$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/c230b9e0-501e-3838-805b-245427356d20.roa File: c230b9e0-501e-3838-805b-245427356d20.roa (raw, json) Hash identifier: wLdzV/IQ4XjyOmfWT8wH54ehjKCkh6nM57PB8Jwisq8= Subject key identifier: C3:0D:0B:C6:79:83:0A:BC:74:06:88:75:A6:0C:8C:EC:87:77:EA:CA Certificate issuer: /CN=81565da9-aab9-45ca-b99c-0684053daa09 Certificate serial: 010D0C9F43285848BFEB957BB00F968D0A4F1240 Authority key identifier: D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/c230b9e0-501e-3838-805b-245427356d20.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 19331 IP address blocks: 149.64.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:95:7b:b0:0f:96:8d:0a:4f:12:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81565da9-aab9-45ca-b99c-0684053daa09 Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=2e3d577b-e2c9-416c-9d1b-471afcf81d4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5d:78:93:cd:26:95:c6:dc:0a:e7:76:ea:a3: 98:35:23:9d:fe:a6:39:7a:dd:16:76:64:a4:18:a2: 36:5a:0b:89:ed:4d:e1:d2:67:53:f6:c0:33:51:e9: 3d:3e:be:4c:09:78:b8:bb:20:e1:7e:f7:1b:92:94: 51:a9:27:fe:51:24:fe:bd:30:14:14:68:40:ef:7c: 8d:e1:c5:60:56:12:92:25:1a:fe:6b:28:e1:72:22: 29:66:c7:44:1b:3a:87:52:95:cf:74:00:f0:71:b9: 98:0d:11:fd:a5:8c:45:a1:49:df:94:ac:82:ba:97: 66:ac:85:1b:63:d0:82:7a:c6:39:e2:a4:df:55:25: 83:34:36:de:f5:e4:7b:e0:42:52:51:7d:66:eb:67: 6e:9e:ef:8e:97:c4:a7:04:02:c5:9d:84:a9:46:14: 5a:f0:97:b4:ab:6c:e6:7d:4c:4d:b5:5a:76:68:d7: a3:f3:ab:8b:da:3a:2d:13:b8:3a:ff:41:9c:c2:11: 3e:87:f3:30:af:8e:4b:54:5b:4d:b5:c6:7a:ee:d2: d0:d2:7c:32:84:53:4d:f0:64:12:1f:8d:9d:ae:fa: c1:03:4b:3f:08:b7:61:4d:8c:dd:83:f6:72:7e:37: 28:1d:5d:39:fe:b6:ed:ff:cd:ce:64:df:b1:c0:82: 9c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:0D:0B:C6:79:83:0A:BC:74:06:88:75:A6:0C:8C:EC:87:77:EA:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/c230b9e0-501e-3838-805b-245427356d20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl X509v3 Authority Key Identifier: keyid:D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer sbgp-ipAddrBlock: critical IPv4: 149.64.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:af:88:80:ee:71:2d:af:b7:7a:80:c7:fd:4a:52:f3:8e:cf: bb:c6:72:3e:6a:e9:4d:c3:02:0f:bb:03:c4:95:a1:ed:9a:bc: bc:db:79:db:65:41:cf:65:6e:ed:3c:27:4f:48:2d:d6:1b:d4: fa:1d:84:c9:6f:be:af:60:f7:55:61:73:39:cf:20:a8:60:9a: da:fd:cd:44:1f:da:54:e0:63:2f:c8:75:cf:bd:f5:91:eb:b1: 9a:4f:18:93:30:09:99:19:f6:e1:d3:91:f0:ca:75:84:34:7c: ec:8c:ec:7c:99:04:1a:50:33:dd:ad:2e:b7:7b:69:cb:a2:df: 15:9f:84:ac:17:bf:41:6b:91:4e:b0:4e:62:a9:a3:64:ef:4f: 2a:b9:cf:e9:b7:3d:84:17:aa:e3:2b:17:25:ff:da:e0:2f:12: b4:a8:4b:3b:88:ca:19:e6:d6:40:f2:fa:c7:13:01:c0:ce:0e: 97:7b:30:12:f8:05:b7:f3:b5:0b:d1:07:5b:e9:ba:6d:fa:81: 09:4f:86:a8:ca:f8:ea:3b:8c:bf:c1:7a:3c:bd:14:56:23:f0: 97:e1:4a:3e:e5:73:1b:5c:9f:d2:7c:96:82:cf:27:e6:ba:1a: 3d:23:5b:78:f1:57:ff:e6:0b:d3:e1:de:a4:d5:b7:2b:00:28: e8:fc:24:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/65V7sA+WjQpPEkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODE1NjVkYTktYWFiOS00NWNhLWI5OWMtMDY4NDA1M2Rh YTA5MB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk MmUzZDU3N2ItZTJjOS00MTZjLTlkMWItNDcxYWZjZjgxZDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiF14k80mlcbcCud26qOYNSOd/qY5et0WdmSk GKI2WguJ7U3h0mdT9sAzUek9Pr5MCXi4uyDhfvcbkpRRqSf+UST+vTAUFGhA73yN 4cVgVhKSJRr+ayjhciIpZsdEGzqHUpXPdADwcbmYDRH9pYxFoUnflKyCupdmrIUb Y9CCesY54qTfVSWDNDbe9eR74EJSUX1m62dunu+Ol8SnBALFnYSpRhRa8Je0q2zm fUxNtVp2aNej86uL2jotE7g6/0GcwhE+h/Mwr45LVFtNtcZ67tLQ0nwyhFNN8GQS H42drvrBA0s/CLdhTYzdg/ZyfjcoHV05/rbt/83OZN+xwIKcOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMMNC8Z5gwq8dAaIdaYMjOyHd+rKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84MTU2 NWRhOS1hYWI5LTQ1Y2EtYjk5Yy0wNjg0MDUzZGFhMDkvYzIzMGI5ZTAtNTAxZS0z ODM4LTgwNWItMjQ1NDI3MzU2ZDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODE1NjVkYTktYWFiOS00NWNhLWI5 OWMtMDY4NDA1M2RhYTA5LzgxNTY1ZGE5LWFhYjktNDVjYS1iOTljLTA2ODQwNTNk YWEwOS5jcmwwHwYDVR0jBBgwFoAU11yQoPbNF8ZEaKnEFmHVfmQjLcgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84MTU2NWRhOS1hYWI5LTQ1Y2EtYjk5Yy0wNjg0 MDUzZGFhMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlUDhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuviIDucS2vt3qAx/1KUvOOz7vGcj5q6U3DAg+7A8SVoe2avLzbedtl Qc9lbu08J09ILdYb1PodhMlvvq9g91VhcznPIKhgmtr9zUQf2lTgYy/Idc+99ZHr sZpPGJMwCZkZ9uHTkfDKdYQ0fOyM7HyZBBpQM92tLrd7acui3xWfhKwXv0FrkU6w TmKpo2TvTyq5z+m3PYQXquMrFyX/2uAvErSoSzuIyhnm1kDy+scTAcDODpd7MBL4 BbfztQvRB1vpum36gQlPhqjK+Oo7jL/Bejy9FFYj8JfhSj7lcxtcn9J8loLPJ+a6 Gj0jW3jxV//mC9Ph3qTVtysAKOj8JME= -----END CERTIFICATE-----Generated at Thu Apr 10 19:35:31 2025 by rpki-client