$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/133bdf8b-94cc-3b4b-a2da-8f00947c052b.roa File: 133bdf8b-94cc-3b4b-a2da-8f00947c052b.roa (raw, json) Hash identifier: JIm7CWV+3wQoCf4XwV5U+vUNsoKbTCv/L2M/5NIBs58= Subject key identifier: 67:B5:09:71:AB:C9:43:66:C4:D9:BE:F5:30:98:28:4A:87:73:5F:84 Certificate issuer: /CN=aa9d650e-309d-4772-a1ee-ed762e147583 Certificate serial: 010D0C9F432858492D470CD622D1D331E25A3600 Authority key identifier: 7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/133bdf8b-94cc-3b4b-a2da-8f00947c052b.roa Signing time: Thu 13 Mar 2025 18:08:21 +0000 ROA not before: Thu 13 Mar 2025 18:08:21 +0000 ROA not after: Wed 11 Jun 2025 18:08:21 +0000 asID: 394027 IP address blocks: 149.117.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2d:47:0c:d6:22:d1:d3:31:e2:5a:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa9d650e-309d-4772-a1ee-ed762e147583 Validity Not Before: Mar 13 18:08:21 2025 GMT Not After : Jun 11 18:08:21 2025 GMT Subject: CN=beaf7229-f356-416e-b118-fc06c589b699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3a:bb:99:86:40:fd:fa:5d:08:48:aa:e8:a7: 65:e0:2a:a4:71:b6:b6:36:27:87:06:61:6e:c2:a6: 81:32:49:be:a1:68:64:be:e4:8a:f9:16:b3:cc:f4: 27:24:f7:44:e3:29:fb:6f:94:78:80:43:06:49:ac: 3a:a7:a5:b4:9a:50:69:19:f2:cc:43:62:90:fb:bb: 84:11:3f:4a:54:9c:96:fd:66:ed:df:3d:19:8b:c6: 38:ad:6f:39:8c:69:30:cd:eb:0d:89:f5:a1:ed:35: af:bb:82:04:e8:ad:fb:fe:75:41:a1:6d:00:f4:16: ee:4e:e0:0e:51:34:be:6b:d6:9d:f6:56:4d:f7:a4: d8:55:fb:78:12:f4:eb:2c:5f:51:a0:43:f9:0e:c6: 81:e3:41:b3:e7:a0:68:b4:02:7f:94:b6:c2:bb:52: e0:71:a2:0d:96:93:86:02:59:ec:c9:c1:8d:e5:b4: 0d:6c:21:26:d2:ae:43:0b:af:2f:b7:35:75:04:ad: 05:fa:b3:7a:2f:64:38:3d:3b:b2:47:c5:5a:bd:c0: 43:1d:40:f5:d5:b0:51:df:ff:0d:90:7f:49:ef:84: cb:99:8c:4c:5e:53:69:b8:5e:10:3c:ca:f3:bf:a6: 32:5d:55:3c:43:11:41:fa:b8:62:e1:c1:f9:d3:bf: dd:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B5:09:71:AB:C9:43:66:C4:D9:BE:F5:30:98:28:4A:87:73:5F:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/133bdf8b-94cc-3b4b-a2da-8f00947c052b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl X509v3 Authority Key Identifier: keyid:7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer sbgp-ipAddrBlock: critical IPv4: 149.117.