$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/be1970f7-d094-3bfe-9756-b8318013ce04.roa File: be1970f7-d094-3bfe-9756-b8318013ce04.roa (raw, json) Hash identifier: 5JtKv1mNt8FYlYjxGQ7yYim5El5hS5SA7tLd92CWj9Y= Subject key identifier: 39:C3:D7:AD:B8:A4:1E:21:FB:A0:E8:12:53:0A:A0:75:85:4E:E9:9D Certificate issuer: /CN=a95fce7e-65c2-466f-ae34-eadb8c72156b Certificate serial: 010D0C9F43285848547030C052FDB5078DBC8D80 Authority key identifier: 5F:8C:A6:E1:84:0F:A2:FE:BD:8D:DA:83:98:81:21:DF:CB:E0:65:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/be1970f7-d094-3bfe-9756-b8318013ce04.roa Signing time: Thu 26 Dec 2024 02:00:40 +0000 ROA not before: Thu 26 Dec 2024 02:00:40 +0000 ROA not after: Wed 26 Mar 2025 01:00:40 +0000 asID: 87 IP address blocks: 149.160.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:54:70:30:c0:52:fd:b5:07:8d:bc:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a95fce7e-65c2-466f-ae34-eadb8c72156b Validity Not Before: Dec 26 02:00:40 2024 GMT Not After : Mar 26 01:00:40 2025 GMT Subject: CN=26589d66-7f5e-494a-b330-3d6ebf77c397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c2:5a:15:ee:63:28:e2:fd:f7:0f:36:9f:31: c8:48:27:f7:38:85:e7:81:a6:b0:d5:a7:55:d4:4a: bf:6d:0e:58:d9:c3:87:cd:a4:aa:dc:35:3d:0a:cb: 43:87:fc:47:b9:c2:4d:24:48:27:b1:69:7c:48:07: ac:c2:89:31:fe:cd:f8:0c:e6:2b:44:03:2f:de:c0: b5:fc:7e:ee:ad:84:11:e4:46:96:b6:39:47:19:19: e0:0e:c1:1a:c9:8e:1e:c4:6b:13:47:f5:47:4f:5e: 40:f5:63:41:f7:c4:1f:6e:a1:69:18:4b:77:e0:cd: e4:b7:22:88:a7:bd:24:5f:25:f2:47:c2:ab:62:f5: 94:91:a9:88:20:4e:b7:3f:45:c0:4c:4c:ab:45:05: 6c:74:f8:ca:81:96:2f:53:d7:1f:38:31:2d:04:84: 6d:fe:5e:cc:4a:42:d2:d9:a0:1c:ae:fb:be:29:41: b0:74:7e:df:72:15:21:26:1a:51:4f:56:e2:43:8e: 10:b9:10:d4:ea:e1:45:a4:12:6f:f3:eb:2f:fa:4d: 89:4b:92:32:3b:84:a5:6c:16:82:7a:26:3a:38:af: 14:4d:67:62:71:0f:71:8f:8b:cb:c7:ff:28:ad:e5: 62:17:b0:8e:61:86:ac:05:01:ff:04:90:a2:9d:8c: 5b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C3:D7:AD:B8:A4:1E:21:FB:A0:E8:12:53:0A:A0:75:85:4E:E9:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/be1970f7-d094-3bfe-9756-b8318013ce04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.crl X509v3 Authority Key Identifier: keyid:5F:8C:A6:E1:84:0F:A2:FE:BD:8D:DA:83:98:81:21:DF:CB:E0:65:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer sbgp-ipAddrBlock: critical IPv4: 149.160.