$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/c828f9e3-b04c-3451-ae15-b4dc112cf34c.roa File: c828f9e3-b04c-3451-ae15-b4dc112cf34c.roa (raw, json) Hash identifier: xsssyYEL1PNtP+uNiMVH7xl2TzSyBHrL7Dmztb+OGfs= Subject key identifier: 30:83:09:CE:11:F1:A1:BE:D3:EC:44:F6:48:8F:10:D5:C2:0E:6D:40 Certificate issuer: /CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b Certificate serial: 010D0C9F4328584A4540401136227B6308A3E72C Authority key identifier: B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/c828f9e3-b04c-3451-ae15-b4dc112cf34c.roa Signing time: Sun 22 Jun 2025 01:00:50 +0000 ROA not before: Sun 22 Jun 2025 01:00:50 +0000 ROA not after: Sat 20 Sep 2025 01:00:50 +0000 asID: 11377 IP address blocks: 149.72.2.0/23 maxlen: 23 149.72.96.0/23 maxlen: 23 149.72.98.0/23 maxlen: 23 167.89.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:45:40:40:11:36:22:7b:63:08:a3:e7:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b Validity Not Before: Jun 22 01:00:50 2025 GMT Not After : Sep 20 01:00:50 2025 GMT Subject: CN=127ab58e-c32b-4bcf-b74f-6b58b071e929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:cf:3e:5b:0d:8b:4c:d5:b0:9f:44:5f:5b:67: 1e:d3:d0:67:0c:09:a6:77:9e:8c:76:80:65:17:3a: a7:ea:cf:6c:76:e8:8b:af:2c:98:1b:19:78:b2:44: a0:53:3e:a7:ce:be:37:e5:c6:b7:09:88:56:8c:47: 9d:f0:4c:ac:85:1f:53:c6:4e:3e:5c:8a:2b:7b:1e: 05:1c:bb:b9:3a:6a:72:38:c0:cb:ff:b3:43:ac:68: a3:34:31:8b:6d:93:de:38:e6:ad:c5:42:8a:85:33: 4e:b2:b0:78:f2:15:97:7d:92:86:e6:5e:a4:a6:43: 98:9f:49:26:f4:1f:4b:dd:ba:bb:09:e5:65:fc:eb: 63:b9:93:bf:de:25:85:41:6b:f4:8c:d8:41:70:25: 72:62:4f:97:0d:c3:97:00:c2:96:f4:e2:f0:78:c8: 34:23:7b:d0:4f:32:8c:12:12:98:08:6d:43:0b:b6: 4e:0b:a2:a6:ea:bd:3c:2c:d5:18:fd:7d:c9:e9:3b: 70:f3:b4:94:01:8a:2e:4a:4d:0d:4c:74:4d:1e:de: 1a:7e:9c:7f:bf:53:f7:08:28:bd:ab:ae:2e:30:6f: 39:fb:ed:83:85:79:66:c3:d2:b9:79:55:7a:98:8f: ff:79:24:a1:b0:48:cf:a9:78:a8:e8:b2:19:31:c1: f4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:83:09:CE:11:F1:A1:BE:D3:EC:44:F6:48:8F:10:D5:C2:0E:6D:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/c828f9e3-b04c-3451-ae15-b4dc112cf34c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl X509v3 Authority Key Identifier: keyid:B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer sbgp-ipAddrBlock: critical IPv4: 149.72.2.0/23 149.72.96.0/22 167.89.