$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/4c4c9fac-6d7d-375f-93e9-b348075a4662.roa File: 4c4c9fac-6d7d-375f-93e9-b348075a4662.roa (raw, json) Hash identifier: d7eo7UcLf1yfGgTq+Qr21b4eVNMZMaBjjx7fatBDX2U= Subject key identifier: 0C:51:27:03:F0:7A:F3:D4:90:30:D0:11:BF:04:14:41:C1:DF:87:26 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F43285848F9269FB2A38F8008D05F7580 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/4c4c9fac-6d7d-375f-93e9-b348075a4662.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 1280 IP address blocks: 149.20.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:9f:b2:a3:8f:80:08:d0:5f:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=ddeddfbe-adb5-41d9-bff3-debc869c0d53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6e:03:34:54:b6:2f:df:7d:df:0a:f7:67:5a: 16:c3:0e:aa:07:15:67:ce:8e:04:36:8b:f8:e9:16: 15:b6:5b:36:c0:79:cf:ef:6e:65:76:e2:bc:4b:48: 88:bf:a4:b4:4c:70:5d:70:36:db:2b:1e:1a:3d:40: 8c:cc:b8:f2:7d:2c:0c:6f:1d:05:a6:d6:43:e7:67: 2f:be:23:65:38:e8:fb:f8:14:e1:f7:ad:e4:50:84: a8:af:77:31:53:d5:c2:58:ef:d6:f1:28:4d:12:d3: 97:10:ed:4a:c5:5c:1e:3e:4f:58:0f:f7:7f:dd:04: 63:8f:aa:bc:ba:6e:90:aa:50:e4:74:fe:7f:30:6a: 82:8c:44:97:ca:93:5a:f7:88:89:89:a6:8c:2c:06: f0:a2:a2:29:00:70:db:76:80:9f:5f:9a:56:24:35: 75:6e:a1:c9:22:ca:c5:04:48:d7:e9:d1:b6:8e:58: c3:14:ec:47:34:d6:b8:86:f3:fe:cc:06:e0:bd:eb: f9:68:6e:e9:3b:d8:13:ee:75:88:56:95:e7:7f:c8: f1:8d:28:21:54:a0:a4:d6:5e:49:99:c5:aa:f9:44: 9e:d7:e7:9b:5c:11:07:45:e8:3d:0a:16:d4:f1:e9: 97:22:71:52:2d:1a:b6:f0:40:64:eb:60:c2:b6:58: 06:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:51:27:03:F0:7A:F3:D4:90:30:D0:11:BF:04:14:41:C1:DF:87:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/4c4c9fac-6d7d-375f-93e9-b348075a4662.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:7a:9f:3a:44:96:db:9c:34:82:51:59:53:2f:d9:e4:a5:95: 93:78:a7:55:5c:b7:0c:47:37:26:16:e8:86:46:62:cf:f9:e5: 94:05:a8:e3:ff:69:1a:02:e2:70:3f:b2:7b:11:f6:60:6d:fa: 36:f5:8c:d9:2b:13:35:25:39:69:9e:1c:46:45:c7:c6:8e:31: 02:3c:30:2c:51:99:62:0d:f6:4a:e7:77:d1:4c:47:a7:04:47: f1:49:43:1b:f8:e5:4b:03:90:bf:67:2d:40:76:60:d7:d0:09: 10:e8:29:9c:47:fc:d0:80:8d:13:c9:46:a3:06:8e:c4:e1:bd: 39:70:6c:48:eb:4d:59:60:3d:6d:fa:a8:1d:60:8b:35:8a:3f: 35:f9:a2:8f:d9:2f:f0:e1:a3:e4:27:b2:46:d8:fb:ee:e6:5c: 5a:d6:c5:fc:98:d9:0c:c2:65:6c:d1:c1:66:fd:7f:96:e5:f9: f9:69:29:23:b4:55:5e:41:cd:f8:b0:cb:bc:89:64:ad:26:2f: 18:f6:cd:e6:2a:63:65:54:6a:c5:8f:43:76:31:db:45:5b:17: db:a0:9a:a4:4d:a0:ab:0a:81:04:65:97:6a:dd:19:0a:a4:bd: 37:01:9e:94:cc:8a:03:ac:19:49:38:08:05:03:a8:0e:af:87: 9c:57:f3:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5Jp+yo4+ACNBfdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk ZGRlZGRmYmUtYWRiNS00MWQ5LWJmZjMtZGViYzg2OWMwZDUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkW4DNFS2L9993wr3Z1oWww6qBxVnzo4ENov4 6RYVtls2wHnP725lduK8S0iIv6S0THBdcDbbKx4aPUCMzLjyfSwMbx0FptZD52cv viNlOOj7+BTh963kUISor3cxU9XCWO/W8ShNEtOXEO1KxVwePk9YD/d/3QRjj6q8 um6QqlDkdP5/MGqCjESXypNa94iJiaaMLAbwoqIpAHDbdoCfX5pWJDV1bqHJIsrF BEjX6dG2jljDFOxHNNa4hvP+zAbgvev5aG7pO9gT7nWIVpXnf8jxjSghVKCk1l5J mcWq+USe1+ebXBEHReg9ChbU8emXInFSLRq28EBk62DCtlgGhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAxRJwPwevPUkDDQEb8EFEHB34cmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvNGM0YzlmYWMtNmQ3ZC0z NzVmLTkzZTktYjM0ODA3NWE0NjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRRUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ56nzpEltucNIJRWVMv2eSllZN4p1VctwxHNyYW6IZGYs/55ZQFqOP/ aRoC4nA/snsR9mBt+jb1jNkrEzUlOWmeHEZFx8aOMQI8MCxRmWIN9krnd9FMR6cE R/FJQxv45UsDkL9nLUB2YNfQCRDoKZxH/NCAjRPJRqMGjsThvTlwbEjrTVlgPW36 qB1gizWKPzX5oo/ZL/Dho+QnskbY++7mXFrWxfyY2QzCZWzRwWb9f5bl+flpKSO0 VV5Bzfiwy7yJZK0mLxj2zeYqY2VUasWPQ3Yx20VbF9ugmqRNoKsKgQRll2rdGQqk vTcBnpTMigOsGUk4CAUDqA6vh5xX80M= -----END CERTIFICATE-----Generated at Wed Apr 9 09:19:25 2025 by rpki-client