$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/a25873ed-8451-344c-af7e-66515db40f53.roa File: a25873ed-8451-344c-af7e-66515db40f53.roa (raw, json) Hash identifier: 3P9wcg1fIWBxKEFIKpXBpuSSPI8bHR3RU9Iu79/A9J4= Subject key identifier: 68:59:76:C7:A6:FB:DC:D8:F7:0D:6B:DF:5A:3D:BE:10:E2:EB:FC:45 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F432858488DAB53224508C33CB5205800 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/a25873ed-8451-344c-af7e-66515db40f53.roa Signing time: Wed 15 Jan 2025 14:00:51 +0000 ROA not before: Wed 15 Jan 2025 14:00:51 +0000 ROA not after: Tue 15 Apr 2025 13:00:51 +0000 asID: 30132 IP address blocks: 149.20.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8d:ab:53:22:45:08:c3:3c:b5:20:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Jan 15 14:00:51 2025 GMT Not After : Apr 15 13:00:51 2025 GMT Subject: CN=273fc833-e591-49bf-8dd9-67e38a3af35c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c2:96:24:ba:64:cc:26:8b:fd:08:ab:5f:26: 44:45:d9:64:33:5a:3c:0e:4c:74:23:e4:d2:62:cd: 4d:86:b5:3c:31:88:da:ee:73:7d:24:26:23:35:f0: 56:98:18:13:54:fa:51:41:e9:92:cf:de:cc:ee:4a: aa:3c:0c:65:dd:1f:72:a5:31:b4:1b:ba:c9:91:25: ba:d0:52:4f:d7:31:e0:7b:05:32:6c:a0:ba:50:2d: ab:7c:14:92:8b:8f:f0:00:7e:60:3e:7d:3b:a8:51: 52:eb:36:e1:7c:06:e9:e4:07:45:73:19:89:03:2e: c7:2f:1f:5f:f9:99:a6:66:ae:91:94:4a:b0:23:2f: bb:b7:53:7e:fd:77:f2:58:8d:49:e2:5e:a2:a7:45: cc:83:c1:09:7a:9d:14:e0:03:06:f6:8e:df:2c:43: 51:5b:3d:1d:ba:a5:04:1a:c1:8f:c5:bd:58:a5:83: 99:ef:6a:95:11:98:3f:84:f7:9d:81:70:6a:66:78: 29:a9:10:63:21:87:4c:7d:eb:7e:b0:9f:66:eb:03: bf:f2:56:c0:e9:52:32:0c:60:ae:c1:e4:e7:cc:ad: 66:39:d8:28:c4:91:bd:b8:aa:af:2a:32:8d:98:52: e4:96:cb:a6:87:f2:9f:cb:e1:36:6c:fb:79:4f:5a: 61:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:59:76:C7:A6:FB:DC:D8:F7:0D:6B:DF:5A:3D:BE:10:E2:EB:FC:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/a25873ed-8451-344c-af7e-66515db40f53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:b5:d6:24:cd:30:d1:4e:6e:2c:ff:c8:5a:9e:28:8e:71:8d: bb:7c:4c:59:0e:5f:e4:63:d3:d7:c3:ba:9a:a0:37:2d:33:f1: fc:76:f2:a7:ec:a4:1a:01:7f:99:40:53:75:d6:13:04:b2:cd: d1:12:2d:b7:24:70:87:6c:1d:7c:87:91:08:be:95:de:46:4b: e2:5e:27:ee:e9:29:81:ed:48:e1:0a:12:0b:99:55:6a:62:b2: a7:21:7b:12:ab:b2:51:82:fa:0e:8e:c6:f5:2c:95:0c:6b:72: 32:03:31:e0:01:f2:14:a2:e0:e9:40:e0:00:ac:63:c4:b1:85: ce:89:61:b5:e7:48:e3:0c:7c:d0:96:65:ed:1f:6f:79:ba:5b: ab:6b:81:e3:fe:79:2d:3e:c2:b3:1c:40:49:65:28:84:99:60: 59:aa:93:2b:6a:b7:2a:ba:a9:a0:c1:c0:d0:c0:45:94:3a:06: 9c:1a:9c:bf:e8:c9:68:d2:66:dd:bb:a4:ec:57:2b:65:00:e3: 9a:32:d6:53:91:29:61:57:cf:2f:01:f1:fe:30:dd:3c:36:26: 11:16:ff:d7:58:e6:ec:0a:68:90:bb:5b:14:fc:99:d5:07:04: 82:6a:53:ad:bc:5f:28:c7:61:2b:88:99:09:0d:89:2b:c6:1a: 53:07:f2:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiNq1MiRQjDPLUgWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk MjczZmM4MzMtZTU5MS00OWJmLThkZDktNjdlMzhhM2FmMzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMKWJLpkzCaL/QirXyZERdlkM1o8Dkx0I+TS Ys1NhrU8MYja7nN9JCYjNfBWmBgTVPpRQemSz97M7kqqPAxl3R9ypTG0G7rJkSW6 0FJP1zHgewUybKC6UC2rfBSSi4/wAH5gPn07qFFS6zbhfAbp5AdFcxmJAy7HLx9f +ZmmZq6RlEqwIy+7t1N+/XfyWI1J4l6ip0XMg8EJep0U4AMG9o7fLENRWz0duqUE GsGPxb1YpYOZ72qVEZg/hPedgXBqZngpqRBjIYdMfet+sJ9m6wO/8lbA6VIyDGCu weTnzK1mOdgoxJG9uKqvKjKNmFLklsumh/Kfy+E2bPt5T1phNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhZdsem+9zY9w1r31o9vhDi6/xFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvYTI1ODczZWQtODQ1MS0z NDRjLWFmN2UtNjY1MTVkYjQwZjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRQFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKa11iTNMNFObiz/yFqeKI5xjbt8TFkOX+Rj09fDupqgNy0z8fx28qfs pBoBf5lAU3XWEwSyzdESLbckcIdsHXyHkQi+ld5GS+JeJ+7pKYHtSOEKEguZVWpi sqchexKrslGC+g6OxvUslQxrcjIDMeAB8hSi4OlA4ACsY8Sxhc6JYbXnSOMMfNCW Ze0fb3m6W6trgeP+eS0+wrMcQEllKISZYFmqkytqtyq6qaDBwNDARZQ6BpwanL/o yWjSZt27pOxXK2UA45oy1lORKWFXzy8B8f4w3Tw2JhEW/9dY5uwKaJC7WxT8mdUH BIJqU628XyjHYSuImQkNiSvGGlMH8oU= -----END CERTIFICATE-----Generated at Fri Mar 14 08:16:56 2025 by rpki-client