$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/fd1f75bb-b322-31d2-97d8-2837137ee140.roa File: fd1f75bb-b322-31d2-97d8-2837137ee140.roa (raw, json) Hash identifier: AebNrYgp7b5p6CVRrSCfvuuyIKv4HW4byJajHFDlD7c= Subject key identifier: C2:28:21:66:94:1D:71:8F:A4:A1:B1:62:D8:F5:AC:0D:1B:00:E8:27 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F43285848F9269C7EF63687C7156B9D40 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/fd1f75bb-b322-31d2-97d8-2837137ee140.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 1280 IP address blocks: 149.20.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:9c:7e:f6:36:87:c7:15:6b:9d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=17461e29-1d22-4ed7-890e-961f52195a26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:58:93:e3:2b:75:16:ba:85:e2:2a:64:d5:4b: 71:27:03:e6:44:a1:14:a3:49:f8:59:ae:0e:97:e7: 2f:f0:31:49:d2:ab:ad:25:ad:bc:f3:2d:2e:2a:a7: 4c:2f:0b:cd:bb:76:00:e5:08:dd:30:6b:90:91:2b: 7b:cf:62:40:c9:c2:8a:90:04:dd:c7:93:b7:9b:eb: da:8c:64:cf:20:77:e1:ff:dd:40:6f:64:29:6d:43: 98:df:ae:41:9d:7d:46:43:c9:61:25:93:fd:a0:9c: 80:e3:0d:24:0a:a7:72:d6:59:2b:b3:0c:e9:bb:18: 68:6b:ee:43:96:0b:d4:bd:a5:bb:74:43:5c:52:ea: d6:75:e1:4b:7a:40:d6:f5:96:e0:82:ca:67:2a:3e: 01:f6:69:60:f4:f4:b7:19:20:25:94:b7:0c:36:95: d6:10:99:ea:26:22:71:8d:e5:d6:f1:01:a9:74:ca: 83:e9:ea:82:16:bf:81:54:6f:37:f4:cd:89:77:fc: 8a:8d:fb:fa:14:09:42:c9:cb:dc:2d:b3:dd:ee:de: 01:44:5e:c0:16:3a:1c:4d:91:f3:71:28:e8:63:d7: 44:3b:bd:db:f6:63:9d:e5:ef:c1:c7:06:02:8d:03: 31:2e:c9:80:c8:63:49:40:95:d6:80:d2:cc:b2:75: ed:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:28:21:66:94:1D:71:8F:A4:A1:B1:62:D8:F5:AC:0D:1B:00:E8:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/fd1f75bb-b322-31d2-97d8-2837137ee140.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:89:8b:37:98:95:d0:50:ba:57:73:cc:8c:2d:e7:08:27:60: 0c:a9:0b:4e:94:dd:52:ef:a8:05:1e:d0:9d:62:91:2b:41:95: b0:29:74:95:bd:4e:67:3e:84:fb:40:e6:7d:d4:2f:79:92:e7: 7c:c2:40:38:57:33:24:4e:d6:36:2d:9c:c2:93:3f:e5:5b:3e: 86:d9:67:13:77:69:2a:35:ef:c3:32:a1:db:38:e0:db:5d:ce: 9f:08:cd:dd:66:8a:2c:68:99:bc:b4:84:59:1c:fb:70:fd:60: 1d:a8:d9:2e:9b:60:8c:85:1f:7a:83:c0:1e:61:5b:f0:73:cb: 0c:58:56:cb:e5:ad:7d:3e:6b:75:81:c3:87:5e:80:36:34:6b: 02:2a:eb:7b:c8:14:59:4e:43:c5:71:7c:49:33:31:ec:2c:6d: 99:23:32:8f:4e:4d:7f:c7:27:61:bb:61:3d:72:77:af:d2:5b: 63:ee:f7:13:b6:f8:73:a1:95:66:99:64:a0:c4:e2:a2:8b:92: 1c:9a:9a:17:4b:19:5f:eb:b7:64:0f:d3:96:78:26:f1:b8:2f: 6f:2d:f3:8b:14:ee:e8:72:d3:23:c2:f2:5d:78:fb:e1:53:11: 04:77:1f:db:4f:d1:dc:9e:19:e7:7a:49:bb:e1:8c:f3:d1:c6: 1f:75:c2:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5Jpx+9jaHxxVrnUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk MTc0NjFlMjktMWQyMi00ZWQ3LTg5MGUtOTYxZjUyMTk1YTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhViT4yt1FrqF4ipk1UtxJwPmRKEUo0n4Wa4O l+cv8DFJ0qutJa288y0uKqdMLwvNu3YA5QjdMGuQkSt7z2JAycKKkATdx5O3m+va jGTPIHfh/91Ab2QpbUOY365BnX1GQ8lhJZP9oJyA4w0kCqdy1lkrswzpuxhoa+5D lgvUvaW7dENcUurWdeFLekDW9ZbggspnKj4B9mlg9PS3GSAllLcMNpXWEJnqJiJx jeXW8QGpdMqD6eqCFr+BVG839M2Jd/yKjfv6FAlCycvcLbPd7t4BRF7AFjocTZHz cSjoY9dEO73b9mOd5e/BxwYCjQMxLsmAyGNJQJXWgNLMsnXtOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIoIWaUHXGPpKGxYtj1rA0bAOgnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvZmQxZjc1YmItYjMyMi0z MWQyLTk3ZDgtMjgzNzEzN2VlMTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRRYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqJizeYldBQuldzzIwt5wgnYAypC06U3VLvqAUe0J1ikStBlbApdJW9 Tmc+hPtA5n3UL3mS53zCQDhXMyRO1jYtnMKTP+VbPobZZxN3aSo178Myods44Ntd zp8Izd1miixomby0hFkc+3D9YB2o2S6bYIyFH3qDwB5hW/BzywxYVsvlrX0+a3WB w4degDY0awIq63vIFFlOQ8VxfEkzMewsbZkjMo9OTX/HJ2G7YT1yd6/SW2Pu9xO2 +HOhlWaZZKDE4qKLkhyamhdLGV/rt2QP05Z4JvG4L28t84sU7uhy0yPC8l14++FT EQR3H9tP0dyeGed6SbvhjPPRxh91wvk= -----END CERTIFICATE-----Generated at Wed Apr 9 17:59:27 2025 by rpki-client