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:f1:2f:b3:bd:71:f3:11:11:c2:01:38:1e:c0:10:74:4f:f2: 44:b5:cf:99:b6:79:e2:04:b1:41:7a:09:36:8d:94:7d:79:3d: b6:a2:31:e2:27:8d:1c:2a:dd:08:64:cc:45:aa:82:1e:ed:db: bc:fc:dd:30:45:1c:33:eb:19:8f:94:b3:4a:d0:a5:ce:31:0b: 85:79:ec:bd:ac:f1:a9:0b:bc:e1:f3:14:f5:16:31:83:ee:82: c6:7a:23:7c:15:92:13:35:9d:d9:cc:f4:87:e8:1f:5b:c1:4c: 0e:3d:54:9d:5f:63:55:67:06:c3:45:3a:02:15:21:ff:ef:81: e0:42:12:a4:dc:6b:4d:f0:3b:51:01:b6:99:13:94:11:2f:00: 2b:fd:24:4f:ea:a5:81:40:f0:bf:aa:7e:10:f3:d9:93:d4:60: 2a:3e:13:81:83:14:50:bf:81:c5:c2:06:ac:fc:26:88:87:46: 9a:9b:a6:ed:c7:49:5c:42:28:56:e2:a6:41:32:b4:90:6c:4a: 57:48:8a:29:ab:4a:42:0e:ed:1b:63:6d:1b:97:b2:31:53:88: 51:60:9b:65:79:f0:3e:1d:85:fb:88:5e:15:13:b1:cb:0d:60: 48:96:07:b6:50:79:e9:bc:7d:c9:b5:d6:b1:48:e3:7a:f7:15: 58:9f:a5:f6 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEhUcDDAUv21B428jYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTk1ZmNlN2UtNjVjMi00NjZmLWFlMzQtZWFkYjhjNzIx NTZiMB4XDTI0MTIyNjAyMDA0MFoXDTI1MDMyNjAxMDA0MFowLzEtMCsGA1UEAxMk MjY1ODlkNjYtN2Y1ZS00OTRhLWIzMzAtM2Q2ZWJmNzdjMzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18JaFe5jKOL99w82nzHISCf3OIXngaaw1adV 1Eq/bQ5Y2cOHzaSq3DU9CstDh/xHucJNJEgnsWl8SAeswokx/s34DOYrRAMv3sC1 /H7urYQR5EaWtjlHGRngDsEayY4exGsTR/VHT15A9WNB98QfbqFpGEt34M3ktyKI p70kXyXyR8KrYvWUkamIIE63P0XATEyrRQVsdPjKgZYvU9cfODEtBIRt/l7MSkLS 2aAcrvu+KUGwdH7fchUhJhpRT1biQ44QuRDU6uFFpBJv8+sv+k2JS5IyO4SlbBaC eiY6OK8UTWdicQ9xj4vLx/8oreViF7COYYasBQH/BJCinYxbZQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFDnD1624pB4h+6DoElMKoHWFTumdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hOTVm Y2U3ZS02NWMyLTQ2NmYtYWUzNC1lYWRiOGM3MjE1NmIvYmUxOTcwZjctZDA5NC0z YmZlLTk3NTYtYjgzMTgwMTNjZTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTk1ZmNlN2UtNjVjMi00NjZmLWFl MzQtZWFkYjhjNzIxNTZiL2E5NWZjZTdlLTY1YzItNDY2Zi1hZTM0LWVhZGI4Yzcy MTU2Yi5jcmwwHwYDVR0jBBgwFoAUX4ym4YQPov69jdqDmIEh38vgZc4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hOTVmY2U3ZS02NWMyLTQ2NmYtYWUzNC1lYWRi OGM3MjE1NmIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAlaAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAgfEvs71x8xERwgE4HsAQdE/yRLXPmbZ54gSxQXoJNo2UfXk9tqIx4ieN HCrdCGTMRaqCHu3bvPzdMEUcM+sZj5SzStClzjELhXnsvazxqQu84fMU9RYxg+6C xnojfBWSEzWd2cz0h+gfW8FMDj1UnV9jVWcGw0U6AhUh/++B4EISpNxrTfA7UQG2 mROUES8AK/0kT+qlgUDwv6p+EPPZk9RgKj4TgYMUUL+BxcIGrPwmiIdGmpum7cdJ XEIoVuKmQTK0kGxKV0iKKatKQg7tG2NtG5eyMVOIUWCbZXnwPh2F+4heFROxyw1g SJYHtlB56bx9ybXWsUjjevcVWJ+l9g== -----END CERTIFICATE-----Generated at Fri Mar 14 09:40:19 2025 by rpki-client