$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/42fed2c7-e0b3-3af7-b342-35efac5bef13.roa File: 42fed2c7-e0b3-3af7-b342-35efac5bef13.roa (raw, json) Hash identifier: VTYEQgTjfI4Xx30Rub2IeHEVxPZNUJZnxpgIgJS8JJU= Subject key identifier: 36:18:FE:4C:B0:92:DF:09:6B:12:4A:CA:88:6C:C3:62:C0:4E:93:53 Certificate issuer: /CN=81565da9-aab9-45ca-b99c-0684053daa09 Certificate serial: 010D0C9F43285848BFEB9591EB5B840FAE6FAFC0 Authority key identifier: D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/42fed2c7-e0b3-3af7-b342-35efac5bef13.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 6461 IP address blocks: 149.64.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:95:91:eb:5b:84:0f:ae:6f:af:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81565da9-aab9-45ca-b99c-0684053daa09 Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=5ecd2ba1-9044-49da-a110-00c957af5732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:55:fb:39:5c:fd:60:17:e1:0d:e9:92:03:d2: 9a:3a:85:e4:b2:6e:84:b8:00:dc:59:47:8f:44:6c: 94:f1:b5:af:b4:1e:b7:d1:4a:6c:6b:a9:6b:a2:dc: ba:87:dd:df:9b:33:fb:c0:09:57:e9:ec:5f:01:ee: 1e:9d:64:6b:eb:d8:94:fa:7d:42:3d:a9:0e:aa:7a: e0:45:84:ed:07:24:fa:81:56:ef:a6:ce:ba:49:db: 99:ca:a5:90:cf:aa:49:f1:dc:ea:14:31:76:ae:23: df:5e:15:00:66:56:e4:44:32:c9:3d:21:c5:8e:62: 28:36:f8:a0:04:a1:a8:1b:f3:5d:47:5a:93:cd:54: 59:f1:a9:d5:91:4a:73:25:23:87:db:ce:c7:75:c9: 5c:22:bb:7e:5f:52:71:05:16:11:2b:56:35:ce:11: 13:7c:9a:5e:f1:16:33:9e:69:bf:c9:46:4e:97:8c: 90:34:e5:4c:29:1b:36:02:c3:10:e4:3b:d8:5b:5c: 21:59:70:59:88:63:a4:a8:0b:81:9b:aa:92:92:16: 0a:93:97:7c:0e:3b:91:36:e5:8f:ab:24:14:24:a0: 78:34:a1:6f:af:77:5f:71:58:81:58:e0:13:c8:da: ee:87:55:47:92:65:39:c0:f0:9c:e6:fa:27:a9:a0: 94:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:18:FE:4C:B0:92:DF:09:6B:12:4A:CA:88:6C:C3:62:C0:4E:93:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/42fed2c7-e0b3-3af7-b342-35efac5bef13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl X509v3 Authority Key Identifier: keyid:D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer sbgp-ipAddrBlock: critical IPv4: 149.64.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:a1:24:83:c2:8a:8e:85:c4:5c:f3:05:bb:9e:5e:6a:ab:7b: f1:58:0b:99:51:fa:30:5b:da:48:ca:fb:ef:d1:99:04:1a:64: e3:93:87:ee:36:34:40:87:9c:6d:67:87:1d:45:ff:c5:0e:26: 00:0c:b7:43:44:35:b7:07:82:15:bf:28:98:8f:d7:d8:62:77: 93:03:ef:10:6d:b4:d9:34:a2:11:f2:aa:7c:d3:41:54:5e:88: 3e:af:3b:44:c1:cf:62:c1:71:b3:89:11:cf:29:61:a8:6d:47: b2:2c:8c:d5:36:c3:cc:4f:26:d0:70:d9:b8:43:90:df:65:3b: da:67:41:b7:f9:c9:c2:d8:ed:cf:e4:18:77:46:82:c5:f6:c4: 5b:7a:4f:bf:78:d3:1c:91:f1:d6:4f:af:9a:9e:ed:e5:52:ea: 8e:b7:dd:78:24:21:2a:c2:87:12:c9:72:5a:6c:49:96:3b:c0: e4:f5:d5:ac:72:f3:fe:7f:c4:d4:19:fe:66:ab:d0:e5:a0:3e: a3:d9:82:91:23:92:d6:59:b7:1f:7d:c3:e9:c9:28:81:db:b0: f9:2b:77:23:44:b3:9e:a7:82:9c:d9:b0:00:b0:15:5e:67:cc: 5e:d6:21:05:59:5f:78:75:8a:34:4e:46:e7:ae:8c:4a:d5:2c: 11:bd:6c:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/65WR61uED65vr8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODE1NjVkYTktYWFiOS00NWNhLWI5OWMtMDY4NDA1M2Rh YTA5MB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk NWVjZDJiYTEtOTA0NC00OWRhLWExMTAtMDBjOTU3YWY1NzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVX7OVz9YBfhDemSA9KaOoXksm6EuADcWUeP RGyU8bWvtB630Upsa6lroty6h93fmzP7wAlX6exfAe4enWRr69iU+n1CPakOqnrg RYTtByT6gVbvps66SduZyqWQz6pJ8dzqFDF2riPfXhUAZlbkRDLJPSHFjmIoNvig BKGoG/NdR1qTzVRZ8anVkUpzJSOH287HdclcIrt+X1JxBRYRK1Y1zhETfJpe8RYz nmm/yUZOl4yQNOVMKRs2AsMQ5DvYW1whWXBZiGOkqAuBm6qSkhYKk5d8DjuRNuWP qyQUJKB4NKFvr3dfcViBWOATyNruh1VHkmU5wPCc5vonqaCU5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDYY/kywkt8JaxJKyohsw2LATpNTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84MTU2 NWRhOS1hYWI5LTQ1Y2EtYjk5Yy0wNjg0MDUzZGFhMDkvNDJmZWQyYzctZTBiMy0z YWY3LWIzNDItMzVlZmFjNWJlZjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODE1NjVkYTktYWFiOS00NWNhLWI5 OWMtMDY4NDA1M2RhYTA5LzgxNTY1ZGE5LWFhYjktNDVjYS1iOTljLTA2ODQwNTNk YWEwOS5jcmwwHwYDVR0jBBgwFoAU11yQoPbNF8ZEaKnEFmHVfmQjLcgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84MTU2NWRhOS1hYWI5LTQ1Y2EtYjk5Yy0wNjg0 MDUzZGFhMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlUDiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2hJIPCio6FxFzzBbueXmqre/FYC5lR+jBb2kjK++/RmQQaZOOTh+42 NECHnG1nhx1F/8UOJgAMt0NENbcHghW/KJiP19hid5MD7xBttNk0ohHyqnzTQVRe iD6vO0TBz2LBcbOJEc8pYahtR7IsjNU2w8xPJtBw2bhDkN9lO9pnQbf5ycLY7c/k GHdGgsX2xFt6T7940xyR8dZPr5qe7eVS6o633XgkISrChxLJclpsSZY7wOT11axy 8/5/xNQZ/mar0OWgPqPZgpEjktZZtx99w+nJKIHbsPkrdyNEs56ngpzZsACwFV5n zF7WIQVZX3h1ijRORueujErVLBG9bDI= -----END CERTIFICATE-----Generated at Sat Apr 5 16:45:00 2025 by rpki-client