$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/b8a2dcac-f43a-3705-9a4c-ccfb81b27e19.roa File: b8a2dcac-f43a-3705-9a4c-ccfb81b27e19.roa (raw, json) Hash identifier: HEMNLaUGu/uYapcjvv4do1HMBJZEMBtjgRElKpXnFx8= Subject key identifier: 41:06:66:6B:10:53:A0:B5:53:9B:4B:26:BC:0F:CA:82:88:C4:EF:C0 Certificate issuer: /CN=004321a8-393d-4f7f-add9-dddc07a1320d Certificate serial: 010D0C9F4328584A11EC7C7113B3AC3DF7D63F00 Authority key identifier: FE:D8:E1:5B:23:CE:B0:9B:2E:84:87:9B:FF:67:16:5D:DA:D5:FD:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/b8a2dcac-f43a-3705-9a4c-ccfb81b27e19.roa Signing time: Tue 03 Jun 2025 15:46:00 +0000 ROA not before: Tue 03 Jun 2025 15:46:00 +0000 ROA not after: Mon 01 Sep 2025 15:46:00 +0000 asID: 399970 IP address blocks: 149.112.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/004321a8-393d-4f7f-add9-dddc07a1320d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/004321a8-393d-4f7f-add9-dddc07a1320d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:ec:7c:71:13:b3:ac:3d:f7:d6:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=004321a8-393d-4f7f-add9-dddc07a1320d Validity Not Before: Jun 3 15:46:00 2025 GMT Not After : Sep 1 15:46:00 2025 GMT Subject: CN=76ccbea2-55e9-4a07-b73c-b56c937d76b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e4:ce:5a:90:3f:ce:7f:fa:79:47:7a:66:7b: d0:60:02:d9:1d:50:4c:09:a7:67:53:b5:35:f4:db: 31:22:fe:02:e1:c8:1a:7d:24:5e:ba:5d:c0:c2:78: bb:d6:e4:ef:46:a9:29:b7:9f:86:4d:4b:92:53:2f: 00:be:ff:0a:68:d6:8e:5a:15:f6:46:a2:2e:bb:71: b6:63:4c:be:fd:8e:70:39:a6:d5:79:6a:cf:07:35: c2:85:bb:d9:27:1a:59:ec:d8:46:c2:82:ee:5e:43: c9:38:fb:be:42:ab:75:59:fe:95:08:d7:2f:cf:75: 9f:d1:c9:07:f8:42:af:51:fe:18:90:7b:5f:c2:eb: a7:d1:25:ff:a8:3e:eb:04:58:39:ec:4c:4b:38:aa: 9b:2d:7f:c6:fd:8d:e0:1b:df:43:bf:5e:21:fa:87: 0a:83:6c:05:67:8f:c4:51:a3:60:0d:b0:3f:b9:5d: c5:43:ae:0b:a3:fc:9e:b2:e5:1d:a4:d5:0c:b2:1a: 5c:6d:17:1d:3a:30:12:83:b1:22:cf:2c:2d:5d:b1: b2:8d:d8:90:2d:45:97:78:1a:02:7c:8d:4e:56:98: 5c:c2:5b:8c:4f:7b:5a:7a:93:23:4d:85:bb:6c:19: 01:c5:46:55:8e:4a:33:ed:9b:6a:95:df:c5:30:6b: 1d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:06:66:6B:10:53:A0:B5:53:9B:4B:26:BC:0F:CA:82:88:C4:EF:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/b8a2dcac-f43a-3705-9a4c-ccfb81b27e19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/004321a8-393d-4f7f-add9-dddc07a1320d.crl X509v3 Authority Key Identifier: keyid:FE:D8:E1:5B:23:CE:B0:9B:2E:84:87:9B:FF:67:16:5D:DA:D5:FD:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d.cer sbgp-ipAddrBlock: critical IPv4: 149.112.