$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/30a47725-29f4-31fa-88b6-51de560106ef.roa File: 30a47725-29f4-31fa-88b6-51de560106ef.roa (raw, json) Hash identifier: Gt2v+SIY7Z62NnBkKhJiorpHfWTgFESRaUn73gtWk/I= Subject key identifier: 33:60:4E:9E:31:4A:90:2F:C8:E8:CA:16:96:0E:0B:95:AF:94:57:F7 Certificate issuer: /CN=fb430428-a25a-4e8b-acc0-f9f5cc044175 Certificate serial: 010D0C9F4328584AF52141431B561F28BEC35A00 Authority key identifier: 61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/30a47725-29f4-31fa-88b6-51de560106ef.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 396905 IP address blocks: 149.19.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:41:43:1b:56:1f:28:be:c3:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb430428-a25a-4e8b-acc0-f9f5cc044175 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=5d379936-1809-4cfb-a44a-e55466424221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:44:f4:9f:41:93:3a:b4:cc:c9:ff:e7:a3:47: be:01:d0:f3:97:5e:3e:21:46:98:06:24:4e:5a:d5: b3:c8:ce:a2:61:2e:64:83:e4:c8:f3:57:7a:c2:fb: 61:f5:e5:64:81:d3:95:4d:13:96:6e:1f:84:05:80: 21:53:91:2a:6c:36:e6:f9:18:94:ec:d6:e8:20:2b: a5:86:e4:6f:6c:b8:3e:12:ac:41:6c:4b:d5:04:4a: bd:5d:87:bb:f9:87:14:f3:52:eb:01:d5:70:78:05: c2:87:e5:36:e4:ae:77:20:31:8c:ea:e9:b2:f7:56: 02:d9:c9:8e:34:ef:a7:3d:66:11:a9:6c:47:e5:eb: c7:67:8e:79:6c:9c:f3:cd:d7:58:98:e5:f4:7e:43: c1:19:44:b0:fd:3e:3b:3e:2d:b7:0b:2d:73:93:da: ab:60:07:48:1f:b6:53:ac:20:f8:70:86:04:ba:43: e0:7d:38:53:a9:e9:5d:49:f8:e7:0a:6a:59:85:12: f2:49:a4:7a:b1:f0:22:d7:fd:ba:d4:43:3f:f1:6d: 26:97:88:4c:0b:85:9c:09:9c:3c:2a:5b:f2:c8:ec: 45:92:b8:2e:e2:dd:f5:07:7a:42:a3:3b:2f:81:77: ed:32:17:5e:fa:d5:cc:c6:56:3f:eb:1e:05:1f:7a: f7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:60:4E:9E:31:4A:90:2F:C8:E8:CA:16:96:0E:0B:95:AF:94:57:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/30a47725-29f4-31fa-88b6-51de560106ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl X509v3 Authority Key Identifier: keyid:61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer sbgp-ipAddrBlock: critical IPv4: 149.19.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:f8:0c:d6:a2:14:74:9f:23:1a:52:a3:6d:fc:cf:67:9d:d8: cc:6b:3a:f5:32:e4:5a:50:aa:9d:3f:ea:82:98:86:ff:ae:b3: c2:8c:ba:86:5e:d4:39:f1:38:75:72:ee:bb:c3:b9:d4:58:34: 00:59:7a:b5:72:2d:0c:94:33:c9:d1:96:86:9a:65:82:2d:e1: 50:f2:67:09:b2:dd:19:df:a1:43:a2:c0:cc:9d:b6:03:f3:c4: 28:69:75:1b:11:13:b2:0a:cd:0c:7b:b8:3e:94:0f:f0:1f:9d: 94:7f:48:f1:24:4b:6c:7d:91:00:a4:43:62:cf:1e:42:a5:04: bc:3b:14:58:81:10:3a:c1:3f:2f:2d:32:4e:58:ef:c0:5c:cc: 16:88:7e:65:69:0d:05:a3:a7:dc:60:31:80:97:93:19:2c:7c: 46:c9:be:25:7a:f0:31:1c:3c:38:75:02:98:a8:76:2f:17:ea: 09:70:56:b0:72:c3:18:69:f2:ee:0a:be:b7:71:ef:c9:3f:0a: f1:6a:60:f0:97:c5:89:b0:a1:91:64:1c:a8:29:c8:72:80:be: 92:a3:01:b2:b0:cc:01:6b:74:d7:9d:9d:fa:4b:b5:1f:d2:21: 43:58:88:92:80:3b:b7:4d:22:c2:4d:a9:b9:6c:eb:ed:b9:7c: d6:72:1f:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IUFDG1YfKL7DWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmI0MzA0MjgtYTI1YS00ZThiLWFjYzAtZjlmNWNjMDQ0 MTc1MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk NWQzNzk5MzYtMTgwOS00Y2ZiLWE0NGEtZTU1NDY2NDI0MjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10T0n0GTOrTMyf/no0e+AdDzl14+IUaYBiRO WtWzyM6iYS5kg+TI81d6wvth9eVkgdOVTROWbh+EBYAhU5EqbDbm+RiU7NboICul huRvbLg+EqxBbEvVBEq9XYe7+YcU81LrAdVweAXCh+U25K53IDGM6umy91YC2cmO NO+nPWYRqWxH5evHZ455bJzzzddYmOX0fkPBGUSw/T47Pi23Cy1zk9qrYAdIH7ZT rCD4cIYEukPgfThTqeldSfjnCmpZhRLySaR6sfAi1/261EM/8W0ml4hMC4WcCZw8 KlvyyOxFkrgu4t31B3pCozsvgXftMhde+tXMxlY/6x4FH3r3FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNgTp4xSpAvyOjKFpYOC5WvlFf3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mYjQz MDQyOC1hMjVhLTRlOGItYWNjMC1mOWY1Y2MwNDQxNzUvMzBhNDc3MjUtMjlmNC0z MWZhLTg4YjYtNTFkZTU2MDEwNmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZmI0MzA0MjgtYTI1YS00ZThiLWFj YzAtZjlmNWNjMDQ0MTc1L2ZiNDMwNDI4LWEyNWEtNGU4Yi1hY2MwLWY5ZjVjYzA0 NDE3NS5jcmwwHwYDVR0jBBgwFoAUYd6dyL9veAnnHxlI5TTLFE/X3bowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9mYjQzMDQyOC1hMjVhLTRlOGItYWNjMC1mOWY1 Y2MwNDQxNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElRPQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM/4DNaiFHSfIxpSo238z2ed2MxrOvUy5FpQqp0/6oKYhv+us8KMuoZe 1DnxOHVy7rvDudRYNABZerVyLQyUM8nRloaaZYIt4VDyZwmy3RnfoUOiwMydtgPz xChpdRsRE7IKzQx7uD6UD/AfnZR/SPEkS2x9kQCkQ2LPHkKlBLw7FFiBEDrBPy8t Mk5Y78BczBaIfmVpDQWjp9xgMYCXkxksfEbJviV68DEcPDh1Apiodi8X6glwVrBy wxhp8u4Kvrdx78k/CvFqYPCXxYmwoZFkHKgpyHKAvpKjAbKwzAFrdNednfpLtR/S IUNYiJKAO7dNIsJNqbls6+25fNZyH0c= -----END CERTIFICATE-----Generated at Sun Aug 24 09:38:20 2025 by rpki-client