$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/0f4c12d6-8727-3d11-a3bc-2d2c9c9b98e9.roa File: 0f4c12d6-8727-3d11-a3bc-2d2c9c9b98e9.roa (raw, json) Hash identifier: lniY0jM3XYCARrjZ5VyW6WGZtW+QK+Q6f1RtPK533+A= Subject key identifier: C2:CF:4F:6D:F6:6D:FB:AF:61:76:71:82:A8:0B:A5:4A:98:F5:6C:12 Certificate issuer: /CN=50554af3-8108-491d-84e4-240f4874833a Certificate serial: 010D0C9F4328584A655B29940FEA43D55BD85180 Authority key identifier: 62:F9:9E:4B:84:14:A7:D4:AD:22:12:4C:DB:E3:59:77:91:6F:BA:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/0f4c12d6-8727-3d11-a3bc-2d2c9c9b98e9.roa Signing time: Thu 03 Jul 2025 13:01:04 +0000 ROA not before: Thu 03 Jul 2025 13:01:04 +0000 ROA not after: Wed 01 Oct 2025 13:01:04 +0000 asID: 3561 IP address blocks: 149.19.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/50554af3-8108-491d-84e4-240f4874833a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/50554af3-8108-491d-84e4-240f4874833a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:65:5b:29:94:0f:ea:43:d5:5b:d8:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50554af3-8108-491d-84e4-240f4874833a Validity Not Before: Jul 3 13:01:04 2025 GMT Not After : Oct 1 13:01:04 2025 GMT Subject: CN=dda16d31-7c74-4680-a8cd-fa7d2776d365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:98:ac:99:1c:3c:33:bd:71:1c:c7:9d:5a:fa: 4f:31:a2:c9:e7:99:f5:0a:29:6a:ba:e7:62:a2:87: 8b:46:c5:7c:d2:4e:86:bc:c0:46:18:fa:6b:f2:c2: 26:28:59:e1:5b:13:7b:b4:3d:cd:bb:9b:47:e8:b0: 78:4e:76:72:3e:57:be:99:ac:04:f9:3b:cf:12:37: 5b:cd:4d:3a:ed:dd:d3:f3:87:2e:62:5a:33:4b:c7: b8:47:ab:54:5d:30:a6:2c:87:40:e9:5f:98:53:b9: 8c:32:1b:39:5c:8b:02:21:f4:ce:5c:9e:82:97:e0: f0:ba:0e:c7:34:6f:54:c7:51:5e:0d:7c:04:2d:1d: f9:1d:60:b7:36:e4:de:b9:2e:7c:f0:b4:27:d0:63: f1:a6:d3:f8:44:de:9c:a0:4d:41:99:99:39:2c:e0: 2f:8f:5b:b6:eb:d5:9b:a9:39:7e:48:18:d7:75:30: cb:8a:f4:e2:73:1f:70:9a:66:77:d1:ae:37:30:46: 2d:8c:68:42:8d:c7:3b:b9:f4:23:79:a2:dd:d4:ac: 98:84:42:49:99:d6:cf:ab:ff:6c:68:92:18:0e:d2: 6f:3c:cc:5f:48:b7:82:c7:19:c0:bc:95:3e:26:8a: 19:e1:c1:f6:ea:cf:28:5a:8d:13:be:48:e3:6d:86: cb:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:CF:4F:6D:F6:6D:FB:AF:61:76:71:82:A8:0B:A5:4A:98:F5:6C:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/0f4c12d6-8727-3d11-a3bc-2d2c9c9b98e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/50554af3-8108-491d-84e4-240f4874833a.crl X509v3 Authority Key Identifier: keyid:62:F9:9E:4B:84:14:A7:D4:AD:22:12:4C:DB:E3:59:77:91:6F:BA:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a.cer sbgp-ipAddrBlock: critical IPv4: 149.19.