$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/a110fa61-fde4-3531-8a97-2d34ca3dfbd9.roa File: a110fa61-fde4-3531-8a97-2d34ca3dfbd9.roa (raw, json) Hash identifier: aL5L59n7bzQSZrqafwCTN0dhiDMx/MbSQt2QBLISf3I= Subject key identifier: A0:A3:F5:74:20:8C:04:74:32:7D:D3:F7:DE:A8:89:AC:7B:E1:61:C2 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584950F963B4C8ADF17322D37680 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/a110fa61-fde4-3531-8a97-2d34ca3dfbd9.roa Signing time: Wed 26 Mar 2025 13:00:53 +0000 ROA not before: Wed 26 Mar 2025 13:00:53 +0000 ROA not after: Tue 24 Jun 2025 13:00:53 +0000 asID: 396253 IP address blocks: 149.19.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:50:f9:63:b4:c8:ad:f1:73:22:d3:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Mar 26 13:00:53 2025 GMT Not After : Jun 24 13:00:53 2025 GMT Subject: CN=1ee909ef-578e-46ad-889e-7b40be4a13a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:00:52:7d:79:45:5c:0e:74:5a:11:a0:b1:a0: 33:79:9a:d6:85:9c:f7:45:f2:49:e0:82:c3:11:4d: 89:05:0e:fa:71:d5:00:b1:64:a5:1f:2d:3b:cd:bb: 01:ac:c8:51:a7:c1:70:42:f4:9d:6b:b6:15:04:85: 61:30:25:0e:26:06:ae:89:00:e1:72:69:08:be:20: 01:1f:bf:cb:31:0b:63:e9:58:1c:16:ba:03:da:83: a1:67:32:32:d7:be:d3:48:ba:e7:42:3c:cd:1a:31: dc:06:bb:0d:1e:7f:37:b6:45:c6:22:07:ca:ec:bb: b2:7c:ac:3f:42:88:8b:07:3f:c4:d3:8e:00:86:55: d0:7d:27:5f:57:7b:c7:8c:f5:a0:d7:4f:81:44:59: 00:a5:84:61:4c:f3:f5:e2:e4:b3:fa:57:9a:26:b0: d3:f4:f7:01:4b:74:1a:b1:d5:9a:d1:08:1f:ba:51: 06:7e:af:d2:cb:35:d8:11:f8:56:7a:d7:b1:e8:7e: c0:8e:6b:8e:ab:32:e6:6b:a3:84:09:9d:b7:e4:6e: 17:a5:92:ca:8d:15:0d:ae:28:f6:ca:c9:7b:7a:f1: 79:c3:07:22:46:25:62:88:d0:6a:92:7a:c9:b1:35: 5e:d8:f9:2c:6c:a9:32:27:c5:2b:6f:b8:60:2b:91: a6:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A3:F5:74:20:8C:04:74:32:7D:D3:F7:DE:A8:89:AC:7B:E1:61:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/a110fa61-fde4-3531-8a97-2d34ca3dfbd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 149.19.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:73:c5:b8:00:b4:3e:50:8a:12:2a:df:36:6b:ba:75:28:70: 87:2f:ea:43:ee:7a:e5:23:b7:89:e5:7d:92:8a:75:9f:7d:a7: 1e:56:65:ac:af:29:b2:ac:a7:52:7a:1e:46:40:d1:20:f2:43: 6a:db:ff:51:17:49:68:c0:58:20:cd:bd:b7:32:10:5d:e0:ce: 22:77:f4:a2:ef:03:0c:70:04:7c:cd:ef:02:80:df:fc:d3:4f: c3:2b:9d:97:ca:a5:7f:45:ff:84:b5:ae:dc:7b:b3:36:85:54: f0:cf:fc:dc:82:26:45:2c:be:76:f3:99:a1:d9:85:06:a6:1b: a5:52:ae:f8:72:db:80:45:2e:09:b5:1d:7b:3a:32:8e:18:9f: 37:5a:27:16:bc:1a:65:79:35:81:68:f4:70:2a:b2:1c:9c:a5: 69:20:70:42:48:f8:37:69:9e:a2:d7:59:b6:29:14:ac:09:ec: 78:12:53:03:af:aa:ae:ac:0d:7b:8c:41:90:aa:4e:a5:64:94: 09:63:56:a0:76:f3:b2:1e:23:40:1f:e5:dc:de:0f:3a:e7:1f: 8f:eb:e1:cb:5c:3f:85:2e:28:8a:6d:be:b0:04:67:1e:6f:80: 2e:ee:47:5d:53:ab:ca:fb:35:5c:e5:27:e9:a8:2e:c2:71:85: 96:5d:ee:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElQ+WO0yK3xcyLTdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDMyNjEzMDA1M1oXDTI1MDYyNDEzMDA1M1owLzEtMCsGA1UEAxMk MWVlOTA5ZWYtNTc4ZS00NmFkLTg4OWUtN2I0MGJlNGExM2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQBSfXlFXA50WhGgsaAzeZrWhZz3RfJJ4ILD EU2JBQ76cdUAsWSlHy07zbsBrMhRp8FwQvSda7YVBIVhMCUOJgauiQDhcmkIviAB H7/LMQtj6VgcFroD2oOhZzIy177TSLrnQjzNGjHcBrsNHn83tkXGIgfK7LuyfKw/ QoiLBz/E044AhlXQfSdfV3vHjPWg10+BRFkApYRhTPP14uSz+leaJrDT9PcBS3Qa sdWa0QgfulEGfq/SyzXYEfhWetex6H7AjmuOqzLma6OECZ235G4XpZLKjRUNrij2 ysl7evF5wwciRiViiNBqknrJsTVe2PksbKkyJ8Urb7hgK5GmDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKCj9XQgjAR0Mn3T996oiax74WHCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvYTExMGZhNjEtZmRlNC0z NTMxLThhOTctMmQzNGNhM2RmYmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRMnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNzxbgAtD5QihIq3zZrunUocIcv6kPueuUjt4nlfZKKdZ99px5WZayv KbKsp1J6HkZA0SDyQ2rb/1EXSWjAWCDNvbcyEF3gziJ39KLvAwxwBHzN7wKA3/zT T8MrnZfKpX9F/4S1rtx7szaFVPDP/NyCJkUsvnbzmaHZhQamG6VSrvhy24BFLgm1 HXs6Mo4YnzdaJxa8GmV5NYFo9HAqshycpWkgcEJI+DdpnqLXWbYpFKwJ7HgSUwOv qq6sDXuMQZCqTqVklAljVqB287IeI0Af5dzeDzrnH4/r4ctcP4UuKIptvrAEZx5v gC7uR11Tq8r7NVzlJ+moLsJxhZZd7gg= -----END CERTIFICATE-----Generated at Sat Apr 5 23:20:43 2025 by rpki-client