$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/8aa07820-b4a8-3042-9b4c-5d997eb47b4f.roa File: 8aa07820-b4a8-3042-9b4c-5d997eb47b4f.roa (raw, json) Hash identifier: enneFAtCFqAMaoXzu0PeOppRZMO/rl4qBRyTwj8t3U0= Subject key identifier: FB:9F:33:56:56:33:56:0F:FA:79:39:77:E0:94:76:11:E8:D6:25:BC Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F4328584A4C3B06BA398AA780C4880AE0 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/8aa07820-b4a8-3042-9b4c-5d997eb47b4f.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 33442 IP address blocks: 149.23.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:06:ba:39:8a:a7:80:c4:88:0a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=fef184d0-9c06-4a2d-90ce-3f1b93632e44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a6:55:d1:78:65:f0:dc:06:a1:d9:d0:10:88: 9a:78:f1:5c:6e:c1:7c:29:59:d7:f7:1e:1c:70:a0: ec:25:19:ad:4d:f2:1c:d8:8d:f4:24:16:86:99:4d: 5d:91:7e:39:3e:23:22:e1:4b:3f:c6:10:8a:47:27: 4c:6e:e5:d0:32:1e:87:1d:16:70:4d:7f:5b:2f:ce: 24:8f:ec:70:08:d9:1d:c3:e5:24:da:78:d0:74:f1: da:4e:4d:ed:d1:42:79:41:6a:99:9d:aa:31:f2:e7: a2:c8:f6:bb:1e:a4:c6:fa:b9:19:6a:29:b9:8c:a2: f4:ff:ae:97:70:0e:72:52:cf:32:9e:f6:f7:51:37: f6:c6:b9:47:fc:b4:17:fe:e4:7b:94:02:c6:28:24: 3c:63:20:d2:60:f5:1e:92:64:f9:88:35:42:1a:63: b7:8c:a7:05:8d:b0:63:7b:f1:ca:97:d8:14:83:f5: 0d:0a:22:4d:19:ab:96:b7:2a:fe:9d:52:fb:03:fa: 5d:81:7f:68:b0:bf:00:a1:dd:56:6f:a0:ef:af:91: 6e:78:13:ac:a0:66:22:48:fc:fe:81:91:8a:ce:6d: 2f:98:a5:70:4c:2d:bd:c6:34:b5:fa:d3:b2:1f:55: de:57:d6:79:b2:bc:08:5e:43:fb:1c:0e:a0:f1:f4: ed:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:9F:33:56:56:33:56:0F:FA:79:39:77:E0:94:76:11:E8:D6:25:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/8aa07820-b4a8-3042-9b4c-5d997eb47b4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 149.23.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:40:f7:c7:17:f2:09:86:7e:4b:d7:a5:bb:14:eb:cf:24:12: 74:3c:62:a0:8e:8e:97:f4:d6:df:4f:7e:36:53:27:05:03:ea: 8a:8c:b1:2d:b2:87:0b:9d:2f:2a:68:85:d6:2f:fe:f3:a4:52: 9b:21:98:20:61:e8:5b:29:fb:3f:d2:cc:f0:a5:0f:77:9e:bb: 63:d2:ed:e3:e2:68:a3:2c:70:5e:02:1b:ed:34:bf:d1:a0:e2: bb:9f:ee:b9:80:be:b5:8e:bc:e8:9d:fa:69:91:7b:ad:4d:a1: d1:61:5f:05:2b:03:5a:df:af:16:87:55:66:78:48:e7:7e:4d: 18:68:92:43:6e:61:2f:fa:63:d5:f1:ff:60:2d:c3:ef:8b:7a: c4:c3:99:59:9a:e6:78:96:d9:f6:96:d3:ee:b4:60:e4:2c:a6: 3c:48:85:45:f6:de:c7:3e:26:e7:4a:34:8e:16:9a:7b:a2:5a: 88:d0:18:1d:a7:54:28:67:65:8d:0f:43:03:c2:be:2d:dd:16: 81:84:9d:32:4d:0a:e8:de:14:86:89:fd:25:fb:4b:fb:a8:57: db:a3:49:3a:1a:d1:d8:3c:46:67:eb:92:ad:6b:70:80:06:4f: ca:51:60:e6:b3:2b:ff:cf:21:38:aa:03:ad:21:cd:75:cd:d0: 3d:01:b3:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOwa6OYqngMSICuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk ZmVmMTg0ZDAtOWMwNi00YTJkLTkwY2UtM2YxYjkzNjMyZTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaZV0Xhl8NwGodnQEIiaePFcbsF8KVnX9x4c cKDsJRmtTfIc2I30JBaGmU1dkX45PiMi4Us/xhCKRydMbuXQMh6HHRZwTX9bL84k j+xwCNkdw+Uk2njQdPHaTk3t0UJ5QWqZnaox8ueiyPa7HqTG+rkZaim5jKL0/66X cA5yUs8ynvb3UTf2xrlH/LQX/uR7lALGKCQ8YyDSYPUekmT5iDVCGmO3jKcFjbBj e/HKl9gUg/UNCiJNGauWtyr+nVL7A/pdgX9osL8Aod1Wb6Dvr5FueBOsoGYiSPz+ gZGKzm0vmKVwTC29xjS1+tOyH1XeV9Z5srwIXkP7HA6g8fTtIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPufM1ZWM1YP+nk5d+CUdhHo1iW8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvOGFhMDc4MjAtYjRhOC0z MDQyLTliNGMtNWQ5OTdlYjQ3YjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRfOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABA98cX8gmGfkvXpbsU688kEnQ8YqCOjpf01t9PfjZTJwUD6oqMsS2y hwudLypohdYv/vOkUpshmCBh6Fsp+z/SzPClD3eeu2PS7ePiaKMscF4CG+00v9Gg 4ruf7rmAvrWOvOid+mmRe61NodFhXwUrA1rfrxaHVWZ4SOd+TRhokkNuYS/6Y9Xx /2Atw++LesTDmVma5niW2faW0+60YOQspjxIhUX23sc+JudKNI4WmnuiWojQGB2n VChnZY0PQwPCvi3dFoGEnTJNCujeFIaJ/SX7S/uoV9ujSToa0dg8Rmfrkq1rcIAG T8pRYOazK//PITiqA60hzXXN0D0Bs9w= -----END CERTIFICATE-----Generated at Sun Jun 29 14:18:09 2025 by rpki-client