$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/a91395db-8f35-3e47-962d-19b64b128e81.roa File: a91395db-8f35-3e47-962d-19b64b128e81.roa (raw, json) Hash identifier: 9McBQtm0l/n2nCusk711JzJCM7efMpUUZVN0YVoOp2U= Subject key identifier: 9D:E5:AF:32:3C:0A:7E:E0:6E:17:D5:C7:1D:BA:CF:1A:CC:EF:88:47 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F43285849D42FA1C7DD65306A8E40CD40 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/a91395db-8f35-3e47-962d-19b64b128e81.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 55440 IP address blocks: 149.20.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:a1:c7:dd:65:30:6a:8e:40:cd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=43ba00c5-bb03-4203-b861-af3525b0ed52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:18:b2:c0:ac:60:cc:c3:79:b4:7d:c0:2a:fe: 09:79:cd:3a:2e:aa:40:20:6d:1b:fa:14:ca:bc:b6: 04:8a:de:40:b5:da:2f:de:2a:9d:0a:84:a3:61:bd: 6f:dc:10:da:75:88:a1:9c:fc:79:cb:b0:01:a7:4d: 5b:39:4e:d5:86:8b:46:19:e4:de:69:9f:07:69:76: d0:c2:64:65:ea:9f:e5:76:32:0d:62:f4:cb:11:96: 0f:ea:70:a3:31:9f:0d:20:77:f9:df:be:b5:f5:d1: 9a:48:2f:99:40:4c:8d:33:e7:be:60:db:62:b5:79: 6f:59:f8:88:18:91:8a:1d:4c:83:d2:c2:48:92:3d: 50:21:ab:24:5d:e1:de:95:f2:e7:7b:ef:16:76:73: 5a:6a:f0:9e:4b:13:71:81:92:01:61:3c:7d:34:36: de:de:3b:42:04:cd:53:0c:c6:16:93:0c:68:f0:fd: 93:46:e9:3d:d6:06:5d:41:2f:83:ea:72:4e:7b:97: 9c:b1:6b:02:a3:11:35:b4:89:f6:0c:bd:0e:42:20: eb:8c:91:b5:38:41:e0:14:c9:a7:6f:98:f9:ab:ca: 01:d1:19:06:ca:ca:eb:f6:25:41:c1:2d:46:93:78: 7a:78:dc:a6:c1:90:dd:ec:73:09:3c:b9:39:ca:a6: 5e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E5:AF:32:3C:0A:7E:E0:6E:17:D5:C7:1D:BA:CF:1A:CC:EF:88:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/a91395db-8f35-3e47-962d-19b64b128e81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:b1:57:54:52:2a:c5:fb:a5:ca:a2:dc:bb:eb:6b:b3:45:8c: cb:20:1c:74:07:84:27:4d:5a:b1:f5:ce:9d:17:be:99:dd:e9: 04:f2:08:6c:ba:2d:ab:d9:06:1d:0d:c4:da:46:41:4d:af:78: 19:7b:7c:08:7f:3d:fb:98:ee:62:2e:38:83:2b:c4:30:69:0b: 9a:64:ea:9a:54:17:37:c4:b1:a1:29:ba:c3:18:e4:7d:7d:3a: 04:03:3e:b2:f0:0b:07:43:07:93:ec:cf:4e:02:c3:78:c7:10: 89:4c:8d:6f:86:6e:4c:4f:a0:2f:4c:89:d2:f8:a4:cb:34:19: fc:b8:2b:db:63:b6:1e:5c:6e:59:7b:21:70:34:d5:de:12:56: 3b:89:ad:19:08:b5:e4:68:1a:06:f5:ff:f8:7e:92:d9:59:eb: 95:9f:b7:85:1f:33:a4:b8:ea:ea:74:93:f8:0c:64:e6:35:be: 30:2f:36:b4:ca:5b:85:ab:0a:6b:ac:96:68:18:68:54:2a:0b: eb:a9:eb:21:66:f1:8c:e7:83:dc:97:64:bc:aa:09:fd:90:80: 74:46:09:9e:1f:a0:93:66:45:a5:4f:32:e2:e3:77:ac:91:d7: 51:90:78:be:65:90:df:4f:17:3f:0e:3b:13:77:d2:b3:5f:f3: 34:c7:a6:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL6HH3WUwao5AzUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk NDNiYTAwYzUtYmIwMy00MjAzLWI4NjEtYWYzNTI1YjBlZDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphiywKxgzMN5tH3AKv4Jec06LqpAIG0b+hTK vLYEit5Atdov3iqdCoSjYb1v3BDadYihnPx5y7ABp01bOU7VhotGGeTeaZ8HaXbQ wmRl6p/ldjINYvTLEZYP6nCjMZ8NIHf537619dGaSC+ZQEyNM+e+YNtitXlvWfiI GJGKHUyD0sJIkj1QIaskXeHelfLne+8WdnNaavCeSxNxgZIBYTx9NDbe3jtCBM1T DMYWkwxo8P2TRuk91gZdQS+D6nJOe5ecsWsCoxE1tIn2DL0OQiDrjJG1OEHgFMmn b5j5q8oB0RkGysrr9iVBwS1Gk3h6eNymwZDd7HMJPLk5yqZeMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3lrzI8Cn7gbhfVxx26zxrM74hHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvYTkxMzk1ZGItOGYzNS0z ZTQ3LTk2MmQtMTliNjRiMTI4ZTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRQLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFexV1RSKsX7pcqi3Lvra7NFjMsgHHQHhCdNWrH1zp0Xvpnd6QTyCGy6 LavZBh0NxNpGQU2veBl7fAh/PfuY7mIuOIMrxDBpC5pk6ppUFzfEsaEpusMY5H19 OgQDPrLwCwdDB5Psz04Cw3jHEIlMjW+GbkxPoC9MidL4pMs0Gfy4K9tjth5cbll7 IXA01d4SVjuJrRkIteRoGgb1//h+ktlZ65Wft4UfM6S46up0k/gMZOY1vjAvNrTK W4WrCmuslmgYaFQqC+up6yFm8Yzng9yXZLyqCf2QgHRGCZ4foJNmRaVPMuLjd6yR 11GQeL5lkN9PFz8OOxN30rNf8zTHpm4= -----END CERTIFICATE-----Generated at Sun Jun 29 15:59:02 2025 by rpki-client