$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/01077a74-6d92-30a1-9ea3-cb72af5bfba2.roa File: 01077a74-6d92-30a1-9ea3-cb72af5bfba2.roa (raw, json) Hash identifier: 3lhuC10gGomZ4+/x0WU9Ys0cKDlbj6eFAZE6RqhV48c= Subject key identifier: A4:17:3C:E2:7D:2B:19:D7:72:81:EA:0A:D5:F8:68:35:4E:75:BC:76 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F43285848D0ABA8EADADF518C846B9180 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/01077a74-6d92-30a1-9ea3-cb72af5bfba2.roa Signing time: Sat 08 Feb 2025 14:00:52 +0000 ROA not before: Sat 08 Feb 2025 14:00:52 +0000 ROA not after: Fri 09 May 2025 13:00:52 +0000 asID: 396253 IP address blocks: 149.19.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:ab:a8:ea:da:df:51:8c:84:6b:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Feb 8 14:00:52 2025 GMT Not After : May 9 13:00:52 2025 GMT Subject: CN=90c1cd52-ab20-4dfe-94cc-6f6e92e0894e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c0:af:71:69:63:e7:db:2f:21:82:e9:4e:b3: 11:6b:97:7f:8b:77:1b:45:1a:e2:f6:da:71:bc:3b: 6f:1e:a1:8f:53:a4:6b:b1:42:ff:b5:2b:b3:ee:82: 0d:c5:f2:30:46:83:71:fc:ed:9e:26:2a:0c:d6:36: 09:19:84:8b:1d:95:05:75:61:f2:b9:fc:71:51:0d: 5d:98:96:5e:d0:15:10:46:ee:48:aa:67:1b:72:3e: 79:80:67:a2:98:de:4b:91:35:65:11:5a:4d:f5:f1: 5f:00:fb:5a:ba:a3:1f:52:16:65:ec:81:f0:7e:a3: 61:c9:ec:2c:9f:ba:46:3f:72:7a:0f:c6:54:aa:0a: db:b1:26:91:d8:3a:aa:68:1c:0a:74:d9:79:5f:0e: f1:89:98:a3:ad:c5:34:92:41:62:98:26:d4:e7:59: cc:ce:f6:35:b8:21:03:e4:05:94:c5:a7:bd:56:f9: e0:77:6c:d5:9b:77:7e:4b:49:fb:e4:1a:89:68:dc: 98:a4:23:21:68:28:2d:b0:92:2d:54:1f:11:2a:d4: 78:ab:e6:17:ee:cd:0b:76:e6:61:8e:b1:ff:52:be: bd:6b:b8:17:ab:9c:37:cc:e3:99:7d:e0:47:0f:8e: 41:b3:ff:2d:aa:af:ae:f4:1c:bd:65:8c:54:87:77: 60:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:17:3C:E2:7D:2B:19:D7:72:81:EA:0A:D5:F8:68:35:4E:75:BC:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/01077a74-6d92-30a1-9ea3-cb72af5bfba2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 149.19.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:11:f4:1d:cf:54:0f:c2:3e:91:87:9a:70:5a:15:fe:f8:a7: ef:72:a9:fe:8a:8f:25:de:37:50:18:a1:12:3b:c5:35:1d:e6: 3a:39:02:94:1e:c7:66:7d:01:04:a0:d2:2d:97:09:ab:a2:c4: f3:5a:22:6b:fd:3a:28:f8:59:79:a9:04:d3:84:4b:d9:72:cb: 55:8c:8f:4c:c6:e4:39:4a:06:2e:58:8f:12:a3:89:1f:f1:82: 33:84:e9:48:37:3a:ff:a2:e5:f0:b7:b3:94:20:4b:7d:1e:35: 69:6d:6c:af:10:79:95:1c:cc:f4:14:c1:eb:4a:a4:b6:30:d4: e3:32:14:9b:dd:a0:76:33:02:5f:ae:68:5e:35:e6:50:31:e1: 24:bf:a1:5b:1f:07:54:c9:d7:4d:27:88:02:37:cc:81:94:c7: 50:99:12:4f:cf:3d:ba:13:58:55:b5:bc:b5:65:54:1e:31:b7: 06:ab:02:d1:3f:b1:2e:8c:e7:74:2e:e9:6c:43:9a:f5:be:55: ad:3a:77:7a:a7:95:1c:07:7e:fb:f1:3c:b5:c1:1e:4a:bd:c3: 32:80:87:e4:73:10:34:5d:4b:5a:24:c9:5e:a3:34:f7:b4:b8: 8f:2d:77:e9:6e:42:ba:40:ca:83:1f:92:27:2c:80:1b:ec:07: bf:24:c3:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjQq6jq2t9RjIRrkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk OTBjMWNkNTItYWIyMC00ZGZlLTk0Y2MtNmY2ZTkyZTA4OTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMCvcWlj59svIYLpTrMRa5d/i3cbRRri9tpx vDtvHqGPU6RrsUL/tSuz7oINxfIwRoNx/O2eJioM1jYJGYSLHZUFdWHyufxxUQ1d mJZe0BUQRu5Iqmcbcj55gGeimN5LkTVlEVpN9fFfAPtauqMfUhZl7IHwfqNhyews n7pGP3J6D8ZUqgrbsSaR2DqqaBwKdNl5Xw7xiZijrcU0kkFimCbU51nMzvY1uCED 5AWUxae9Vvngd2zVm3d+S0n75BqJaNyYpCMhaCgtsJItVB8RKtR4q+YX7s0LduZh jrH/Ur69a7gXq5w3zOOZfeBHD45Bs/8tqq+u9By9ZYxUh3dgEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQXPOJ9KxnXcoHqCtX4aDVOdbx2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvMDEwNzdhNzQtNmQ5Mi0z MGExLTllYTMtY2I3MmFmNWJmYmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRMmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsR9B3PVA/CPpGHmnBaFf74p+9yqf6KjyXeN1AYoRI7xTUd5jo5ApQe x2Z9AQSg0i2XCauixPNaImv9Oij4WXmpBNOES9lyy1WMj0zG5DlKBi5YjxKjiR/x gjOE6Ug3Ov+i5fC3s5QgS30eNWltbK8QeZUczPQUwetKpLYw1OMyFJvdoHYzAl+u aF415lAx4SS/oVsfB1TJ100niAI3zIGUx1CZEk/PPboTWFW1vLVlVB4xtwarAtE/ sS6M53Qu6WxDmvW+Va06d3qnlRwHfvvxPLXBHkq9wzKAh+RzEDRdS1okyV6jNPe0 uI8td+luQrpAyoMfkicsgBvsB78kw7Q= -----END CERTIFICATE-----Generated at Sat Apr 5 23:20:43 2025 by rpki-client