$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719/9b11998f-c03e-3565-b33d-908b5f9e5a87.roa File: 9b11998f-c03e-3565-b33d-908b5f9e5a87.roa (raw, json) Hash identifier: /JbHDtsg3Zrr90BX2MVXlwI1+z/+lBh3q5Mx7WTRgeE= Subject key identifier: 59:E8:25:DA:30:B3:FE:E3:C8:4A:EA:5E:E6:5C:E7:5D:04:5C:71:A3 Certificate issuer: /CN=7c48d5fb-059b-4fd2-92a8-31f143f5f719 Certificate serial: 010D0C9F432858491246AB5109B4309657367B80 Authority key identifier: B0:D6:7A:11:95:9D:2B:E4:A5:B2:D7:8D:03:06:76:6E:4C:83:F7:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719/9b11998f-c03e-3565-b33d-908b5f9e5a87.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 13984 IP address blocks: 205.149.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719/7c48d5fb-059b-4fd2-92a8-31f143f5f719.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719/7c48d5fb-059b-4fd2-92a8-31f143f5f719.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:ab:51:09:b4:30:96:57:36:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c48d5fb-059b-4fd2-92a8-31f143f5f719 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=4c889154-e4de-4207-a197-607730c8d089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e4:9b:8f:32:5d:d2:c4:20:c6:f6:db:dd:af: 0a:9e:ed:86:60:49:55:98:f4:6b:a9:91:84:db:46: 03:1e:c2:81:81:68:bb:ab:04:76:3a:49:1c:a4:c7: 84:f4:f1:47:97:ba:ee:31:fe:e1:c7:9a:73:20:92: 9c:c7:c9:72:23:51:12:a7:32:10:cf:66:42:a1:34: 29:1e:4c:b2:77:93:2a:6a:28:f8:74:9b:7d:cc:34: 9d:69:ed:83:a5:2b:6f:bc:30:bd:b9:6d:f0:b3:44: ee:51:7a:db:a2:36:d0:44:25:36:93:5c:a3:c1:66: 5d:68:46:7b:9c:23:7c:78:9b:cc:50:01:df:3e:80: c2:9e:97:81:0a:96:c6:6a:05:2d:f6:0f:53:34:16: f5:c9:c0:d4:bd:86:56:7b:6a:c4:95:98:0b:8b:2f: 64:b5:02:1c:e6:49:a3:ac:ac:f5:2e:55:7b:3e:b0: 00:ff:e3:0c:59:fd:f3:5b:ef:63:2e:89:d2:38:13: ba:f3:4c:e1:a8:42:57:96:32:b3:a6:de:bc:98:da: e1:1d:4c:6b:4b:91:37:67:46:58:67:d7:b6:0e:19: 10:10:20:f3:35:20:a5:33:31:a7:b0:06:9c:e9:1c: df:74:10:f2:62:c2:4c:49:ad:df:85:ab:ee:09:62: 07:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E8:25:DA:30:B3:FE:E3:C8:4A:EA:5E:E6:5C:E7:5D:04:5C:71:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719/9b11998f-c03e-3565-b33d-908b5f9e5a87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719/7c48d5fb-059b-4fd2-92a8-31f143f5f719.crl X509v3 Authority Key Identifier: keyid:B0:D6:7A:11:95:9D:2B:E4:A5:B2:D7:8D:03:06:76:6E:4C:83:F7:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719.cer sbgp-ipAddrBlock: critical IPv4: 205.149.