$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/69d98e7b-43d7-3bf2-8b7e-556df9259c3e.roa File: 69d98e7b-43d7-3bf2-8b7e-556df9259c3e.roa (raw, json) Hash identifier: wwm00j+dMLlN58jfqx8u/aMgVe1aXB1aTHFR7Ztuj/s= Subject key identifier: AC:88:D9:F7:83:52:54:44:6F:3E:2F:B9:DB:1A:78:63:DB:0D:B3:73 Certificate issuer: /CN=560b4c54-bd35-46e1-8698-aff50195e1b4 Certificate serial: 010D0C9F432858493ED3D63E62EEF465B8C00B80 Authority key identifier: E1:F3:2C:DE:1C:5F:ED:4C:95:9A:78:0D:DE:FA:69:73:DE:95:2F:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/69d98e7b-43d7-3bf2-8b7e-556df9259c3e.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 396163 IP address blocks: 149.248.72.0/22 maxlen: 24 205.142.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/560b4c54-bd35-46e1-8698-aff50195e1b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/560b4c54-bd35-46e1-8698-aff50195e1b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:d6:3e:62:ee:f4:65:b8:c0:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=560b4c54-bd35-46e1-8698-aff50195e1b4 Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=44a2ecb3-125a-4e24-8a09-635626f01556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:32:1e:b7:09:b6:6f:f3:26:4f:e7:39:6d:97: 41:38:f9:28:89:00:99:c3:ab:3b:00:92:92:c7:ef: 63:6e:3f:85:20:48:72:d5:13:38:61:7d:2c:ea:38: ad:d1:f2:d7:5e:34:7a:c1:f3:19:63:b5:67:3c:cb: 2b:09:e8:2d:ef:31:79:f0:bf:f1:39:08:b3:ee:d1: 9f:39:de:23:df:f2:ec:08:c7:fc:23:86:97:53:2d: 2a:9c:f8:24:01:2f:42:35:16:ce:09:01:6f:1e:4a: f4:02:ef:cf:1d:28:6d:b9:64:6f:01:7f:2f:3f:a3: 39:f1:c5:b7:e3:96:9b:87:32:2b:c2:34:18:53:54: af:58:82:b9:38:8f:07:b5:40:d1:84:f1:ff:37:82: 69:7b:5d:38:35:c8:a4:e6:18:5c:13:8c:40:78:38: 72:72:c8:f1:d8:8b:94:b3:6e:35:b1:3d:33:43:ec: 43:81:c6:58:bb:fb:64:a4:ba:09:45:0d:b3:d9:d9: e6:fc:02:e3:72:2e:34:41:16:77:4c:a9:04:ce:78: ed:eb:2c:7b:c9:f6:85:3e:4b:b1:e7:2d:19:45:84: 2c:fd:59:61:22:cb:74:77:71:28:0e:56:7b:c9:ea: 42:ee:f3:7e:71:e8:7a:e0:c5:a8:31:05:d9:b2:9f: 97:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:88:D9:F7:83:52:54:44:6F:3E:2F:B9:DB:1A:78:63:DB:0D:B3:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/69d98e7b-43d7-3bf2-8b7e-556df9259c3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/560b4c54-bd35-46e1-8698-aff50195e1b4.crl X509v3 Authority Key Identifier: keyid:E1:F3:2C:DE:1C:5F:ED:4C:95:9A:78:0D:DE:FA:69:73:DE:95:2F:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4.cer sbgp-ipAddrBlock: critical IPv4: 149.248.72.0/22 205.142.