$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/1b7eba2f-7375-388c-aa89-d907adaf73d5.roa File: 1b7eba2f-7375-388c-aa89-d907adaf73d5.roa (raw, json) Hash identifier: scZwa8RNG+5dt1GADqWFEUaP4G9RaLjJxf/vyzoSNoI= Subject key identifier: 04:68:C4:0D:9A:B3:E9:E3:A9:7C:5C:9B:A3:12:76:53:44:7E:C2:1F Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F43285849D42FA1AE62D05146C455F7C0 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/1b7eba2f-7375-388c-aa89-d907adaf73d5.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 14618 IP address blocks: 149.20.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:a1:ae:62:d0:51:46:c4:55:f7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=b6794463-9b70-4f8c-a0bb-ac2c60be1e42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:67:a0:39:8a:26:35:fd:5c:7d:08:a2:87:82: 1f:13:ea:6a:c9:1b:f1:e0:44:ec:a2:e0:28:37:20: 26:ef:e7:22:3c:64:e2:4e:a4:db:5f:a6:6b:dc:38: 72:96:2b:07:69:6d:cb:fd:8d:7b:aa:53:e1:b4:e0: cc:71:62:3a:36:2a:a2:f3:4f:11:df:5e:8f:31:cb: 89:15:c4:07:ec:bd:4c:8a:ce:a2:24:a4:17:87:b1: aa:81:74:a2:fc:f2:69:1a:f6:5c:b0:cb:aa:e0:1b: 8e:6f:ab:a2:8a:b7:f6:94:9b:7e:3c:dd:c3:ba:82: 4f:64:97:98:5d:0d:8f:37:27:b7:98:27:99:21:32: 5e:21:53:ba:db:86:aa:5c:d8:71:fc:0a:98:d8:dc: 61:ec:c5:2d:67:45:7f:18:28:2e:8a:2e:9b:e2:86: 4e:8d:31:a9:72:3d:b7:2d:15:49:e9:c4:ab:4a:6f: 34:66:98:1d:e0:66:58:f9:fb:44:99:00:8f:ea:a2: 0d:d0:a3:8a:d0:25:04:d5:d1:e6:f4:bd:a4:c8:ec: a5:4c:51:42:56:66:8d:57:c1:e0:d1:64:13:a4:88: 72:c6:99:1f:9d:7d:ef:c3:15:1e:62:3a:1f:79:a7: f6:d4:23:c8:49:66:27:0d:ba:96:54:78:56:3b:d5: 02:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:68:C4:0D:9A:B3:E9:E3:A9:7C:5C:9B:A3:12:76:53:44:7E:C2:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/1b7eba2f-7375-388c-aa89-d907adaf73d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:1d:b3:36:15:64:83:b5:8e:65:9f:e1:de:0c:f7:da:cc:3a: 5d:2e:b2:96:6b:b9:9a:8f:32:db:4a:1e:74:5b:9d:e2:ae:5b: 50:d9:41:7d:ff:93:92:0d:01:89:69:ea:b2:2d:83:7f:86:c4: ed:3c:8c:ee:66:e1:2c:f7:5a:0b:2e:57:48:a4:88:49:20:3f: 2c:ca:9f:d1:fc:16:19:c9:69:99:c6:c8:04:98:7b:59:3d:65: 2a:b8:fa:db:c2:f6:d9:5a:7c:3f:29:10:ef:0a:1e:70:38:84: f5:6a:bd:71:83:88:4e:ca:a1:7e:0d:3d:32:37:1a:b6:8c:db: ee:ea:5b:d4:d9:d9:fb:af:4f:82:d5:38:75:65:a4:76:5f:65: fb:5d:b0:62:7e:66:63:ea:ad:45:03:37:98:6a:6e:49:16:fe: 0c:06:d0:c9:9d:9d:3b:e7:41:d4:f1:b9:26:b8:f9:d4:65:84: 43:5c:40:fd:d8:4c:d8:85:42:68:b4:28:55:28:85:28:a6:f8: 27:74:ad:45:2e:f4:4e:74:10:2d:45:e8:f3:61:81:a2:5b:34: cb:ae:15:80:05:c9:d6:0d:75:be:f1:a1:36:5d:e9:bc:0b:57: e0:73:96:9d:84:f8:6b:65:ee:4a:c2:a8:20:cd:68:00:5c:b0: a8:2b:83:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL6GuYtBRRsRV98AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk YjY3OTQ0NjMtOWI3MC00ZjhjLWEwYmItYWMyYzYwYmUxZTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmegOYomNf1cfQiih4IfE+pqyRvx4ETsouAo NyAm7+ciPGTiTqTbX6Zr3DhylisHaW3L/Y17qlPhtODMcWI6Niqi808R316PMcuJ FcQH7L1Mis6iJKQXh7GqgXSi/PJpGvZcsMuq4BuOb6uiirf2lJt+PN3DuoJPZJeY XQ2PNye3mCeZITJeIVO624aqXNhx/AqY2Nxh7MUtZ0V/GCguii6b4oZOjTGpcj23 LRVJ6cSrSm80Zpgd4GZY+ftEmQCP6qIN0KOK0CUE1dHm9L2kyOylTFFCVmaNV8Hg 0WQTpIhyxpkfnX3vwxUeYjofeaf21CPISWYnDbqWVHhWO9UCcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFARoxA2as+njqXxcm6MSdlNEfsIfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvMWI3ZWJhMmYtNzM3NS0z ODhjLWFhODktZDkwN2FkYWY3M2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRQLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIdszYVZIO1jmWf4d4M99rMOl0uspZruZqPMttKHnRbneKuW1DZQX3/ k5INAYlp6rItg3+GxO08jO5m4Sz3WgsuV0ikiEkgPyzKn9H8FhnJaZnGyASYe1k9 ZSq4+tvC9tlafD8pEO8KHnA4hPVqvXGDiE7KoX4NPTI3GraM2+7qW9TZ2fuvT4LV OHVlpHZfZftdsGJ+ZmPqrUUDN5hqbkkW/gwG0MmdnTvnQdTxuSa4+dRlhENcQP3Y TNiFQmi0KFUohSim+Cd0rUUu9E50EC1F6PNhgaJbNMuuFYAFydYNdb7xoTZd6bwL V+Bzlp2E+Gtl7krCqCDNaABcsKgrg7k= -----END CERTIFICATE-----Generated at Sun Jun 29 01:28:40 2025 by rpki-client