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:73:89:42:f7:77:f0:63:b9:1d:35:75:08:3e:8c:51:34:4f: 40:89:f5:79:ec:e0:dc:58:68:2f:09:ca:dc:ec:cd:af:3f:b7: 66:0c:2b:dd:ce:90:e9:e4:dd:3e:d1:cb:2b:90:8b:e1:1e:dc: 0d:8f:44:9a:95:dd:f9:e0:a3:9d:32:45:32:29:6e:6b:4c:07: a9:f0:ea:9a:7e:28:35:19:e3:56:d0:35:06:7e:84:64:43:29: 34:f7:f9:81:0f:88:c5:8b:1a:98:85:b8:c3:d4:3a:27:7a:b8: 98:25:eb:c0:29:c1:e5:1e:e4:92:d6:a8:75:d4:7a:36:9b:db: 23:29:10:7b:f8:ec:62:d9:b0:2a:6a:48:5b:ee:d6:5e:2f:2d: a0:c3:5b:dd:02:0f:e4:c9:46:46:77:5f:8f:5d:51:2c:3c:da: 91:07:d4:c2:87:19:fd:0a:c8:eb:88:d7:16:97:8f:fe:6b:ea: db:17:71:03:a6:2d:b2:58:63:26:70:1e:98:b1:44:24:46:20: d6:1b:bb:32:45:8d:0b:26:56:51:04:bc:0b:7b:52:b0:43:58: a6:39:db:d0:3e:3d:08:e3:b1:dd:81:c8:bd:ca:6b:f2:d4:7f: 59:6a:bc:c1:83:1d:de:d6:1c:cb:4e:a7:fb:f5:b7:80:55:36: 2c:cb:0b:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEktRwzWItHTMeJaNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5ZDY1MGUtMzA5ZC00NzcyLWExZWUtZWQ3NjJlMTQ3 NTgzMB4XDTI1MDMxMzE4MDgyMVoXDTI1MDYxMTE4MDgyMVowLzEtMCsGA1UEAxMk YmVhZjcyMjktZjM1Ni00MTZlLWIxMTgtZmMwNmM1ODliNjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTq7mYZA/fpdCEiq6Kdl4Cqkcba2NieHBmFu wqaBMkm+oWhkvuSK+RazzPQnJPdE4yn7b5R4gEMGSaw6p6W0mlBpGfLMQ2KQ+7uE ET9KVJyW/Wbt3z0Zi8Y4rW85jGkwzesNifWh7TWvu4IE6K37/nVBoW0A9BbuTuAO UTS+a9ad9lZN96TYVft4EvTrLF9RoEP5DsaB40Gz56BotAJ/lLbCu1LgcaINlpOG AlnsycGN5bQNbCEm0q5DC68vtzV1BK0F+rN6L2Q4PTuyR8VavcBDHUD11bBR3/8N kH9J74TLmYxMXlNpuF4QPMrzv6YyXVU8QxFB+rhi4cH507/dEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGe1CXGryUNmxNm+9TCYKEqHc1+EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hYTlk NjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2MmUxNDc1ODMvMTMzYmRmOGItOTRjYy0z YjRiLWEyZGEtOGYwMDk0N2MwNTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWE5ZDY1MGUtMzA5ZC00NzcyLWEx ZWUtZWQ3NjJlMTQ3NTgzL2FhOWQ2NTBlLTMwOWQtNDc3Mi1hMWVlLWVkNzYyZTE0 NzU4My5jcmwwHwYDVR0jBBgwFoAUencCh/DNiFExaNpq4tD1clhOOqwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hYTlkNjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2 MmUxNDc1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXVEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJziUL3d/BjuR01dQg+jFE0T0CJ9Xns4NxYaC8Jytzsza8/t2YMK93O kOnk3T7RyyuQi+Ee3A2PRJqV3fngo50yRTIpbmtMB6nw6pp+KDUZ41bQNQZ+hGRD KTT3+YEPiMWLGpiFuMPUOid6uJgl68ApweUe5JLWqHXUejab2yMpEHv47GLZsCpq SFvu1l4vLaDDW90CD+TJRkZ3X49dUSw82pEH1MKHGf0KyOuI1xaXj/5r6tsXcQOm LbJYYyZwHpixRCRGINYbuzJFjQsmVlEEvAt7UrBDWKY529A+PQjjsd2ByL3Ka/LU f1lqvMGDHd7WHMtOp/v1t4BVNizLCzE= -----END CERTIFICATE-----Generated at Fri Apr 4 19:08:14 2025 by rpki-client