$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/ef472a92-1974-3c43-83a9-193c04f425d3.roa File: ef472a92-1974-3c43-83a9-193c04f425d3.roa (raw, json) Hash identifier: Bp7wyvxcSbO2Af468/ENHCmD3SG/lumbplMeKbTJxX4= Subject key identifier: 84:5C:17:F5:33:0B:5A:93:95:D2:C6:F8:46:1B:C7:46:00:DE:4E:7B Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F4328584A427581E6211C2FAD0D38CFC0 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/ef472a92-1974-3c43-83a9-193c04f425d3.roa Signing time: Sat 21 Jun 2025 01:00:48 +0000 ROA not before: Sat 21 Jun 2025 01:00:48 +0000 ROA not after: Fri 19 Sep 2025 01:00:48 +0000 asID: 33442 IP address blocks: 149.23.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:42:75:81:e6:21:1c:2f:ad:0d:38:cf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Jun 21 01:00:48 2025 GMT Not After : Sep 19 01:00:48 2025 GMT Subject: CN=370f5160-12c5-4952-9400-67ddb89c2a27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f6:00:a0:b5:d8:40:60:c9:7c:2b:0f:56:2e: 02:84:dc:13:64:1c:22:98:68:99:ee:17:00:99:18: e1:c3:fa:f5:74:34:ac:ec:26:7e:c4:1a:53:a3:79: 54:a6:f8:d2:4a:c3:89:a1:cf:65:25:41:de:9c:cb: 07:17:65:7d:c4:29:0f:5a:fe:76:83:4f:c3:b0:3b: 5d:fd:18:53:cb:0b:58:0a:c3:70:74:1a:18:64:8c: c6:4f:75:eb:0b:59:e0:21:5a:b2:50:3d:f3:9b:02: 7d:36:2a:42:4a:39:48:f1:3b:2c:1d:53:d4:b0:cb: c7:aa:46:45:0c:a3:b4:c6:8b:e0:b1:c7:0c:0f:59: e2:c2:0a:55:0e:30:e0:9a:d4:a4:05:92:7b:43:5c: 9b:2d:ee:c0:0b:e4:0d:a3:1e:b7:4e:9f:39:b9:1d: 1b:44:d2:0d:dc:4d:a0:6a:52:23:db:f2:d9:0d:fe: d0:f2:c6:06:3b:9e:4e:4f:dc:24:10:12:9e:54:e1: de:38:1e:b8:0c:c8:02:76:ca:e4:55:c5:dc:14:76: cd:72:86:20:a8:d4:e6:01:ce:ae:75:34:d3:aa:03: 61:8b:a5:5d:b8:e3:0a:5f:21:e7:3d:65:90:18:6a: dc:30:18:b4:b0:28:59:a3:1a:96:74:05:d4:70:b3: c9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:5C:17:F5:33:0B:5A:93:95:D2:C6:F8:46:1B:C7:46:00:DE:4E:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/ef472a92-1974-3c43-83a9-193c04f425d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 149.23.80.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:c5:1e:b6:af:5b:55:47:1c:42:95:c9:da:6d:a0:09:fc:c1: 48:1e:02:6b:1e:e9:3e:1f:93:55:76:70:0c:64:e0:12:49:49: 9e:13:9b:d5:6e:dc:b3:b7:16:a8:bb:99:60:8c:3f:dd:fc:b4: b8:64:83:9c:dc:d8:36:48:e1:e3:e3:2b:e1:a4:4b:49:80:9d: 99:61:48:47:22:cf:d9:50:9c:c5:9b:d9:d1:01:e9:53:13:a2: f8:66:27:27:e3:eb:1a:5e:c7:4c:4f:97:43:21:4b:88:1d:29: 67:83:8e:31:71:8e:87:66:f6:03:70:7c:42:0b:9f:9d:66:96: bf:d8:87:ab:8c:f8:15:90:2b:b0:0f:d2:a7:db:73:69:38:c9: 22:97:b9:b9:43:2d:c4:4f:67:33:40:e8:30:4b:32:eb:b7:d1: 67:7d:38:1c:8a:a4:bc:6e:77:e1:6e:57:0b:9a:ff:f3:9c:97: a4:57:c8:42:73:f2:4e:cf:10:ed:68:6b:9e:d1:dc:05:23:f1: 48:40:9d:51:e9:d1:94:04:47:52:3a:52:8f:89:33:d0:04:fb: f8:45:c3:b9:92:9e:d0:7b:00:5d:24:a5:38:cf:79:ea:39:be: ec:5a:0a:15:e5:7a:48:d9:87:2a:3a:7e:73:13:73:05:48:95: 1d:17:a9:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpCdYHmIRwvrQ04z8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI1MDYyMTAxMDA0OFoXDTI1MDkxOTAxMDA0OFowLzEtMCsGA1UEAxMk MzcwZjUxNjAtMTJjNS00OTUyLTk0MDAtNjdkZGI4OWMyYTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivYAoLXYQGDJfCsPVi4ChNwTZBwimGiZ7hcA mRjhw/r1dDSs7CZ+xBpTo3lUpvjSSsOJoc9lJUHenMsHF2V9xCkPWv52g0/DsDtd /RhTywtYCsNwdBoYZIzGT3XrC1ngIVqyUD3zmwJ9NipCSjlI8TssHVPUsMvHqkZF DKO0xovgsccMD1niwgpVDjDgmtSkBZJ7Q1ybLe7AC+QNox63Tp85uR0bRNIN3E2g alIj2/LZDf7Q8sYGO55OT9wkEBKeVOHeOB64DMgCdsrkVcXcFHbNcoYgqNTmAc6u dTTTqgNhi6VduOMKXyHnPWWQGGrcMBi0sChZoxqWdAXUcLPJwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIRcF/UzC1qTldLG+EYbx0YA3k57MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvZWY0NzJhOTItMTk3NC0z YzQzLTgzYTktMTkzYzA0ZjQyNWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRdQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDFHravW1VHHEKVydptoAn8wUgeAmse6T4fk1V2cAxk4BJJSZ4Tm9Vu 3LO3Fqi7mWCMP938tLhkg5zc2DZI4ePjK+GkS0mAnZlhSEciz9lQnMWb2dEB6VMT ovhmJyfj6xpex0xPl0MhS4gdKWeDjjFxjodm9gNwfEILn51mlr/Yh6uM+BWQK7AP 0qfbc2k4ySKXublDLcRPZzNA6DBLMuu30Wd9OByKpLxud+FuVwua//Ocl6RXyEJz 8k7PEO1oa57R3AUj8UhAnVHp0ZQER1I6Uo+JM9AE+/hFw7mSntB7AF0kpTjPeeo5 vuxaChXlekjZhyo6fnMTcwVIlR0XqTk= -----END CERTIFICATE-----Generated at Tue Jul 1 17:18:59 2025 by rpki-client