$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/45c7db36-5de1-3f50-9626-45153f78d7e4.roa File: 45c7db36-5de1-3f50-9626-45153f78d7e4.roa (raw, json) Hash identifier: TUAJTZ55gs5oPr5z9s65vdxff7mrRWIl2zl772zbzSw= Subject key identifier: 4E:AF:EC:7F:84:38:78:EA:65:03:67:6F:ED:B2:BD:36:91:18:B7:1F Certificate issuer: /CN=213412d0-2e00-4f54-95bc-e72555790689 Certificate serial: 010D0C9F4328584A5CFDEC778C6352B86A915500 Authority key identifier: D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/45c7db36-5de1-3f50-9626-45153f78d7e4.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 40509 IP address blocks: 149.248.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fd:ec:77:8c:63:52:b8:6a:91:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213412d0-2e00-4f54-95bc-e72555790689 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=103062b7-f146-4b74-802a-0789409f51d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:91:26:ae:2a:4b:c2:78:83:82:21:4b:4d:22: 55:7a:f1:a8:22:cc:c4:59:99:ec:0c:8e:4b:76:29: f3:62:80:cc:75:11:0f:79:ef:eb:40:b7:53:fd:1e: 13:38:65:65:a2:fd:e6:bd:a6:cb:76:0c:94:80:ac: 03:f3:49:fa:ec:f6:2f:db:19:69:4f:0e:0d:be:9d: 8e:cf:da:50:26:d8:ae:eb:cf:da:31:28:9e:c3:fa: 0f:9a:98:59:88:74:c3:aa:53:b4:fd:53:2e:eb:ef: ae:d8:46:ba:24:ac:3e:23:45:24:3d:10:b3:7b:b7: aa:01:82:fa:06:5b:38:09:a3:56:dd:47:3d:c5:23: 36:cb:4f:f9:39:37:2f:c9:9b:5b:d5:5a:f1:7f:5d: a7:fa:7e:c9:20:bd:8a:e7:84:b9:55:f9:06:e8:c7: 47:45:75:25:c7:16:10:81:60:89:f0:57:67:65:f1: e3:d5:2f:af:64:4c:95:4b:11:99:0d:4d:9f:89:ea: 68:27:48:a0:b0:d5:2d:c7:11:6a:50:15:bb:48:40: cd:6b:08:25:8d:13:d6:34:99:5b:90:86:fa:2c:31: e8:06:e3:c8:a3:a4:19:7e:a0:28:2e:6b:0f:0d:0c: 4c:14:93:cd:4e:08:15:17:e0:ca:6b:cd:8c:40:09: fe:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:AF:EC:7F:84:38:78:EA:65:03:67:6F:ED:B2:BD:36:91:18:B7:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/45c7db36-5de1-3f50-9626-45153f78d7e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl X509v3 Authority Key Identifier: keyid:D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer sbgp-ipAddrBlock: critical IPv4: 149.248.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:dc:5c:36:79:b9:f8:50:9e:77:bc:93:88:24:4c:1c:75:a5: fd:70:54:61:3a:96:13:27:c5:2e:d8:a7:e2:57:75:f9:97:ed: 6c:e2:cc:46:03:81:37:bc:98:bd:49:c6:03:81:33:a4:14:de: 62:d3:69:9b:5d:d3:f3:03:6f:0b:dc:03:0e:07:c8:31:0e:d5: fd:af:3c:2d:f2:86:cb:de:eb:9e:90:c1:eb:ec:13:55:ac:eb: ac:72:c3:da:26:82:a9:8b:7e:f9:2e:e8:8d:70:72:4c:d0:50: e0:8b:c0:79:6a:43:b6:71:c6:51:bc:45:e4:8d:5b:a2:c8:af: e0:8e:60:04:42:6e:73:4e:81:45:4d:20:e5:9b:0e:ad:7f:5a: dc:ca:65:93:f0:01:94:bc:18:7c:d9:0e:2b:8f:41:87:7e:46: 32:b5:4f:ab:35:2c:b9:af:ff:2a:82:18:fd:02:2a:05:26:7a: 60:a4:9c:06:1c:be:02:97:8a:63:2f:8c:cb:9a:2a:8a:3c:80: d9:2d:08:ee:e2:42:e7:00:43:d8:26:78:0c:39:14:be:37:2a: 33:55:97:d2:b1:37:77:67:15:8d:d1:e3:b1:cc:05:8e:6c:b5: 75:af:b9:f0:15:1a:da:67:39:b3:2e:5a:2d:2b:29:15:f4:00: 0b:b6:2f:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/ex3jGNSuGqRVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjEzNDEyZDAtMmUwMC00ZjU0LTk1YmMtZTcyNTU1Nzkw Njg5MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk MTAzMDYyYjctZjE0Ni00Yjc0LTgwMmEtMDc4OTQwOWY1MWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5EmripLwniDgiFLTSJVevGoIszEWZnsDI5L dinzYoDMdREPee/rQLdT/R4TOGVlov3mvabLdgyUgKwD80n67PYv2xlpTw4Nvp2O z9pQJtiu68/aMSiew/oPmphZiHTDqlO0/VMu6++u2Ea6JKw+I0UkPRCze7eqAYL6 Bls4CaNW3Uc9xSM2y0/5OTcvyZtb1Vrxf12n+n7JIL2K54S5VfkG6MdHRXUlxxYQ gWCJ8FdnZfHj1S+vZEyVSxGZDU2fiepoJ0igsNUtxxFqUBW7SEDNawgljRPWNJlb kIb6LDHoBuPIo6QZfqAoLmsPDQxMFJPNTggVF+DKa82MQAn+KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE6v7H+EOHjqZQNnb+2yvTaRGLcfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0 MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1NTU3OTA2ODkvNDVjN2RiMzYtNWRlMS0z ZjUwLTk2MjYtNDUxNTNmNzhkN2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjEzNDEyZDAtMmUwMC00ZjU0LTk1 YmMtZTcyNTU1NzkwNjg5LzIxMzQxMmQwLTJlMDAtNGY1NC05NWJjLWU3MjU1NTc5 MDY4OS5jcmwwHwYDVR0jBBgwFoAU0a7KA2zh2AW0BP9zMs1AgPmk4IIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1 NTU3OTA2ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFlfjAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzcXDZ5ufhQnne8k4gkTBx1pf1wVGE6lhMnxS7Yp+JXdfmX7WzizEYD gTe8mL1JxgOBM6QU3mLTaZtd0/MDbwvcAw4HyDEO1f2vPC3yhsve656QwevsE1Ws 66xyw9omgqmLfvku6I1wckzQUOCLwHlqQ7ZxxlG8ReSNW6LIr+COYARCbnNOgUVN IOWbDq1/WtzKZZPwAZS8GHzZDiuPQYd+RjK1T6s1LLmv/yqCGP0CKgUmemCknAYc vgKXimMvjMuaKoo8gNktCO7iQucAQ9gmeAw5FL43KjNVl9KxN3dnFY3R47HMBY5s tXWvufAVGtpnObMuWi0rKRX0AAu2L3g= -----END CERTIFICATE-----Generated at Sat Jul 5 10:57:22 2025 by rpki-client