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:6d:c0:46:3c:ad:db:d0:f5:d0:bc:45:89:44:58:f4:e4:eb: c5:92:de:dc:cf:e5:41:52:69:71:76:bd:6d:99:cc:29:7a:c4: 38:47:9f:53:ad:07:af:11:ca:34:85:3a:b3:fc:0b:d6:d0:28: fa:ed:8e:bd:76:35:02:9a:3f:14:61:5f:8a:1a:02:a5:3f:e9: b6:9c:0f:e5:94:47:58:74:35:30:8e:d4:4b:af:dc:4c:d9:30: 96:26:de:05:0c:3f:30:e5:25:f8:9e:04:77:40:c5:9d:e7:9a: dd:a5:a6:6e:79:8f:ca:23:f1:9a:61:69:3f:1d:e4:37:db:39: 89:90:45:1a:46:51:4b:3f:0c:5a:4b:22:2a:b1:43:aa:af:eb: 84:95:c5:1c:55:f2:16:91:28:82:22:ec:76:8d:be:ac:ec:3a: b6:13:81:2d:1c:94:5b:e0:eb:11:56:3f:7d:ca:11:e2:2f:a0: f0:40:6e:86:22:99:29:bb:e9:9d:fc:74:75:01:a2:97:c4:f0: 7e:21:bb:a9:ae:02:2f:e9:55:2d:22:de:13:5a:52:d4:6b:8c: 9b:aa:bf:8f:b9:ea:5c:4f:53:45:d8:ba:89:af:e6:50:ee:a1: b0:4f:cb:92:b7:9e:64:16:8e:57:ec:d2:4a:6c:92:82:de:ac: 1d:e2:aa:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEplWymUD+pD1VvYUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTA1NTRhZjMtODEwOC00OTFkLTg0ZTQtMjQwZjQ4NzQ4 MzNhMB4XDTI1MDcwMzEzMDEwNFoXDTI1MTAwMTEzMDEwNFowLzEtMCsGA1UEAxMk ZGRhMTZkMzEtN2M3NC00NjgwLWE4Y2QtZmE3ZDI3NzZkMzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZismRw8M71xHMedWvpPMaLJ55n1Cilquudi ooeLRsV80k6GvMBGGPpr8sImKFnhWxN7tD3Nu5tH6LB4TnZyPle+mawE+TvPEjdb zU067d3T84cuYlozS8e4R6tUXTCmLIdA6V+YU7mMMhs5XIsCIfTOXJ6Cl+Dwug7H NG9Ux1FeDXwELR35HWC3NuTeuS588LQn0GPxptP4RN6coE1BmZk5LOAvj1u269Wb qTl+SBjXdTDLivTicx9wmmZ30a43MEYtjGhCjcc7ufQjeaLd1KyYhEJJmdbPq/9s aJIYDtJvPMxfSLeCxxnAvJU+JooZ4cH26s8oWo0TvkjjbYbLewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMLPT232bfuvYXZxgqgLpUqY9WwSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81MDU1 NGFmMy04MTA4LTQ5MWQtODRlNC0yNDBmNDg3NDgzM2EvMGY0YzEyZDYtODcyNy0z ZDExLWEzYmMtMmQyYzljOWI5OGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTA1NTRhZjMtODEwOC00OTFkLTg0 ZTQtMjQwZjQ4NzQ4MzNhLzUwNTU0YWYzLTgxMDgtNDkxZC04NGU0LTI0MGY0ODc0 ODMzYS5jcmwwHwYDVR0jBBgwFoAUYvmeS4QUp9StIhJM2+NZd5FvugwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81MDU1NGFmMy04MTA4LTQ5MWQtODRlNC0yNDBm NDg3NDgzM2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlROeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9twEY8rdvQ9dC8RYlEWPTk68WS3tzP5UFSaXF2vW2ZzCl6xDhHn1Ot B68RyjSFOrP8C9bQKPrtjr12NQKaPxRhX4oaAqU/6bacD+WUR1h0NTCO1Euv3EzZ MJYm3gUMPzDlJfieBHdAxZ3nmt2lpm55j8oj8ZphaT8d5DfbOYmQRRpGUUs/DFpL IiqxQ6qv64SVxRxV8haRKIIi7HaNvqzsOrYTgS0clFvg6xFWP33KEeIvoPBAboYi mSm76Z38dHUBopfE8H4hu6muAi/pVS0i3hNaUtRrjJuqv4+56lxPU0XYuomv5lDu obBPy5K3nmQWjlfs0kpskoLerB3iqhM= -----END CERTIFICATE-----Generated at Mon Jul 21 02:06:35 2025 by rpki-client