$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/76c44b00-989e-36fc-900c-bd70d2bf1e52.roa File: 76c44b00-989e-36fc-900c-bd70d2bf1e52.roa (raw, json) Hash identifier: +QJB6rdfaOvjc93zW4fD0cUfi0hPG6keK7neMGdmq4A= Subject key identifier: F9:74:61:15:9F:A3:37:2D:D7:42:F2:0A:B4:AE:36:FB:85:4B:18:41 Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F432858496CE446DF6218699E7751E380 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/76c44b00-989e-36fc-900c-bd70d2bf1e52.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 33442 IP address blocks: 149.23.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:46:df:62:18:69:9e:77:51:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=2ba7f1fd-0ad1-4e2e-89cd-f43a069602dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:74:6e:fa:cb:7e:66:ef:c2:6e:1a:92:63:82: e3:07:c2:5d:42:fa:bb:9f:a5:15:e7:90:41:a2:72: c7:45:15:8a:06:51:43:42:ec:58:34:2a:51:70:db: 13:fc:c2:f3:57:ca:2b:ec:08:f0:ae:70:71:b3:8e: 1a:6b:b5:3a:93:24:53:33:1d:1b:76:22:a5:91:ec: 8f:9f:77:30:30:56:3f:7d:e2:d0:c9:f6:fc:1a:3e: 67:66:e5:e5:3a:99:6f:b9:3d:1a:37:1d:56:77:6c: ee:18:f4:aa:2a:08:42:f8:20:22:a7:3d:cb:05:56: 5e:6a:76:4e:6b:1e:1b:ff:a4:e2:d6:40:77:5f:e9: ac:72:d0:64:dd:f5:b7:e1:dc:be:0f:68:2a:2a:29: ca:b1:35:9b:3f:0a:2b:80:fa:31:cd:5f:78:56:38: fb:01:0b:9d:72:1c:7a:38:d7:b7:25:4d:d4:ef:e6: d8:f6:a1:cc:06:ba:79:a2:f7:b4:72:b7:1e:29:a5: 1d:59:35:4c:98:5d:2f:e4:7e:ac:24:ac:cd:db:fe: ce:0b:d9:d4:90:df:cc:d1:ce:89:a6:0b:73:14:78: 7b:ce:a0:b0:0e:35:79:af:3c:88:8b:21:d4:c2:3d: 65:25:df:96:c8:74:74:d6:d0:7b:a1:d7:c7:87:8b: 30:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:74:61:15:9F:A3:37:2D:D7:42:F2:0A:B4:AE:36:FB:85:4B:18:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/76c44b00-989e-36fc-900c-bd70d2bf1e52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 149.23.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:01:bc:16:b4:d8:bc:23:64:e7:25:32:6d:79:b3:73:2a:48: db:27:ce:78:ec:92:5a:02:24:b1:b9:62:e2:17:41:0a:7c:d9: 7c:5b:c4:50:c3:8e:1c:d7:86:77:3f:15:37:e3:0f:47:cd:12: ca:e3:c7:82:ca:0b:13:59:a3:f3:42:ec:50:5d:a9:a9:68:8b: 48:11:fa:e3:c4:c6:9e:b9:e1:6b:70:d6:db:3a:c9:bb:49:90: db:25:8d:c4:e9:46:a7:77:74:2a:5a:df:99:79:88:40:0a:78: 30:3b:25:ce:0a:0e:39:db:c7:ee:8b:46:77:5e:b4:ef:bc:29: b7:e6:ce:cd:57:95:9e:98:6a:87:95:ad:32:04:d8:72:a6:22: af:b8:cc:2d:15:c5:ca:68:ce:3f:34:4e:33:b2:1c:94:31:3f: c7:f0:0e:17:1c:17:07:88:73:70:9e:47:6b:b3:26:38:8a:d1: 9e:de:3a:4f:25:0c:16:54:1f:3c:e2:b9:73:64:8c:a3:07:43: bd:0c:be:37:09:ea:2d:9a:9f:de:9e:23:7f:e9:56:97:80:6c: ea:17:cc:3c:f4:8c:23:6b:2c:c1:48:9b:1b:dc:9a:80:37:54: 37:27:94:92:0a:02:65:09:b8:fc:73:e5:ae:8b:bb:17:da:5c: 8d:b3:b5:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEls5EbfYhhpnndR44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk MmJhN2YxZmQtMGFkMS00ZTJlLTg5Y2QtZjQzYTA2OTYwMmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXRu+st+Zu/CbhqSY4LjB8JdQvq7n6UV55BB onLHRRWKBlFDQuxYNCpRcNsT/MLzV8or7AjwrnBxs44aa7U6kyRTMx0bdiKlkeyP n3cwMFY/feLQyfb8Gj5nZuXlOplvuT0aNx1Wd2zuGPSqKghC+CAipz3LBVZeanZO ax4b/6Ti1kB3X+msctBk3fW34dy+D2gqKinKsTWbPworgPoxzV94Vjj7AQudchx6 ONe3JU3U7+bY9qHMBrp5ove0crceKaUdWTVMmF0v5H6sJKzN2/7OC9nUkN/M0c6J pgtzFHh7zqCwDjV5rzyIiyHUwj1lJd+WyHR01tB7odfHh4swXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPl0YRWfozct10LyCrSuNvuFSxhBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvNzZjNDRiMDAtOTg5ZS0z NmZjLTkwMGMtYmQ3MGQyYmYxZTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRcEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgBvBa02LwjZOclMm15s3MqSNsnznjskloCJLG5YuIXQQp82XxbxFDD jhzXhnc/FTfjD0fNEsrjx4LKCxNZo/NC7FBdqaloi0gR+uPExp654Wtw1ts6ybtJ kNsljcTpRqd3dCpa35l5iEAKeDA7Jc4KDjnbx+6LRndetO+8Kbfmzs1XlZ6YaoeV rTIE2HKmIq+4zC0Vxcpozj80TjOyHJQxP8fwDhccFweIc3CeR2uzJjiK0Z7eOk8l DBZUHzziuXNkjKMHQ70MvjcJ6i2an96eI3/pVpeAbOoXzDz0jCNrLMFImxvcmoA3 VDcnlJIKAmUJuPxz5a6LuxfaXI2ztUE= -----END CERTIFICATE-----Generated at Sat Apr 12 02:05:27 2025 by rpki-client