$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/3f35fd67-5df2-3eaa-ab48-10f5762d0aa5.roa File: 3f35fd67-5df2-3eaa-ab48-10f5762d0aa5.roa (raw, json) Hash identifier: 2fyPppLaUL+k00cj/dYiK74YtcG68PNcvCyn68NSMWI= Subject key identifier: 3B:0C:8A:63:2F:29:21:B2:97:AA:47:91:05:71:DA:9D:04:98:55:24 Certificate issuer: /CN=0d1af089-3ace-488d-8f52-6b375c813ba2 Certificate serial: 010D0C9F4328584900215715FB44EF8607350100 Authority key identifier: A6:9C:CE:F2:D7:BC:3F:8C:EE:2F:16:34:59:64:85:BD:CE:1E:2E:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/3f35fd67-5df2-3eaa-ab48-10f5762d0aa5.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 19331 IP address blocks: 149.149.0.0/16 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/0d1af089-3ace-488d-8f52-6b375c813ba2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/0d1af089-3ace-488d-8f52-6b375c813ba2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:57:15:fb:44:ef:86:07:35:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d1af089-3ace-488d-8f52-6b375c813ba2 Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=4294a7d8-45c2-4333-8d98-783ed082742c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2a:48:d0:50:83:f3:3d:fa:cc:bf:30:f1:64: 66:1a:5e:12:8b:1e:65:f2:6c:2d:97:88:7f:33:56: 3d:33:cb:26:5a:34:84:23:8d:d2:a1:62:3e:1a:98: 6b:30:9c:d3:30:9d:48:1c:19:6d:ae:9f:55:04:28: 7c:b0:99:24:e1:01:f8:1a:f7:3b:7b:21:3f:fc:44: 5d:d9:81:d2:8f:54:64:c3:c2:7e:80:e9:08:af:3e: fb:45:23:0b:56:95:8e:7c:28:72:3f:5e:11:1f:65: 02:87:9d:52:33:42:79:48:f5:77:36:19:39:cf:e5: d0:82:a4:d0:d7:0e:31:58:24:6b:4f:07:90:72:62: c8:84:b7:1a:0f:95:d4:68:e7:40:2d:c3:67:2a:8e: 25:06:da:c1:c0:a6:3e:d1:6f:cd:31:11:0d:be:a4: c9:58:74:f2:3c:1c:8d:29:66:e4:cc:b3:f5:1e:ac: 16:42:c8:84:c3:ea:d1:69:c1:ab:4d:e9:29:b7:15: ea:9a:5c:94:90:7f:48:0a:87:d8:56:bf:8e:55:55: df:b0:d1:0b:dc:72:84:14:07:fa:39:69:1d:df:52: e9:c7:65:93:c1:21:3d:c1:dd:50:c5:5e:21:5e:53: cd:78:8a:91:96:44:98:c8:10:6d:d1:c5:bb:8e:60: 59:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:0C:8A:63:2F:29:21:B2:97:AA:47:91:05:71:DA:9D:04:98:55:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/3f35fd67-5df2-3eaa-ab48-10f5762d0aa5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/0d1af089-3ace-488d-8f52-6b375c813ba2.crl X509v3 Authority Key Identifier: keyid:A6:9C:CE:F2:D7:BC:3F:8C:EE:2F:16:34:59:64:85:BD:CE:1E:2E:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2.cer sbgp-ipAddrBlock: critical IPv4: 149.149.