$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/9d9e278b-df10-3738-9844-4227ace0ea53.roa File: 9d9e278b-df10-3738-9844-4227ace0ea53.roa (raw, json) Hash identifier: 7qt268OWUsv6wmxcen4e/hrr1FVNLB62bhbl4nw0SPo= Subject key identifier: 78:C3:B2:4C:D2:9E:B3:24:16:70:5A:8B:03:BA:FA:72:77:8B:05:41 Certificate issuer: /CN=6bf65f5a-6dd3-4c5d-9a94-33050d9022d6 Certificate serial: 010D0C9F432858494B63FA08A2DF5C68F9F9F280 Authority key identifier: F2:A4:2B:DE:FA:FE:77:93:4E:14:AF:9C:ED:16:EC:DD:01:9F:E4:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/9d9e278b-df10-3738-9844-4227ace0ea53.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 0 IP address blocks: 149.112.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:63:fa:08:a2:df:5c:68:f9:f9:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bf65f5a-6dd3-4c5d-9a94-33050d9022d6 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=993a256b-d22a-4452-8e36-dfa00c2c4116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b9:e3:2d:f7:88:9a:d4:6f:79:3c:80:71:d3: 34:c6:76:10:8e:3b:c2:21:9a:bb:ad:5f:6c:52:45: 6a:18:5d:9b:9f:09:3f:bb:a2:3b:12:a4:90:ec:50: c6:53:4a:27:26:1a:ea:9f:0a:81:73:1d:11:6f:f0: a9:8a:ed:e1:c5:0c:ef:95:a0:34:bc:0a:c9:51:1c: c1:98:72:f8:d4:25:15:1a:f2:72:7b:58:c3:f6:79: 5d:15:c1:86:66:5e:82:ca:ab:d6:89:71:24:7c:58: b9:7e:c2:30:79:d4:db:e2:85:c4:bc:56:fb:d9:75: 24:dc:e4:5e:e9:07:5f:b0:6a:8f:49:34:7c:8f:87: af:b3:af:bf:e8:b5:4b:cb:33:62:02:c9:45:59:12: 91:96:40:c7:1c:25:98:2b:7c:57:a9:ef:90:d8:d4: 12:30:28:20:7e:da:4b:02:54:42:b2:5c:94:fe:d6: 22:7c:7e:e7:9b:0c:11:b3:13:89:06:03:6d:c4:44: e8:06:04:bd:f0:e4:48:71:ef:5c:f3:eb:8b:22:6e: 59:90:9a:46:8d:36:9c:83:fd:34:31:4b:8b:6b:4e: 4f:cb:0a:25:e6:99:46:1e:11:34:47:f9:5f:9f:6d: d2:96:5c:dd:93:5c:34:ae:6d:a3:95:e5:cd:26:0e: d6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:C3:B2:4C:D2:9E:B3:24:16:70:5A:8B:03:BA:FA:72:77:8B:05:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/9d9e278b-df10-3738-9844-4227ace0ea53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.crl X509v3 Authority Key Identifier: keyid:F2:A4:2B:DE:FA:FE:77:93:4E:14:AF:9C:ED:16:EC:DD:01:9F:E4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer sbgp-ipAddrBlock: critical IPv4: 149.112.