$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ca98a600-1558-3e52-91ad-64d2ed38d9a7.roa File: ca98a600-1558-3e52-91ad-64d2ed38d9a7.roa (raw, json) Hash identifier: mUR4DFY3BATCKcnWXU/hhaoWNqU+grkedB9lM3jQsQc= Subject key identifier: D9:BB:1C:EA:02:27:1E:70:10:76:87:9F:81:1D:87:A8:CE:6B:A0:77 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584A45403CD349189F6991DE4580 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ca98a600-1558-3e52-91ad-64d2ed38d9a7.roa Signing time: Sun 22 Jun 2025 01:00:50 +0000 ROA not before: Sun 22 Jun 2025 01:00:50 +0000 ROA not after: Sat 20 Sep 2025 01:00:50 +0000 asID: 20115 IP address blocks: 150.224.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:45:40:3c:d3:49:18:9f:69:91:de:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Jun 22 01:00:50 2025 GMT Not After : Sep 20 01:00:50 2025 GMT Subject: CN=8998b6e9-6828-491d-a40a-5c9b49f50659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:57:84:40:e9:28:35:22:42:40:75:f5:33:fa: aa:35:40:f1:4b:2a:92:e5:4f:55:9e:58:e0:e6:50: da:0a:29:b1:c5:1e:a0:6b:f9:8f:f2:94:74:8f:b0: 10:e5:ab:d4:2b:e5:a8:fd:13:1d:ef:2c:ca:99:26: 52:64:09:ea:f6:b4:ee:4c:f0:44:d1:df:82:29:8a: 8a:95:8a:52:c5:8d:02:bc:18:0f:22:ae:3d:d6:41: c1:a7:f9:06:e5:53:f3:ba:9f:91:28:44:92:62:89: 94:f6:31:81:d0:fa:c1:57:4f:9b:57:3c:73:7c:ad: 9a:aa:80:d9:60:d0:6c:e0:af:6e:f5:7a:82:f0:46: 1a:3e:70:96:cb:3e:be:c0:6c:6e:09:13:ab:6c:be: c2:57:95:b9:66:a1:19:80:7f:21:21:34:b4:90:9a: 85:8f:a7:e9:cf:82:5e:68:e1:0d:22:19:15:97:de: 4d:01:29:4b:56:68:03:db:db:10:b3:0c:46:ba:3a: d4:73:66:67:ae:8b:bf:f8:23:34:97:a1:33:94:9c: b8:e7:7e:64:ec:90:ab:56:e6:71:e1:97:9b:96:56: f6:13:13:1e:5b:92:fe:29:e1:95:87:84:42:87:d6: c6:b2:e4:77:38:4e:a9:c3:9e:7a:06:db:39:10:2c: ea:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:BB:1C:EA:02:27:1E:70:10:76:87:9F:81:1D:87:A8:CE:6B:A0:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ca98a600-1558-3e52-91ad-64d2ed38d9a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 150.224.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:1f:f4:81:5a:bd:cd:ac:ec:81:db:9b:cc:5b:c9:c2:ff:48: 05:ff:a0:35:cc:b9:9b:e4:ce:e7:be:4b:57:00:40:a3:47:8d: 16:69:6b:3a:2e:6d:ed:2a:3c:64:0f:eb:c3:30:fa:bf:c1:ca: 2a:81:5c:d3:7d:c3:71:2f:60:9a:ed:5c:9a:6a:79:58:60:74: 02:d0:99:49:0e:47:f0:2b:b2:c7:73:c2:af:fd:2a:2b:fb:15: b4:7d:b7:0d:d1:b1:8c:c2:18:a3:56:ee:57:4c:7a:ef:19:4d: 49:08:ab:b6:9a:17:93:8e:80:c2:ec:d3:b0:90:b5:39:33:24: be:a0:5d:47:1f:b1:ab:fe:70:d4:a5:99:29:d3:29:b0:eb:a7: 9f:e4:71:23:7b:74:d9:12:84:82:af:b4:78:6b:c5:71:ba:40: 8c:98:3b:0d:b3:9e:4b:d2:ef:be:09:62:53:5f:65:7d:ee:1f: 8a:7d:78:24:ec:1d:76:40:44:40:53:cd:8e:ef:b2:78:aa:59: 34:33:7f:22:fc:51:cf:d0:5f:55:f4:76:39:67:ee:10:a0:dc: 4a:e9:a5:f0:ba:9a:e5:30:fe:78:7c:8c:d4:27:62:16:17:8e: e6:b7:e4:c9:13:87:79:35:4e:8d:7f:8a:43:17:43:e1:8a:85: 0a:94:39:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpFQDzTSRifaZHeRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDYyMjAxMDA1MFoXDTI1MDkyMDAxMDA1MFowLzEtMCsGA1UEAxMk ODk5OGI2ZTktNjgyOC00OTFkLWE0MGEtNWM5YjQ5ZjUwNjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFeEQOkoNSJCQHX1M/qqNUDxSyqS5U9Vnljg 5lDaCimxxR6ga/mP8pR0j7AQ5avUK+Wo/RMd7yzKmSZSZAnq9rTuTPBE0d+CKYqK lYpSxY0CvBgPIq491kHBp/kG5VPzup+RKESSYomU9jGB0PrBV0+bVzxzfK2aqoDZ YNBs4K9u9XqC8EYaPnCWyz6+wGxuCROrbL7CV5W5ZqEZgH8hITS0kJqFj6fpz4Je aOENIhkVl95NASlLVmgD29sQswxGujrUc2Znrou/+CM0l6EzlJy4535k7JCrVuZx 4Zebllb2ExMeW5L+KeGVh4RCh9bGsuR3OE6pw556Bts5ECzqgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNm7HOoCJx5wEHaHn4Edh6jOa6B3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvY2E5OGE2MDAtMTU1OC0z ZTUyLTkxYWQtNjRkMmVkMzhkOWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBluD8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMQf9IFavc2s7IHbm8xbycL/SAX/oDXMuZvkzue+S1cAQKNHjRZpazou be0qPGQP68Mw+r/ByiqBXNN9w3EvYJrtXJpqeVhgdALQmUkOR/Arssdzwq/9Kiv7 FbR9tw3RsYzCGKNW7ldMeu8ZTUkIq7aaF5OOgMLs07CQtTkzJL6gXUcfsav+cNSl mSnTKbDrp5/kcSN7dNkShIKvtHhrxXG6QIyYOw2znkvS774JYlNfZX3uH4p9eCTs HXZAREBTzY7vsniqWTQzfyL8Uc/QX1X0djln7hCg3ErppfC6muUw/nh8jNQnYhYX jua35MkTh3k1To1/ikMXQ+GKhQqUOZE= -----END CERTIFICATE-----Generated at Tue Jul 1 16:11:56 2025 by rpki-client