$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/73cb58cc-0f0a-3c7d-8518-54f1e7a71037.roa File: 73cb58cc-0f0a-3c7d-8518-54f1e7a71037.roa (raw, json) Hash identifier: xcGbyHghMw+hDIPoAsAQDfSrr6tvSJMZS5/Jd5xGkt0= Subject key identifier: 23:BE:86:E9:7F:31:F9:4A:F9:12:EA:1A:C8:8C:33:B1:16:4C:81:D7 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584A1E2AAB1944A2EEAD5C68C480 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/73cb58cc-0f0a-3c7d-8518-54f1e7a71037.roa Signing time: Sun 08 Jun 2025 01:00:49 +0000 ROA not before: Sun 08 Jun 2025 01:00:49 +0000 ROA not after: Sat 06 Sep 2025 01:00:49 +0000 asID: 399629 IP address blocks: 149.248.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1e:2a:ab:19:44:a2:ee:ad:5c:68:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Jun 8 01:00:49 2025 GMT Not After : Sep 6 01:00:49 2025 GMT Subject: CN=85c8b796-14b0-4c1f-88be-f0d3ebd5f821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ca:ff:e7:1c:1a:9d:88:8a:0e:48:23:28:62: 2d:73:53:06:50:47:ec:c3:63:e9:21:c5:75:6a:16: a2:06:8d:13:37:93:81:ed:11:8a:d6:9c:28:b6:56: c7:ca:d0:13:02:23:42:53:f5:f9:73:07:26:1f:62: 3e:23:da:10:0a:5c:dd:28:07:df:1e:47:10:11:9f: c8:24:3a:6a:df:ef:80:18:ab:9e:31:5b:c6:8a:5b: 0f:f7:0e:02:52:d8:44:07:c3:fa:5f:58:02:fa:34: b7:01:7c:cb:b5:30:61:7e:08:f1:ea:d0:6a:8e:54: 3d:4f:cb:1d:18:6f:77:28:14:74:78:25:8e:7b:c3: a0:15:ea:de:d2:ba:c7:31:af:be:35:f8:4c:99:c8: bf:65:b4:ba:fa:4e:39:03:a0:be:23:be:84:36:2c: 29:55:1e:9c:29:1f:72:4b:dd:49:ff:6d:71:60:9a: 14:54:63:a5:d7:f4:13:23:dd:9c:00:2b:79:8a:6b: aa:82:24:7f:87:f1:d6:ac:ca:9e:62:eb:71:4f:32: 07:3f:ca:cb:4f:ad:6c:b7:61:1f:4b:83:80:f5:da: c0:97:70:93:02:04:48:c7:43:91:89:e8:f9:29:6a: ad:26:88:96:bc:1c:f8:c0:46:a9:20:7d:a1:aa:ce: 6c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:BE:86:E9:7F:31:F9:4A:F9:12:EA:1A:C8:8C:33:B1:16:4C:81:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/73cb58cc-0f0a-3c7d-8518-54f1e7a71037.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 149.248.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:bb:c1:a8:e7:60:7f:fe:ea:cc:80:84:8a:b8:9b:4b:47:b8: de:de:7b:4e:5f:0d:2e:53:3a:e7:1b:9a:b3:b5:d2:a0:ec:5d: f8:7d:dc:0d:6a:58:fb:39:a4:a0:2c:eb:79:1e:b2:62:46:14: 3d:1f:f7:1b:47:6d:09:9e:4f:c8:2c:cb:90:89:ae:9b:66:58: 7c:b4:cb:c0:20:04:c6:fe:26:1a:e1:7d:44:5b:e5:4d:38:09: ab:ae:47:ae:3f:07:dd:92:68:2d:e2:1e:12:47:22:e0:22:a0: 10:86:24:b5:b4:4e:da:14:27:d2:fd:8f:06:8b:c7:76:e3:4e: af:a2:25:87:7c:ce:7a:8c:c1:26:9b:19:68:d3:18:69:81:f7: c1:97:d4:26:1d:61:56:80:46:f4:f2:1b:76:13:b7:59:89:37: 15:88:3d:01:5b:5f:bd:a6:7f:45:77:26:fe:1f:07:d7:07:61: 2a:db:e2:ca:24:b8:96:8d:4c:ae:ed:53:95:8f:9d:65:72:7a: 24:1f:45:37:c6:fa:09:70:e7:b2:6b:a9:78:dc:bc:f4:e4:a2: fb:ba:8a:4a:69:cb:e8:a6:c4:45:85:35:b0:ea:1b:01:2e:55: 47:46:d5:70:10:71:03:c3:3c:64:39:0b:f3:81:4d:73:0e:0d: 78:3c:9f:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoeKqsZRKLurVxoxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI1MDYwODAxMDA0OVoXDTI1MDkwNjAxMDA0OVowLzEtMCsGA1UEAxMk ODVjOGI3OTYtMTRiMC00YzFmLTg4YmUtZjBkM2ViZDVmODIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMr/5xwanYiKDkgjKGItc1MGUEfsw2PpIcV1 ahaiBo0TN5OB7RGK1pwotlbHytATAiNCU/X5cwcmH2I+I9oQClzdKAffHkcQEZ/I JDpq3++AGKueMVvGilsP9w4CUthEB8P6X1gC+jS3AXzLtTBhfgjx6tBqjlQ9T8sd GG93KBR0eCWOe8OgFere0rrHMa++NfhMmci/ZbS6+k45A6C+I76ENiwpVR6cKR9y S91J/21xYJoUVGOl1/QTI92cACt5imuqgiR/h/HWrMqeYutxTzIHP8rLT61st2Ef S4OA9drAl3CTAgRIx0ORiej5KWqtJoiWvBz4wEapIH2hqs5smQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCO+hul/MflK+RLqGsiMM7EWTIHXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvNzNjYjU4Y2MtMGYwYS0z YzdkLTg1MTgtNTRmMWU3YTcxMDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlfhOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABu7wajnYH/+6syAhIq4m0tHuN7ee05fDS5TOucbmrO10qDsXfh93A1q WPs5pKAs63kesmJGFD0f9xtHbQmeT8gsy5CJrptmWHy0y8AgBMb+JhrhfURb5U04 CauuR64/B92SaC3iHhJHIuAioBCGJLW0TtoUJ9L9jwaLx3bjTq+iJYd8znqMwSab GWjTGGmB98GX1CYdYVaARvTyG3YTt1mJNxWIPQFbX72mf0V3Jv4fB9cHYSrb4sok uJaNTK7tU5WPnWVyeiQfRTfG+glw57JrqXjcvPTkovu6ikppy+imxEWFNbDqGwEu VUdG1XAQcQPDPGQ5C/OBTXMODXg8n60= -----END CERTIFICATE-----Generated at Mon Jun 30 08:55:38 2025 by rpki-client