$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/98b687f8-5555-317b-883c-d05f50660cd6.roa File: 98b687f8-5555-317b-883c-d05f50660cd6.roa (raw, json) Hash identifier: XNTgAIrV/2qjFDe23sTvtxIUCXCICd0wmYjcwcuCx5U= Subject key identifier: E7:5F:85:39:82:F9:F4:B0:E7:55:EA:38:2F:85:6B:62:E5:B8:22:5D Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F432858488AE0A80EB53321A5B1421900 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/98b687f8-5555-317b-883c-d05f50660cd6.roa Signing time: Tue 14 Jan 2025 14:00:51 +0000 ROA not before: Tue 14 Jan 2025 14:00:51 +0000 ROA not after: Mon 14 Apr 2025 13:00:51 +0000 asID: 27321 IP address blocks: 149.20.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8a:e0:a8:0e:b5:33:21:a5:b1:42:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Jan 14 14:00:51 2025 GMT Not After : Apr 14 13:00:51 2025 GMT Subject: CN=b84c3cc6-cabf-4f40-9116-b4f1b28679fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:73:94:64:36:de:5c:67:75:a1:92:d7:ae:52: 00:5e:a1:1b:a2:51:ca:e9:13:f2:38:8e:09:5a:b0: 3b:fe:2a:2c:07:d0:11:cf:45:ca:27:7d:53:ff:0e: 38:63:af:86:12:75:ea:0f:d4:d7:0a:40:d2:32:8e: 95:bd:87:f0:b1:28:f4:3d:9e:18:92:6d:cc:1f:8e: e4:b3:00:c7:34:11:2e:66:df:9e:7a:2c:a5:22:b0: 32:59:c0:06:13:29:d4:c4:77:7a:77:32:d4:5e:3c: 5d:e4:da:99:c5:26:00:f6:d1:20:f7:de:f0:80:b2: 4c:9b:68:6b:5b:05:86:27:f5:e8:57:e5:05:9d:a0: 87:fd:53:78:ae:57:cf:c3:68:5e:ee:4c:0c:66:bc: 7b:58:28:ac:64:d4:5e:c4:42:f8:27:b9:75:a7:40: d2:1c:11:1c:72:3f:e4:96:81:98:4b:84:45:92:c7: d6:59:83:55:c7:67:b7:b8:6b:70:c9:72:6c:5d:df: 2c:79:a2:b9:f3:c6:e1:b5:28:62:2c:db:19:1a:03: 1c:13:27:3d:d6:80:eb:7e:7a:60:d6:d7:f5:a7:36: e9:fc:22:5a:41:8a:a8:60:62:52:a7:b9:70:88:f2: bd:34:07:86:08:96:14:e6:f2:8d:01:94:e9:ad:6a: c4:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:5F:85:39:82:F9:F4:B0:E7:55:EA:38:2F:85:6B:62:E5:B8:22:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/98b687f8-5555-317b-883c-d05f50660cd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:74:c7:81:75:e1:ee:0c:5f:89:eb:48:74:7e:ea:bb:51:98: 9d:23:8c:13:90:14:06:f7:48:ac:2f:66:d9:82:20:e0:ad:de: fb:9a:ec:98:14:60:40:6c:c9:77:90:16:72:47:3d:7f:b4:9a: 42:2b:1e:93:9d:5d:ab:8d:8e:91:45:73:48:96:52:52:d6:a1: 19:5c:73:7b:e4:13:46:6d:94:ff:0e:3c:0f:c6:95:e4:c5:c1: a8:24:84:61:02:22:51:d3:09:09:5c:e0:91:a1:1c:13:02:03: e1:27:f6:09:d0:8a:e5:97:1c:fb:a4:1d:92:2a:fc:64:5e:b2: ef:0e:bf:1b:2c:57:51:51:f6:02:b6:46:d8:81:b5:ff:a8:b0: 68:7f:14:ce:c0:be:5b:70:1b:db:41:10:9e:0a:80:cf:44:32: 87:25:0f:c4:36:18:24:63:5b:95:64:43:d1:d0:b8:90:be:9e: e2:8a:2b:fe:83:9e:c6:3f:7c:81:5a:a8:fb:fc:a8:3b:cf:20: aa:4b:40:e9:bd:d7:ca:70:4c:36:f7:e1:e0:af:47:d7:9a:db: 7b:c6:ed:cf:ce:9b:b4:8d:ef:5f:29:60:c4:4b:db:a9:95:ad: a6:ae:9f:60:4e:5f:7f:37:c5:74:bf:92:a2:61:18:20:3c:a8: 0e:db:1a:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiK4KgOtTMhpbFCGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI1MDExNDE0MDA1MVoXDTI1MDQxNDEzMDA1MVowLzEtMCsGA1UEAxMk Yjg0YzNjYzYtY2FiZi00ZjQwLTkxMTYtYjRmMWIyODY3OWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3OUZDbeXGd1oZLXrlIAXqEbolHK6RPyOI4J WrA7/iosB9ARz0XKJ31T/w44Y6+GEnXqD9TXCkDSMo6VvYfwsSj0PZ4Ykm3MH47k swDHNBEuZt+eeiylIrAyWcAGEynUxHd6dzLUXjxd5NqZxSYA9tEg997wgLJMm2hr WwWGJ/XoV+UFnaCH/VN4rlfPw2he7kwMZrx7WCisZNRexEL4J7l1p0DSHBEccj/k loGYS4RFksfWWYNVx2e3uGtwyXJsXd8seaK588bhtShiLNsZGgMcEyc91oDrfnpg 1tf1pzbp/CJaQYqoYGJSp7lwiPK9NAeGCJYU5vKNAZTprWrEAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOdfhTmC+fSw51XqOC+Fa2LluCJdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvOThiNjg3ZjgtNTU1NS0z MTdiLTg4M2MtZDA1ZjUwNjYwY2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRQDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEV0x4F14e4MX4nrSHR+6rtRmJ0jjBOQFAb3SKwvZtmCIOCt3vua7JgU YEBsyXeQFnJHPX+0mkIrHpOdXauNjpFFc0iWUlLWoRlcc3vkE0ZtlP8OPA/GleTF wagkhGECIlHTCQlc4JGhHBMCA+En9gnQiuWXHPukHZIq/GResu8OvxssV1FR9gK2 RtiBtf+osGh/FM7AvltwG9tBEJ4KgM9EMoclD8Q2GCRjW5VkQ9HQuJC+nuKKK/6D nsY/fIFaqPv8qDvPIKpLQOm918pwTDb34eCvR9ea23vG7c/Om7SN718pYMRL26mV raaun2BOX383xXS/kqJhGCA8qA7bGnc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:47:09 2025 by rpki-client