$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/3d8b42a3-eae4-3fe6-b365-6bf888dd670d.roa File: 3d8b42a3-eae4-3fe6-b365-6bf888dd670d.roa (raw, json) Hash identifier: qvRe294YQt6XR3x/YLPXIYSS3IsK7KY9FXJRYA15XTg= Subject key identifier: 23:4F:B1:61:C5:5C:74:32:1A:7E:E4:FF:8D:25:FF:83:90:C6:90:51 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F43285848F9269C1BC9B950F0B7EEB900 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/3d8b42a3-eae4-3fe6-b365-6bf888dd670d.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 1280 IP address blocks: 149.20.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:9c:1b:c9:b9:50:f0:b7:ee:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=24dc4712-cc7d-4bb1-9dec-dbba39cd4fcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:33:22:a1:41:28:34:f5:1a:5a:c6:b3:9a:15: 5f:ba:46:fd:d3:12:06:c4:bc:2d:ae:9c:bd:5d:43: 28:e1:33:55:15:35:c9:80:f7:27:c3:f2:54:9c:9e: 85:a7:58:f9:2b:ac:df:cf:5f:a4:12:5f:33:75:0c: ca:18:e1:40:77:ff:dc:79:e8:33:77:a7:c1:3b:36: 25:31:53:c5:4d:c9:1a:7a:2a:cf:8b:e8:13:d2:19: e8:91:8b:cf:16:a2:cc:75:b5:14:50:c3:c6:de:b3: 8f:db:cd:b6:61:ec:c2:52:4d:30:c8:99:cb:5c:e6: e7:34:12:18:76:58:36:cd:31:d0:3d:23:8e:9c:30: 6b:ff:8c:71:88:4f:e0:c2:57:5b:db:10:75:83:d9: cf:49:1b:60:54:fa:d9:df:74:bc:96:2a:d8:a3:7b: 0a:da:27:e3:fa:92:cc:bd:37:78:c0:cf:28:7d:57: 65:10:eb:22:5f:64:eb:22:94:1a:03:a6:91:99:15: b3:ac:01:2e:19:ca:1b:9d:41:72:12:94:6d:eb:62: f9:5f:62:1b:f6:4f:4c:ee:c8:b0:d2:77:88:ba:07: 96:10:2c:b0:b9:b0:de:cb:aa:38:65:32:ed:19:7c: 78:66:7e:8a:e3:b1:7b:e1:fb:d6:40:91:5e:9e:e7: 1d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:4F:B1:61:C5:5C:74:32:1A:7E:E4:FF:8D:25:FF:83:90:C6:90:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/3d8b42a3-eae4-3fe6-b365-6bf888dd670d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:bc:f4:cd:45:5d:d2:49:46:79:1c:85:77:6c:e2:42:ca:db: 58:1e:73:e4:09:9f:ce:ab:57:5b:42:87:50:f8:0e:70:4c:69: ab:07:e0:c5:a4:2e:83:b0:f6:a5:ea:c0:7a:14:d4:d9:cd:b3: 2d:a5:4e:bf:75:b1:34:24:60:c5:83:36:5f:9f:a3:04:bd:dc: 37:00:8e:1e:08:37:29:e9:ed:75:46:af:ab:24:d8:5f:fe:af: 70:cb:f9:55:f5:8a:23:78:33:17:e4:c7:5b:23:4c:01:b4:96: 1a:41:28:59:67:68:ef:a3:31:7c:ea:a5:b7:d6:c9:ae:30:27: b6:5a:f7:9e:80:1b:a4:b9:d7:7a:60:76:7c:6b:34:8e:36:81: 27:33:9b:d2:31:cb:e9:be:25:cf:89:70:a2:4f:b3:df:76:51: 7f:0d:37:7e:d7:0f:1b:29:c4:6d:ef:01:14:8f:42:54:2c:36: 19:63:92:79:64:90:94:7c:d1:54:81:a1:40:9c:93:32:76:7b: 27:12:89:c3:3f:22:e8:ee:e3:16:0a:2b:38:c0:f6:49:7a:8a: b4:39:ca:d0:a5:0c:5e:70:c0:29:4b:45:37:05:41:56:b1:46: c9:ba:7b:0e:03:17:e3:02:c9:f4:37:1d:a8:29:c9:40:c7:69: 21:f2:a5:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JpwbyblQ8LfuuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk MjRkYzQ3MTItY2M3ZC00YmIxLTlkZWMtZGJiYTM5Y2Q0ZmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDMioUEoNPUaWsazmhVfukb90xIGxLwtrpy9 XUMo4TNVFTXJgPcnw/JUnJ6Fp1j5K6zfz1+kEl8zdQzKGOFAd//ceegzd6fBOzYl MVPFTckaeirPi+gT0hnokYvPFqLMdbUUUMPG3rOP2822YezCUk0wyJnLXObnNBIY dlg2zTHQPSOOnDBr/4xxiE/gwldb2xB1g9nPSRtgVPrZ33S8lirYo3sK2ifj+pLM vTd4wM8ofVdlEOsiX2TrIpQaA6aRmRWzrAEuGcobnUFyEpRt62L5X2Ib9k9M7siw 0neIugeWECywubDey6o4ZTLtGXx4Zn6K47F74fvWQJFenucdrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCNPsWHFXHQyGn7k/40l/4OQxpBRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvM2Q4YjQyYTMtZWFlNC0z ZmU2LWIzNjUtNmJmODg4ZGQ2NzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClRRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABW89M1FXdJJRnkchXds4kLK21gec+QJn86rV1tCh1D4DnBMaasH4MWk LoOw9qXqwHoU1NnNsy2lTr91sTQkYMWDNl+fowS93DcAjh4INynp7XVGr6sk2F/+ r3DL+VX1iiN4Mxfkx1sjTAG0lhpBKFlnaO+jMXzqpbfWya4wJ7Za956AG6S513pg dnxrNI42gSczm9Ixy+m+Jc+JcKJPs992UX8NN37XDxspxG3vARSPQlQsNhljknlk kJR80VSBoUCckzJ2eycSicM/Iuju4xYKKzjA9kl6irQ5ytClDF5wwClLRTcFQVax Rsm6ew4DF+MCyfQ3HagpyUDHaSHypf0= -----END CERTIFICATE-----Generated at Tue Apr 8 23:38:52 2025 by rpki-client