$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/8291b825-526c-3dc2-ba9f-af6d7f6607fb.roa File: 8291b825-526c-3dc2-ba9f-af6d7f6607fb.roa (raw, json) Hash identifier: pHF4jfw+lEVojNNmFrUTn+AZ5fd3OkWCkh2g5TCnPQg= Subject key identifier: 29:BB:E2:29:23:36:40:CF:32:2A:AE:1A:3E:EA:9F:1A:D1:07:8A:D7 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584819CFC5EB5711D42EEF900AC0 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/8291b825-526c-3dc2-ba9f-af6d7f6607fb.roa Signing time: Thu 05 Dec 2024 02:00:39 +0000 ROA not before: Thu 05 Dec 2024 02:00:39 +0000 ROA not after: Wed 05 Mar 2025 02:00:39 +0000 asID: 1280 IP address blocks: 149.20.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:19:cf:c5:eb:57:11:d4:2e:ef:90:0a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Dec 5 02:00:39 2024 GMT Not After : Mar 5 02:00:39 2025 GMT Subject: CN=c3bd644e-79c4-437b-99d9-b00355c20cc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0b:bc:df:d6:84:af:c2:0f:08:63:a7:cc:70: a5:58:f7:ed:cf:03:d8:ee:d3:51:e9:98:aa:ac:73: 2a:29:36:62:40:fb:c6:b8:0e:a0:48:15:4a:1a:a4: 6e:39:f7:98:10:d3:d0:a5:0d:24:99:a8:91:2e:22: 5a:81:42:97:3e:63:29:d7:b3:46:48:10:9a:89:b5: 2d:20:16:62:20:59:d7:e6:19:ee:27:b3:54:8d:c9: 8d:40:4e:f3:5a:f6:ab:a6:e8:7f:c2:65:31:31:b5: d5:f5:25:18:73:ab:53:d1:0c:17:8b:8a:3e:a0:13: d9:56:9b:40:df:4d:48:87:55:39:b6:f7:c3:c3:86: e3:d7:2f:9b:a7:30:0d:ec:dc:97:ed:0d:1e:91:ef: d6:de:9e:50:66:5e:8b:03:10:fe:86:78:43:17:b8: d1:ce:72:d7:c1:5a:62:1d:c4:08:c4:84:da:de:f3: c1:42:bd:cf:f3:e6:f4:a2:e6:97:4c:b0:48:a8:73: 5c:00:02:72:c7:69:78:11:2d:25:6f:bb:70:8e:dc: f4:c7:2b:dc:bc:de:67:bf:ca:4a:ce:1e:c5:a2:17: fc:13:45:58:61:df:af:7b:83:6d:3e:28:7e:ea:53: a1:63:4e:2d:91:26:00:d6:a9:f8:c7:7d:08:63:3e: 83:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:BB:E2:29:23:36:40:CF:32:2A:AE:1A:3E:EA:9F:1A:D1:07:8A:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/8291b825-526c-3dc2-ba9f-af6d7f6607fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:47:82:6b:26:0c:6a:c4:5c:53:db:6b:61:ff:5c:80:a0:8d: 96:10:eb:b9:aa:51:ca:03:3e:f2:0c:a4:72:4c:d6:43:52:38: 5a:fd:ad:39:6a:a6:67:f7:c7:dc:4d:f5:45:a7:a4:a7:05:7f: bc:92:44:21:6c:35:27:e0:4c:bf:a5:3d:0c:7f:77:a8:f6:f9: e4:81:01:a9:b5:18:eb:93:a7:15:19:11:69:dc:b5:7e:59:c4: f8:14:b2:77:0f:da:31:d7:26:64:43:a4:3e:13:0b:c6:cf:4e: 0b:ba:3e:c3:f2:01:ab:05:a2:e2:f4:7d:16:df:19:da:c8:4e: 3b:03:77:96:21:a0:ed:95:b0:52:48:60:8c:37:d0:94:8b:27: 00:b2:a5:d5:37:f1:a3:72:b5:66:1f:54:2a:1f:47:24:cd:6e: e3:2a:0d:1f:6e:52:c6:9f:be:3d:b3:0e:05:52:10:a3:7f:87: 58:86:10:94:6c:a2:3b:62:e7:e8:33:9f:bc:4f:c3:8b:a0:c7: 95:19:2f:a3:f1:79:9e:b2:3f:79:84:2e:0d:11:cc:ed:2c:6e: 89:eb:73:68:ca:28:3c:41:55:62:24:b5:90:4d:ce:81:3d:74: 4e:c6:6a:75:a6:a9:fe:f7:b4:fe:2a:e9:29:d4:fa:27:e1:91: b5:83:86:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgZz8XrVxHULu+QCsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk YzNiZDY0NGUtNzljNC00MzdiLTk5ZDktYjAwMzU1YzIwY2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAu839aEr8IPCGOnzHClWPftzwPY7tNR6Ziq rHMqKTZiQPvGuA6gSBVKGqRuOfeYENPQpQ0kmaiRLiJagUKXPmMp17NGSBCaibUt IBZiIFnX5hnuJ7NUjcmNQE7zWvarpuh/wmUxMbXV9SUYc6tT0QwXi4o+oBPZVptA 301Ih1U5tvfDw4bj1y+bpzAN7NyX7Q0eke/W3p5QZl6LAxD+hnhDF7jRznLXwVpi HcQIxITa3vPBQr3P8+b0ouaXTLBIqHNcAAJyx2l4ES0lb7twjtz0xyvcvN5nv8pK zh7Fohf8E0VYYd+ve4NtPih+6lOhY04tkSYA1qn4x30IYz6DGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCm74ikjNkDPMiquGj7qnxrRB4rXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvODI5MWI4MjUtNTI2Yy0z ZGMyLWJhOWYtYWY2ZDdmNjYwN2ZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRQ8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRHgmsmDGrEXFPba2H/XICgjZYQ67mqUcoDPvIMpHJM1kNSOFr9rTlq pmf3x9xN9UWnpKcFf7ySRCFsNSfgTL+lPQx/d6j2+eSBAam1GOuTpxUZEWnctX5Z xPgUsncP2jHXJmRDpD4TC8bPTgu6PsPyAasFouL0fRbfGdrITjsDd5YhoO2VsFJI YIw30JSLJwCypdU38aNytWYfVCofRyTNbuMqDR9uUsafvj2zDgVSEKN/h1iGEJRs ojti5+gzn7xPw4ugx5UZL6PxeZ6yP3mELg0RzO0sbonrc2jKKDxBVWIktZBNzoE9 dE7GanWmqf73tP4q6SnU+ifhkbWDhkY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:04:29 2025 by rpki-client