$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/cb94b7a5-85ee-3052-b78e-60662eb34691.roa File: cb94b7a5-85ee-3052-b78e-60662eb34691.roa (raw, json) Hash identifier: Ew8kkRTX137oKlMrAKovNDRysgr8k83KJwAI/1h9Gc4= Subject key identifier: 6A:76:05:49:53:40:2C:FC:92:E1:D4:2C:7C:3B:94:90:CF:A0:74:C6 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F43285848D2113820C113021FD3AE7B80 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/cb94b7a5-85ee-3052-b78e-60662eb34691.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 396253 IP address blocks: 149.19.58.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:38:20:c1:13:02:1f:d3:ae:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=c091e00a-f376-423a-a6ac-faa2c70a11d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:84:38:4a:fe:cc:ae:b7:75:10:5e:1a:aa:17: de:4a:17:85:3d:0c:09:47:8d:83:5a:41:d4:98:52: 58:ee:c8:4c:40:9b:17:18:08:c5:d2:09:84:24:05: f3:45:be:72:ac:9f:e8:86:19:ca:b1:d6:11:57:29: 45:ad:c7:6b:2c:51:d7:f1:00:72:cf:a0:6c:f2:fd: a9:b7:0f:d4:2f:68:ca:b0:9b:e6:ec:ad:72:16:e3: b1:f9:46:84:5a:c9:eb:d9:0f:c5:fe:1d:a7:bb:29: 0b:ca:9c:ae:f7:8d:3e:20:0e:f7:90:5f:53:40:af: 58:dd:e6:78:18:13:25:73:a1:c2:eb:34:ea:67:3e: 68:03:b0:75:14:8f:af:ff:c5:67:bd:03:1d:85:fe: 74:82:46:e4:de:51:ee:e0:97:5a:6d:3d:79:41:37: 2f:f0:6b:da:c5:9f:50:56:d0:5a:30:bf:6d:1d:b7: 5e:a8:76:7e:bc:ca:bb:f0:28:47:53:73:a3:81:5c: 28:d3:07:c5:fa:24:73:5d:59:80:8f:1a:43:d7:e3: 4a:8d:b9:49:32:80:e3:58:11:eb:48:1b:fb:06:73: 5d:4a:7b:b4:bd:f5:59:69:d2:b9:f5:34:6b:75:5a: dc:bb:51:1b:bc:76:58:62:98:33:8d:71:67:ab:18: e8:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:76:05:49:53:40:2C:FC:92:E1:D4:2C:7C:3B:94:90:CF:A0:74:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/cb94b7a5-85ee-3052-b78e-60662eb34691.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 149.19.58.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:02:a2:45:b8:b6:cd:23:b7:7e:97:2c:39:97:ee:37:c7:1b: 04:59:c4:41:94:07:11:18:08:6a:5c:b3:18:e7:35:f0:b5:af: 60:fe:c0:0f:2a:8c:03:ba:8b:8e:e4:de:3f:05:b5:79:4c:d8: 66:d8:e1:45:25:fb:21:95:eb:b3:8c:4a:5d:df:61:ea:16:45: f2:90:f5:f5:70:b0:6b:aa:56:6f:95:15:d0:65:a5:b1:eb:47: 5a:d9:80:f8:17:09:87:74:25:03:cf:59:a5:9f:ce:61:c3:10: 8c:05:a2:66:26:89:b4:81:0f:fe:e7:e8:eb:9a:71:e4:41:5f: 8a:39:3c:1b:96:f2:eb:75:e1:7b:22:60:b5:06:f0:3a:07:4f: 4e:7e:36:fb:37:83:7a:f8:81:0b:4b:01:54:dd:a0:1a:60:f7: e1:d1:5c:e6:8b:c6:4b:ca:6c:dd:99:8c:b2:c3:55:ea:45:8a: ca:bd:ea:e8:65:65:95:0f:a1:2d:07:1b:37:dc:3f:a6:82:d4: b1:ac:14:0b:6b:a9:c8:96:92:e1:2d:97:da:15:fd:cd:82:de: 9c:bd:86:54:f9:3d:ba:15:c9:a0:56:bf:bb:a5:36:c5:42:79: c2:d0:0b:35:51:49:a8:c1:63:2d:e6:f9:8e:ac:c4:59:69:b3: 7f:07:dc:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSETggwRMCH9Oue4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk YzA5MWUwMGEtZjM3Ni00MjNhLWE2YWMtZmFhMmM3MGExMWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioQ4Sv7Mrrd1EF4aqhfeSheFPQwJR42DWkHU mFJY7shMQJsXGAjF0gmEJAXzRb5yrJ/ohhnKsdYRVylFrcdrLFHX8QByz6Bs8v2p tw/UL2jKsJvm7K1yFuOx+UaEWsnr2Q/F/h2nuykLypyu940+IA73kF9TQK9Y3eZ4 GBMlc6HC6zTqZz5oA7B1FI+v/8VnvQMdhf50gkbk3lHu4JdabT15QTcv8GvaxZ9Q VtBaML9tHbdeqHZ+vMq78ChHU3OjgVwo0wfF+iRzXVmAjxpD1+NKjblJMoDjWBHr SBv7BnNdSnu0vfVZadK59TRrdVrcu1EbvHZYYpgzjXFnqxjoAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGp2BUlTQCz8kuHULHw7lJDPoHTGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvY2I5NGI3YTUtODVlZS0z MDUyLWI3OGUtNjA2NjJlYjM0NjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlRM6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADACokW4ts0jt36XLDmX7jfHGwRZxEGUBxEYCGpcsxjnNfC1r2D+wA8q jAO6i47k3j8FtXlM2GbY4UUl+yGV67OMSl3fYeoWRfKQ9fVwsGuqVm+VFdBlpbHr R1rZgPgXCYd0JQPPWaWfzmHDEIwFomYmibSBD/7n6OuaceRBX4o5PBuW8ut14Xsi YLUG8DoHT05+Nvs3g3r4gQtLAVTdoBpg9+HRXOaLxkvKbN2ZjLLDVepFisq96uhl ZZUPoS0HGzfcP6aC1LGsFAtrqciWkuEtl9oV/c2C3py9hlT5PboVyaBWv7ulNsVC ecLQCzVRSajBYy3m+Y6sxFlps38H3PY= -----END CERTIFICATE-----Generated at Sat Apr 5 23:23:05 2025 by rpki-client