$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/48c11378-660d-3999-a7c5-2245378b1910.roa File: 48c11378-660d-3999-a7c5-2245378b1910.roa (raw, json) Hash identifier: TYwuMtFlwqy/5uJCf9lVyWOuDJNJIl2U+Wmap3L0AJo= Subject key identifier: 50:6B:81:B5:CF:59:CA:65:CE:C1:2A:83:C4:3A:CB:54:10:21:D2:1E Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285848E16BD136C8D8097353A31100 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/48c11378-660d-3999-a7c5-2245378b1910.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 9009 IP address blocks: 149.143.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:d1:36:c8:d8:09:73:53:a3:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=a3062082-51a2-46bb-93bc-2a841c5cf151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c0:c3:4e:e1:3c:4f:01:d8:c4:78:31:03:69: 43:94:4b:ed:ca:fe:ad:fa:10:1d:ea:71:a7:38:d8: de:59:99:8d:32:00:0d:53:05:84:01:55:f0:cd:e4: 72:d1:aa:09:f9:5f:4d:fd:7c:f5:b9:2b:76:f2:6e: 0c:d1:bd:d4:26:43:23:03:b6:c1:5c:32:9b:09:04: 46:92:bb:cf:11:76:d8:8d:57:b7:73:47:c2:fd:48: 09:5d:ba:87:da:c2:fa:9f:f7:0f:1b:18:a5:db:f2: 33:a5:05:dc:03:2c:90:5e:48:02:b0:76:30:44:0d: 23:fd:1b:59:8a:67:62:8e:46:78:c7:b2:29:68:b7: fc:d8:34:ce:15:1f:b2:44:7b:e5:c2:f8:39:4c:e1: 42:57:9f:19:77:67:b9:85:c2:a8:37:aa:eb:5f:b1: b1:ca:fa:11:3b:b8:66:6a:59:60:b5:94:2f:7a:3e: 1c:16:7c:05:af:b4:d2:7e:8a:41:7d:23:5e:77:16: 0e:07:48:e0:13:28:00:c3:bd:35:f5:68:24:95:e3: b1:cf:88:2f:27:af:3e:84:12:14:3a:d3:57:b4:a5: ef:25:a2:3c:01:de:38:24:cf:8f:bb:a1:d9:03:04: 61:73:01:81:d2:eb:47:bd:4e:aa:98:11:4f:9d:99: 6f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:6B:81:B5:CF:59:CA:65:CE:C1:2A:83:C4:3A:CB:54:10:21:D2:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/48c11378-660d-3999-a7c5-2245378b1910.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:24:cc:3e:cd:a6:cd:ea:33:2b:fe:61:3a:b9:e0:8e:77:ef: 04:ef:ef:6a:af:e5:32:e0:a6:09:d0:c5:bc:e4:a8:10:6d:df: 27:90:6d:de:7b:51:03:3d:3e:c6:12:40:f5:8f:58:a5:12:42: 8d:68:8f:cb:1e:ab:75:fd:ae:1f:6e:51:a6:ed:4b:e1:d8:e2: cf:e9:2c:8b:d2:82:ea:9f:20:c5:d7:e7:15:26:c1:30:89:43: e4:89:2f:22:64:88:8a:71:fc:80:3c:e4:08:85:c9:e1:fa:40: c0:41:33:60:f1:08:4a:8a:9b:6f:fb:ce:93:18:40:a3:16:fa: c9:1b:2d:f6:59:c8:09:cf:ce:65:7a:da:5b:c6:dd:8d:a8:e6: a3:3a:e0:e8:39:e7:f8:b8:98:ac:b3:5d:e5:83:18:2f:9b:34: 8e:7b:47:25:f4:08:8a:f7:8c:07:aa:0b:8d:5c:52:08:c9:87: 49:af:99:2b:2b:5a:46:5f:c7:93:ba:35:8f:53:70:02:e0:4d: ad:03:5d:37:37:58:7e:f5:0b:6a:cf:a5:6c:2d:63:19:96:81: ab:48:3d:12:29:af:f3:8f:54:5e:08:38:0e:23:ee:f2:90:8e: 3b:5f:45:af:af:f8:34:47:3e:dd:a3:1b:8f:b5:7b:48:89:0b: dc:cf:64:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjha9E2yNgJc1OjEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk YTMwNjIwODItNTFhMi00NmJiLTkzYmMtMmE4NDFjNWNmMTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMDDTuE8TwHYxHgxA2lDlEvtyv6t+hAd6nGn ONjeWZmNMgANUwWEAVXwzeRy0aoJ+V9N/Xz1uSt28m4M0b3UJkMjA7bBXDKbCQRG krvPEXbYjVe3c0fC/UgJXbqH2sL6n/cPGxil2/IzpQXcAyyQXkgCsHYwRA0j/RtZ imdijkZ4x7IpaLf82DTOFR+yRHvlwvg5TOFCV58Zd2e5hcKoN6rrX7GxyvoRO7hm allgtZQvej4cFnwFr7TSfopBfSNedxYOB0jgEygAw7019WgkleOxz4gvJ68+hBIU OtNXtKXvJaI8Ad44JM+Pu6HZAwRhcwGB0utHvU6qmBFPnZlvswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFBrgbXPWcplzsEqg8Q6y1QQIdIeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNDhjMTEzNzgtNjYwZC0z OTk5LWE3YzUtMjI0NTM3OGIxOTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlY+xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABokzD7Nps3qMyv+YTq54I537wTv72qv5TLgpgnQxbzkqBBt3yeQbd57 UQM9PsYSQPWPWKUSQo1oj8seq3X9rh9uUabtS+HY4s/pLIvSguqfIMXX5xUmwTCJ Q+SJLyJkiIpx/IA85AiFyeH6QMBBM2DxCEqKm2/7zpMYQKMW+skbLfZZyAnPzmV6 2lvG3Y2o5qM64Og55/i4mKyzXeWDGC+bNI57RyX0CIr3jAeqC41cUgjJh0mvmSsr WkZfx5O6NY9TcALgTa0DXTc3WH71C2rPpWwtYxmWgatIPRIpr/OPVF4IOA4j7vKQ jjtfRa+v+DRHPt2jG4+1e0iJC9zPZCM= -----END CERTIFICATE-----Generated at Mon Apr 7 12:19:39 2025 by rpki-client