$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/211b6187-25f2-343e-8df9-513ee7e20a1e.roa File: 211b6187-25f2-343e-8df9-513ee7e20a1e.roa (raw, json) Hash identifier: RBoDAkmMEgbHqMXQl09KwkoR4f+H+dlMy3ildkjXwuU= Subject key identifier: 34:85:7A:D4:85:E2:61:24:EC:05:71:E6:23:B3:DB:3A:5C:30:04:99 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584A4540428E35664F365D99FC80 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/211b6187-25f2-343e-8df9-513ee7e20a1e.roa Signing time: Sun 22 Jun 2025 01:00:50 +0000 ROA not before: Sun 22 Jun 2025 01:00:50 +0000 ROA not after: Sat 20 Sep 2025 01:00:50 +0000 asID: 20001 IP address blocks: 150.224.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:45:40:42:8e:35:66:4f:36:5d:99:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Jun 22 01:00:50 2025 GMT Not After : Sep 20 01:00:50 2025 GMT Subject: CN=b4ebc5c8-7251-4783-a3a2-432a3f13c965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:18:ef:12:27:c7:38:d4:0e:be:c1:0e:a1:7b: 79:41:bb:c0:8b:ea:80:8d:ec:a4:4c:e8:b7:87:d3: 8f:e8:c7:b9:92:8c:a9:16:f5:84:36:db:76:93:65: 39:ca:59:0b:8f:a6:70:f3:2a:40:e9:a1:88:1a:06: d9:d0:1b:b4:15:58:84:16:4d:99:63:8b:2d:1e:42: 23:aa:df:20:91:93:1d:fc:38:82:11:a5:0d:63:b7: 0e:f3:a5:64:58:5b:1d:44:fd:59:bf:03:95:0f:ac: 1e:6e:87:49:b4:50:ab:ea:ae:73:a1:71:c2:12:81: a2:aa:ce:07:28:8b:a8:09:6f:7b:ef:ac:4f:28:10: 0a:9b:e5:3c:2b:ae:70:d1:4d:f9:81:fa:1f:e7:71: cc:e4:3e:d6:18:e3:97:87:91:9f:f1:74:2a:2a:fe: f8:a1:e3:42:1e:37:ac:af:54:1c:8f:c9:5a:a6:83: c7:a5:dc:be:73:75:2d:43:32:3e:dc:dc:d7:04:78: e3:72:f5:07:e0:88:2b:91:41:55:d0:51:1a:eb:64: e1:52:ee:04:8d:57:bc:21:47:35:0f:22:7e:e9:59: 0e:aa:5d:42:5f:64:db:ad:10:7c:d7:88:9e:84:18: 83:4b:03:7c:6f:b8:dd:63:44:c4:d0:54:f1:41:0c: 88:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:85:7A:D4:85:E2:61:24:EC:05:71:E6:23:B3:DB:3A:5C:30:04:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/211b6187-25f2-343e-8df9-513ee7e20a1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 150.224.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:7e:bd:d0:09:30:04:e9:d7:8e:1a:fe:20:94:1a:49:94:01: 96:11:2d:27:52:17:cb:b1:3c:40:2c:09:4e:75:58:f6:9a:8a: fd:c6:44:b1:c0:be:1b:47:34:7f:1b:e1:5e:fb:4c:f5:0b:0b: 1a:0f:59:da:b8:d3:29:03:5d:64:48:d1:2b:2e:32:04:ab:cf: 94:5f:17:ab:62:b8:21:2e:1d:36:a4:d8:eb:53:41:17:bb:c6: 91:c0:9c:97:64:10:2c:eb:34:5b:5c:b3:8d:b2:40:73:b7:fa: 69:24:f9:01:81:0e:d5:7c:c2:35:0d:74:c6:48:3f:13:6d:dd: 0a:63:db:7e:04:b5:37:ef:b0:24:de:92:38:b2:93:38:c1:eb: bc:63:3d:ae:70:08:8d:2e:fb:7f:c5:e5:4f:9c:74:22:57:5c: 32:37:d2:15:c6:51:da:22:61:c5:d2:f3:9a:53:4a:53:41:5e: 31:87:98:8d:1a:64:4b:b6:c5:e7:a6:07:a7:d9:66:8a:8d:d3: fb:df:16:83:b8:1f:ee:3b:e1:fc:02:92:b2:67:c1:51:a6:90: 12:68:61:b5:0f:cf:8a:d0:13:be:78:81:14:b0:21:46:e5:4d: 82:62:dd:bc:0a:77:04:1c:21:82:22:4a:c7:56:bf:78:17:23: f2:0f:37:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpFQEKONWZPNl2Z/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDYyMjAxMDA1MFoXDTI1MDkyMDAxMDA1MFowLzEtMCsGA1UEAxMk YjRlYmM1YzgtNzI1MS00NzgzLWEzYTItNDMyYTNmMTNjOTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRjvEifHONQOvsEOoXt5QbvAi+qAjeykTOi3 h9OP6Me5koypFvWENtt2k2U5ylkLj6Zw8ypA6aGIGgbZ0Bu0FViEFk2ZY4stHkIj qt8gkZMd/DiCEaUNY7cO86VkWFsdRP1ZvwOVD6webodJtFCr6q5zoXHCEoGiqs4H KIuoCW9776xPKBAKm+U8K65w0U35gfof53HM5D7WGOOXh5Gf8XQqKv74oeNCHjes r1Qcj8lapoPHpdy+c3UtQzI+3NzXBHjjcvUH4IgrkUFV0FEa62ThUu4EjVe8IUc1 DyJ+6VkOql1CX2TbrRB814iehBiDSwN8b7jdY0TE0FTxQQyI1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDSFetSF4mEk7AVx5iOz2zpcMASZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMjExYjYxODctMjVmMi0z NDNlLThkZjktNTEzZWU3ZTIwYTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAluDiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANB+vdAJMATp144a/iCUGkmUAZYRLSdSF8uxPEAsCU51WPaaiv3GRLHA vhtHNH8b4V77TPULCxoPWdq40ykDXWRI0SsuMgSrz5RfF6tiuCEuHTak2OtTQRe7 xpHAnJdkECzrNFtcs42yQHO3+mkk+QGBDtV8wjUNdMZIPxNt3Qpj234EtTfvsCTe kjiykzjB67xjPa5wCI0u+3/F5U+cdCJXXDI30hXGUdoiYcXS85pTSlNBXjGHmI0a ZEu2xeemB6fZZoqN0/vfFoO4H+474fwCkrJnwVGmkBJoYbUPz4rQE754gRSwIUbl TYJi3bwKdwQcIYIiSsdWv3gXI/IPN9s= -----END CERTIFICATE-----Generated at Sun Jun 29 17:56:08 2025 by rpki-client