$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/f2dc8ac3-060a-37ba-b6c9-78827fca5907.roa File: f2dc8ac3-060a-37ba-b6c9-78827fca5907.roa (raw, json) Hash identifier: fX6FTDSaUWvx1kOX5K2LIISrVdB6uWtYRPqU5G6ByH0= Subject key identifier: 4B:A2:01:30:3B:59:B2:6D:2A:58:71:9E:65:2E:A1:48:77:BD:E1:01 Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F4328584940397E94481F7349F495DB40 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/f2dc8ac3-060a-37ba-b6c9-78827fca5907.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 33442 IP address blocks: 149.23.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:7e:94:48:1f:73:49:f4:95:db:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=be0c977e-2a8d-4b17-b16e-df67b261a755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:27:55:c1:ec:16:b1:7f:24:51:a0:54:44:88: 58:3f:c4:1e:71:4d:3e:54:dd:75:b3:33:21:09:1b: 53:b3:39:95:c0:57:4d:4c:c8:da:46:83:05:6c:7c: 16:96:a8:e3:fd:0c:99:42:7c:82:57:ad:91:2b:76: 7e:ce:5d:ef:33:12:b1:58:b4:eb:1d:58:32:81:49: 8b:77:e7:20:68:e6:03:43:1d:7b:71:74:c0:31:71: f3:36:30:78:2f:ac:8a:83:0b:bb:01:f5:a3:50:ad: b2:3f:1b:f3:99:0a:d9:94:e7:59:ea:58:b5:42:87: a9:bc:97:23:7d:49:8b:82:5b:70:1d:05:ec:e3:27: 61:aa:95:96:f2:9d:ee:18:42:f7:c0:49:f0:d3:b3: 8b:1a:77:07:8f:1e:8e:bc:5f:79:e5:57:2c:ac:6e: ab:a6:ec:c9:7d:06:69:38:fd:03:37:bc:4a:41:f3: f1:70:82:8b:ed:64:b1:3d:3d:11:94:b1:61:0d:df: ce:0e:75:28:da:c1:8c:f8:66:d0:3f:fd:c6:75:3e: 4c:0a:ae:d9:f0:0e:f7:a3:d4:b8:99:c6:ca:13:c6: 69:cd:8d:73:2a:14:58:87:af:c1:07:5f:64:6d:09: 8d:d7:52:4e:04:73:c8:1c:d8:ea:3c:eb:38:fd:58: 70:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:A2:01:30:3B:59:B2:6D:2A:58:71:9E:65:2E:A1:48:77:BD:E1:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/f2dc8ac3-060a-37ba-b6c9-78827fca5907.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 149.23.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:ca:27:eb:de:a1:44:c1:c4:cd:87:11:dd:df:42:04:61:77: cf:35:49:73:3b:3c:2c:00:c2:b7:35:4e:0c:69:0c:a8:06:ac: c0:d1:79:3c:ec:37:b0:ac:34:41:4f:db:79:d8:11:c2:69:26: 7e:00:2a:4c:02:06:aa:0f:71:e4:2b:72:5a:0b:e1:eb:38:b9: 4b:48:4d:86:6e:de:ac:25:23:49:62:72:10:46:9b:9a:89:73: 89:ef:99:cc:6b:25:f2:9a:85:a1:e8:69:5e:9c:1a:99:b7:d9: 89:09:3c:75:f4:b0:1f:8d:52:5d:52:d8:56:72:d0:39:34:dd: 5b:4f:af:42:a8:d1:3b:4e:aa:e1:9e:a6:a2:99:6d:21:b5:1e: 39:b0:8b:05:1c:04:78:42:7f:52:22:22:8a:ed:4d:37:af:71: 0b:2f:9d:dc:9c:1f:7f:d1:9f:15:58:6e:14:c9:0b:95:d6:e6: 4a:be:9a:67:4e:55:cd:43:f4:a1:d2:c2:0d:30:0e:f0:af:90: b5:df:17:07:40:66:ee:35:4b:e8:72:be:19:96:08:66:aa:b4: 27:86:53:ba:b8:8a:d6:a5:ee:42:b9:53:ca:ba:ec:2c:54:8b: df:21:ab:d4:fe:70:70:34:40:e7:41:b9:7c:69:93:a1:4e:9c: 3b:b2:e6:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAOX6USB9zSfSV20AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk YmUwYzk3N2UtMmE4ZC00YjE3LWIxNmUtZGY2N2IyNjFhNzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9CdVwewWsX8kUaBURIhYP8QecU0+VN11szMh CRtTszmVwFdNTMjaRoMFbHwWlqjj/QyZQnyCV62RK3Z+zl3vMxKxWLTrHVgygUmL d+cgaOYDQx17cXTAMXHzNjB4L6yKgwu7AfWjUK2yPxvzmQrZlOdZ6li1QoepvJcj fUmLgltwHQXs4ydhqpWW8p3uGEL3wEnw07OLGncHjx6OvF955VcsrG6rpuzJfQZp OP0DN7xKQfPxcIKL7WSxPT0RlLFhDd/ODnUo2sGM+GbQP/3GdT5MCq7Z8A73o9S4 mcbKE8ZpzY1zKhRYh6/BB19kbQmN11JOBHPIHNjqPOs4/VhwoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEuiATA7WbJtKlhxnmUuoUh3veEBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvZjJkYzhhYzMtMDYwYS0z N2JhLWI2YzktNzg4MjdmY2E1OTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRd+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbKJ+veoUTBxM2HEd3fQgRhd881SXM7PCwAwrc1TgxpDKgGrMDReTzs N7CsNEFP23nYEcJpJn4AKkwCBqoPceQrcloL4es4uUtITYZu3qwlI0lichBGm5qJ c4nvmcxrJfKahaHoaV6cGpm32YkJPHX0sB+NUl1S2FZy0Dk03VtPr0Ko0TtOquGe pqKZbSG1HjmwiwUcBHhCf1IiIortTTevcQsvndycH3/RnxVYbhTJC5XW5kq+mmdO Vc1D9KHSwg0wDvCvkLXfFwdAZu41S+hyvhmWCGaqtCeGU7q4ital7kK5U8q67CxU i98hq9T+cHA0QOdBuXxpk6FOnDuy5l4= -----END CERTIFICATE-----Generated at Sat Apr 12 00:57:32 2025 by rpki-client