$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/73cb58cc-0f0a-3c7d-8518-54f1e7a71037.roa File: 73cb58cc-0f0a-3c7d-8518-54f1e7a71037.roa (raw, json) Hash identifier: v5KeGXeCeQ7GAT6Hg3DydtJatzhAsVsMua7KNdm0Dgk= Subject key identifier: 8A:6D:8C:7B:88:66:E1:FD:33:A0:BF:24:36:4D:FC:0A:69:C2:81:38 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F432858493ED3D827532264EE8ACC5230 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/73cb58cc-0f0a-3c7d-8518-54f1e7a71037.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 399629 IP address blocks: 149.248.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:d8:27:53:22:64:ee:8a:cc:52:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=08eba859-71e3-4a69-8d1c-7692aaf1e864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2d:f6:4b:04:4b:89:9f:c2:ee:7b:6e:be:69: bc:aa:6e:59:d4:53:53:ce:7b:ad:93:bd:85:31:7b: 72:f2:06:e2:65:3a:6f:c0:bb:42:29:06:a9:c3:9f: 2c:16:7e:38:f9:1d:04:97:f9:16:4d:db:9a:e3:53: a5:dc:6c:19:a9:ce:82:30:53:2f:51:7c:e0:fd:59: 5c:56:3c:50:90:3e:72:8a:50:61:21:9f:e9:41:23: e6:85:ac:81:f3:90:40:4f:21:4e:b9:1f:9b:03:7d: 41:fa:28:23:a7:c2:8d:2c:05:e0:d1:99:25:25:5f: 6b:62:8f:0b:d5:df:83:ed:7c:d4:7b:f1:65:48:cc: d3:27:14:95:50:33:77:f1:d9:10:d0:56:68:3a:54: 66:29:d6:da:27:4f:33:c6:a1:0e:29:51:66:d1:98: c5:3b:b7:72:77:7c:a8:3a:33:16:63:81:0e:ee:34: 26:ff:6c:e2:06:d6:64:e2:94:b6:5d:ea:4b:2b:ee: f3:7d:25:d0:64:e4:fc:76:24:9f:f6:7f:7a:b2:f0: 1c:e8:01:c2:4a:ad:23:90:a0:51:53:9b:57:5e:1a: 1b:0a:43:11:e2:10:70:d7:a9:63:d0:73:07:52:03: 5b:38:a8:53:66:f7:af:3f:88:b0:a6:3e:e3:4b:a6: aa:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:6D:8C:7B:88:66:E1:FD:33:A0:BF:24:36:4D:FC:0A:69:C2:81:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/73cb58cc-0f0a-3c7d-8518-54f1e7a71037.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 149.248.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:c1:c2:00:37:2e:a8:07:ee:64:e2:31:fe:d0:25:c6:ac:b5: a6:4c:ac:41:69:98:38:36:93:d6:a5:dd:69:7f:a2:5e:78:84: 68:af:8f:17:31:6d:61:11:1e:36:c0:dc:d0:9e:83:59:b2:f0: 77:7c:d7:7d:e3:6d:93:c0:01:eb:6a:4e:68:5c:24:bc:3f:c9: 57:bf:1f:df:5d:5d:7a:fb:4b:fe:13:8a:a4:44:57:e8:e5:5e: 91:6f:77:94:51:45:1e:61:d0:8e:b2:c3:50:37:3b:d3:53:25: 8d:f3:5d:3d:c1:57:29:e1:3a:cd:32:df:68:f9:55:7a:01:e7: eb:06:48:d9:5c:c6:aa:2d:e3:57:80:fc:23:01:e2:71:12:9a: 85:32:ba:f2:26:52:29:5d:07:1c:0a:8d:58:6f:75:8d:87:9e: 0b:6e:44:e3:33:ce:15:4b:73:35:c4:2f:d0:fa:57:ce:c5:1c: 90:22:7a:62:6f:5d:5b:33:a2:4e:5c:1a:b3:2f:63:cd:19:c5: 86:47:f2:26:25:e4:cb:80:26:cc:5e:3f:fc:4d:2c:00:db:65: c1:d6:04:93:c7:29:98:36:50:af:8d:dc:f3:73:b4:1a:21:db: a9:bd:7e:0e:90:f5:09:99:7c:8d:52:6e:8a:8b:16:3c:36:e2: 47:de:1e:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+09gnUyJk7orMUjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk MDhlYmE4NTktNzFlMy00YTY5LThkMWMtNzY5MmFhZjFlODY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAti32SwRLiZ/C7ntuvmm8qm5Z1FNTznutk72F MXty8gbiZTpvwLtCKQapw58sFn44+R0El/kWTdua41Ol3GwZqc6CMFMvUXzg/Vlc VjxQkD5yilBhIZ/pQSPmhayB85BATyFOuR+bA31B+igjp8KNLAXg0ZklJV9rYo8L 1d+D7XzUe/FlSMzTJxSVUDN38dkQ0FZoOlRmKdbaJ08zxqEOKVFm0ZjFO7dyd3yo OjMWY4EO7jQm/2ziBtZk4pS2XepLK+7zfSXQZOT8diSf9n96svAc6AHCSq0jkKBR U5tXXhobCkMR4hBw16lj0HMHUgNbOKhTZvevP4iwpj7jS6aqDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIptjHuIZuH9M6C/JDZN/AppwoE4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvNzNjYjU4Y2MtMGYwYS0z YzdkLTg1MTgtNTRmMWU3YTcxMDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlfhOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrBwgA3LqgH7mTiMf7QJcastaZMrEFpmDg2k9al3Wl/ol54hGivjxcx bWERHjbA3NCeg1my8Hd8133jbZPAAetqTmhcJLw/yVe/H99dXXr7S/4TiqREV+jl XpFvd5RRRR5h0I6yw1A3O9NTJY3zXT3BVynhOs0y32j5VXoB5+sGSNlcxqot41eA /CMB4nESmoUyuvImUildBxwKjVhvdY2HngtuROMzzhVLczXEL9D6V87FHJAiemJv XVszok5cGrMvY80ZxYZH8iYl5MuAJsxeP/xNLADbZcHWBJPHKZg2UK+N3PNztBoh 26m9fg6Q9QmZfI1SboqLFjw24kfeHoo= -----END CERTIFICATE-----Generated at Tue Apr 8 00:49:38 2025 by rpki-client