$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/45d41f15-8492-3fc0-95d1-32224912a7f9.roa File: 45d41f15-8492-3fc0-95d1-32224912a7f9.roa (raw, json) Hash identifier: GA+i5Outuk6jvg/yyn70XcpZmuhURoWp+rKg8Mg6bKE= Subject key identifier: B1:73:94:3B:FD:7C:F6:55:50:6C:75:18:F9:3E:15:E4:3E:84:5B:86 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F43285848F92694FA890A632DEBA69700 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/45d41f15-8492-3fc0-95d1-32224912a7f9.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 1280 IP address blocks: 149.20.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:94:fa:89:0a:63:2d:eb:a6:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=c911fbb8-a87e-4d54-a974-0d2bf915aed5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6e:7d:44:cc:fa:01:8c:c3:98:fe:ae:5a:1f: ba:3b:88:d3:66:79:ab:bf:69:bb:76:e7:a3:fc:bc: b9:90:cd:52:4c:97:f0:7b:61:3e:8a:2d:2e:63:55: f2:57:6b:0f:cd:37:31:ab:8d:da:0d:cc:9e:88:60: a2:11:8a:54:af:a1:b0:52:72:c5:33:3e:a9:9c:9e: 09:02:07:ee:da:0c:0c:14:3c:31:f0:f0:51:0d:be: 08:c3:d4:5d:ad:61:32:4e:2d:9f:46:1e:8a:7b:4a: b9:5e:5f:80:cc:17:ac:6e:4a:9d:e7:4b:5f:69:e1: 05:d1:61:64:c5:c9:29:01:41:9b:16:78:75:ba:f9: e9:05:f0:37:b6:e5:e8:53:92:9d:be:9e:c3:f3:8e: 06:d1:01:8c:5a:3f:f6:98:44:d1:1b:a4:ee:e0:3a: cc:c2:10:0f:fd:1f:5f:58:01:69:8f:35:48:ad:62: 75:52:06:11:89:9f:66:3c:50:7d:68:1c:45:30:e5: 0c:b6:ac:7d:0a:34:c3:d8:9e:ba:39:05:16:f5:05: 97:5e:84:c4:8f:f6:27:0f:70:45:e4:bb:e5:17:5a: ca:e4:c4:36:59:d2:26:c1:e3:66:15:21:5a:ca:2e: b9:65:c9:96:66:c0:23:4d:c2:61:58:7f:02:74:90: cd:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:73:94:3B:FD:7C:F6:55:50:6C:75:18:F9:3E:15:E4:3E:84:5B:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/45d41f15-8492-3fc0-95d1-32224912a7f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:e7:e4:a5:a6:17:2c:a2:d9:1a:f9:28:b8:7b:52:f7:f4:7b: a9:a5:16:5f:65:b6:62:1e:43:84:95:58:35:ed:34:89:36:ef: aa:6a:1c:bd:20:fa:f8:15:2a:64:a5:96:92:d2:97:97:66:05: 36:12:a2:77:32:e9:66:36:c3:4c:10:01:ea:0a:2c:f6:7c:30: a8:e5:48:74:ba:47:a8:09:06:7c:93:2a:99:ec:12:63:16:29: 2a:eb:17:54:af:99:ea:79:b1:fa:62:aa:b8:42:60:eb:c6:f3: 6d:55:16:71:ba:18:f7:ad:80:88:ca:5e:19:b8:f2:4b:3a:67: 8e:26:24:1b:f2:92:35:f5:8e:a9:50:4b:23:ed:b4:49:9e:9d: ec:95:54:78:88:c1:22:4d:21:22:aa:7d:5d:0b:94:cc:2c:28: f5:0f:db:45:3d:94:4a:cf:bc:2b:7b:f8:d0:81:63:ce:0f:d2: 6f:12:e6:36:c6:46:c2:0a:a6:03:55:5f:82:b4:ea:e2:17:20: 95:bb:d3:be:96:c8:51:2a:ee:b1:c7:11:6e:06:06:82:2b:9b: 9a:18:89:02:27:68:60:44:58:f2:46:1d:2a:5d:e1:5c:be:8b: 9d:97:06:2d:2e:d7:13:53:4c:52:70:9b:c7:fc:46:17:7c:35: 9f:e1:39:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JpT6iQpjLeumlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk YzkxMWZiYjgtYTg3ZS00ZDU0LWE5NzQtMGQyYmY5MTVhZWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtW59RMz6AYzDmP6uWh+6O4jTZnmrv2m7duej /Ly5kM1STJfwe2E+ii0uY1XyV2sPzTcxq43aDcyeiGCiEYpUr6GwUnLFMz6pnJ4J Agfu2gwMFDwx8PBRDb4Iw9RdrWEyTi2fRh6Ke0q5Xl+AzBesbkqd50tfaeEF0WFk xckpAUGbFnh1uvnpBfA3tuXoU5Kdvp7D844G0QGMWj/2mETRG6Tu4DrMwhAP/R9f WAFpjzVIrWJ1UgYRiZ9mPFB9aBxFMOUMtqx9CjTD2J66OQUW9QWXXoTEj/YnD3BF 5LvlF1rK5MQ2WdImweNmFSFayi65ZcmWZsAjTcJhWH8CdJDNGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLFzlDv9fPZVUGx1GPk+FeQ+hFuGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvNDVkNDFmMTUtODQ5Mi0z ZmMwLTk1ZDEtMzIyMjQ5MTJhN2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlRRIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrn5KWmFyyi2Rr5KLh7Uvf0e6mlFl9ltmIeQ4SVWDXtNIk276pqHL0g +vgVKmSllpLSl5dmBTYSoncy6WY2w0wQAeoKLPZ8MKjlSHS6R6gJBnyTKpnsEmMW KSrrF1Svmep5sfpiqrhCYOvG821VFnG6GPetgIjKXhm48ks6Z44mJBvykjX1jqlQ SyPttEmeneyVVHiIwSJNISKqfV0LlMwsKPUP20U9lErPvCt7+NCBY84P0m8S5jbG RsIKpgNVX4K06uIXIJW7076WyFEq7rHHEW4GBoIrm5oYiQInaGBEWPJGHSpd4Vy+ i52XBi0u1xNTTFJwm8f8Rhd8NZ/hOUY= -----END CERTIFICATE-----Generated at Fri Mar 14 10:04:06 2025 by rpki-client