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:a1:da:d9:e0:d7:7d:63:e8:47:d4:94:bc:9a:b3:c1:78:ef: 31:46:92:32:ed:9f:6a:d4:73:a5:9a:bc:67:44:31:83:4c:21: 50:a0:f5:4b:ca:ca:fb:ac:ad:cb:9d:53:39:ec:47:0f:b4:f1: 56:e5:81:da:58:66:0c:e9:ef:7d:75:46:11:db:d8:ed:ac:11: 21:f1:27:b6:d5:61:7f:99:34:aa:26:7c:9a:b1:e0:e3:ac:7c: 9b:b9:50:c8:c1:a5:5c:90:45:84:d8:14:97:23:ea:68:1c:90: 93:43:b0:82:3f:bb:00:ec:2b:a5:8e:85:34:d4:aa:aa:a8:3e: 21:92:12:54:79:8b:6e:b4:ed:b9:98:50:d0:36:8a:ae:a8:13: 36:c9:0f:dc:ec:12:60:da:e5:be:8e:87:a0:0c:65:e8:cd:56: ab:17:51:18:f9:4b:99:40:1a:dc:5f:97:0f:23:84:8c:1e:73: 7c:e1:cb:82:12:25:b6:77:13:83:e2:e2:91:f9:78:a6:c9:4b: e2:3c:98:67:03:04:25:ed:8e:9a:f6:32:21:b3:7b:5a:f1:ac: cb:2f:1e:44:0c:f3:23:c6:58:49:45:11:9f:21:53:b6:f8:84: 34:4d:2a:d6:ea:38:75:bf:53:b8:cb:38:da:62:3b:a4:39:8f: b8:bf:61:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoR7HxxE7OsPffWPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA0MzIxYTgtMzkzZC00ZjdmLWFkZDktZGRkYzA3YTEz MjBkMB4XDTI1MDYwMzE1NDYwMFoXDTI1MDkwMTE1NDYwMFowLzEtMCsGA1UEAxMk NzZjY2JlYTItNTVlOS00YTA3LWI3M2MtYjU2YzkzN2Q3NmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOTOWpA/zn/6eUd6ZnvQYALZHVBMCadnU7U1 9NsxIv4C4cgafSReul3Awni71uTvRqkpt5+GTUuSUy8Avv8KaNaOWhX2RqIuu3G2 Y0y+/Y5wOabVeWrPBzXChbvZJxpZ7NhGwoLuXkPJOPu+Qqt1Wf6VCNcvz3Wf0ckH +EKvUf4YkHtfwuun0SX/qD7rBFg57ExLOKqbLX/G/Y3gG99Dv14h+ocKg2wFZ4/E UaNgDbA/uV3FQ64Lo/yesuUdpNUMshpcbRcdOjASg7EizywtXbGyjdiQLUWXeBoC fI1OVphcwluMT3taepMjTYW7bBkBxUZVjkoz7Ztqld/FMGsd5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEEGZmsQU6C1U5tLJrwPyoKIxO/AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wMDQz MjFhOC0zOTNkLTRmN2YtYWRkOS1kZGRjMDdhMTMyMGQvYjhhMmRjYWMtZjQzYS0z NzA1LTlhNGMtY2NmYjgxYjI3ZTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMDA0MzIxYTgtMzkzZC00ZjdmLWFk ZDktZGRkYzA3YTEzMjBkLzAwNDMyMWE4LTM5M2QtNGY3Zi1hZGQ5LWRkZGMwN2Ex MzIwZC5jcmwwHwYDVR0jBBgwFoAU/tjhWyPOsJsuhIeb/2cWXdrV/fUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wMDQzMjFhOC0zOTNkLTRmN2YtYWRkOS1kZGRj MDdhMTMyMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXCbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGh2tng131j6EfUlLyas8F47zFGkjLtn2rUc6WavGdEMYNMIVCg9UvK yvusrcudUznsRw+08VblgdpYZgzp7311RhHb2O2sESHxJ7bVYX+ZNKomfJqx4OOs fJu5UMjBpVyQRYTYFJcj6mgckJNDsII/uwDsK6WOhTTUqqqoPiGSElR5i2607bmY UNA2iq6oEzbJD9zsEmDa5b6Oh6AMZejNVqsXURj5S5lAGtxflw8jhIwec3zhy4IS JbZ3E4Pi4pH5eKbJS+I8mGcDBCXtjpr2MiGze1rxrMsvHkQM8yPGWElFEZ8hU7b4 hDRNKtbqOHW/U7jLONpiO6Q5j7i/YWE= -----END CERTIFICATE-----Generated at Thu Jun 5 18:14:04 2025 by rpki-client