$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/d8bf669e-bc79-3c6f-a8c4-f416f2d4c466.roa File: d8bf669e-bc79-3c6f-a8c4-f416f2d4c466.roa (raw, json) Hash identifier: G/YIb0BgyAMzWtwmOWA1suzDMuVIdrTC4dI63/VxuDw= Subject key identifier: 54:9B:1A:40:35:97:F2:72:38:79:D8:FF:AF:BA:15:03:79:13:87:25 Certificate issuer: /CN=0538ef3c-e342-4e27-a075-8167bc73c054 Certificate serial: 010D0C9F43285849DB2A2D78FA23742050A6E600 Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/d8bf669e-bc79-3c6f-a8c4-f416f2d4c466.roa Signing time: Thu 15 May 2025 01:00:47 +0000 ROA not before: Thu 15 May 2025 01:00:47 +0000 ROA not after: Wed 13 Aug 2025 01:00:47 +0000 asID: 11260 IP address blocks: 149.19.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:db:2a:2d:78:fa:23:74:20:50:a6:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054 Validity Not Before: May 15 01:00:47 2025 GMT Not After : Aug 13 01:00:47 2025 GMT Subject: CN=cdb9244f-40fe-409a-976b-40add342d8cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a4:6a:51:b2:b3:55:2c:ad:b1:11:a7:3a:e9: f9:63:fa:7a:ef:80:ae:07:95:ec:c9:d0:47:8a:4c: 9d:4d:43:fa:c0:1a:99:61:ee:44:fd:29:25:3e:5a: 25:19:04:a5:db:99:4d:ff:5c:13:bf:82:f6:19:62: 97:27:45:43:0b:b6:5d:0c:b0:6c:89:b5:28:3a:9d: 71:16:54:6b:22:c4:08:a6:1b:d6:1b:c7:9b:a3:97: ce:c8:0d:b6:3a:67:8a:3d:0a:cf:ee:2a:9a:9f:79: d0:dc:92:0d:47:1f:03:82:16:9a:04:81:ee:ed:b2: b4:44:23:00:3b:02:06:17:e6:4a:dc:bd:a2:5c:42: 2c:46:9f:43:8c:b1:f7:93:b2:87:2e:b2:bb:ec:75: 75:4a:9e:4e:c1:a6:8a:bf:e6:fd:c5:c5:da:b0:96: db:8b:c5:8d:f3:ad:da:26:2a:d2:3a:c0:9a:dd:bf: 61:b8:fa:4e:a7:d7:55:45:3d:e2:4c:b5:c4:a7:d6: 8f:3f:a8:66:25:c8:eb:9b:c8:e1:47:f2:0f:e4:7a: d2:b1:9b:a9:41:2d:69:26:d6:5c:83:3f:0c:88:c4: cd:eb:9d:f6:b5:56:7f:ee:78:4e:96:1c:3f:42:79: 6d:89:74:18:11:cd:0b:83:90:c3:62:a0:d4:8d:25: d0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:9B:1A:40:35:97:F2:72:38:79:D8:FF:AF:BA:15:03:79:13:87:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/d8bf669e-bc79-3c6f-a8c4-f416f2d4c466.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl X509v3 Authority Key Identifier: keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer sbgp-ipAddrBlock: critical IPv4: 149.19.