$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/44e6412a-ad9a-3379-a2fe-2eda7500f614.roa File: 44e6412a-ad9a-3379-a2fe-2eda7500f614.roa (raw, json) Hash identifier: R3S0k15IctSgVuCTwZ/Qamqeq4zhaXH3zcqhAzkPf0c= Subject key identifier: 5B:B5:AB:93:80:2E:BF:56:A2:E6:A0:72:98:AA:16:3F:31:4A:17:38 Certificate issuer: /CN=3f28b62c-7c50-4ccf-bac5-a6ced9c510ae Certificate serial: 010D0C9F4328584AD23BB08CCBCFBEB3EA00E8C0 Authority key identifier: C7:8D:60:91:0A:7B:BA:39:22:7E:BE:6C:E6:2F:05:8E:D2:66:FD:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/44e6412a-ad9a-3379-a2fe-2eda7500f614.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 14618 IP address blocks: 193.149.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:b0:8c:cb:cf:be:b3:ea:00:e8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f28b62c-7c50-4ccf-bac5-a6ced9c510ae Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=25ec503f-9403-4915-be37-54560acf65dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c9:56:3e:26:f0:8d:a6:45:a8:b7:e2:51:31: 54:79:9f:15:da:b0:0a:45:46:eb:01:be:8c:bc:f5: 4a:b0:a8:81:51:b1:d0:f5:8f:67:15:9e:22:a8:89: ae:cf:8b:b0:d2:27:4d:57:50:c2:79:03:61:73:32: f3:ef:46:dc:c6:4a:0b:70:e7:38:9a:75:4f:28:92: 73:10:a6:4f:15:51:b3:b6:ed:86:4a:5e:5a:1b:30: 4f:90:04:11:07:b5:cb:f2:70:45:72:b7:80:4b:c8: 74:8a:7f:b7:9a:13:a3:81:0f:5b:29:17:a1:0d:67: e1:cd:0a:9e:72:3c:db:20:c7:0d:92:39:d8:74:9d: 54:2a:d8:24:c0:79:73:2b:f6:63:e6:8f:c5:1c:07: 9a:2c:fb:1c:e1:bd:5d:4b:57:b7:6c:38:a1:9a:b2: c4:ce:f5:62:cd:09:2b:ee:84:92:e0:02:52:78:3c: 74:fc:75:44:bc:0b:3d:a5:8d:1e:32:b9:d8:bf:c1: 37:4d:96:dd:5a:8d:9a:84:ad:ab:f6:3e:d8:63:06: b6:73:8c:f6:90:37:3c:e6:78:35:a4:68:fe:8c:ae: 71:1a:97:66:16:92:ae:58:fa:cb:79:6d:88:39:15: 2a:c2:51:00:4b:34:c8:55:27:ef:e6:81:b9:8c:f1: 3b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B5:AB:93:80:2E:BF:56:A2:E6:A0:72:98:AA:16:3F:31:4A:17:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/44e6412a-ad9a-3379-a2fe-2eda7500f614.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.crl X509v3 Authority Key Identifier: keyid:C7:8D:60:91:0A:7B:BA:39:22:7E:BE:6C:E6:2F:05:8E:D2:66:FD:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.cer sbgp-ipAddrBlock: critical IPv4: 193.149.