$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/800c5f2d-1ef2-3519-8a82-3303d1e0c2db.roa File: 800c5f2d-1ef2-3519-8a82-3303d1e0c2db.roa (raw, json) Hash identifier: 5RBV38SZg29ZibP8zBtzQRxCkYXu5Sjf/r/3PV6emKQ= Subject key identifier: 16:CA:1E:15:7C:1D:00:88:EB:53:0A:BC:85:43:53:25:74:0A:7A:74 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F43285848B1F626BAE6D9C92E7AA730A0 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/800c5f2d-1ef2-3519-8a82-3303d1e0c2db.roa Signing time: Tue 28 Jan 2025 14:00:52 +0000 ROA not before: Tue 28 Jan 2025 14:00:52 +0000 ROA not after: Mon 28 Apr 2025 13:00:52 +0000 asID: 27321 IP address blocks: 149.20.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b1:f6:26:ba:e6:d9:c9:2e:7a:a7:30:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Jan 28 14:00:52 2025 GMT Not After : Apr 28 13:00:52 2025 GMT Subject: CN=0c6f00a9-87eb-4402-9dd1-c7606dd2475c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:50:f8:a4:77:40:be:67:e8:69:82:4e:3e:be: c7:e7:0e:d6:e2:bd:da:85:f0:99:e5:a1:f8:6a:22: 63:ac:b3:9d:4c:5b:a5:c4:45:59:40:e1:24:45:b9: 70:da:7c:d9:9c:54:68:98:82:17:81:e8:71:15:e6: 16:2c:96:5a:a1:0b:60:24:2b:b4:08:9b:2f:82:16: 75:8d:c8:a5:57:70:20:95:d3:bd:02:ed:b3:b8:6c: bd:18:29:7d:b6:db:10:fb:cf:45:63:67:4e:f3:5b: e8:56:3a:91:da:1c:dc:09:92:ed:a9:c2:26:56:4a: 89:e6:5f:2a:06:93:4b:3d:81:e4:4b:f5:4f:f4:46: bf:19:a6:f7:89:cd:27:c7:c3:11:9a:15:d9:c6:94: 73:5e:00:fe:06:06:7c:e3:78:bf:a1:90:0a:48:e0: f4:c3:6d:01:3c:de:81:e4:a5:0b:41:68:6d:e5:4d: b3:eb:37:99:46:22:aa:d7:6c:42:7f:79:c3:b1:9a: 9a:23:67:f4:45:44:40:bb:fb:91:8a:49:5d:14:8e: c7:7b:47:0e:47:86:77:f3:b6:fc:2b:28:51:1c:09: cb:2f:50:13:30:c2:28:80:ff:95:f3:ca:bf:fc:f5: f8:68:c9:6b:7d:54:59:81:36:90:38:a5:26:83:52: f6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:CA:1E:15:7C:1D:00:88:EB:53:0A:BC:85:43:53:25:74:0A:7A:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/800c5f2d-1ef2-3519-8a82-3303d1e0c2db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:f5:b4:16:7c:c5:e1:bb:51:eb:6d:81:a8:80:0b:71:98:84: 10:86:10:55:df:5c:56:9f:6e:3b:3b:82:c5:63:23:cf:ab:72: c3:4c:16:97:64:78:2c:7f:9a:5d:30:aa:ba:75:5e:3d:e6:17: 97:2e:68:68:0e:b3:99:77:96:56:fd:9f:1d:b2:85:62:08:ff: ac:45:38:a4:bc:c1:50:3a:26:04:ab:45:bc:e0:66:88:97:4d: 83:42:2c:06:40:ae:05:c8:be:c2:99:b6:87:2e:6a:0f:0a:e3: 23:eb:a0:78:a6:bd:db:de:59:92:79:a4:00:c1:fc:11:10:e2: c7:17:17:c8:4f:68:bc:40:4f:f1:41:60:f3:fc:e9:95:f2:6e: 0f:ff:2a:4f:16:a8:f2:38:9a:1d:56:27:47:c2:c0:71:b8:a1: 38:1d:d9:e4:f5:86:5a:54:db:95:70:93:45:7e:1c:8a:26:87: cc:45:af:e8:0c:22:d9:46:e3:b4:1c:b8:d8:76:4e:7a:bb:87: c6:11:a2:94:8c:98:43:05:74:b6:f0:4d:0c:7f:32:e2:37:49: 2a:b0:27:55:c9:50:c7:13:df:8f:6d:42:39:56:01:ba:86:f6: 07:91:d3:42:c4:fc:f1:9e:9b:51:1e:67:c0:a5:b4:49:e3:ed: 96:70:b2:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9ia65tnJLnqnMKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk MGM2ZjAwYTktODdlYi00NDAyLTlkZDEtYzc2MDZkZDI0NzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylD4pHdAvmfoaYJOPr7H5w7W4r3ahfCZ5aH4 aiJjrLOdTFulxEVZQOEkRblw2nzZnFRomIIXgehxFeYWLJZaoQtgJCu0CJsvghZ1 jcilV3AgldO9Au2zuGy9GCl9ttsQ+89FY2dO81voVjqR2hzcCZLtqcImVkqJ5l8q BpNLPYHkS/VP9Ea/Gab3ic0nx8MRmhXZxpRzXgD+BgZ843i/oZAKSOD0w20BPN6B 5KULQWht5U2z6zeZRiKq12xCf3nDsZqaI2f0RURAu/uRikldFI7He0cOR4Z387b8 KyhRHAnLL1ATMMIogP+V88q//PX4aMlrfVRZgTaQOKUmg1L2ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbKHhV8HQCI61MKvIVDUyV0Cnp0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvODAwYzVmMmQtMWVmMi0z NTE5LThhODItMzMwM2QxZTBjMmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRQCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAID1tBZ8xeG7UettgaiAC3GYhBCGEFXfXFafbjs7gsVjI8+rcsNMFpdk eCx/ml0wqrp1Xj3mF5cuaGgOs5l3llb9nx2yhWII/6xFOKS8wVA6JgSrRbzgZoiX TYNCLAZArgXIvsKZtocuag8K4yProHimvdveWZJ5pADB/BEQ4scXF8hPaLxAT/FB YPP86ZXybg//Kk8WqPI4mh1WJ0fCwHG4oTgd2eT1hlpU25Vwk0V+HIomh8xFr+gM ItlG47QcuNh2Tnq7h8YRopSMmEMFdLbwTQx/MuI3SSqwJ1XJUMcT349tQjlWAbqG 9geR00LE/PGem1EeZ8CltEnj7ZZwsio= -----END CERTIFICATE-----Generated at Sun Feb 16 15:13:54 2025 by rpki-client