$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/ff0084c6-b5ca-3f33-9a00-23a7ffef8353.roa File: ff0084c6-b5ca-3f33-9a00-23a7ffef8353.roa (raw, json) Hash identifier: I3GNv4UUoHUAnKqnG2R0giLHg0AopjS43epEMgJWWzA= Subject key identifier: 10:00:93:82:C4:54:7B:DE:A8:1D:B5:B1:EC:99:EE:6A:77:BF:6F:EB Certificate issuer: /CN=aa9d650e-309d-4772-a1ee-ed762e147583 Certificate serial: 010D0C9F432858490B4C2444C13C1232B049CBC0 Authority key identifier: 7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/ff0084c6-b5ca-3f33-9a00-23a7ffef8353.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 397635 IP address blocks: 149.117.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:24:44:c1:3c:12:32:b0:49:cb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa9d650e-309d-4772-a1ee-ed762e147583 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=1cef9b5c-a505-4f75-9a6b-7f3783b19d85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2a:ae:30:94:0d:15:90:90:0c:bc:4c:fa:84: e1:6a:a7:92:1b:aa:12:96:a2:45:8d:ee:4a:68:f8: 6e:e6:ce:71:6c:7e:57:84:65:72:88:f1:47:d5:65: 89:93:34:be:2c:ba:2d:38:84:5d:62:cd:b2:8e:fd: 66:8a:9b:98:d7:97:ce:6e:66:65:04:3d:77:1d:28: 90:ae:35:6e:aa:05:26:f2:1b:33:64:eb:c2:f4:2a: 7f:59:25:e7:ee:70:ea:4a:c9:e3:01:36:4c:0c:4a: 77:42:30:57:ce:1f:d3:91:87:cf:ef:82:ff:43:1c: 92:bd:28:83:98:fe:18:2c:c0:54:74:91:93:82:e3: be:97:d8:a5:ec:57:58:4a:0b:11:81:d6:55:bc:bd: a9:e1:64:c8:e8:23:8a:90:d4:d4:f9:fe:f2:34:60: 95:99:20:71:81:b3:f8:d5:1e:34:f2:bf:67:8e:11: b1:01:2c:b9:7d:eb:7f:3c:0a:b6:09:25:e4:48:cd: ca:5a:3b:f6:ae:ba:c7:cd:e5:37:fa:7a:87:2a:32: 6f:70:6e:b5:56:51:e9:2f:4a:38:7f:3b:de:e1:a1: 8f:06:1e:d1:1c:4e:e7:b2:87:82:f6:98:14:51:48: d7:0c:d9:24:67:33:86:3d:ad:34:fb:5e:1b:e5:92: 38:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:00:93:82:C4:54:7B:DE:A8:1D:B5:B1:EC:99:EE:6A:77:BF:6F:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/ff0084c6-b5ca-3f33-9a00-23a7ffef8353.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl X509v3 Authority Key Identifier: keyid:7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer sbgp-ipAddrBlock: critical IPv4: 149.117.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:94:7a:ba:05:0b:a5:ae:39:4d:e8:0c:51:83:98:fa:34:79: c1:1d:30:78:f1:4e:9f:a7:90:c8:0a:01:77:44:cf:02:30:14: e0:6e:3e:ed:36:d1:32:8e:28:70:02:ea:ad:73:fa:1e:a7:19: 7a:b1:cb:ba:67:db:ef:c6:12:d9:81:a7:84:a7:26:32:b3:65: d6:a9:63:02:ee:c0:ee:68:94:6e:67:0c:2c:1f:98:cb:fd:95: 01:52:8f:6c:81:93:15:36:b3:6f:98:5b:cb:48:6f:4e:23:f6: 5e:39:7b:d4:13:02:0c:97:3f:c8:31:05:96:b3:b0:5b:12:3e: a8:01:b6:a1:d9:da:38:17:6d:45:20:5f:cc:18:2e:41:6f:de: f8:66:43:99:ec:a0:5b:0a:78:d8:ce:f4:61:5a:c6:5d:13:85: 44:5e:ec:d2:ed:1c:a0:05:d3:30:28:90:9c:29:1d:73:7a:13: fa:83:4a:7f:7e:82:d4:32:84:c7:a6:96:f4:8f:4e:b3:70:cd: c1:98:13:e6:8d:9d:03:9b:08:21:a1:22:23:ab:64:fa:9b:50: 9f:a9:16:cf:72:40:88:1f:58:64:e4:9b:7b:58:19:cc:bb:06: 89:2d:c1:70:a5:72:89:60:fe:bc:3d:60:7f:df:5a:89:78:0a: 49:58:8a:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTCREwTwSMrBJy8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5ZDY1MGUtMzA5ZC00NzcyLWExZWUtZWQ3NjJlMTQ3 NTgzMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk MWNlZjliNWMtYTUwNS00Zjc1LTlhNmItN2YzNzgzYjE5ZDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCquMJQNFZCQDLxM+oThaqeSG6oSlqJFje5K aPhu5s5xbH5XhGVyiPFH1WWJkzS+LLotOIRdYs2yjv1mipuY15fObmZlBD13HSiQ rjVuqgUm8hszZOvC9Cp/WSXn7nDqSsnjATZMDEp3QjBXzh/TkYfP74L/QxySvSiD mP4YLMBUdJGTguO+l9il7FdYSgsRgdZVvL2p4WTI6COKkNTU+f7yNGCVmSBxgbP4 1R408r9njhGxASy5fet/PAq2CSXkSM3KWjv2rrrHzeU3+nqHKjJvcG61VlHpL0o4 fzve4aGPBh7RHE7nsoeC9pgUUUjXDNkkZzOGPa00+14b5ZI44wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBAAk4LEVHveqB21seyZ7mp3v2/rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hYTlk NjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2MmUxNDc1ODMvZmYwMDg0YzYtYjVjYS0z ZjMzLTlhMDAtMjNhN2ZmZWY4MzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWE5ZDY1MGUtMzA5ZC00NzcyLWEx ZWUtZWQ3NjJlMTQ3NTgzL2FhOWQ2NTBlLTMwOWQtNDc3Mi1hMWVlLWVkNzYyZTE0 NzU4My5jcmwwHwYDVR0jBBgwFoAUencCh/DNiFExaNpq4tD1clhOOqwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hYTlkNjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2 MmUxNDc1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGUeroFC6WuOU3oDFGDmPo0ecEdMHjxTp+nkMgKAXdEzwIwFOBuPu02 0TKOKHAC6q1z+h6nGXqxy7pn2+/GEtmBp4SnJjKzZdapYwLuwO5olG5nDCwfmMv9 lQFSj2yBkxU2s2+YW8tIb04j9l45e9QTAgyXP8gxBZazsFsSPqgBtqHZ2jgXbUUg X8wYLkFv3vhmQ5nsoFsKeNjO9GFaxl0ThURe7NLtHKAF0zAokJwpHXN6E/qDSn9+ gtQyhMemlvSPTrNwzcGYE+aNnQObCCGhIiOrZPqbUJ+pFs9yQIgfWGTkm3tYGcy7 BoktwXClcolg/rw9YH/fWol4CklYilQ= -----END CERTIFICATE-----Generated at Fri Mar 14 13:36:05 2025 by rpki-client