$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/e8c83e5e-3160-3da3-9508-5decf5e3c0b7.roa File: e8c83e5e-3160-3da3-9508-5decf5e3c0b7.roa (raw, json) Hash identifier: 5H91rVWqTqfjfE+Yq9rKJVtp32x/LdtfVg/JaGJ0CaE= Subject key identifier: 1E:C2:D4:B4:3E:7C:30:0F:10:82:86:4C:AA:F1:5C:B1:A5:0B:41:2A Certificate issuer: /CN=79b1fe7a-eca9-422f-9043-5a93ca5145c8 Certificate serial: 010D0C9F43285848AF2B8488FA5080DDD62DF040 Authority key identifier: 0C:61:A1:93:6A:44:3C:E2:11:31:FA:40:42:68:F7:A6:E7:34:84:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/e8c83e5e-3160-3da3-9508-5decf5e3c0b7.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 14618 IP address blocks: 149.48.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/79b1fe7a-eca9-422f-9043-5a93ca5145c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/79b1fe7a-eca9-422f-9043-5a93ca5145c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:84:88:fa:50:80:dd:d6:2d:f0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79b1fe7a-eca9-422f-9043-5a93ca5145c8 Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=baf96177-0ac4-42c4-8017-9d23c88b825e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5c:2a:8d:09:62:7f:c9:42:a2:7d:64:ea:11: 46:8c:02:50:ce:82:c8:ab:b3:a0:97:b2:67:32:61: 5b:29:1b:74:21:23:3e:92:de:d5:e0:8f:23:49:2d: 3d:3c:46:5e:72:4e:53:0d:46:a4:6b:43:9b:20:cd: 85:0c:1a:c7:14:93:1a:8b:ae:10:8a:9d:0e:67:1c: 9b:61:66:3b:2d:d5:8e:2a:83:cc:a1:2c:dc:ff:d5: 99:b9:ff:c8:31:f4:b1:a9:e1:7a:cc:da:d0:aa:9a: 2b:ca:82:e7:32:59:08:5d:9d:31:f1:ac:e2:84:f8: 23:fd:d8:08:c1:e6:66:51:3b:f0:e1:95:fe:c5:8e: bc:85:fc:df:d2:71:08:1d:1d:e5:9e:49:c2:ff:46: 41:4c:90:c5:61:15:f0:f1:6e:81:3b:4c:d8:32:56: 85:af:35:6e:4b:ea:c0:70:e2:ea:0d:eb:c4:03:78: f1:69:a6:c2:ee:83:f0:06:ef:3e:91:03:b3:e1:e3: cc:f5:81:58:10:d5:a8:70:86:2c:28:21:6b:5b:48: aa:9d:2a:5f:b9:7e:ac:93:5b:8a:80:67:25:de:13: dd:60:d0:46:97:34:17:fb:e0:02:cf:8f:72:a1:2d: 35:41:d0:ce:f6:0d:32:c0:a9:4a:fe:97:78:e0:03: 6d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:C2:D4:B4:3E:7C:30:0F:10:82:86:4C:AA:F1:5C:B1:A5:0B:41:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/e8c83e5e-3160-3da3-9508-5decf5e3c0b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/79b1fe7a-eca9-422f-9043-5a93ca5145c8.crl X509v3 Authority Key Identifier: keyid:0C:61:A1:93:6A:44:3C:E2:11:31:FA:40:42:68:F7:A6:E7:34:84:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8.cer sbgp-ipAddrBlock: critical IPv4: 149.48.