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:e1:93:04:fe:56:b4:1a:9d:b0:75:ea:f5:a2:aa:fc:e6:67: 8d:0d:c2:5b:e8:b7:81:71:89:bb:f9:14:16:92:33:81:f9:1d: 95:92:f9:13:a0:c3:9e:7a:43:a6:d9:f4:38:b1:90:ed:e9:1c: 12:71:5a:18:ca:1a:3e:d4:a4:7a:f3:70:78:9d:1d:f7:9e:a3: 41:87:bc:97:8e:e5:f4:2c:ae:3d:1c:2c:46:b1:b4:bb:0d:1c: 2d:73:24:31:3c:87:3b:96:9b:e4:55:b7:01:66:fe:4d:19:a9: e1:c7:c7:d0:e8:4f:0a:9f:98:be:90:65:7b:42:e0:6f:a9:23: 31:30:32:a4:09:68:85:56:46:c5:d5:2e:3d:d2:85:c0:ea:fb: e6:21:49:2a:f3:c3:fe:d1:df:2e:67:ee:bc:f1:ac:a7:d3:e4: 4b:4b:4a:29:90:42:2d:1a:e9:7b:ee:65:b2:95:d2:a8:e6:09: ab:b5:6c:28:3d:27:a4:f5:b5:aa:28:e5:f6:63:76:9f:e0:b7: ad:fd:02:44:c3:7b:da:36:07:0b:2d:b2:68:6d:56:11:83:7f: 61:20:b7:df:a7:53:7f:8e:06:5f:61:6f:59:d4:99:d5:2f:b2: 0e:6f:eb:a1:42:39:cd:39:bc:2a:00:d0:04:8f:c2:a7:b9:2c: 2d:20:24:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnbKi14+iN0IFCm5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOGVmM2MtZTM0Mi00ZTI3LWEwNzUtODE2N2JjNzNj MDU0MB4XDTI1MDUxNTAxMDA0N1oXDTI1MDgxMzAxMDA0N1owLzEtMCsGA1UEAxMk Y2RiOTI0NGYtNDBmZS00MDlhLTk3NmItNDBhZGQzNDJkOGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqRqUbKzVSytsRGnOun5Y/p674CuB5XsydBH ikydTUP6wBqZYe5E/SklPlolGQSl25lN/1wTv4L2GWKXJ0VDC7ZdDLBsibUoOp1x FlRrIsQIphvWG8ebo5fOyA22OmeKPQrP7iqan3nQ3JINRx8DghaaBIHu7bK0RCMA OwIGF+ZK3L2iXEIsRp9DjLH3k7KHLrK77HV1Sp5OwaaKv+b9xcXasJbbi8WN863a JirSOsCa3b9huPpOp9dVRT3iTLXEp9aPP6hmJcjrm8jhR/IP5HrSsZupQS1pJtZc gz8MiMTN6532tVZ/7nhOlhw/QnltiXQYEc0Lg5DDYqDUjSXQ/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFSbGkA1l/JyOHnY/6+6FQN5E4clMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4 ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3YmM3M2MwNTQvZDhiZjY2OWUtYmM3OS0z YzZmLWE4YzQtZjQxNmYyZDRjNDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDUzOGVmM2MtZTM0Mi00ZTI3LWEw NzUtODE2N2JjNzNjMDU0LzA1MzhlZjNjLWUzNDItNGUyNy1hMDc1LTgxNjdiYzcz YzA1NC5jcmwwHwYDVR0jBBgwFoAUPawtOE5IBuFdK6OE1h3WEIXOM4IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3 YmM3M2MwNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlRNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPhkwT+VrQanbB16vWiqvzmZ40Nwlvot4Fxibv5FBaSM4H5HZWS+ROg w556Q6bZ9DixkO3pHBJxWhjKGj7UpHrzcHidHfeeo0GHvJeO5fQsrj0cLEaxtLsN HC1zJDE8hzuWm+RVtwFm/k0ZqeHHx9DoTwqfmL6QZXtC4G+pIzEwMqQJaIVWRsXV Lj3ShcDq++YhSSrzw/7R3y5n7rzxrKfT5EtLSimQQi0a6XvuZbKV0qjmCau1bCg9 J6T1taoo5fZjdp/gt639AkTDe9o2BwstsmhtVhGDf2Egt9+nU3+OBl9hb1nUmdUv sg5v66FCOc05vCoA0ASPwqe5LC0gJJw= -----END CERTIFICATE-----Generated at Sun Jun 29 22:07:48 2025 by rpki-client