$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/98b687f8-5555-317b-883c-d05f50660cd6.roa File: 98b687f8-5555-317b-883c-d05f50660cd6.roa (raw, json) Hash identifier: P0GbT2YWTJ1s0SqK3FSPOWrfmeTTBlfi+yJqbIbFiFo= Subject key identifier: 93:C6:FF:6B:3C:1C:75:0A:39:CC:37:E7:6B:D2:A2:44:1B:21:B5:97 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584A4970730446D8291140D40780 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/98b687f8-5555-317b-883c-d05f50660cd6.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 27321 IP address blocks: 149.20.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:73:04:46:d8:29:11:40:d4:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=e97b1592-d559-4d5e-b620-050f07533908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ad:af:23:f9:0c:8c:3d:b6:34:ad:ef:38:8a: 3b:cb:74:55:42:b7:aa:a7:b0:fd:43:3b:13:1b:c0: 93:43:b2:4a:09:15:73:f1:08:c3:98:c5:ee:50:09: e7:6c:cd:8b:db:98:ac:f5:3e:23:ef:4f:4e:1c:b2: f1:96:77:18:38:52:41:0a:1a:8b:d6:c1:e8:65:9c: 52:41:90:be:ba:79:85:4b:44:77:60:a1:36:99:d9: 82:ee:af:a4:5d:4e:2e:c6:b3:10:fa:d9:a8:7c:cb: 6e:aa:12:3f:32:70:c9:d8:ed:cd:3a:6e:bc:86:8c: 9f:7a:65:7f:ef:d6:50:c1:c1:7d:3c:70:54:8c:c0: 9e:f7:80:7f:5c:ee:10:bb:c1:c0:da:ee:e2:87:21: 52:31:ea:39:14:14:ff:31:ad:b0:6b:5a:5a:88:f1: 77:99:87:b9:d5:f3:30:10:f8:e6:08:e6:c7:17:4f: 60:2f:4f:2b:7c:a3:42:3f:80:49:8e:2f:37:4c:f5: 8c:b9:e7:7d:7a:bb:18:72:50:f2:7b:31:ed:c4:4e: a0:4d:da:75:d5:a5:87:d4:06:4a:d1:2d:19:9b:df: 42:f0:a1:76:9d:8e:a9:b5:50:d7:fd:16:99:da:aa: bc:ba:84:ec:27:83:ab:dc:a1:1a:f8:7c:8b:17:6f: a3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C6:FF:6B:3C:1C:75:0A:39:CC:37:E7:6B:D2:A2:44:1B:21:B5:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/98b687f8-5555-317b-883c-d05f50660cd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:47:b2:ef:aa:2f:95:9a:07:c7:d7:3b:a5:83:bf:15:78:54: d7:c9:c3:bc:c1:90:cb:ad:13:2b:85:d5:cd:23:9d:24:6a:2b: bc:ad:de:3e:29:72:9d:ad:55:af:26:79:37:f9:b8:b5:77:f1: e7:ce:d5:58:14:87:35:6e:8e:06:36:bc:8d:d0:24:6e:f0:d1: b5:1e:f0:11:7a:ab:79:94:dd:88:ea:b2:86:c6:62:b4:83:d4: 91:13:75:cd:90:74:17:d8:62:60:3f:31:be:4d:dc:02:e0:10: 64:34:6b:79:cc:ac:e3:af:46:97:7f:21:e8:ad:97:8e:8b:0c: 75:d7:e2:b1:6e:60:a9:26:6f:0a:91:d0:98:ef:50:3e:37:82: d6:bc:d1:28:ff:a4:06:05:79:3c:4b:8b:c6:32:84:a5:d3:02: b2:38:a4:fa:92:91:8c:62:84:c1:14:54:ae:c8:13:b5:7f:d5: e2:ae:7c:56:cb:e9:ab:3d:0a:b0:48:15:06:6b:2c:1d:b1:4c: 88:48:ee:32:32:04:2c:7d:ac:6c:83:d6:e8:2f:9c:25:a6:85: 76:be:b4:1c:b6:0a:82:a4:d5:82:70:3e:53:ce:b0:56:83:c8: d3:4f:de:7e:59:43:18:5b:9c:f8:87:99:3a:64:0a:4b:a8:97: f5:a8:27:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcHMERtgpEUDUB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk ZTk3YjE1OTItZDU1OS00ZDVlLWI2MjAtMDUwZjA3NTMzOTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm62vI/kMjD22NK3vOIo7y3RVQreqp7D9QzsT G8CTQ7JKCRVz8QjDmMXuUAnnbM2L25is9T4j709OHLLxlncYOFJBChqL1sHoZZxS QZC+unmFS0R3YKE2mdmC7q+kXU4uxrMQ+tmofMtuqhI/MnDJ2O3NOm68hoyfemV/ 79ZQwcF9PHBUjMCe94B/XO4Qu8HA2u7ihyFSMeo5FBT/Ma2wa1paiPF3mYe51fMw EPjmCObHF09gL08rfKNCP4BJji83TPWMued9ersYclDyezHtxE6gTdp11aWH1AZK 0S0Zm99C8KF2nY6ptVDX/RaZ2qq8uoTsJ4Or3KEa+HyLF2+jAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJPG/2s8HHUKOcw352vSokQbIbWXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvOThiNjg3ZjgtNTU1NS0z MTdiLTg4M2MtZDA1ZjUwNjYwY2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRQDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdHsu+qL5WaB8fXO6WDvxV4VNfJw7zBkMutEyuF1c0jnSRqK7yt3j4p cp2tVa8meTf5uLV38efO1VgUhzVujgY2vI3QJG7w0bUe8BF6q3mU3YjqsobGYrSD 1JETdc2QdBfYYmA/Mb5N3ALgEGQ0a3nMrOOvRpd/Ieitl46LDHXX4rFuYKkmbwqR 0JjvUD43gta80Sj/pAYFeTxLi8YyhKXTArI4pPqSkYxihMEUVK7IE7V/1eKufFbL 6as9CrBIFQZrLB2xTIhI7jIyBCx9rGyD1ugvnCWmhXa+tBy2CoKk1YJwPlPOsFaD yNNP3n5ZQxhbnPiHmTpkCkuol/WoJwE= -----END CERTIFICATE-----Generated at Mon Jun 30 14:11:02 2025 by rpki-client