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:01:2e:2a:86:25:c6:de:11:fb:7a:12:ce:a4:84:66:5e:f0: 75:68:ab:86:d2:03:bb:20:d9:40:f8:41:45:fe:56:3b:6d:5d: 2b:64:c4:df:b8:dd:bf:71:55:01:46:25:0b:d8:bc:5b:e4:27: b3:ea:41:8d:e0:d6:13:d7:8f:75:4f:16:11:d1:e9:f4:a1:b5: 85:d8:ab:4c:b9:a5:2d:a2:d4:6a:f6:6d:3f:2c:ff:51:0b:44: 7b:c4:b5:aa:51:79:c1:60:9a:c6:74:ec:d1:63:f0:00:34:88: dd:9a:e8:bd:c1:94:6f:22:a6:5c:28:57:cb:9f:6b:03:8c:98: 5c:85:4b:71:1f:6e:07:a4:e2:2c:bf:71:9b:4f:83:6e:4a:09: af:16:34:4d:76:6b:27:3e:93:40:31:4f:88:ee:d7:b7:6b:a3: 75:96:e2:34:4c:9c:c5:ce:ff:77:0f:01:ab:34:9b:f3:89:12: d2:be:4e:81:d9:47:3b:4a:8c:23:15:f5:f7:80:d3:ef:df:03: 73:de:c9:9d:c4:f5:57:25:3f:25:66:45:d2:4a:06:ac:99:22: d7:ec:d6:23:4a:dd:57:4d:41:7c:18:d0:3e:72:d3:2e:75:90: 5a:c1:fa:4f:e8:73:e3:e5:32:da:b9:c1:12:fc:95:55:64:53: f2:a4:5d:91 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEpFQEARNiJ7Ywij5ywwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGZjZTIzMGUtMGZlNi00ZGRmLTk3OWMtMGJlMjM0OWI3 YzBiMB4XDTI1MDYyMjAxMDA1MFoXDTI1MDkyMDAxMDA1MFowLzEtMCsGA1UEAxMk MTI3YWI1OGUtYzMyYi00YmNmLWI3NGYtNmI1OGIwNzFlOTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm88+Ww2LTNWwn0RfW2ce09BnDAmmd56MdoBl Fzqn6s9sduiLryyYGxl4skSgUz6nzr435ca3CYhWjEed8EyshR9Txk4+XIorex4F HLu5OmpyOMDL/7NDrGijNDGLbZPeOOatxUKKhTNOsrB48hWXfZKG5l6kpkOYn0km 9B9L3bq7CeVl/OtjuZO/3iWFQWv0jNhBcCVyYk+XDcOXAMKW9OLweMg0I3vQTzKM EhKYCG1DC7ZOC6Km6r08LNUY/X3J6Ttw87SUAYouSk0NTHRNHt4afpx/v1P3CCi9 q64uMG85++2DhXlmw9K5eVV6mI//eSShsEjPqXio6LIZMcH0tQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFDCDCc4R8aG+0+xE9kiPENXCDm1AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNl MjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUyMzQ5YjdjMGIvYzgyOGY5ZTMtYjA0Yy0z NDUxLWFlMTUtYjRkYzExMmNmMzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGZjZTIzMGUtMGZlNi00ZGRmLTk3 OWMtMGJlMjM0OWI3YzBiLzRmY2UyMzBlLTBmZTYtNGRkZi05NzljLTBiZTIzNDli N2MwYi5jcmwwHwYDVR0jBBgwFoAUszQyoV9gupUxuCXzkr1K9dJT5ygwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNlMjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUy MzQ5YjdjMGIuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBlUgCAwQC lUhgAwQAp1lxMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAGYBLiqGJcbeEft6Es6khGZe8HVoq4bSA7sg2UD4 QUX+VjttXStkxN+43b9xVQFGJQvYvFvkJ7PqQY3g1hPXj3VPFhHR6fShtYXYq0y5 pS2i1Gr2bT8s/1ELRHvEtapRecFgmsZ07NFj8AA0iN2a6L3BlG8iplwoV8ufawOM mFyFS3Efbgek4iy/cZtPg25KCa8WNE12ayc+k0AxT4ju17dro3WW4jRMnMXO/3cP Aas0m/OJEtK+ToHZRztKjCMV9feA0+/fA3PeyZ3E9VclPyVmRdJKBqyZItfs1iNK 3VdNQXwY0D5y0y51kFrB+k/oc+PlMtq5wRL8lVVkU/KkXZE= -----END CERTIFICATE-----Generated at Sun Jun 29 12:12:32 2025 by rpki-client