$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/146e5fc4-91b0-37d5-bddc-8ae821bfe7cb.roa File: 146e5fc4-91b0-37d5-bddc-8ae821bfe7cb.roa (raw, json) Hash identifier: UuQaQIkbUCEuPBrHSjBrOfeGwvcul+DUKQJ4K3zbgGg= Subject key identifier: 75:55:C3:DD:20:6A:70:44:52:79:B5:31:23:D8:BC:03:7C:F8:C0:FC Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584A4C3B1D6F2F801E5076A94D40 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/146e5fc4-91b0-37d5-bddc-8ae821bfe7cb.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 27321 IP address blocks: 149.20.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:1d:6f:2f:80:1e:50:76:a9:4d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=8b6b3f00-e863-49a6-91dd-287737d2e6a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:32:2c:7f:1c:91:25:70:c7:96:97:3b:ff:1b: c7:e3:3a:db:3d:03:42:ed:da:53:03:b6:a6:69:36: c6:12:bc:1e:25:f8:0e:f8:3e:34:2d:a2:73:da:2b: 34:41:69:a8:c9:57:96:dd:bf:1a:b5:e6:f5:82:96: 68:29:d1:11:37:97:53:fc:1f:68:7d:ef:b4:d6:43: 4e:7d:1e:80:f8:f1:98:3a:af:eb:e4:65:f7:cb:12: 24:ad:6f:c7:31:60:8c:17:21:e5:32:79:14:40:58: 2b:ee:e3:ab:59:da:9f:40:5b:82:da:aa:25:fc:9b: 2f:08:1d:5a:fb:c8:89:6f:70:5e:b3:a9:b0:1a:63: 63:62:5f:68:5f:25:4a:26:18:4d:8d:16:d7:79:c8: 79:b8:d8:ca:39:d4:c3:bd:8a:6d:29:52:b4:3a:17: e7:77:b7:54:dd:94:50:a2:ea:8b:cf:a5:32:d1:e1: c7:b2:65:6e:25:51:32:fb:d0:ec:59:0a:bb:44:42: c2:3b:13:51:33:46:66:61:1c:70:74:fe:2b:7a:83: 56:ba:10:62:a4:6e:06:1a:71:64:6e:dd:41:d5:32: 39:16:42:32:33:78:54:f1:4b:bd:84:82:26:e4:61: 30:55:21:d4:75:91:79:c6:3d:99:3c:b4:12:2c:87: 6e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:55:C3:DD:20:6A:70:44:52:79:B5:31:23:D8:BC:03:7C:F8:C0:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/146e5fc4-91b0-37d5-bddc-8ae821bfe7cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:e4:c7:06:4f:8c:df:6b:8c:62:44:ab:e5:c9:4f:3f:2a:46: e9:e9:b4:de:f7:ac:cc:08:05:0d:b6:17:89:0f:58:c6:ab:80: f4:0e:dc:b7:b2:c5:0f:4f:33:90:d9:4c:ed:30:10:55:45:2c: 8d:00:77:6f:33:0b:32:58:12:f5:ac:1f:ba:ad:24:bc:69:0b: db:55:00:ab:67:17:06:1d:12:64:47:2c:53:a0:97:c5:29:ad: c6:f5:67:95:b6:db:32:3a:c7:ed:c6:cf:cc:63:ec:5e:58:71: db:80:d5:6a:95:7e:eb:8c:0c:6a:0e:d1:76:1a:85:7c:c7:7b: 6e:5b:c5:20:b5:c9:1b:8d:03:f1:b3:5a:77:1d:cb:7b:b9:93: 5c:aa:f9:8d:4a:6c:21:5e:bd:6e:b6:6e:a5:c3:cd:99:0e:17: 10:c9:f8:b5:97:48:74:36:ac:50:28:0e:e4:d2:5e:12:14:9a: 6b:6b:4f:2b:bd:0e:0d:d4:2d:94:0c:86:0e:e7:02:a4:92:07: b5:f1:a9:aa:f7:0c:e0:f7:58:06:bc:0e:43:90:3b:fb:f2:68: d4:4d:fb:f0:26:b2:84:8d:d2:7c:a9:d0:f9:94:21:ca:c5:61: b2:8c:70:61:df:5f:b6:39:c2:15:cd:b5:f3:b1:11:7d:e0:40: 48:0e:a9:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOx1vL4AeUHapTUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk OGI2YjNmMDAtZTg2My00OWE2LTkxZGQtMjg3NzM3ZDJlNmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDIsfxyRJXDHlpc7/xvH4zrbPQNC7dpTA7am aTbGErweJfgO+D40LaJz2is0QWmoyVeW3b8ateb1gpZoKdERN5dT/B9ofe+01kNO fR6A+PGYOq/r5GX3yxIkrW/HMWCMFyHlMnkUQFgr7uOrWdqfQFuC2qol/JsvCB1a +8iJb3Bes6mwGmNjYl9oXyVKJhhNjRbXech5uNjKOdTDvYptKVK0Ohfnd7dU3ZRQ ouqLz6Uy0eHHsmVuJVEy+9DsWQq7RELCOxNRM0ZmYRxwdP4reoNWuhBipG4GGnFk bt1B1TI5FkIyM3hU8Uu9hIIm5GEwVSHUdZF5xj2ZPLQSLIduxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHVVw90ganBEUnm1MSPYvAN8+MD8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvMTQ2ZTVmYzQtOTFiMC0z N2Q1LWJkZGMtOGFlODIxYmZlN2NiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRQEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPkxwZPjN9rjGJEq+XJTz8qRunptN73rMwIBQ22F4kPWMargPQO3Ley xQ9PM5DZTO0wEFVFLI0Ad28zCzJYEvWsH7qtJLxpC9tVAKtnFwYdEmRHLFOgl8Up rcb1Z5W22zI6x+3Gz8xj7F5YcduA1WqVfuuMDGoO0XYahXzHe25bxSC1yRuNA/Gz Wncdy3u5k1yq+Y1KbCFevW62bqXDzZkOFxDJ+LWXSHQ2rFAoDuTSXhIUmmtrTyu9 Dg3ULZQMhg7nAqSSB7Xxqar3DOD3WAa8DkOQO/vyaNRN+/AmsoSN0nyp0PmUIcrF YbKMcGHfX7Y5whXNtfOxEX3gQEgOqXk= -----END CERTIFICATE-----Generated at Sun Jun 29 16:39:02 2025 by rpki-client