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:78:a9:ae:6c:fd:0f:b7:36:a0:3c:ae:28:49:ce:bf:f7:a5: c3:3a:96:00:24:ac:da:17:7d:72:74:2d:99:26:7a:25:d6:cd: aa:26:94:c0:c5:74:4d:77:ff:c3:67:e4:ec:9d:b9:3f:f0:e7: 12:9d:59:09:ca:ac:45:d7:2c:03:28:8b:2c:57:3c:e6:2f:0b: b5:08:ac:07:76:6d:11:37:da:9e:1c:b3:36:97:fa:10:84:b1: af:a9:ea:e7:3b:53:23:74:4a:ab:f2:10:0d:7a:96:23:45:4e: 9a:ff:01:69:93:e5:e9:06:4f:63:93:f5:a8:d0:05:4a:f8:69: 9b:a9:f4:73:81:2c:e6:fe:0a:f5:c9:07:51:02:20:2e:8e:57: 14:78:51:64:86:30:f5:17:22:b7:d9:f4:82:f5:59:b3:1e:81: 27:a9:44:aa:5f:b7:68:07:00:28:d1:26:6e:26:bf:ba:f2:47: 78:3c:8c:45:a8:9c:60:44:c4:f5:3f:46:c3:73:7d:9a:ae:b3: 50:34:85:1d:51:33:d3:36:5a:72:17:82:57:57:54:86:9d:27: 95:7f:b9:98:93:28:0b:6f:78:03:4a:5d:77:cc:b7:b6:3b:18: ca:ef:55:59:6a:17:7b:ed:7f:79:ed:3f:e6:13:d4:c5:6e:d5: aa:b5:56:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO7CMy8++s+oA6MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2YyOGI2MmMtN2M1MC00Y2NmLWJhYzUtYTZjZWQ5YzUx MGFlMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk MjVlYzUwM2YtOTQwMy00OTE1LWJlMzctNTQ1NjBhY2Y2NWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqslWPibwjaZFqLfiUTFUeZ8V2rAKRUbrAb6M vPVKsKiBUbHQ9Y9nFZ4iqImuz4uw0idNV1DCeQNhczLz70bcxkoLcOc4mnVPKJJz EKZPFVGztu2GSl5aGzBPkAQRB7XL8nBFcreAS8h0in+3mhOjgQ9bKRehDWfhzQqe cjzbIMcNkjnYdJ1UKtgkwHlzK/Zj5o/FHAeaLPsc4b1dS1e3bDihmrLEzvVizQkr 7oSS4AJSeDx0/HVEvAs9pY0eMrnYv8E3TZbdWo2ahK2r9j7YYwa2c4z2kDc85ng1 pGj+jK5xGpdmFpKuWPrLeW2IORUqwlEASzTIVSfv5oG5jPE7DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFu1q5OALr9WouagcpiqFj8xShc4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zZjI4 YjYyYy03YzUwLTRjY2YtYmFjNS1hNmNlZDljNTEwYWUvNDRlNjQxMmEtYWQ5YS0z Mzc5LWEyZmUtMmVkYTc1MDBmNjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2YyOGI2MmMtN2M1MC00Y2NmLWJh YzUtYTZjZWQ5YzUxMGFlLzNmMjhiNjJjLTdjNTAtNGNjZi1iYWM1LWE2Y2VkOWM1 MTBhZS5jcmwwHwYDVR0jBBgwFoAUx41gkQp7ujkifr5s5i8FjtJm/YYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zZjI4YjYyYy03YzUwLTRjY2YtYmFjNS1hNmNl ZDljNTEwYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwZWRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD14qa5s/Q+3NqA8rihJzr/3pcM6lgAkrNoXfXJ0LZkmeiXWzaomlMDF dE13/8Nn5OyduT/w5xKdWQnKrEXXLAMoiyxXPOYvC7UIrAd2bRE32p4cszaX+hCE sa+p6uc7UyN0SqvyEA16liNFTpr/AWmT5ekGT2OT9ajQBUr4aZup9HOBLOb+CvXJ B1ECIC6OVxR4UWSGMPUXIrfZ9IL1WbMegSepRKpft2gHACjRJm4mv7ryR3g8jEWo nGBExPU/RsNzfZqus1A0hR1RM9M2WnIXgldXVIadJ5V/uZiTKAtveANKXXfMt7Y7 GMrvVVlqF3vtf3ntP+YT1MVu1aq1Viw= -----END CERTIFICATE-----Generated at Sat Aug 23 14:12:49 2025 by rpki-client