$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/de012c4e-185d-3ce9-b093-964f60565a71.roa File: de012c4e-185d-3ce9-b093-964f60565a71.roa (raw, json) Hash identifier: iRQsMj3DbKwL2Hw6EWnNDxxGMobEWsnFDv8xsVk8gUE= Subject key identifier: 30:92:34:E7:8F:C4:60:7B:FE:63:46:4B:51:59:51:B2:2E:5C:30:4D Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F432858493C093A62F3743FB1CC795780 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/de012c4e-185d-3ce9-b093-964f60565a71.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 21949 IP address blocks: 72.15.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:3a:62:f3:74:3f:b1:cc:79:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=49174e2b-2af8-4636-9c91-967647db4ca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d6:02:41:c2:25:7a:90:71:35:48:c5:e8:66: 88:74:46:67:2a:7b:ba:a2:03:e9:90:5e:50:4b:89: 52:6c:5b:f2:07:bc:32:cb:b6:d0:b4:f7:ad:f1:ec: 23:03:94:dc:f2:5e:00:65:73:0a:01:6a:b9:8d:03: f1:52:94:72:a7:f5:6f:0f:d8:4f:1a:09:25:70:dc: b3:68:98:b5:a4:31:2a:b2:8f:03:25:67:24:5f:54: 71:39:57:83:ca:76:bc:ae:08:17:75:ee:5c:68:f0: a9:e5:1f:d5:e1:73:66:f1:df:cc:f2:f2:81:2f:3d: 87:97:b1:27:c7:a7:86:97:a2:71:f7:70:47:13:e1: 98:2f:9a:79:24:49:af:80:e2:6b:3f:46:61:67:a6: aa:53:69:bb:e0:97:44:2a:e3:7f:57:f5:45:f8:da: 21:be:6f:39:5a:81:f3:f5:72:c7:c0:19:13:23:16: 9a:29:ee:46:82:d7:fb:3c:91:b6:a7:4a:d2:d3:e1: de:f1:e8:b1:60:e8:0a:d3:06:97:73:c9:1e:4b:c9: c2:b0:9a:c5:95:4a:00:11:8e:1c:d7:c0:c8:d5:d3: a9:37:45:99:0e:3e:6e:43:90:a8:a4:f4:b0:58:17: bf:2b:c7:7f:c0:6a:da:1e:69:77:c5:8b:a7:08:fa: 37:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:92:34:E7:8F:C4:60:7B:FE:63:46:4B:51:59:51:B2:2E:5C:30:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/de012c4e-185d-3ce9-b093-964f60565a71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 72.15.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:bf:e7:0c:9b:7a:80:e0:3a:7b:94:b9:ca:bb:3b:cc:7f:97: 6f:92:54:97:5a:10:bd:60:9b:c2:ff:b0:71:02:79:00:e3:23: 1d:46:08:cc:1c:15:bf:1e:48:18:1d:ca:32:8f:ad:98:3f:42: 6e:15:df:e6:5b:2c:88:fa:8a:b0:48:ab:06:4e:16:fd:1d:93: f8:18:47:f9:80:f8:c4:b5:7f:95:3d:bc:71:e7:76:9e:2e:0a: ae:4a:ad:98:63:c5:f4:d2:af:9d:b3:6a:42:c5:89:47:0a:b3: 69:6f:a0:0a:3f:fc:3e:c8:f7:3c:fa:19:4d:8a:01:71:94:a6: 86:9e:f6:0e:bd:5a:23:97:ff:b7:fe:f1:05:2f:65:8c:eb:38: b3:fc:3f:ee:5e:4d:2d:b0:1a:1e:66:10:d4:c4:ef:f7:91:d0: b7:78:48:dc:50:75:90:f9:d3:50:b1:a1:84:47:87:fd:ac:10: 64:f9:e7:ea:bd:46:73:93:1e:59:47:5b:d7:14:1f:10:30:fd: b9:8e:2f:ce:63:c1:67:94:50:a4:c1:33:8c:00:d9:eb:0b:18: d4:33:de:8a:74:a1:32:ed:67:b2:79:69:0d:b6:9c:30:4e:0b: 30:73:13:03:a1:74:ca:d5:5e:49:0e:03:e2:a0:36:fe:aa:96: ad:3b:42:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CTpi83Q/scx5V4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk NDkxNzRlMmItMmFmOC00NjM2LTljOTEtOTY3NjQ3ZGI0Y2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNYCQcIlepBxNUjF6GaIdEZnKnu6ogPpkF5Q S4lSbFvyB7wyy7bQtPet8ewjA5Tc8l4AZXMKAWq5jQPxUpRyp/VvD9hPGgklcNyz aJi1pDEqso8DJWckX1RxOVeDyna8rggXde5caPCp5R/V4XNm8d/M8vKBLz2Hl7En x6eGl6Jx93BHE+GYL5p5JEmvgOJrP0ZhZ6aqU2m74JdEKuN/V/VF+Nohvm85WoHz 9XLHwBkTIxaaKe5Ggtf7PJG2p0rS0+He8eixYOgK0waXc8keS8nCsJrFlUoAEY4c 18DI1dOpN0WZDj5uQ5CopPSwWBe/K8d/wGraHml3xYunCPo3awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCSNOePxGB7/mNGS1FZUbIuXDBNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvZGUwMTJjNGUtMTg1ZC0z Y2U5LWIwOTMtOTY0ZjYwNTY1YTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESA8wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAC/5wybeoDgOnuUucq7O8x/l2+SVJdaEL1gm8L/sHECeQDjIx1GCMwc Fb8eSBgdyjKPrZg/Qm4V3+ZbLIj6irBIqwZOFv0dk/gYR/mA+MS1f5U9vHHndp4u Cq5KrZhjxfTSr52zakLFiUcKs2lvoAo//D7I9zz6GU2KAXGUpoae9g69WiOX/7f+ 8QUvZYzrOLP8P+5eTS2wGh5mENTE7/eR0Ld4SNxQdZD501CxoYRHh/2sEGT55+q9 RnOTHllHW9cUHxAw/bmOL85jwWeUUKTBM4wA2esLGNQz3op0oTLtZ7J5aQ22nDBO CzBzEwOhdMrVXkkOA+KgNv6qlq07QtY= -----END CERTIFICATE-----Generated at Tue Apr 8 10:27:20 2025 by rpki-client