$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/98d21f17-4a0c-36f6-a070-6808cb50ec98.roa File: 98d21f17-4a0c-36f6-a070-6808cb50ec98.roa (raw, json) Hash identifier: duIeze67kbWw7t3fuQHqCVtE0wL+wIEFn62dWLuxGz8= Subject key identifier: B3:62:19:73:E2:FC:F9:D0:10:03:0A:F0:67:C8:20:70:79:2A:B0:92 Certificate issuer: /CN=954e2959-b160-4ffa-86b4-aaa94863154c Certificate serial: 010D0C9F4328584A3A157761ED681F825C70EB00 Authority key identifier: 7A:0D:9D:66:5A:CD:4F:54:DB:65:04:14:29:CB:05:0D:D9:7D:51:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/98d21f17-4a0c-36f6-a070-6808cb50ec98.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 3801 IP address blocks: 149.248.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/954e2959-b160-4ffa-86b4-aaa94863154c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/954e2959-b160-4ffa-86b4-aaa94863154c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:77:61:ed:68:1f:82:5c:70:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954e2959-b160-4ffa-86b4-aaa94863154c Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=27f15ca1-3005-402b-80fb-bc0360145432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a5:9c:e5:6c:7a:b1:a3:c8:75:08:d7:00:bd: 70:c7:46:8d:97:09:ee:0a:08:a2:fe:a2:0b:01:76: 10:7c:22:d0:38:ab:07:81:93:f5:a2:96:3c:16:5f: 81:01:fb:6e:c8:ac:11:b8:8d:ab:7f:52:5b:65:64: 3c:60:66:0c:73:7c:2c:5b:93:0f:d6:1b:1f:02:35: 6c:a4:4e:66:b3:3d:0c:54:78:f8:55:7d:ae:dc:e2: e8:e4:51:a1:31:49:08:cb:ab:8b:ea:f2:f0:b7:8c: 83:7f:f8:1a:19:24:ee:d9:fb:e1:3a:bf:c7:66:51: 13:52:cf:3a:a6:af:ef:1b:13:6f:71:32:7f:74:87: b4:49:ca:8f:82:51:2b:11:8f:a4:da:fa:87:ab:b2: 28:94:a8:0d:8b:b4:11:84:98:98:c8:14:e7:3a:35: 06:e6:32:86:f9:02:b3:3c:87:6c:62:91:a9:f5:a5: 03:10:a8:a3:c1:9c:44:45:46:ab:58:bf:9b:b5:04: 4d:0e:d7:c1:c6:e3:87:eb:af:7f:52:dc:c8:6c:d2: c0:cb:b9:65:ca:dc:89:93:72:56:32:f1:da:ad:ae: 67:33:a6:e7:3c:02:60:27:c5:a2:c2:0b:45:f9:c0: 60:b6:26:41:24:82:c8:04:fb:34:85:b0:f8:ea:5f: 0c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:62:19:73:E2:FC:F9:D0:10:03:0A:F0:67:C8:20:70:79:2A:B0:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/98d21f17-4a0c-36f6-a070-6808cb50ec98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/954e2959-b160-4ffa-86b4-aaa94863154c.crl X509v3 Authority Key Identifier: keyid:7A:0D:9D:66:5A:CD:4F:54:DB:65:04:14:29:CB:05:0D:D9:7D:51:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c.cer sbgp-ipAddrBlock: critical IPv4: 149.248.