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:f4:9f:22:de:18:b6:ee:6b:d2:83:b2:1f:97:65:5e:e8:94: 51:91:13:3a:6a:eb:01:68:24:59:66:49:a5:10:53:47:43:81: 82:a8:ca:6f:8b:27:fe:ce:5c:d4:a2:7d:c4:d5:cf:a8:13:03: 0c:26:c6:b1:23:3d:08:75:a6:5b:a6:77:85:f3:df:60:60:9f: 17:0c:3d:0a:da:ac:e0:e0:65:25:e4:48:d1:5f:da:75:db:ed: 19:17:15:58:03:b0:7a:c8:08:9d:ee:b4:d2:4f:f4:9c:32:5d: 7c:37:2c:be:d2:85:78:76:f2:b9:c7:11:07:84:4d:a2:93:0c: 70:b2:e5:b2:83:b0:e9:f8:4c:04:41:1d:74:63:9d:fd:f7:b2: 7d:52:cc:6b:c7:bb:11:86:40:dc:e5:5a:34:f5:e2:00:fb:40: 96:ef:f5:00:7b:2b:9c:bc:55:74:41:a1:e4:73:35:7c:79:d7: 03:dd:00:e4:d6:82:dc:5a:86:26:69:90:4f:b3:81:07:4e:1a: 21:d5:0e:f9:26:27:fa:bf:6b:ab:37:04:8d:78:4a:71:b0:cf: ea:0c:c0:36:6e:56:3b:c6:78:1c:21:0a:8a:49:26:97:6e:c3: c9:4a:a2:99:a4:e2:ba:bf:07:03:b6:aa:2a:f1:bd:9a:1c:54: 6b:42:6c:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK4SI+lCA3dYt8EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzliMWZlN2EtZWNhOS00MjJmLTkwNDMtNWE5M2NhNTE0 NWM4MB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk YmFmOTYxNzctMGFjNC00MmM0LTgwMTctOWQyM2M4OGI4MjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFwqjQlif8lCon1k6hFGjAJQzoLIq7Ogl7Jn MmFbKRt0ISM+kt7V4I8jSS09PEZeck5TDUaka0ObIM2FDBrHFJMai64Qip0OZxyb YWY7LdWOKoPMoSzc/9WZuf/IMfSxqeF6zNrQqporyoLnMlkIXZ0x8azihPgj/dgI weZmUTvw4ZX+xY68hfzf0nEIHR3lnknC/0ZBTJDFYRXw8W6BO0zYMlaFrzVuS+rA cOLqDevEA3jxaabC7oPwBu8+kQOz4ePM9YFYENWocIYsKCFrW0iqnSpfuX6sk1uK gGcl3hPdYNBGlzQX++ACz49yoS01QdDO9g0ywKlK/pd44ANttwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB7C1LQ+fDAPEIKGTKrxXLGlC0EqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83OWIx ZmU3YS1lY2E5LTQyMmYtOTA0My01YTkzY2E1MTQ1YzgvZThjODNlNWUtMzE2MC0z ZGEzLTk1MDgtNWRlY2Y1ZTNjMGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNzliMWZlN2EtZWNhOS00MjJmLTkw NDMtNWE5M2NhNTE0NWM4Lzc5YjFmZTdhLWVjYTktNDIyZi05MDQzLTVhOTNjYTUx NDVjOC5jcmwwHwYDVR0jBBgwFoAUDGGhk2pEPOIRMfpAQmj3puc0hBQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi83OWIxZmU3YS1lY2E5LTQyMmYtOTA0My01YTkz Y2E1MTQ1YzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlTCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJn0nyLeGLbua9KDsh+XZV7olFGREzpq6wFoJFlmSaUQU0dDgYKoym+L J/7OXNSifcTVz6gTAwwmxrEjPQh1plumd4Xz32BgnxcMPQrarODgZSXkSNFf2nXb 7RkXFVgDsHrICJ3utNJP9JwyXXw3LL7ShXh28rnHEQeETaKTDHCy5bKDsOn4TARB HXRjnf33sn1SzGvHuxGGQNzlWjT14gD7QJbv9QB7K5y8VXRBoeRzNXx51wPdAOTW gtxahiZpkE+zgQdOGiHVDvkmJ/q/a6s3BI14SnGwz+oMwDZuVjvGeBwhCopJJpdu w8lKopmk4rq/BwO2qirxvZocVGtCbJQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:42:45 2025 by rpki-client