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:9a:32:e6:9d:00:a9:37:46:73:f8:a4:50:48:53:98:99:77: 7a:12:79:7d:ff:92:86:c9:13:6e:f1:75:92:47:4e:bb:54:13: d7:33:e8:a1:86:ec:5f:0d:ae:91:0e:2e:d1:92:10:52:84:29: f6:3e:6a:cc:45:8f:65:a1:e1:87:0e:48:3c:90:9a:5e:f0:5a: df:e8:5e:11:d5:ac:48:e0:b8:e1:b6:44:7f:0e:42:2e:e0:50: 2e:1d:ae:58:97:5d:f4:2f:77:d8:d4:f3:48:85:a9:98:21:a7: e1:1c:9c:3e:44:e8:32:3b:bc:66:cd:5f:58:c6:c9:0a:e4:90: 66:3a:99:05:5f:ff:b7:bf:88:13:4d:5d:eb:b5:d4:77:c2:a9: 71:a1:f3:d6:7e:48:0f:fa:a8:88:ab:c5:26:2a:5a:a4:c2:cc: 69:aa:0d:99:8f:db:51:1e:74:dd:af:34:bf:e3:19:3c:fe:f4: 5b:f5:93:f6:96:15:b5:6f:36:16:7c:78:86:de:2b:b7:06:8a: 9f:26:1f:72:5f:bc:20:69:52:31:6e:96:cb:1d:04:cb:46:3e: 11:56:ff:cc:a9:1f:f4:18:e3:9b:0a:ef:27:8e:b7:36:cf:7a: c0:54:fc:2e:5c:dd:1a:08:78:15:78:92:b8:35:f5:89:54:a2: 63:c0:64:01 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEkAIVcV+0Tvhgc1AQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQxYWYwODktM2FjZS00ODhkLThmNTItNmIzNzVjODEz YmEyMB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk NDI5NGE3ZDgtNDVjMi00MzMzLThkOTgtNzgzZWQwODI3NDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCpI0FCD8z36zL8w8WRmGl4Six5l8mwtl4h/ M1Y9M8smWjSEI43SoWI+GphrMJzTMJ1IHBltrp9VBCh8sJkk4QH4Gvc7eyE//ERd 2YHSj1Rkw8J+gOkIrz77RSMLVpWOfChyP14RH2UCh51SM0J5SPV3Nhk5z+XQgqTQ 1w4xWCRrTweQcmLIhLcaD5XUaOdALcNnKo4lBtrBwKY+0W/NMRENvqTJWHTyPByN KWbkzLP1HqwWQsiEw+rRacGrTekptxXqmlyUkH9ICofYVr+OVVXfsNEL3HKEFAf6 OWkd31Lpx2WTwSE9wd1QxV4hXlPNeIqRlkSYyBBt0cW7jmBZnwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFDsMimMvKSGyl6pHkQVx2p0EmFUkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wZDFh ZjA4OS0zYWNlLTQ4OGQtOGY1Mi02YjM3NWM4MTNiYTIvM2YzNWZkNjctNWRmMi0z ZWFhLWFiNDgtMTBmNTc2MmQwYWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGQxYWYwODktM2FjZS00ODhkLThm NTItNmIzNzVjODEzYmEyLzBkMWFmMDg5LTNhY2UtNDg4ZC04ZjUyLTZiMzc1Yzgx M2JhMi5jcmwwHwYDVR0jBBgwFoAUppzO8te8P4zuLxY0WWSFvc4eLpQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wZDFhZjA4OS0zYWNlLTQ4OGQtOGY1Mi02YjM3 NWM4MTNiYTIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAlZUwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAkJoy5p0AqTdGc/ikUEhTmJl3ehJ5ff+ShskTbvF1kkdOu1QT1zPooYbs Xw2ukQ4u0ZIQUoQp9j5qzEWPZaHhhw5IPJCaXvBa3+heEdWsSOC44bZEfw5CLuBQ Lh2uWJdd9C932NTzSIWpmCGn4RycPkToMju8Zs1fWMbJCuSQZjqZBV//t7+IE01d 67XUd8KpcaHz1n5ID/qoiKvFJipapMLMaaoNmY/bUR503a80v+MZPP70W/WT9pYV tW82Fnx4ht4rtwaKnyYfcl+8IGlSMW6Wyx0Ey0Y+EVb/zKkf9BjjmwrvJ463Ns96 wFT8LlzdGgh4FXiSuDX1iVSiY8BkAQ== -----END CERTIFICATE-----Generated at Fri Mar 14 10:35:13 2025 by rpki-client