$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/43e0904e-b3dd-39b5-a5f5-e237e38bb540.roa File: 43e0904e-b3dd-39b5-a5f5-e237e38bb540.roa (raw, json) Hash identifier: hbk83Id/m6uaQQRUWQ4BNQOuVoWbiRt7z+Ix6ECRnL8= Subject key identifier: FA:C4:64:88:AE:1A:59:6C:60:7F:A9:30:B0:CF:59:D6:68:20:B7:48 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F43285848CC7B97F0BE0057E629816610 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/43e0904e-b3dd-39b5-a5f5-e237e38bb540.roa Signing time: Fri 07 Feb 2025 02:00:39 +0000 ROA not before: Fri 07 Feb 2025 02:00:39 +0000 ROA not after: Thu 08 May 2025 01:00:39 +0000 asID: 64267 IP address blocks: 149.20.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:7b:97:f0:be:00:57:e6:29:81:66:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Feb 7 02:00:39 2025 GMT Not After : May 8 01:00:39 2025 GMT Subject: CN=41285202-45e8-4654-a389-2a2a4cfad891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e9:31:67:a6:65:ea:26:fe:aa:89:b1:ba:f6: 55:a6:a1:63:75:d7:88:92:53:b8:28:d4:ab:aa:67: 5d:9a:46:c7:11:32:a1:d0:38:a1:ef:1c:c0:cc:70: 6b:ef:4d:d2:3c:11:54:52:6d:e7:74:30:79:30:09: 9b:38:95:a9:cc:01:94:d9:81:97:79:ea:6d:75:10: dd:df:0e:75:9f:87:2a:ea:db:47:a7:83:6a:e1:fc: 3e:66:7b:0e:19:cd:41:47:19:c8:12:a8:b2:48:2c: 62:85:33:22:ab:42:79:62:d0:5a:5f:7f:ba:4f:86: 2c:e3:2d:45:7b:ca:85:c6:78:de:2d:1d:00:65:22: a1:d2:a9:5e:9d:5a:1e:e5:b6:66:47:93:35:85:d3: ea:c8:ec:34:35:2b:7d:8a:97:cf:d6:6c:a5:6c:20: 1d:ce:83:ac:82:05:5b:1d:1e:aa:af:a8:64:9d:9a: df:0e:4c:eb:8b:d8:58:b6:59:88:ec:b3:e6:93:b1: b3:fb:ff:8f:b5:a3:4a:a3:e0:76:09:03:af:7b:23: 80:d9:b9:cf:cc:22:a6:30:4c:85:c5:9a:51:86:de: 93:d9:0c:83:04:86:73:cf:a1:6e:8f:bc:b5:40:cc: 51:33:e3:7f:a8:d7:b8:49:59:63:56:0d:0b:cd:e0: 07:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:C4:64:88:AE:1A:59:6C:60:7F:A9:30:B0:CF:59:D6:68:20:B7:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/43e0904e-b3dd-39b5-a5f5-e237e38bb540.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 149.20.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:e1:6c:49:5d:c3:b6:84:a3:7e:54:c4:65:f5:e3:7f:71:a7: 51:2e:a9:5d:22:e9:59:4b:bd:ea:94:69:ac:b6:00:37:01:83: b9:4d:a6:3f:64:9c:16:78:34:8a:f9:17:9b:4d:f9:3a:c3:2b: 25:42:bb:43:1f:da:b3:54:b2:b0:5e:42:66:5b:9f:85:f9:e2: 0e:21:0a:20:95:90:cf:04:a2:98:35:92:1a:0d:a1:04:33:6d: 93:e1:6d:0e:2d:47:b4:fc:20:ff:cb:ab:2c:6b:8e:fd:a0:c0: a2:05:a3:93:16:4f:e6:49:a4:84:81:de:05:65:33:b9:3e:73: 31:fc:bf:66:84:89:01:c1:6a:69:55:f1:f1:8d:f0:f0:f9:f1: 0d:63:4a:23:6f:d7:d6:64:fd:16:01:3a:0e:15:ec:cb:4c:1e: 3f:1e:11:cd:ac:5c:21:42:a9:8a:6c:60:70:87:f6:ce:3c:64: c4:f9:31:99:c5:97:d2:46:fb:d8:b3:32:55:42:bc:d5:f0:c0: f6:e4:11:92:02:c0:ed:d6:3b:4e:ab:7b:2d:a0:8e:4d:07:29: 2e:ba:70:2e:2b:64:ed:f5:2c:33:e0:ed:14:96:6f:e6:1c:53: 87:a2:63:a2:31:d0:38:85:d4:4e:20:24:24:e3:59:a4:07:7c: a6:b5:8b:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjMe5fwvgBX5imBZhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk NDEyODUyMDItNDVlOC00NjU0LWEzODktMmEyYTRjZmFkODkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiukxZ6Zl6ib+qomxuvZVpqFjddeIklO4KNSr qmddmkbHETKh0Dih7xzAzHBr703SPBFUUm3ndDB5MAmbOJWpzAGU2YGXeeptdRDd 3w51n4cq6ttHp4Nq4fw+ZnsOGc1BRxnIEqiySCxihTMiq0J5YtBaX3+6T4Ys4y1F e8qFxnjeLR0AZSKh0qlenVoe5bZmR5M1hdPqyOw0NSt9ipfP1mylbCAdzoOsggVb HR6qr6hknZrfDkzri9hYtlmI7LPmk7Gz+/+PtaNKo+B2CQOveyOA2bnPzCKmMEyF xZpRht6T2QyDBIZzz6Fuj7y1QMxRM+N/qNe4SVljVg0LzeAH5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPrEZIiuGllsYH+pMLDPWdZoILdIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNDNlMDkwNGUtYjNkZC0z OWI1LWE1ZjUtZTIzN2UzOGJiNTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRT0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIThbEldw7aEo35UxGX1439xp1EuqV0i6VlLveqUaay2ADcBg7lNpj9k nBZ4NIr5F5tN+TrDKyVCu0Mf2rNUsrBeQmZbn4X54g4hCiCVkM8Eopg1khoNoQQz bZPhbQ4tR7T8IP/Lqyxrjv2gwKIFo5MWT+ZJpISB3gVlM7k+czH8v2aEiQHBamlV 8fGN8PD58Q1jSiNv19Zk/RYBOg4V7MtMHj8eEc2sXCFCqYpsYHCH9s48ZMT5MZnF l9JG+9izMlVCvNXwwPbkEZICwO3WO06rey2gjk0HKS66cC4rZO31LDPg7RSWb+Yc U4eiY6Ix0DiF1E4gJCTjWaQHfKa1i4Q= -----END CERTIFICATE-----Generated at Fri Mar 14 10:24:51 2025 by rpki-client