$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/69d98e7b-43d7-3bf2-8b7e-556df9259c3e.roa File: 69d98e7b-43d7-3bf2-8b7e-556df9259c3e.roa (raw, json) Hash identifier: Gjp6pZ+ZQqdP2cx2jG6AjHwYHMxXeaky+W9QHeOvqn4= Subject key identifier: 04:5A:02:F8:85:78:9C:4B:33:CE:E9:69:87:2E:14:B1:BE:1D:8C:16 Certificate issuer: /CN=560b4c54-bd35-46e1-8698-aff50195e1b4 Certificate serial: 010D0C9F432858485E359D4B9C117BFC2ADC1280 Authority key identifier: E1:F3:2C:DE:1C:5F:ED:4C:95:9A:78:0D:DE:FA:69:73:DE:95:2F:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/69d98e7b-43d7-3bf2-8b7e-556df9259c3e.roa Signing time: Sun 29 Dec 2024 14:00:53 +0000 ROA not before: Sun 29 Dec 2024 14:00:53 +0000 ROA not after: Sat 29 Mar 2025 13:00:53 +0000 asID: 396163 IP address blocks: 149.248.72.0/22 maxlen: 24 205.142.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/560b4c54-bd35-46e1-8698-aff50195e1b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/560b4c54-bd35-46e1-8698-aff50195e1b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5e:35:9d:4b:9c:11:7b:fc:2a:dc:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=560b4c54-bd35-46e1-8698-aff50195e1b4 Validity Not Before: Dec 29 14:00:53 2024 GMT Not After : Mar 29 13:00:53 2025 GMT Subject: CN=2181958b-269e-4224-8c3c-c9800468b3d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:26:ee:3e:fd:42:92:b4:0c:3c:d5:18:c1:c9: 42:fa:44:93:1d:0f:67:ee:32:60:6f:1d:a6:f3:fa: 9e:ea:f0:b8:d8:5d:2c:c4:dd:f1:09:a3:82:d0:d5: d5:a4:6e:5d:fc:a7:14:8a:9a:ba:22:18:4f:a7:d1: 97:23:d5:00:ae:1f:29:0a:0b:6c:50:2b:2a:a9:66: d2:42:37:7c:ea:bd:f3:27:48:5e:71:5e:ad:cc:9a: 37:80:8d:fb:f7:8f:6c:54:88:08:c2:45:54:7b:3f: d7:c4:ab:26:e1:21:59:7a:39:4b:0c:40:f9:c9:be: f1:9e:07:00:fc:78:84:dd:51:90:a2:21:15:40:cd: 96:ce:62:4f:aa:74:05:bd:fa:24:83:3c:c5:8c:c8: db:11:29:d6:93:1b:ff:84:ef:f6:36:91:9f:10:c2: 2d:3e:b0:3a:22:75:18:c1:93:b0:ce:2b:c7:83:ba: f5:47:32:a5:4f:93:d5:64:e6:9b:3d:55:f5:d7:ca: f3:9e:37:40:24:70:13:3c:bc:c5:3f:07:ad:a0:91: c0:30:c2:45:d4:81:6f:ae:dc:e9:80:13:36:8b:ab: 0b:b3:f2:de:55:ff:6c:03:04:a1:8d:59:1d:d4:bd: c4:1e:4c:e6:cf:6d:31:1f:1e:3b:bc:78:6a:74:de: b0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:5A:02:F8:85:78:9C:4B:33:CE:E9:69:87:2E:14:B1:BE:1D:8C:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/69d98e7b-43d7-3bf2-8b7e-556df9259c3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/560b4c54-bd35-46e1-8698-aff50195e1b4.crl X509v3 Authority Key Identifier: keyid:E1:F3:2C:DE:1C:5F:ED:4C:95:9A:78:0D:DE:FA:69:73:DE:95:2F:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4.cer sbgp-ipAddrBlock: critical IPv4: 149.248.72.0/22 205.142.