$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/61b43dc6-923a-309c-82be-50a0e60faeb2.roa File: 61b43dc6-923a-309c-82be-50a0e60faeb2.roa (raw, json) Hash identifier: zDizj0EowoGWl7IvrM9UexT3ORm11wIBiaB6ZAL0iF0= Subject key identifier: 13:E0:1D:50:50:8D:E4:AA:0C:9E:55:2B:8B:6F:DC:64:E8:2C:43:24 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F432858454D9D81134359641728D204C0 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/61b43dc6-923a-309c-82be-50a0e60faeb2.roa Signing time: Sat 23 Mar 2024 13:00:32 +0000 ROA not before: Sat 23 Mar 2024 13:00:32 +0000 ROA not after: Fri 21 Jun 2024 13:00:32 +0000 asID: 64267 IP address blocks: 149.20.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 01 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:4d:9d:81:13:43:59:64:17:28:d2:04:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Mar 23 13:00:32 2024 GMT Not After : Jun 21 13:00:32 2024 GMT Subject: CN=929763c2-b2e0-4b69-bd52-1c352f9cd294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:c2:a5:9d:76:80:f5:6a:89:f3:a1:7e:c2:bb: 0d:cd:9b:e4:e0:7d:b4:6e:be:72:7a:48:f8:1e:79: cd:44:0f:f8:1a:cc:81:cd:2c:7c:d7:d3:b2:74:1e: ca:ce:19:5a:d6:b2:0a:0b:81:03:3b:43:27:86:34: ed:e8:18:0c:2f:e0:a1:7c:64:31:78:ff:e2:d3:b8: 8e:5a:f8:a3:9e:96:1b:db:2f:88:ef:20:ea:a4:2d: 8a:94:61:d8:db:97:b4:b5:e5:f6:6f:ec:ea:85:6c: b0:80:bb:2c:f1:6b:4d:cf:53:75:ee:11:8e:04:88: da:9e:fe:4a:bd:c4:37:0b:08:2b:a9:be:a8:aa:17: 6a:75:51:8d:f0:e3:ec:b5:a4:29:5f:07:69:35:2c: 14:40:97:b4:c7:05:fe:40:ff:2c:2d:da:b8:b5:cd: aa:28:f8:ee:39:a1:a7:cb:03:eb:ac:0c:32:27:6c: 9c:fa:1f:c0:bc:f4:87:25:0b:49:f2:0e:c6:b1:c2: 29:3d:eb:f6:9e:8b:e7:13:9e:a5:5b:a5:a3:1c:20: d6:21:6d:10:17:3c:9c:9b:87:3c:a7:71:4e:d0:46: 6b:ab:2e:13:87:46:6b:24:ff:36:67:56:60:83:f6: 3b:38:fd:b9:52:63:34:88:3a:d4:72:93:4e:a8:41: a6:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:E0:1D:50:50:8D:E4:AA:0C:9E:55:2B:8B:6F:DC:64:E8:2C:43:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/61b43dc6-923a-309c-82be-50a0e60faeb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 149.20.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:64:5b:b7:d4:3b:69:f3:da:fc:b5:e4:f0:fa:50:9e:47:43: c6:07:d1:f7:c0:d0:a0:fe:7b:c6:9f:44:19:11:26:21:a0:a0: 04:ad:d6:27:47:d6:e8:c5:ac:79:aa:f7:29:a2:8d:ea:b0:3a: 9b:c6:46:f3:eb:7a:d4:69:27:7f:14:49:2f:8b:fd:b6:b3:5d: 19:9d:7a:e6:f8:e2:f6:37:0e:da:20:9e:6b:91:29:0e:eb:70: 32:97:27:29:30:d2:0f:a3:89:d6:86:12:cf:d7:cd:2b:ee:b4: c4:93:e9:09:e5:73:13:4f:45:ce:d9:1c:1f:c7:c0:8a:27:a3: 0f:65:17:c3:2a:91:64:c0:4a:7d:d7:a7:c9:df:6f:36:bd:42: 85:f1:b9:95:d6:89:58:33:ac:9b:78:9d:1e:4e:df:48:e2:28: da:51:83:42:e1:65:2d:be:6f:48:67:67:44:53:bb:7d:6d:29: ec:2f:8e:c0:2d:c2:ca:19:13:dd:f8:40:5c:55:b3:b1:cc:9f: 52:90:15:fa:97:7e:93:32:f9:ee:8f:7d:56:ed:41:b7:02:0f: 10:36:19:b9:39:d2:64:6d:77:dc:15:99:0f:03:1c:f7:66:18: fb:17:a2:18:30:b5:39:a7:f9:f2:da:9a:cb:d6:b4:d5:38:59: 0d:f1:ea:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVNnYETQ1lkFyjSBMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI0MDMyMzEzMDAzMloXDTI0MDYyMTEzMDAzMlowLzEtMCsGA1UEAxMk OTI5NzYzYzItYjJlMC00YjY5LWJkNTItMWMzNTJmOWNkMjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMKlnXaA9WqJ86F+wrsNzZvk4H20br5yekj4 HnnNRA/4GsyBzSx819OydB7Kzhla1rIKC4EDO0MnhjTt6BgML+ChfGQxeP/i07iO WvijnpYb2y+I7yDqpC2KlGHY25e0teX2b+zqhWywgLss8WtNz1N17hGOBIjanv5K vcQ3Cwgrqb6oqhdqdVGN8OPstaQpXwdpNSwUQJe0xwX+QP8sLdq4tc2qKPjuOaGn ywPrrAwyJ2yc+h/AvPSHJQtJ8g7GscIpPev2novnE56lW6WjHCDWIW0QFzycm4c8 p3FO0EZrqy4Th0ZrJP82Z1Zgg/Y7OP25UmM0iDrUcpNOqEGmlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBPgHVBQjeSqDJ5VK4tv3GToLEMkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNjFiNDNkYzYtOTIzYS0z MDljLTgyYmUtNTBhMGU2MGZhZWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRT3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALRkW7fUO2nz2vy15PD6UJ5HQ8YH0ffA0KD+e8afRBkRJiGgoASt1idH 1ujFrHmq9ymijeqwOpvGRvPretRpJ38USS+L/bazXRmdeub44vY3DtognmuRKQ7r cDKXJykw0g+jidaGEs/XzSvutMST6QnlcxNPRc7ZHB/HwIonow9lF8MqkWTASn3X p8nfbza9QoXxuZXWiVgzrJt4nR5O30jiKNpRg0LhZS2+b0hnZ0RTu31tKewvjsAt wsoZE934QFxVs7HMn1KQFfqXfpMy+e6PfVbtQbcCDxA2Gbk50mRtd9wVmQ8DHPdm GPsXohgwtTmn+fLamsvWtNU4WQ3x6ig= -----END CERTIFICATE-----