$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/45d41f15-8492-3fc0-95d1-32224912a7f9.roa File: 45d41f15-8492-3fc0-95d1-32224912a7f9.roa (raw, json) Hash identifier: 8ZN55vA5k9TNElJzdeFtxthlKzQw2aLNGxQG9ZozU10= Subject key identifier: E5:66:51:FC:8C:75:FD:D0:6A:8B:4F:82:01:C3:0F:48:2B:E3:E9:AB Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584819CFC20F1DB433FD7BB2BC00 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/45d41f15-8492-3fc0-95d1-32224912a7f9.roa Signing time: Thu 05 Dec 2024 02:00:39 +0000 ROA not before: Thu 05 Dec 2024 02:00:39 +0000 ROA not after: Wed 05 Mar 2025 02:00:39 +0000 asID: 1280 IP address blocks: 149.20.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:19:cf:c2:0f:1d:b4:33:fd:7b:b2:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Dec 5 02:00:39 2024 GMT Not After : Mar 5 02:00:39 2025 GMT Subject: CN=18ff68c5-2c54-4570-9b92-c93cf9bf9662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:81:fe:d2:75:d5:2c:02:28:1b:6a:37:34:6f: 70:d6:3a:5f:ca:e7:9d:49:c2:dc:36:76:77:35:33: 8f:45:6c:d3:4b:18:fd:08:ce:3d:3a:d0:34:90:02: 98:db:38:86:02:ba:87:46:b1:58:e9:0d:9b:35:c2: 7d:f7:ab:b7:e4:ed:3d:81:c1:98:4a:f3:5f:5d:a8: 6c:7d:8b:b2:00:ed:b8:9d:48:b8:35:52:22:20:54: 65:1d:eb:91:ac:42:a7:d7:74:41:58:bf:47:e6:42: c6:5d:9c:1f:ce:d3:d5:97:dc:60:4e:1d:cd:f9:91: 1d:1a:73:61:6a:99:c4:01:6b:b0:65:35:fc:37:3c: 3c:3a:54:07:ea:78:7d:56:61:97:e9:23:38:2a:e0: 75:26:82:94:ef:95:a7:db:07:ab:da:ed:d4:6e:32: 6a:51:22:0c:dc:56:26:a8:1e:79:a4:a5:02:ec:a0: 5c:ee:66:54:ea:32:b0:5e:63:27:25:c0:61:cf:15: b5:fb:e5:2f:cc:7d:78:b5:7d:6f:6a:2a:54:a5:b6: da:87:d5:9c:dc:87:0b:b6:84:9a:16:1e:60:30:54: 34:4f:85:0b:ba:b2:96:13:41:fe:0a:9b:f7:e3:27: 54:47:37:6c:16:ea:fb:a5:34:e8:d4:dd:2f:89:51: 6c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:66:51:FC:8C:75:FD:D0:6A:8B:4F:82:01:C3:0F:48:2B:E3:E9:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/45d41f15-8492-3fc0-95d1-32224912a7f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:30:ab:b3:f0:8f:78:1a:aa:0f:2e:f5:8c:c9:ac:3a:91:23: 60:97:1a:95:c9:bf:49:1d:b2:fe:87:33:97:5b:30:b0:32:45: 03:aa:9d:ae:f5:55:e0:47:4e:30:d8:6e:8d:2a:93:a7:28:64: ef:f5:85:65:6b:80:09:a9:1a:51:24:ce:55:8d:70:0d:ed:77: b7:90:90:f2:b5:4a:85:94:25:65:68:57:15:ce:a2:6a:59:28: 78:fb:f7:92:e0:09:72:f0:cb:70:bc:d1:ab:fc:b2:79:fd:24: 37:39:a1:a5:1e:ce:74:71:d8:58:fc:2b:3a:dd:34:e3:a6:6d: b3:fa:fd:9e:36:4c:0f:26:b0:04:df:9a:52:ca:04:ed:eb:a2: 11:87:e2:56:fb:f5:33:5c:28:df:69:b6:28:06:f6:ab:d1:bf: d1:23:37:a9:8e:0e:7a:c7:55:c3:f6:38:c5:bb:0d:1a:a3:97: cb:9f:c9:33:df:76:10:13:6d:a6:cc:0b:54:75:64:88:ef:45: 1c:2d:ce:04:ca:27:a1:c1:b2:ff:70:b5:4c:df:b4:b8:ce:12: c5:57:99:0f:e6:7d:e2:bd:f9:97:e0:6d:47:e7:60:c8:f4:b5: 4d:dd:6a:1b:4d:b2:49:16:24:5e:4b:8e:09:1a:ae:6f:45:7d: 72:eb:47:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgZz8IPHbQz/XuyvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk MThmZjY4YzUtMmM1NC00NTcwLTliOTItYzkzY2Y5YmY5NjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIH+0nXVLAIoG2o3NG9w1jpfyuedScLcNnZ3 NTOPRWzTSxj9CM49OtA0kAKY2ziGArqHRrFY6Q2bNcJ996u35O09gcGYSvNfXahs fYuyAO24nUi4NVIiIFRlHeuRrEKn13RBWL9H5kLGXZwfztPVl9xgTh3N+ZEdGnNh apnEAWuwZTX8Nzw8OlQH6nh9VmGX6SM4KuB1JoKU75Wn2wer2u3UbjJqUSIM3FYm qB55pKUC7KBc7mZU6jKwXmMnJcBhzxW1++UvzH14tX1vaipUpbbah9Wc3IcLtoSa Fh5gMFQ0T4ULurKWE0H+Cpv34ydURzdsFur7pTTo1N0viVFsqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVmUfyMdf3QaotPggHDD0gr4+mrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvNDVkNDFmMTUtODQ5Mi0z ZmMwLTk1ZDEtMzIyMjQ5MTJhN2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlRRIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIwq7Pwj3gaqg8u9YzJrDqRI2CXGpXJv0kdsv6HM5dbMLAyRQOqna71 VeBHTjDYbo0qk6coZO/1hWVrgAmpGlEkzlWNcA3td7eQkPK1SoWUJWVoVxXOompZ KHj795LgCXLwy3C80av8snn9JDc5oaUeznRx2Fj8KzrdNOOmbbP6/Z42TA8msATf mlLKBO3rohGH4lb79TNcKN9ptigG9qvRv9EjN6mODnrHVcP2OMW7DRqjl8ufyTPf dhATbabMC1R1ZIjvRRwtzgTKJ6HBsv9wtUzftLjOEsVXmQ/mfeK9+ZfgbUfnYMj0 tU3dahtNskkWJF5Ljgkarm9FfXLrR3Q= -----END CERTIFICATE-----Generated at Sun Feb 16 15:15:15 2025 by rpki-client