$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bafc4ab0-5fdb-3e3d-8afa-ff6c07e34287.roa File: bafc4ab0-5fdb-3e3d-8afa-ff6c07e34287.roa (raw, json) Hash identifier: Hc4i3r1J5WrgHmNvwGKRf1JpuaHAjQOa+Q8U1OaERkQ= Subject key identifier: 60:4C:9A:E0:5E:51:74:09:20:B1:D1:0A:76:A5:65:DD:63:53:E5:EF Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584A45403D04162307B75B752600 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bafc4ab0-5fdb-3e3d-8afa-ff6c07e34287.roa Signing time: Sun 22 Jun 2025 01:00:50 +0000 ROA not before: Sun 22 Jun 2025 01:00:50 +0000 ROA not after: Sat 20 Sep 2025 01:00:50 +0000 asID: 20115 IP address blocks: 150.224.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:45:40:3d:04:16:23:07:b7:5b:75:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Jun 22 01:00:50 2025 GMT Not After : Sep 20 01:00:50 2025 GMT Subject: CN=819855ee-e570-4889-bf80-4400dc4b0f58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:47:f2:5f:3f:8e:fa:f0:61:8d:91:65:47:4d: 9c:5d:cb:d9:d5:58:53:a4:67:7d:36:7a:e3:46:68: 53:f2:16:4b:95:7b:5b:cb:5e:58:b0:d5:fd:1f:d2: 4d:dd:b9:03:95:a7:d9:41:f5:f5:70:65:6e:c1:4e: 58:54:05:12:a8:aa:3d:9d:a1:ee:37:91:91:c4:fe: 9d:5f:0a:36:0f:76:d2:af:89:f6:41:33:fc:36:bf: b8:ff:4c:2b:e2:0d:bd:50:31:33:45:fc:20:9a:bb: ae:1e:01:5d:49:85:36:c3:e1:d4:e1:c7:73:32:df: 2a:74:dc:78:85:d8:f4:3d:23:1f:cb:a8:56:14:9b: 68:0a:7d:bb:49:e7:5d:75:66:aa:2e:ff:24:5b:e6: bd:22:7c:93:b8:aa:ef:42:4c:dd:8f:3b:0c:a5:d2: 09:33:74:66:b6:a5:89:86:25:5e:65:85:f7:32:0a: 89:4f:4a:ce:f7:3e:33:56:6d:ae:ba:33:6b:62:aa: 18:98:c1:e5:a4:35:ba:24:60:2f:c2:e8:2e:97:45: 52:ad:51:36:14:80:e5:7c:09:39:78:d1:99:08:69: 09:bb:d0:17:dc:89:04:ff:a3:73:2c:e8:b1:63:86: 6f:ab:54:25:4e:f5:5f:06:54:ce:b8:1c:be:e9:97: 21:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:4C:9A:E0:5E:51:74:09:20:B1:D1:0A:76:A5:65:DD:63:53:E5:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bafc4ab0-5fdb-3e3d-8afa-ff6c07e34287.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 150.224.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d5:25:ba:1c:72:bb:83:61:39:43:40:86:29:75:ae:ed:e8:a2: b3:de:69:99:80:18:23:f3:25:51:36:62:50:c8:c8:7a:0e:0f: 80:f1:55:4f:28:6c:de:cc:76:85:fa:66:d3:32:1c:54:1f:6c: e0:6a:a7:21:0e:3c:bf:ef:45:f1:f8:86:bb:71:be:86:05:1c: cd:ac:d5:92:30:e6:a6:73:ae:cf:1c:93:31:30:aa:af:3f:93: 6f:53:e7:f1:99:9d:b1:49:77:ed:5d:11:eb:38:14:2b:3d:bb: 41:09:ab:93:03:80:ca:a5:e8:95:32:fb:61:3d:98:b3:93:9a: a3:09:8f:15:ea:80:78:7a:ac:66:ea:ad:d6:20:d6:ed:94:12: c7:9b:fa:3f:01:49:1a:c1:17:54:83:20:a6:86:2f:b7:77:24: bf:1b:13:ff:9a:97:d7:f2:33:15:dc:e8:c7:16:15:cb:25:56: 84:33:9c:31:b2:37:c8:21:c2:68:a7:53:74:29:39:83:36:40: 27:3f:b5:63:ff:31:56:bd:e8:30:1b:a7:de:d9:ff:95:45:39: 7c:83:0d:86:27:80:94:51:85:e1:33:4e:c8:4d:b3:ba:f9:b4: 1c:0b:e8:dc:75:70:ea:4e:2a:b5:d6:67:b3:db:6f:38:a9:de: 45:40:7b:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpFQD0EFiMHt1t1JgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDYyMjAxMDA1MFoXDTI1MDkyMDAxMDA1MFowLzEtMCsGA1UEAxMk ODE5ODU1ZWUtZTU3MC00ODg5LWJmODAtNDQwMGRjNGIwZjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEfyXz+O+vBhjZFlR02cXcvZ1VhTpGd9Nnrj RmhT8hZLlXtby15YsNX9H9JN3bkDlafZQfX1cGVuwU5YVAUSqKo9naHuN5GRxP6d Xwo2D3bSr4n2QTP8Nr+4/0wr4g29UDEzRfwgmruuHgFdSYU2w+HU4cdzMt8qdNx4 hdj0PSMfy6hWFJtoCn27SedddWaqLv8kW+a9InyTuKrvQkzdjzsMpdIJM3RmtqWJ hiVeZYX3MgqJT0rO9z4zVm2uujNrYqoYmMHlpDW6JGAvwugul0VSrVE2FIDlfAk5 eNGZCGkJu9AX3IkE/6NzLOixY4Zvq1QlTvVfBlTOuBy+6ZchQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGBMmuBeUXQJILHRCnalZd1jU+XvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYmFmYzRhYjAtNWZkYi0z ZTNkLThhZmEtZmY2YzA3ZTM0Mjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAluDyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANUluhxyu4NhOUNAhil1ru3oorPeaZmAGCPzJVE2YlDIyHoOD4DxVU8o bN7MdoX6ZtMyHFQfbOBqpyEOPL/vRfH4hrtxvoYFHM2s1ZIw5qZzrs8ckzEwqq8/ k29T5/GZnbFJd+1dEes4FCs9u0EJq5MDgMql6JUy+2E9mLOTmqMJjxXqgHh6rGbq rdYg1u2UEseb+j8BSRrBF1SDIKaGL7d3JL8bE/+al9fyMxXc6McWFcslVoQznDGy N8ghwminU3QpOYM2QCc/tWP/MVa96DAbp97Z/5VFOXyDDYYngJRRheEzTshNs7r5 tBwL6Nx1cOpOKrXWZ7Pbbzip3kVAe5E= -----END CERTIFICATE-----Generated at Sun Jun 29 12:38:56 2025 by rpki-client