a0:f4:ce:ef:e0:4d:19:27:a6:90:c0:08:da:89:a2:0f:d5: 37:c1:f7:6e:61:be:68:1b:61:e7:c7:4f:bb:09:b8:82:9a:dd: 61:17:14:a9:ab:bf:3f:f5:53:f6:02:fe:1e:7a:3b:73:7b:dd: 8a:60:1c:eb:71:e1:9e:bf:2d:9f:e0:b6:96:a4:79:39:14:f4: 3b:0d:e8:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOwX5OpDk+E2ufQgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk ZjNkZGEyMWQtOTEwNi00NjE0LWJmNTktZTc4MzFkMjcyYTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZoFyVcVKfpec1YwWVHxQnmQimpzv5rU6kdO q5zYB8Pm7AeNr0rpwcdi7Hrb0Eq6+cz/6lN303mbQMH9XXwpaQpgfRaftQsf4dLP ITJb3fU+uFhDZQ06PW0vscrWNSmogPJIRfGW4wHK0scFTYYiDDQliCv1xf/efR0V KAeLIOCaRAEqYp+xkkGJXdfRARJKeKXJ+0WVBNGYyyj/DktGhSYMGNF7qCGa6Bgs cfOz/lC45sc8UvIlSi1jb+ERVZ1WkeSJCGMhXgmIZMtHesaXuXmewpUgJz+xtmyC xtShoJ9biWqFM6Tdd4qYMFG3KH1EqECATjix0SQgWl5f8AUB8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKnljb8MhjSerWMgtTnNVsTnwtFwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvNTRmZDQwNjYtMGY5YS0z ZjYxLTkxMjItYWMxMzU0N2FlYjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRcfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdB8P62h1oVbZHBdGKyOIsrENpuVBzyXmI9mbj5tcl7zXg8OWBOwvey WQqtQQeDsxqVGvrSGGp+/pQb4CfiXNN5dk6fRS0sN5sqb8cnjkcExYOunmXtWdW9 8q/rUDrC+dE9vhWk0HwjtJnl73jlYdRuKXhglTeX8tOsRGX5F7ck2jgljjirMG1C 9soxH2whmHdZSPdft8rrBn82mO8Jrg4LSywGxNLRS6CuEUXnGceHJm3pmtyg9M7v 4E0ZJ6aQwAjaiaIP1TfB925hvmgbYefHT7sJuIKa3WEXFKmrvz/1U/YC/h56O3N7 3YpgHOtx4Z6/LZ/gtpakeTkU9DsN6J4= -----END CERTIFICATE-----Generated at Tue Jul 1 16:58:25 2025 by rpki-client