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:e5:6e:35:48:6f:5b:44:8c:73:ff:cc:1c:10:28:25:fe:e1: c7:2e:23:83:54:f1:71:18:a2:e0:24:53:0c:d9:9a:cc:9e:24: 72:57:bc:24:5e:22:2a:b3:0a:2e:3c:c8:0a:7f:ea:4b:a0:f8: 0c:f8:67:83:4d:33:de:71:e5:ce:a7:3c:71:73:5a:3c:51:6d: 52:38:cd:9d:7e:1b:da:a1:48:2e:61:e0:a1:85:93:72:dc:98: 83:39:3a:88:ea:c7:10:df:6d:56:7e:41:ed:1b:a3:b1:92:88: e5:49:49:7f:b5:cd:b1:32:88:fd:3e:0d:24:d4:57:19:5a:17: 43:a5:10:ba:c9:74:f2:f4:f6:78:c8:d8:fa:e5:c8:71:be:39: 7c:cc:5c:f1:c7:c2:a1:e2:4b:b9:b0:c7:ba:d1:da:0a:61:8b: fe:96:60:6e:4c:d6:4b:a8:54:e6:00:20:ac:6b:0d:1d:68:17: fd:62:e8:91:a3:d1:56:19:54:cb:32:cd:2f:76:71:d6:cf:33: 75:d4:13:19:62:03:9d:11:ba:4a:19:0a:92:ea:cc:32:99:4c: a6:7b:f1:ef:d0:d2:5d:1b:4e:ec:fa:e2:e1:99:55:f4:b6:0e: 46:06:f3:39:9b:6f:df:a7:34:4e:94:63:67:01:38:7e:e1:a5: f0:84:2a:9d -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEheNZ1LnBF7/CrcEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTYwYjRjNTQtYmQzNS00NmUxLTg2OTgtYWZmNTAxOTVl MWI0MB4XDTI0MTIyOTE0MDA1M1oXDTI1MDMyOTEzMDA1M1owLzEtMCsGA1UEAxMk MjE4MTk1OGItMjY5ZS00MjI0LThjM2MtYzk4MDA0NjhiM2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmybuPv1CkrQMPNUYwclC+kSTHQ9n7jJgbx2m 8/qe6vC42F0sxN3xCaOC0NXVpG5d/KcUipq6IhhPp9GXI9UArh8pCgtsUCsqqWbS Qjd86r3zJ0hecV6tzJo3gI37949sVIgIwkVUez/XxKsm4SFZejlLDED5yb7xngcA /HiE3VGQoiEVQM2WzmJPqnQFvfokgzzFjMjbESnWkxv/hO/2NpGfEMItPrA6InUY wZOwzivHg7r1RzKlT5PVZOabPVX118rznjdAJHATPLzFPwetoJHAMMJF1IFvrtzp gBM2i6sLs/LeVf9sAwShjVkd1L3EHkzmz20xHx47vHhqdN6wFwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFARaAviFeJxLM87paYcuFLG+HYwWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81NjBi NGM1NC1iZDM1LTQ2ZTEtODY5OC1hZmY1MDE5NWUxYjQvNjlkOThlN2ItNDNkNy0z YmYyLThiN2UtNTU2ZGY5MjU5YzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTYwYjRjNTQtYmQzNS00NmUxLTg2 OTgtYWZmNTAxOTVlMWI0LzU2MGI0YzU0LWJkMzUtNDZlMS04Njk4LWFmZjUwMTk1 ZTFiNC5jcmwwHwYDVR0jBBgwFoAU4fMs3hxf7UyVmngN3vppc96VL8gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81NjBiNGM1NC1iZDM1LTQ2ZTEtODY5OC1hZmY1 MDE5NWUxYjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQClfhIAwQB zY7yMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAArlbjVIb1tEjHP/zBwQKCX+4ccuI4NU8XEYouAkUwzZmsye JHJXvCReIiqzCi48yAp/6kug+Az4Z4NNM95x5c6nPHFzWjxRbVI4zZ1+G9qhSC5h 4KGFk3LcmIM5OojqxxDfbVZ+Qe0bo7GSiOVJSX+1zbEyiP0+DSTUVxlaF0OlELrJ dPL09njI2PrlyHG+OXzMXPHHwqHiS7mwx7rR2gphi/6WYG5M1kuoVOYAIKxrDR1o F/1i6JGj0VYZVMsyzS92cdbPM3XUExliA50RukoZCpLqzDKZTKZ78e/Q0l0bTuz6 4uGZVfS2DkYG8zmbb9+nNE6UY2cBOH7hpfCEKp0= -----END CERTIFICATE-----Generated at Fri Mar 14 10:47:30 2025 by rpki-client