$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/7533f5cd-c8cf-3956-8cb8-5887a4c3e960.roa File: 7533f5cd-c8cf-3956-8cb8-5887a4c3e960.roa (raw, json) Hash identifier: pPT+7qzzWihdOQ9B4CH8lCurK6tEmXDFo3cPJOu0OHY= Subject key identifier: 34:33:6F:67:BC:E0:E9:7C:98:0F:A9:2E:37:26:3C:B9:18:79:FC:9F Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584A612B1AD66C41C1419FF84500 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/7533f5cd-c8cf-3956-8cb8-5887a4c3e960.roa Signing time: Wed 02 Jul 2025 01:00:49 +0000 ROA not before: Wed 02 Jul 2025 01:00:49 +0000 ROA not after: Tue 30 Sep 2025 01:00:49 +0000 asID: 398823 IP address blocks: 107.149.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:2b:1a:d6:6c:41:c1:41:9f:f8:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Jul 2 01:00:49 2025 GMT Not After : Sep 30 01:00:49 2025 GMT Subject: CN=b43d3fbc-9d5d-4941-8f38-7ce091941eda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:35:83:cd:a9:3a:94:8a:b1:78:b5:f2:16:88: 23:f9:2f:4c:2c:a1:7a:6e:c3:c3:b9:a6:f4:19:49: 7d:02:0d:b3:ea:73:38:8c:b7:15:e1:e2:8f:5d:76: 29:03:33:99:5a:09:0f:34:4c:fd:e8:20:df:fe:56: 5e:58:4a:01:68:59:0d:66:cd:1d:3a:f5:c3:5d:98: 8e:86:5a:c0:b1:f9:9c:76:9f:4b:ed:ef:a4:de:66: 6f:34:47:d0:62:67:59:a6:5c:c7:74:d8:f5:e7:75: 40:45:a5:17:46:8a:64:00:f3:a5:93:f4:ee:6d:f5: 99:2c:ce:c9:d0:b9:af:10:e3:37:d8:34:24:24:21: 4a:e5:d0:0a:9a:fd:3c:45:0c:17:8b:77:fe:e9:3c: 24:86:a2:8b:35:4b:22:59:86:75:55:b3:dd:44:4e: dc:0f:01:0b:66:56:8d:8c:18:b4:39:33:8d:c3:46: 41:d4:69:8c:73:e6:36:2f:14:40:ae:42:8e:8f:69: e4:a1:9c:be:90:1d:46:a4:30:9b:8e:c0:bd:f0:cb: ba:4e:16:bb:22:c4:54:92:ea:da:f4:f9:33:51:b5: 41:f9:75:0c:3d:27:18:b2:b5:21:78:6d:af:84:12: c5:6e:89:7a:72:d8:d6:b7:87:ff:0c:81:4c:52:80: bd:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:33:6F:67:BC:E0:E9:7C:98:0F:A9:2E:37:26:3C:B9:18:79:FC:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/7533f5cd-c8cf-3956-8cb8-5887a4c3e960.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.149.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:0e:5f:1a:1f:be:35:9d:6f:65:94:01:5f:80:79:00:78:e2: d8:77:72:15:75:9d:3e:ef:e9:b4:76:f3:ef:c8:98:21:72:62: 21:42:33:d0:33:d8:36:9a:51:d0:80:b0:0c:7b:8c:a1:d3:af: 2f:00:12:71:d7:ec:81:a4:ab:11:0c:f9:f3:60:5c:a1:e6:a7: 79:ad:1e:91:16:0c:aa:77:a8:a8:f8:7e:3b:d8:d3:1c:d7:98: 93:6e:5a:28:bf:ae:45:ce:85:6e:1a:f0:3c:e3:8d:2d:15:f4: 11:16:2f:08:85:9b:a1:c1:01:91:fe:f0:ba:1c:85:fd:9e:a2: e4:46:e1:1d:1d:cd:67:90:28:d8:1e:eb:14:f1:5d:87:d5:4e: ed:1e:c4:58:03:27:6d:bd:14:72:e0:b1:d3:c0:59:2d:9c:08: 48:46:8b:bb:0c:36:67:16:85:f8:71:67:52:b4:52:4f:da:e3: 51:af:62:7c:b8:70:ef:7a:28:28:50:ff:8f:ff:7e:0b:3e:aa: ae:25:ff:66:21:90:60:3b:5f:58:3e:a8:54:7b:f2:eb:da:fa: 54:f0:f1:a4:8e:84:46:ac:98:61:6f:f8:1e:1d:c4:4b:2c:3d: 01:21:10:8d:35:97:07:d5:34:42:f4:91:8a:33:41:6e:18:31: f0:6d:d1:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEphKxrWbEHBQZ/4RQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk YjQzZDNmYmMtOWQ1ZC00OTQxLThmMzgtN2NlMDkxOTQxZWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzWDzak6lIqxeLXyFogj+S9MLKF6bsPDuab0 GUl9Ag2z6nM4jLcV4eKPXXYpAzOZWgkPNEz96CDf/lZeWEoBaFkNZs0dOvXDXZiO hlrAsfmcdp9L7e+k3mZvNEfQYmdZplzHdNj153VARaUXRopkAPOlk/TubfWZLM7J 0LmvEOM32DQkJCFK5dAKmv08RQwXi3f+6TwkhqKLNUsiWYZ1VbPdRE7cDwELZlaN jBi0OTONw0ZB1GmMc+Y2LxRArkKOj2nkoZy+kB1GpDCbjsC98Mu6Tha7IsRUkura 9PkzUbVB+XUMPScYsrUheG2vhBLFbol6ctjWt4f/DIFMUoC93QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQzb2e84Ol8mA+pLjcmPLkYefyfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvNzUzM2Y1Y2QtYzhjZi0z OTU2LThjYjgtNTg4N2E0YzNlOTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCa5XMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkOXxofvjWdb2WUAV+AeQB44th3chV1nT7v6bR28+/ImCFyYiFCM9Az 2DaaUdCAsAx7jKHTry8AEnHX7IGkqxEM+fNgXKHmp3mtHpEWDKp3qKj4fjvY0xzX mJNuWii/rkXOhW4a8DzjjS0V9BEWLwiFm6HBAZH+8Lochf2eouRG4R0dzWeQKNge 6xTxXYfVTu0exFgDJ229FHLgsdPAWS2cCEhGi7sMNmcWhfhxZ1K0Uk/a41GvYny4 cO96KChQ/4//fgs+qq4l/2YhkGA7X1g+qFR78uva+lTw8aSOhEasmGFv+B4dxEss PQEhEI01lwfVNEL0kYozQW4YMfBt0bw= -----END CERTIFICATE-----Generated at Mon Jul 21 08:03:31 2025 by rpki-client