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:46:a1:f5:53:82:7b:d2:7f:73:93:b2:7d:02:b0:72:4d:96: 8f:dd:c0:ad:20:b0:65:f4:0b:54:6f:93:dd:82:b9:a0:38:07: d9:b4:1b:05:a8:09:ee:54:48:a3:15:37:3a:e2:f8:64:dc:70: 88:dc:f1:87:13:df:5c:d5:af:03:28:09:88:b3:23:55:0e:13: c1:f4:88:4b:4c:33:e8:4b:13:4c:0c:35:95:8a:0b:e8:2b:98: 1f:5c:7a:80:f5:fd:8a:be:90:ae:dc:73:5b:f4:a1:c2:96:73: cc:95:e4:e3:62:d8:68:5b:77:c2:c4:23:50:b9:b5:5d:08:27: b1:ee:3b:5a:97:05:d6:20:40:47:a3:af:67:57:1a:e8:68:5e: a4:a6:51:39:19:f2:09:81:22:e8:02:94:9c:0f:2d:ff:fc:f7: a6:93:0f:e6:cd:99:83:8d:b9:47:03:e0:31:16:41:25:d7:dc: dc:e6:19:53:7d:1e:70:1f:e4:b4:15:8a:8c:d5:45:1c:58:e5: b6:43:82:61:30:5f:5f:a4:fd:ab:e3:cf:30:a6:1b:07:53:e3: b0:c8:c9:91:92:1e:94:79:95:c4:c7:a5:c1:51:15:1c:7b:96: 51:c7:d4:d2:a2:48:7c:91:aa:f2:b5:bf:a6:58:ba:f1:89:92: 26:c3:8c:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FXdh7Wgfglxw6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTU0ZTI5NTktYjE2MC00ZmZhLTg2YjQtYWFhOTQ4NjMx NTRjMB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk MjdmMTVjYTEtMzAwNS00MDJiLTgwZmItYmMwMzYwMTQ1NDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqWc5Wx6saPIdQjXAL1wx0aNlwnuCgii/qIL AXYQfCLQOKsHgZP1opY8Fl+BAftuyKwRuI2rf1JbZWQ8YGYMc3wsW5MP1hsfAjVs pE5msz0MVHj4VX2u3OLo5FGhMUkIy6uL6vLwt4yDf/gaGSTu2fvhOr/HZlETUs86 pq/vGxNvcTJ/dIe0ScqPglErEY+k2vqHq7IolKgNi7QRhJiYyBTnOjUG5jKG+QKz PIdsYpGp9aUDEKijwZxERUarWL+btQRNDtfBxuOH669/UtzIbNLAy7llytyJk3JW MvHara5nM6bnPAJgJ8WiwgtF+cBgtiZBJILIBPs0hbD46l8MCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLNiGXPi/PnQEAMK8GfIIHB5KrCSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85NTRl Mjk1OS1iMTYwLTRmZmEtODZiNC1hYWE5NDg2MzE1NGMvOThkMjFmMTctNGEwYy0z NmY2LWEwNzAtNjgwOGNiNTBlYzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTU0ZTI5NTktYjE2MC00ZmZhLTg2 YjQtYWFhOTQ4NjMxNTRjLzk1NGUyOTU5LWIxNjAtNGZmYS04NmI0LWFhYTk0ODYz MTU0Yy5jcmwwHwYDVR0jBBgwFoAUeg2dZlrNT1TbZQQUKcsFDdl9UbwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85NTRlMjk1OS1iMTYwLTRmZmEtODZiNC1hYWE5 NDg2MzE1NGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFlfiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdGofVTgnvSf3OTsn0CsHJNlo/dwK0gsGX0C1Rvk92CuaA4B9m0GwWo Ce5USKMVNzri+GTccIjc8YcT31zVrwMoCYizI1UOE8H0iEtMM+hLE0wMNZWKC+gr mB9ceoD1/Yq+kK7cc1v0ocKWc8yV5ONi2Ghbd8LEI1C5tV0IJ7HuO1qXBdYgQEej r2dXGuhoXqSmUTkZ8gmBIugClJwPLf/896aTD+bNmYONuUcD4DEWQSXX3NzmGVN9 HnAf5LQViozVRRxY5bZDgmEwX1+k/avjzzCmGwdT47DIyZGSHpR5lcTHpcFRFRx7 llHH1NKiSHyRqvK1v6ZYuvGJkibDjPE= -----END CERTIFICATE-----Generated at Mon Jun 30 17:26:20 2025 by rpki-client