$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/a25873ed-8451-344c-af7e-66515db40f53.roa File: a25873ed-8451-344c-af7e-66515db40f53.roa (raw, json) Hash identifier: SOxF0RgXFWyIRJvkObRctmW3N1piN+lNYpL5vCAOVYw= Subject key identifier: 18:30:31:80:A7:EA:02:37:84:CF:02:4E:55:67:08:18:16:55:B5:54 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584A4C3B1D8452436733428443E0 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/a25873ed-8451-344c-af7e-66515db40f53.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 30132 IP address blocks: 149.20.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:1d:84:52:43:67:33:42:84:43:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=b4a38f09-93ac-4263-99e5-9764c1a2b413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3f:7a:26:cb:e8:d9:d3:b0:87:e0:25:3b:77: 29:d6:dc:48:4b:fc:77:76:e5:95:2f:90:7f:29:13: 3c:53:a5:e4:19:aa:25:6a:34:ae:44:ab:cd:c5:e8: 6e:4b:20:58:c2:d9:2e:3e:8b:73:ae:8b:43:ae:08: a9:64:e7:b1:01:24:37:74:72:ad:9c:a8:69:3c:f4: a3:11:19:19:bd:92:9d:3e:16:a0:a4:bb:8a:ea:d0: 82:95:62:ca:27:4e:69:f7:cc:92:3c:1c:db:95:f8: e0:38:ba:f6:d4:f0:f9:62:36:42:26:3e:a2:c8:d9: d0:32:c2:17:ed:2f:d8:6c:51:ab:60:a0:ac:e9:f4: 3e:88:47:23:92:bb:48:af:ee:c9:48:62:a9:ae:dd: 46:b5:6b:65:41:07:f4:1c:f3:6b:da:b4:22:6b:4f: c0:09:83:53:ab:4f:5b:c8:97:4c:8e:20:0e:95:6e: 07:5d:82:02:76:d5:fa:1c:63:0a:27:a0:d4:a9:af: 2e:09:1e:7f:57:ee:d6:38:30:0b:b2:49:9e:c1:27: 6b:40:1d:21:29:b6:1a:8d:e0:41:e7:01:a8:a0:e4: 34:9f:ec:a2:14:6a:d2:70:b4:e6:2f:76:7e:47:11: e6:f0:59:22:d0:e4:06:e9:1b:c2:9a:5b:2a:a8:b2: 76:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:30:31:80:A7:EA:02:37:84:CF:02:4E:55:67:08:18:16:55:B5:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/a25873ed-8451-344c-af7e-66515db40f53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:69:9d:0e:3d:3f:47:6b:02:e7:c5:ff:26:2c:da:11:57:2a: 0e:8f:3e:23:b0:de:74:95:4a:5d:98:5d:be:3e:ab:04:f9:7e: e5:46:39:d6:1d:d1:22:37:a4:1f:ae:39:d8:78:c9:12:4d:93: 0d:2c:63:e3:06:90:50:43:ff:f8:b8:a2:39:25:9b:9f:66:1a: 85:e2:73:18:5f:c5:ee:9c:62:66:e1:e8:f4:72:45:a0:64:58: ae:22:4c:5c:80:8d:f0:84:64:04:34:cf:f8:dc:e7:15:f6:37: a9:46:70:52:d2:bc:b2:8a:b3:8a:79:e9:4e:97:34:88:e3:58: 91:16:64:55:72:fb:7b:28:a4:33:81:3f:19:bd:49:bb:fc:53: 35:96:2a:f4:32:63:53:7d:66:98:dd:97:2c:f6:22:18:30:6a: 07:96:45:ca:fc:58:d2:f3:cd:a5:40:b5:1b:5d:0a:79:4f:cc: 48:78:31:a6:14:32:30:c4:2d:9d:e8:a6:9c:7f:04:d3:f3:ce: 90:26:e0:bd:49:5a:dc:2e:38:25:ce:9d:ed:8a:f6:48:ca:c2: 36:0b:f5:41:e4:d9:a4:56:fa:4a:31:52:8a:53:92:01:47:a6: fc:5a:a0:99:52:bb:8f:4a:95:3e:5c:16:ec:90:52:62:2d:75: 51:74:26:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOx2EUkNnM0KEQ+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk YjRhMzhmMDktOTNhYy00MjYzLTk5ZTUtOTc2NGMxYTJiNDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvT96Jsvo2dOwh+AlO3cp1txIS/x3duWVL5B/ KRM8U6XkGaolajSuRKvNxehuSyBYwtkuPotzrotDrgipZOexASQ3dHKtnKhpPPSj ERkZvZKdPhagpLuK6tCClWLKJ05p98ySPBzblfjgOLr21PD5YjZCJj6iyNnQMsIX 7S/YbFGrYKCs6fQ+iEcjkrtIr+7JSGKprt1GtWtlQQf0HPNr2rQia0/ACYNTq09b yJdMjiAOlW4HXYICdtX6HGMKJ6DUqa8uCR5/V+7WODALskmewSdrQB0hKbYajeBB 5wGooOQ0n+yiFGrScLTmL3Z+RxHm8Fki0OQG6RvCmlsqqLJ2tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBgwMYCn6gI3hM8CTlVnCBgWVbVUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvYTI1ODczZWQtODQ1MS0z NDRjLWFmN2UtNjY1MTVkYjQwZjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRQFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBpnQ49P0drAufF/yYs2hFXKg6PPiOw3nSVSl2YXb4+qwT5fuVGOdYd 0SI3pB+uOdh4yRJNkw0sY+MGkFBD//i4ojklm59mGoXicxhfxe6cYmbh6PRyRaBk WK4iTFyAjfCEZAQ0z/jc5xX2N6lGcFLSvLKKs4p56U6XNIjjWJEWZFVy+3sopDOB Pxm9Sbv8UzWWKvQyY1N9Zpjdlyz2IhgwageWRcr8WNLzzaVAtRtdCnlPzEh4MaYU MjDELZ3oppx/BNPzzpAm4L1JWtwuOCXOne2K9kjKwjYL9UHk2aRW+koxUopTkgFH pvxaoJlSu49KlT5cFuyQUmItdVF0Jig= -----END CERTIFICATE-----Generated at Sun Jun 29 16:34:13 2025 by rpki-client