$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/832a3037-6f58-31ad-97d9-1d5379dadd18.roa File: 832a3037-6f58-31ad-97d9-1d5379dadd18.roa (raw, json) Hash identifier: JfQUPNzT/I3RRCjF97pTy54KNJ+FGwO3+Zxsvqj3Gz4= Subject key identifier: E0:2B:A4:93:02:CA:41:BC:D0:10:FA:8E:B7:38:29:A5:D9:5A:D9:2D Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F4328584A4C3B065E129B6D8C4F4CF1E0 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/832a3037-6f58-31ad-97d9-1d5379dadd18.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 33442 IP address blocks: 149.23.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:06:5e:12:9b:6d:8c:4f:4c:f1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=4b6782b2-9ab6-4f63-88c1-2c2385bc3db8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4b:d0:20:d6:fe:68:9a:16:5b:70:7f:cc:f2: ce:af:b0:36:4e:e6:0d:fb:12:bc:65:5b:4b:40:f9: cc:7a:26:68:92:6c:6a:86:7b:c4:56:03:f0:28:b8: 17:18:cb:a7:e6:8c:46:37:4e:42:b0:fd:88:49:82: 0f:51:9e:35:89:8f:33:f2:ae:e4:b3:9f:0b:6c:1b: 49:6f:1a:68:f9:ab:b9:b7:4a:bd:0d:d6:68:cd:c4: ab:ee:a5:6e:24:fd:f0:aa:d1:aa:5f:0e:2b:dc:c7: fb:d0:12:c9:ed:e9:a9:70:21:06:77:3d:c9:8d:76: ec:cd:61:9b:f3:1d:06:63:04:ea:fc:56:00:18:95: e9:88:2a:5b:58:7d:04:a1:ae:49:24:93:9e:ab:fb: 42:c5:96:34:7d:a0:6b:c2:0d:81:f7:ad:74:45:92: 20:39:df:9d:65:7a:b5:d8:5d:97:66:35:6e:50:a0: f2:5b:3b:ca:c5:06:cd:b2:20:8b:50:5f:d9:43:20: 7c:4c:c0:7a:fc:48:d1:45:99:6e:2c:9a:a3:90:82: e4:27:7f:53:ac:43:a6:bc:48:41:27:9a:c2:ab:c7: 06:cd:a6:01:69:61:40:0d:bf:60:55:16:e3:47:58: 32:f6:29:48:be:df:27:fa:56:6f:0e:dc:21:be:65: 43:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:2B:A4:93:02:CA:41:BC:D0:10:FA:8E:B7:38:29:A5:D9:5A:D9:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/832a3037-6f58-31ad-97d9-1d5379dadd18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 149.23.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:a1:9e:97:45:14:4e:43:20:09:ef:a2:b1:8c:5d:31:e9:da: d1:29:8e:52:8d:b1:60:15:3d:ae:d3:8a:a4:53:bf:08:1c:22: 3d:e7:03:27:b3:54:c5:5d:2a:85:78:c7:99:39:5d:91:a1:ed: 17:dc:57:74:83:d2:4a:10:46:d6:eb:02:91:9a:a0:ad:80:cf: 01:9b:04:21:6a:37:e6:5d:c4:1c:bb:9e:e4:4d:bf:83:9d:5c: 63:83:d3:d3:38:c4:4e:f5:d6:4d:f2:bc:e8:4f:c7:3f:5d:af: ab:8d:87:1c:04:af:81:09:08:ea:24:e4:46:12:17:a1:1e:34: 6f:ad:63:15:b9:a1:86:dc:e9:43:99:51:93:51:39:3a:24:a1: 16:8b:f7:9b:52:58:58:58:6e:04:65:07:99:f3:cc:dd:18:f3: 1b:cb:d8:92:e9:af:5f:44:d3:ce:b9:52:e2:9c:f6:90:83:53: 32:f1:7a:1f:6f:39:4a:1a:2f:63:a1:a3:4f:b1:1a:6a:3f:f0: c5:49:e6:ad:0b:a3:e1:57:69:af:5c:b1:96:14:b7:ed:c0:d9: d6:c3:26:7f:e7:93:cf:37:d0:b7:a5:af:fa:fc:b1:9a:63:9f: d5:67:e8:f6:42:5b:d7:30:28:e4:1e:a6:06:ef:24:fe:59:cf: 89:77:3c:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOwZeEpttjE9M8eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk NGI2NzgyYjItOWFiNi00ZjYzLTg4YzEtMmMyMzg1YmMzZGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEvQINb+aJoWW3B/zPLOr7A2TuYN+xK8ZVtL QPnMeiZokmxqhnvEVgPwKLgXGMun5oxGN05CsP2ISYIPUZ41iY8z8q7ks58LbBtJ bxpo+au5t0q9DdZozcSr7qVuJP3wqtGqXw4r3Mf70BLJ7empcCEGdz3JjXbszWGb 8x0GYwTq/FYAGJXpiCpbWH0Eoa5JJJOeq/tCxZY0faBrwg2B9610RZIgOd+dZXq1 2F2XZjVuUKDyWzvKxQbNsiCLUF/ZQyB8TMB6/EjRRZluLJqjkILkJ39TrEOmvEhB J5rCq8cGzaYBaWFADb9gVRbjR1gy9ilIvt8n+lZvDtwhvmVDywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOArpJMCykG80BD6jrc4KaXZWtktMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvODMyYTMwMzctNmY1OC0z MWFkLTk3ZDktMWQ1Mzc5ZGFkZDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRcmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqhnpdFFE5DIAnvorGMXTHp2tEpjlKNsWAVPa7TiqRTvwgcIj3nAyez VMVdKoV4x5k5XZGh7RfcV3SD0koQRtbrApGaoK2AzwGbBCFqN+ZdxBy7nuRNv4Od XGOD09M4xE711k3yvOhPxz9dr6uNhxwEr4EJCOok5EYSF6EeNG+tYxW5oYbc6UOZ UZNROTokoRaL95tSWFhYbgRlB5nzzN0Y8xvL2JLpr19E0865UuKc9pCDUzLxeh9v OUoaL2Oho0+xGmo/8MVJ5q0Lo+FXaa9csZYUt+3A2dbDJn/nk8830Lelr/r8sZpj n9Vn6PZCW9cwKOQepgbvJP5Zz4l3PEA= -----END CERTIFICATE-----Generated at Tue Jul 1 16:11:15 2025 by rpki-client