$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/8578f51c-1b6a-3105-b746-5bdf914f63b4.roa File: 8578f51c-1b6a-3105-b746-5bdf914f63b4.roa (raw, json) Hash identifier: 5DsxlNZNfoLxtbuWrQH06yWUhuLrzdd5v6i35vrcx+0= Subject key identifier: 2E:51:FC:B8:71:E4:88:3D:E9:F4:C0:2E:66:6A:35:45:05:28:B9:F6 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F43285848F9269FD1822B4DE1A558FB50 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/8578f51c-1b6a-3105-b746-5bdf914f63b4.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 1280 IP address blocks: 149.20.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:9f:d1:82:2b:4d:e1:a5:58:fb:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=54e9c867-0314-46c1-8ef8-a864d74e309c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:55:1f:fe:c6:1c:99:5c:a9:8f:90:cd:1c:2c: 54:5d:35:ac:74:84:ac:31:dc:c2:c5:2d:1a:35:c2: dc:ba:00:5f:2a:f4:b3:53:d7:fc:8b:ee:85:3a:02: 41:0c:1d:3d:08:fa:4a:bb:06:39:2c:f9:80:f9:39: 86:e5:15:7d:22:a9:c2:e8:54:7d:be:05:53:b1:75: 55:c9:5c:80:16:71:e2:70:54:f2:bc:f6:6e:91:2d: d5:02:fe:0b:70:36:72:c3:94:cd:6c:5c:fc:32:69: 9a:46:7a:4b:e9:b3:5e:61:29:a7:81:8b:09:59:25: b7:0e:b0:4c:19:e0:f9:84:03:b4:88:02:88:0f:30: c1:eb:3f:39:ae:d4:aa:fd:aa:ad:77:c9:64:87:16: b8:ee:1d:2e:ce:ee:83:f8:bd:47:e7:37:2f:8c:c4: 6f:b7:b2:e9:82:20:8b:36:2e:8f:25:d9:ab:de:70: fa:f1:de:f1:6c:e3:8e:1b:af:ad:a2:2b:bd:4f:91: ba:e5:4b:60:bf:7f:01:50:e9:86:77:ed:96:c7:c7: 41:8b:9c:9d:49:a2:b8:f2:39:0c:80:4b:56:37:e1: b3:43:ec:3b:ae:a1:14:ea:58:60:83:d1:b7:eb:f5: b6:46:6a:bf:70:99:a9:43:d2:f0:c3:a6:dc:63:e7: c7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:51:FC:B8:71:E4:88:3D:E9:F4:C0:2E:66:6A:35:45:05:28:B9:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/8578f51c-1b6a-3105-b746-5bdf914f63b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:a0:4a:75:28:d9:1e:5a:80:3a:76:a8:ca:2a:75:11:74:5c: 56:50:bf:34:86:bb:32:af:7b:0d:be:a7:d9:85:64:86:09:b9: b2:f5:9a:23:de:9b:d2:ee:eb:bc:87:77:b4:47:5a:0a:64:6a: 35:b1:b8:a0:83:cb:a0:0d:a2:1c:d8:08:e6:2f:47:4f:77:8d: 27:eb:9a:06:13:eb:f2:4a:eb:12:3a:9f:a5:ad:ec:97:3c:32: f1:81:87:14:25:f1:bb:14:b2:e5:0c:06:df:52:dd:88:db:27: 8d:b3:c0:6c:0e:16:8d:9d:8c:36:7f:20:db:da:90:12:1c:63: fe:7d:db:be:e0:f3:09:70:e5:e0:4c:d2:a8:16:5e:1d:00:4a: 6e:30:8a:c6:db:1f:3a:fb:1c:97:7f:4d:c7:97:b2:e7:b1:29: aa:db:23:f5:c6:60:89:f7:bd:4c:35:a0:36:c5:1a:4f:ae:de: bb:43:95:0e:a7:56:5d:f0:27:01:6d:80:8e:b4:76:b3:1b:1d: 42:70:64:e6:53:3f:22:6b:3c:6d:47:fe:e8:d3:b5:77:cf:76: 28:a3:db:14:f5:99:e9:65:6d:b5:ce:eb:ec:ee:11:a0:9f:10: d3:0e:8f:45:7c:8f:94:53:ec:e3:90:88:4a:22:59:3f:6f:59: 02:b4:fb:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5Jp/RgitN4aVY+1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk NTRlOWM4NjctMDMxNC00NmMxLThlZjgtYTg2NGQ3NGUzMDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlUf/sYcmVypj5DNHCxUXTWsdISsMdzCxS0a NcLcugBfKvSzU9f8i+6FOgJBDB09CPpKuwY5LPmA+TmG5RV9IqnC6FR9vgVTsXVV yVyAFnHicFTyvPZukS3VAv4LcDZyw5TNbFz8MmmaRnpL6bNeYSmngYsJWSW3DrBM GeD5hAO0iAKIDzDB6z85rtSq/aqtd8lkhxa47h0uzu6D+L1H5zcvjMRvt7LpgiCL Ni6PJdmr3nD68d7xbOOOG6+toiu9T5G65Utgv38BUOmGd+2Wx8dBi5ydSaK48jkM gEtWN+GzQ+w7rqEU6lhgg9G36/W2Rmq/cJmpQ9Lww6bcY+fHVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5R/Lhx5Ig96fTALmZqNUUFKLn2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvODU3OGY1MWMtMWI2YS0z MTA1LWI3NDYtNWJkZjkxNGY2M2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRQ7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+gSnUo2R5agDp2qMoqdRF0XFZQvzSGuzKvew2+p9mFZIYJubL1miPe m9Lu67yHd7RHWgpkajWxuKCDy6ANohzYCOYvR093jSfrmgYT6/JK6xI6n6Wt7Jc8 MvGBhxQl8bsUsuUMBt9S3YjbJ42zwGwOFo2djDZ/INvakBIcY/59277g8wlw5eBM 0qgWXh0ASm4wisbbHzr7HJd/TceXsuexKarbI/XGYIn3vUw1oDbFGk+u3rtDlQ6n Vl3wJwFtgI60drMbHUJwZOZTPyJrPG1H/ujTtXfPdiij2xT1mellbbXO6+zuEaCf ENMOj0V8j5RT7OOQiEoiWT9vWQK0+3s= -----END CERTIFICATE-----Generated at Wed Apr 9 19:33:24 2025 by rpki-client