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:02:d3:10:27:70:82:39:ac:21:f2:86:ee:1e:a2:90:62:6b: 14:1f:21:db:4a:87:a4:d5:67:fd:b2:39:8a:b3:f9:19:df:7f: 5d:8d:97:8d:87:ad:c4:ce:2a:ce:eb:c0:13:71:61:b4:eb:22: b7:7a:b7:45:ef:bd:da:f5:cb:cb:2e:83:5b:92:49:f0:5b:19: e8:b8:6b:2a:e4:cb:63:9e:0b:da:b0:42:18:9c:09:f3:21:6c: 9b:68:e7:c0:4c:2e:91:be:31:0a:8b:d2:15:a9:d4:fb:95:08: fc:b9:74:6e:12:46:f5:9c:8e:ee:a3:d3:ad:b2:d3:59:bd:72: 89:cd:db:8c:15:0d:75:47:db:e6:1a:01:64:3a:24:fa:b4:b2: 6a:ca:35:48:f9:ea:85:46:21:c1:65:00:5f:da:50:e5:b0:5b: 7b:85:6e:93:21:2b:04:f9:53:dc:e5:a6:65:0d:c2:8d:fe:a3: 65:43:72:07:fe:aa:fb:6a:5b:a5:f8:c9:7c:52:65:0b:fb:c8: 8d:3e:0f:39:91:c6:d9:7a:9d:d7:7a:7b:d2:47:f8:c3:ca:1f: 3e:93:92:6a:70:a1:11:bb:e2:66:dc:13:5b:93:52:e4:11:a3: de:5a:d9:ff:99:74:d9:d6:b8:c9:c3:52:81:4a:ea:34:25:d4: 23:fc:d6:ca -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEk+09Y+Yu70ZbjAC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTYwYjRjNTQtYmQzNS00NmUxLTg2OTgtYWZmNTAxOTVl MWI0MB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk NDRhMmVjYjMtMTI1YS00ZTI0LThhMDktNjM1NjI2ZjAxNTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDIetwm2b/MmT+c5bZdBOPkoiQCZw6s7AJKS x+9jbj+FIEhy1RM4YX0s6jit0fLXXjR6wfMZY7VnPMsrCegt7zF58L/xOQiz7tGf Od4j3/LsCMf8I4aXUy0qnPgkAS9CNRbOCQFvHkr0Au/PHShtuWRvAX8vP6M58cW3 45abhzIrwjQYU1SvWIK5OI8HtUDRhPH/N4Jpe104Ncik5hhcE4xAeDhycsjx2IuU s241sT0zQ+xDgcZYu/tkpLoJRQ2z2dnm/ALjci40QRZ3TKkEznjt6yx7yfaFPkux 5y0ZRYQs/VlhIst0d3EoDlZ7yepC7vN+ceh64MWoMQXZsp+XlwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKyI2feDUlREbz4vudsaeGPbDbNzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81NjBi NGM1NC1iZDM1LTQ2ZTEtODY5OC1hZmY1MDE5NWUxYjQvNjlkOThlN2ItNDNkNy0z YmYyLThiN2UtNTU2ZGY5MjU5YzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTYwYjRjNTQtYmQzNS00NmUxLTg2 OTgtYWZmNTAxOTVlMWI0LzU2MGI0YzU0LWJkMzUtNDZlMS04Njk4LWFmZjUwMTk1 ZTFiNC5jcmwwHwYDVR0jBBgwFoAU4fMs3hxf7UyVmngN3vppc96VL8gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81NjBiNGM1NC1iZDM1LTQ2ZTEtODY5OC1hZmY1 MDE5NWUxYjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQClfhIAwQB zY7yMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHkC0xAncII5rCHyhu4eopBiaxQfIdtKh6TVZ/2yOYqz+Rnf f12Nl42HrcTOKs7rwBNxYbTrIrd6t0Xvvdr1y8sug1uSSfBbGei4ayrky2OeC9qw QhicCfMhbJto58BMLpG+MQqL0hWp1PuVCPy5dG4SRvWcju6j062y01m9conN24wV DXVH2+YaAWQ6JPq0smrKNUj56oVGIcFlAF/aUOWwW3uFbpMhKwT5U9zlpmUNwo3+ o2VDcgf+qvtqW6X4yXxSZQv7yI0+DzmRxtl6ndd6e9JH+MPKHz6TkmpwoRG74mbc E1uTUuQRo95a2f+ZdNnWuMnDUoFK6jQl1CP81so= -----END CERTIFICATE-----Generated at Tue Apr 8 17:54:28 2025 by rpki-client