$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/61b43dc6-923a-309c-82be-50a0e60faeb2.roa File: 61b43dc6-923a-309c-82be-50a0e60faeb2.roa (raw, json) Hash identifier: 4CgbKL4UTjLFpY6eN8hK1Z+4PlCBrb4EC2iV5M1JWG0= Subject key identifier: 68:03:97:D9:CA:F4:F6:94:C3:4E:36:8E:FD:FD:CF:01:8B:CA:A3:34 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F43285848CC7B981D37C0BAAD43B82340 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/61b43dc6-923a-309c-82be-50a0e60faeb2.roa Signing time: Fri 07 Feb 2025 02:00:39 +0000 ROA not before: Fri 07 Feb 2025 02:00:39 +0000 ROA not after: Thu 08 May 2025 01:00:39 +0000 asID: 64267 IP address blocks: 149.20.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:7b:98:1d:37:c0:ba:ad:43:b8:23:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Feb 7 02:00:39 2025 GMT Not After : May 8 01:00:39 2025 GMT Subject: CN=eb528ecd-b06c-49a4-9cf0-86eb39ec969b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0a:ce:2c:46:a0:70:61:62:f1:f1:54:65:94: 6c:55:23:87:e2:33:eb:b9:86:a7:62:01:5f:20:38: 47:4d:44:dc:56:bf:86:3d:27:e4:23:bc:4a:65:bf: a1:7d:b0:5f:0e:5e:13:a7:00:b2:3f:60:75:b4:8b: b6:ad:d3:9e:54:69:30:47:e6:36:dd:48:b5:ed:14: aa:bb:9c:13:09:ee:cd:40:53:44:d7:88:06:7d:c3: a5:65:2b:19:94:a0:fa:16:b9:91:ed:d4:ed:8f:9c: cf:e6:54:69:a8:a2:5c:c9:60:ba:94:e2:e9:0a:80: fa:79:48:07:ff:eb:03:25:03:5d:35:76:06:d2:3d: c3:ca:8c:25:32:86:4e:ef:9e:52:36:c1:9d:82:b5: d0:3b:28:f2:38:bf:92:14:f1:d4:04:cc:0d:fe:0b: 84:29:32:d1:10:b1:53:4b:f0:06:1e:9a:15:53:72: f0:e9:5c:0e:c4:69:04:04:17:b5:90:42:60:a5:31: ef:4c:cf:41:e5:5a:fd:16:af:d3:61:4a:22:80:76: 50:bb:31:52:09:2f:02:81:d0:89:48:59:4d:c0:8a: 8a:17:5e:87:b4:1f:0b:c1:2c:6e:eb:24:ce:68:15: 2c:21:04:1a:00:76:da:cd:9e:19:d4:55:bf:89:d1: 1c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:03:97:D9:CA:F4:F6:94:C3:4E:36:8E:FD:FD:CF:01:8B:CA:A3:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/61b43dc6-923a-309c-82be-50a0e60faeb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 149.20.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:97:df:3f:f0:62:f3:c1:38:d3:06:b1:57:d7:68:39:8a:fb: 3e:81:75:60:80:c8:22:d2:60:0b:c5:14:4b:8d:31:8f:a5:04: 9f:3d:89:d2:8a:7e:29:24:4d:5a:d2:4e:47:2b:52:2b:47:63: 89:a7:f6:bd:8e:7f:b0:07:ef:08:99:cf:68:13:26:f3:83:53: a6:4f:c3:d5:7f:19:48:37:2b:3a:4a:15:20:0c:d8:46:56:fe: 2f:0c:42:18:b5:31:01:da:a6:f7:ec:ae:83:75:62:ed:c4:07: 3f:28:f4:10:d1:b3:3a:22:38:e8:b9:c7:ab:53:56:9a:75:96: 0b:0e:99:43:fe:ab:ec:24:65:af:23:d5:b3:b6:6a:80:05:c7: 53:82:1c:0d:22:12:08:20:f7:1c:ea:6a:6f:cc:d2:3d:34:6c: 24:f1:f5:2b:50:8f:b8:0b:aa:98:f6:ae:9d:8c:49:d9:10:24: 70:70:b6:fa:6d:96:ed:a9:de:0c:ff:75:61:b1:78:dc:89:f4: 99:ea:6e:31:54:38:40:87:c2:cf:20:25:b2:61:9d:af:b1:32: 59:d3:59:6b:d3:73:83:df:c5:13:17:bf:5a:72:d0:2b:36:53: 65:36:47:a6:04:a0:af:80:ea:8c:33:e9:12:f0:c2:96:58:f5: b8:94:fa:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjMe5gdN8C6rUO4I0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk ZWI1MjhlY2QtYjA2Yy00OWE0LTljZjAtODZlYjM5ZWM5NjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QrOLEagcGFi8fFUZZRsVSOH4jPruYanYgFf IDhHTUTcVr+GPSfkI7xKZb+hfbBfDl4TpwCyP2B1tIu2rdOeVGkwR+Y23Ui17RSq u5wTCe7NQFNE14gGfcOlZSsZlKD6FrmR7dTtj5zP5lRpqKJcyWC6lOLpCoD6eUgH /+sDJQNdNXYG0j3DyowlMoZO755SNsGdgrXQOyjyOL+SFPHUBMwN/guEKTLRELFT S/AGHpoVU3Lw6VwOxGkEBBe1kEJgpTHvTM9B5Vr9Fq/TYUoigHZQuzFSCS8CgdCJ SFlNwIqKF16HtB8LwSxu6yTOaBUsIQQaAHbazZ4Z1FW/idEc5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgDl9nK9PaUw042jv39zwGLyqM0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNjFiNDNkYzYtOTIzYS0z MDljLTgyYmUtNTBhMGU2MGZhZWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRT3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2X3z/wYvPBONMGsVfXaDmK+z6BdWCAyCLSYAvFFEuNMY+lBJ89idKK fikkTVrSTkcrUitHY4mn9r2Of7AH7wiZz2gTJvODU6ZPw9V/GUg3KzpKFSAM2EZW /i8MQhi1MQHapvfsroN1Yu3EBz8o9BDRszoiOOi5x6tTVpp1lgsOmUP+q+wkZa8j 1bO2aoAFx1OCHA0iEggg9xzqam/M0j00bCTx9StQj7gLqpj2rp2MSdkQJHBwtvpt lu2p3gz/dWGxeNyJ9JnqbjFUOECHws8gJbJhna+xMlnTWWvTc4PfxRMXv1py0Cs2 U2U2R6YEoK+A6owz6RLwwpZY9biU+mA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:28:17 2025 by rpki-client