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:81:12:a2:2c:ae:b5:7e:84:14:81:a6:29:d0:b9:61:e9:8d: 75:d8:ea:16:0b:bd:b8:85:8b:94:00:28:2b:39:38:3d:1d:e7: 15:3a:29:40:2c:5d:95:77:3e:25:ca:57:2c:db:fe:82:71:68: 7f:e7:1b:68:32:3d:25:90:b3:87:d9:56:ed:59:e7:40:bb:cd: a0:0c:6f:95:b3:2b:54:65:84:64:da:99:d8:62:99:d0:08:b8: 13:eb:7b:93:bf:2f:17:22:e6:84:fc:53:4f:7d:17:63:82:97: 37:35:67:bf:ab:37:77:fc:22:ee:aa:23:82:e9:93:96:55:ec: 96:15:c0:cd:e4:f8:03:75:78:eb:65:88:e6:ae:8a:09:8f:79: 77:94:a3:f7:1d:fb:c4:c3:6a:a6:60:91:e6:ec:4a:9e:f5:8f: 71:06:a2:66:af:af:5f:b3:62:4b:b5:ad:77:66:14:31:16:b6: 11:f1:85:ac:7f:c3:f6:7d:8d:c6:33:f0:25:bb:5c:05:85:df: 4b:05:fb:13:5b:26:4d:83:a9:d1:a9:36:d4:8b:91:60:dc:8b: 74:eb:d7:d0:3e:ac:4e:32:93:c2:69:f6:80:f2:52:bf:40:45: 61:90:3d:8b:b3:23:59:2f:a1:c6:8e:33:d2:9d:85:01:54:6c: fb:31:6b:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRqtRCbQwllc2e4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2M0OGQ1ZmItMDU5Yi00ZmQyLTkyYTgtMzFmMTQzZjVm NzE5MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk NGM4ODkxNTQtZTRkZS00MjA3LWExOTctNjA3NzMwYzhkMDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueSbjzJd0sQgxvbb3a8Knu2GYElVmPRrqZGE 20YDHsKBgWi7qwR2OkkcpMeE9PFHl7ruMf7hx5pzIJKcx8lyI1ESpzIQz2ZCoTQp Hkyyd5Mqaij4dJt9zDSdae2DpStvvDC9uW3ws0TuUXrbojbQRCU2k1yjwWZdaEZ7 nCN8eJvMUAHfPoDCnpeBCpbGagUt9g9TNBb1ycDUvYZWe2rElZgLiy9ktQIc5kmj rKz1LlV7PrAA/+MMWf3zW+9jLonSOBO680zhqEJXljKzpt68mNrhHUxrS5E3Z0ZY Z9e2DhkQECDzNSClMzGnsAac6RzfdBDyYsJMSa3fhavuCWIHOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnoJdows/7jyErqXuZc510EXHGjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YzQ4 ZDVmYi0wNTliLTRmZDItOTJhOC0zMWYxNDNmNWY3MTkvOWIxMTk5OGYtYzAzZS0z NTY1LWIzM2QtOTA4YjVmOWU1YTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2M0OGQ1ZmItMDU5Yi00ZmQyLTky YTgtMzFmMTQzZjVmNzE5LzdjNDhkNWZiLTA1OWItNGZkMi05MmE4LTMxZjE0M2Y1 ZjcxOS5jcmwwHwYDVR0jBBgwFoAUsNZ6EZWdK+SlsteNAwZ2bkyD94IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YzQ4ZDVmYi0wNTliLTRmZDItOTJhOC0zMWYx NDNmNWY3MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzZWGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+BEqIsrrV+hBSBpinQuWHpjXXY6hYLvbiFi5QAKCs5OD0d5xU6KUAs XZV3PiXKVyzb/oJxaH/nG2gyPSWQs4fZVu1Z50C7zaAMb5WzK1RlhGTamdhimdAI uBPre5O/Lxci5oT8U099F2OClzc1Z7+rN3f8Iu6qI4Lpk5ZV7JYVwM3k+AN1eOtl iOauigmPeXeUo/cd+8TDaqZgkebsSp71j3EGomavr1+zYku1rXdmFDEWthHxhax/ w/Z9jcYz8CW7XAWF30sF+xNbJk2DqdGpNtSLkWDci3Tr19A+rE4yk8Jp9oDyUr9A RWGQPYuzI1kvocaOM9KdhQFUbPsxa3I= -----END CERTIFICATE-----Generated at Fri Apr 11 23:41:06 2025 by rpki-client