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:23:01:94:f6:18:3b:fa:af:4a:1b:cc:f9:20:56:a4:83:ae: 7e:03:8f:83:5a:4d:93:f8:dc:c7:15:ce:54:63:09:a1:50:d8: 4b:58:ac:30:a0:00:99:28:bf:7f:19:3d:1a:01:4c:23:93:f9: 27:f0:46:79:01:08:e0:f3:92:b4:ad:57:44:10:f9:14:b1:7c: bb:ce:83:25:4e:f9:c2:90:89:1e:41:b0:19:2c:f3:dc:d9:64: 6f:3e:15:2c:e1:91:5f:91:f0:77:d5:06:5d:da:b8:42:ff:6f: a1:5d:c7:71:a5:9e:1e:e0:00:95:90:08:73:c8:b8:eb:52:fb: 7c:8a:71:55:d7:db:40:c3:e6:c4:10:da:02:05:c3:46:03:15: 3c:2f:f9:b6:58:d2:b9:27:03:60:9e:37:2a:35:0a:e7:b8:a9: 3c:00:ce:d9:17:35:7f:4e:c0:d4:fe:74:c5:bf:0a:31:b9:87: 67:fa:0c:fe:bf:84:42:8c:77:29:90:38:98:8d:ba:59:30:ff: dd:ae:84:46:6c:2a:8d:1d:7f:c8:47:d0:94:e2:37:f7:6e:68: 85:02:ea:ac:c1:29:77:39:16:a8:f4:3b:81:fc:b8:07:de:c5: 64:9e:22:b1:4e:42:90:8b:18:af:f1:f5:2b:c3:28:08:86:6a: 0b:f0:c2:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLY/oIot9caPn58oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJmNjVmNWEtNmRkMy00YzVkLTlhOTQtMzMwNTBkOTAy MmQ2MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk OTkzYTI1NmItZDIyYS00NDUyLThlMzYtZGZhMDBjMmM0MTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7njLfeImtRveTyAcdM0xnYQjjvCIZq7rV9s UkVqGF2bnwk/u6I7EqSQ7FDGU0onJhrqnwqBcx0Rb/Cpiu3hxQzvlaA0vArJURzB mHL41CUVGvJye1jD9nldFcGGZl6CyqvWiXEkfFi5fsIwedTb4oXEvFb72XUk3ORe 6QdfsGqPSTR8j4evs6+/6LVLyzNiAslFWRKRlkDHHCWYK3xXqe+Q2NQSMCggftpL AlRCslyU/tYifH7nmwwRsxOJBgNtxEToBgS98ORIce9c8+uLIm5ZkJpGjTacg/00 MUuLa05Pywol5plGHhE0R/lfn23Sllzdk1w0rm2jleXNJg7WVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHjDskzSnrMkFnBaiwO6+nJ3iwVBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82YmY2 NWY1YS02ZGQzLTRjNWQtOWE5NC0zMzA1MGQ5MDIyZDYvOWQ5ZTI3OGItZGYxMC0z NzM4LTk4NDQtNDIyN2FjZTBlYTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmJmNjVmNWEtNmRkMy00YzVkLTlh OTQtMzMwNTBkOTAyMmQ2LzZiZjY1ZjVhLTZkZDMtNGM1ZC05YTk0LTMzMDUwZDkw MjJkNi5jcmwwHwYDVR0jBBgwFoAU8qQr3vr+d5NOFK+c7Rbs3QGf5MQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82YmY2NWY1YS02ZGQzLTRjNWQtOWE5NC0zMzA1 MGQ5MDIyZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlXBWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsjAZT2GDv6r0obzPkgVqSDrn4Dj4NaTZP43McVzlRjCaFQ2EtYrDCg AJkov38ZPRoBTCOT+SfwRnkBCODzkrStV0QQ+RSxfLvOgyVO+cKQiR5BsBks89zZ ZG8+FSzhkV+R8HfVBl3auEL/b6Fdx3Glnh7gAJWQCHPIuOtS+3yKcVXX20DD5sQQ 2gIFw0YDFTwv+bZY0rknA2CeNyo1Cue4qTwAztkXNX9OwNT+dMW/CjG5h2f6DP6/ hEKMdymQOJiNulkw/92uhEZsKo0df8hH0JTiN/duaIUC6qzBKXc5Fqj0O4H8uAfe xWSeIrFOQpCLGK/x9SvDKAiGagvwwss= -----END CERTIFICATE-----Generated at Fri Apr 11 22:53:10 2025 by rpki-client