$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/6122c07c-69b7-3db8-8e9a-018ace42694f.roa File: 6122c07c-69b7-3db8-8e9a-018ace42694f.roa (raw, json) Hash identifier: opAQiXnF28XOwmKX63k45brcKrNVfeysPKmJ07ciuwo= Subject key identifier: 66:75:C4:66:BB:0B:41:48:10:C5:7F:F2:2E:C8:28:39:83:C4:79:37 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F43285848D0ABAF6F78FAB1F0AC38F700 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/6122c07c-69b7-3db8-8e9a-018ace42694f.roa Signing time: Sat 08 Feb 2025 14:00:52 +0000 ROA not before: Sat 08 Feb 2025 14:00:52 +0000 ROA not after: Fri 09 May 2025 13:00:52 +0000 asID: 396253 IP address blocks: 149.19.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:ab:af:6f:78:fa:b1:f0:ac:38:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Feb 8 14:00:52 2025 GMT Not After : May 9 13:00:52 2025 GMT Subject: CN=71eaa050-4a8c-41c5-9ed3-8057b48b0bd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:52:3a:6a:b0:55:bb:e9:94:b3:02:d7:ad:53: da:82:49:e0:f6:27:09:f2:21:2a:10:87:93:f6:b2: 02:09:8e:b2:a4:50:c7:23:1d:f4:7e:b9:0b:72:87: 8b:b0:80:98:00:d5:18:f5:44:08:7e:93:dd:1a:68: 17:08:b9:0d:18:0a:25:8f:bd:e9:6c:75:77:3d:47: e7:4f:8a:de:de:93:e6:8f:2f:e2:5a:93:77:58:d7: ca:16:e8:ba:53:45:38:18:84:f0:f7:c3:ec:d3:3c: f9:8b:b6:5e:a8:76:84:c2:ae:fa:5d:c1:c6:6c:a8: 23:e9:be:2f:a7:e7:26:da:78:b5:05:35:c6:4e:09: 02:8a:23:de:06:76:34:c5:86:a7:1b:5a:2f:8b:78: e5:00:ef:76:81:b7:f5:99:e0:a2:39:b3:ae:fe:f2: b4:e2:4c:c8:75:32:ec:5f:2a:03:7a:9b:1a:fb:b1: 5f:0c:b8:9a:87:b7:ab:2a:48:17:0c:51:17:6a:ca: 76:47:54:5b:d1:5e:fe:ef:c2:7a:5a:a7:42:e2:37: 7d:12:70:69:d1:34:85:7b:41:02:e8:fe:a0:c4:66: b4:da:68:13:bf:37:8a:c3:cc:10:80:f9:8a:88:47: bc:c0:60:10:82:fc:04:e9:99:c7:1c:80:d9:3f:81: d7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:75:C4:66:BB:0B:41:48:10:C5:7F:F2:2E:C8:28:39:83:C4:79:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/6122c07c-69b7-3db8-8e9a-018ace42694f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 149.19.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:17:fa:44:be:79:94:c6:f6:ac:24:b2:2a:4e:df:0a:8c:bf: 0c:f6:20:ed:10:c8:34:cf:0d:84:cf:a9:c6:be:cb:79:be:53: c8:c3:ff:76:c9:e9:e8:d3:51:71:4a:fb:72:ac:cc:89:0e:8e: a4:96:cf:fd:f7:ab:4e:f3:24:4b:8f:c4:0a:96:53:12:cc:86: 96:f5:4b:71:0f:4e:05:29:cc:78:d0:91:e0:43:f2:91:d2:58: 03:48:28:55:55:a2:1a:dc:f1:43:3e:2d:6a:dd:b1:65:38:fd: a8:fe:62:e8:ea:c7:97:2e:b1:e9:2d:a4:4c:9f:11:3d:4d:0b: dd:a9:c7:42:d2:bf:d7:c7:00:24:96:c4:f8:e1:77:aa:e1:57: 0b:7c:d4:1c:24:d0:bf:cc:74:86:7c:4b:ca:2c:20:27:20:83: 17:13:a6:97:a7:29:c3:e1:7f:29:72:8b:f5:76:04:f5:6a:cd: 40:02:d5:be:e4:98:9c:43:b5:94:48:3c:e2:16:e7:b2:b4:a2: df:7f:b4:bf:e6:02:5c:31:2c:16:69:7d:77:24:01:40:e5:aa: b4:9f:26:c7:28:44:34:24:55:ef:79:84:99:fb:7e:5e:39:28: ff:83:77:6c:54:6f:05:85:3c:ee:aa:57:fe:3a:fd:a0:10:79: fb:4d:0d:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjQq69vePqx8Kw49wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk NzFlYWEwNTAtNGE4Yy00MWM1LTllZDMtODA1N2I0OGIwYmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglI6arBVu+mUswLXrVPagkng9icJ8iEqEIeT 9rICCY6ypFDHIx30frkLcoeLsICYANUY9UQIfpPdGmgXCLkNGAolj73pbHV3PUfn T4re3pPmjy/iWpN3WNfKFui6U0U4GITw98Ps0zz5i7ZeqHaEwq76XcHGbKgj6b4v p+cm2ni1BTXGTgkCiiPeBnY0xYanG1ovi3jlAO92gbf1meCiObOu/vK04kzIdTLs XyoDepsa+7FfDLiah7erKkgXDFEXasp2R1Rb0V7+78J6WqdC4jd9EnBp0TSFe0EC 6P6gxGa02mgTvzeKw8wQgPmKiEe8wGAQgvwE6ZnHHIDZP4HX8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZ1xGa7C0FIEMV/8i7IKDmDxHk3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvNjEyMmMwN2MtNjliNy0z ZGI4LThlOWEtMDE4YWNlNDI2OTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRM0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHcX+kS+eZTG9qwksipO3wqMvwz2IO0QyDTPDYTPqca+y3m+U8jD/3bJ 6ejTUXFK+3KszIkOjqSWz/33q07zJEuPxAqWUxLMhpb1S3EPTgUpzHjQkeBD8pHS WANIKFVVohrc8UM+LWrdsWU4/aj+Yujqx5cusektpEyfET1NC92px0LSv9fHACSW xPjhd6rhVwt81Bwk0L/MdIZ8S8osICcggxcTppenKcPhfylyi/V2BPVqzUAC1b7k mJxDtZRIPOIW57K0ot9/tL/mAlwxLBZpfXckAUDlqrSfJscoRDQkVe95hJn7fl45 KP+Dd2xUbwWFPO6qV/46/aAQeftNDdc= -----END CERTIFICATE-----Generated at Sat Apr 5 22:35:53 2025 by rpki-client