$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/2b4d14c3-782d-30d6-a683-951c6c83f730.roa File: 2b4d14c3-782d-30d6-a683-951c6c83f730.roa (raw, json) Hash identifier: ns0P2CoWe5JwqMiXvxzLM0yE59Xx6b4BdoP7voCEUPE= Subject key identifier: F2:07:79:9E:6A:0E:C0:E5:FE:82:66:8A:78:65:44:92:EF:B9:7A:9D Certificate issuer: /CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Certificate serial: 010D0C9F4328584902EBFCDA749F5DE8C206CD40 Authority key identifier: 67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/2b4d14c3-782d-30d6-a683-951c6c83f730.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 36445 IP address blocks: 149.248.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:eb:fc:da:74:9f:5d:e8:c2:06:cd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=170512fc-e75d-4bca-b99e-a9547782b9a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a4:c1:63:fc:46:80:0f:a3:e5:e1:4d:52:ca: 30:5e:f3:9b:b1:f7:ff:c2:c8:7f:15:3c:39:ae:34: 69:e8:a1:47:97:1f:0c:5d:c9:e0:3c:cd:87:ba:e9: c0:b0:08:48:fc:cd:fb:6f:8e:1a:58:ab:37:d9:2d: 14:4f:ac:f5:49:7f:4f:0e:a7:14:db:98:7b:f2:9f: 95:26:a2:b7:b7:70:cb:f6:74:7a:90:05:e1:b9:7b: 4a:ad:fd:1f:84:48:52:34:e5:27:a2:59:65:6b:7a: 68:5f:4c:fe:8a:0a:47:91:ca:78:9d:10:22:b8:7c: 74:00:09:7c:0b:a7:44:d4:17:06:49:ed:4c:24:f8: 34:f7:38:96:c4:b8:7a:95:bf:13:0e:42:74:3f:13: 56:b8:2f:fb:3f:8e:06:5e:b1:47:62:b9:3e:ce:dd: ed:3c:09:87:00:df:15:eb:43:3d:6a:34:f1:f6:7c: f5:47:59:53:fd:fb:3a:fb:09:e1:02:c1:e0:34:e9: c6:fa:e8:d5:17:61:b4:c8:80:3e:45:48:31:c1:0f: 37:3f:de:2a:d5:04:6d:3e:56:14:02:4c:71:3e:e6: 0b:36:17:ff:c3:e3:ab:22:8c:e5:8d:e1:83:f7:f6: b0:7a:6a:54:53:70:f8:8c:d0:5d:7f:00:bb:3c:e3: 1e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:07:79:9E:6A:0E:C0:E5:FE:82:66:8A:78:65:44:92:EF:B9:7A:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/2b4d14c3-782d-30d6-a683-951c6c83f730.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl X509v3 Authority Key Identifier: keyid:67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer sbgp-ipAddrBlock: critical IPv4: 149.248.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:fe:e2:5d:66:65:f2:da:6c:89:f2:1a:58:6c:20:78:cb:95: 57:c0:21:9b:ef:59:0d:5a:93:56:e6:dd:7a:bf:06:10:ed:3e: 20:ea:d5:f3:19:20:a1:38:18:13:be:a2:ac:9e:c3:2f:3f:e4: ac:6d:ff:6e:56:4f:2e:b1:e5:b2:5f:a2:e2:07:29:73:6b:67: f5:d4:d9:5c:90:bc:84:7b:70:2d:c9:06:a8:b9:65:b1:83:3a: ff:f5:f4:47:5b:58:35:13:9d:d5:25:28:52:27:81:f0:10:c2: 2f:67:2f:1d:e5:26:69:cf:55:39:b3:d8:40:8d:c7:a1:c3:f0: 8c:8b:7d:00:61:4a:2f:d3:f7:6d:96:35:bf:67:37:95:e0:09: 83:aa:3d:66:41:88:3a:dd:23:b6:b0:87:7a:c5:d4:65:9d:b4: 4e:c1:f9:4d:a8:09:6b:8c:e4:f2:2e:dd:17:8e:22:fd:ed:d2: ce:52:90:98:51:47:b6:e3:a7:35:ee:54:b8:86:b1:56:b1:35: 2c:17:c6:58:42:45:a3:93:82:67:31:cd:e2:8a:c6:cb:85:64: 6c:5a:e0:5a:c2:75:fb:be:ad:7e:31:02:f0:e8:64:32:80:e9: 24:39:74:1b:82:d8:44:9e:b2:13:74:7e:24:f6:bb:ee:fc:ac: 3b:0f:c7:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC6/zadJ9d6MIGzUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmViM2Y2ODMtNTI0Ny00YzU1LWExMGItMjE4NGYyNmM0 Zjg0MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk MTcwNTEyZmMtZTc1ZC00YmNhLWI5OWUtYTk1NDc3ODJiOWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKTBY/xGgA+j5eFNUsowXvObsff/wsh/FTw5 rjRp6KFHlx8MXcngPM2HuunAsAhI/M37b44aWKs32S0UT6z1SX9PDqcU25h78p+V JqK3t3DL9nR6kAXhuXtKrf0fhEhSNOUnollla3poX0z+igpHkcp4nRAiuHx0AAl8 C6dE1BcGSe1MJPg09ziWxLh6lb8TDkJ0PxNWuC/7P44GXrFHYrk+zt3tPAmHAN8V 60M9ajTx9nz1R1lT/fs6+wnhAsHgNOnG+ujVF2G0yIA+RUgxwQ83P94q1QRtPlYU AkxxPuYLNhf/w+OrIozljeGD9/awempUU3D4jNBdfwC7POMefQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPIHeZ5qDsDl/oJminhlRJLvuXqdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIz ZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0ZjI2YzRmODQvMmI0ZDE0YzMtNzgyZC0z MGQ2LWE2ODMtOTUxYzZjODNmNzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmViM2Y2ODMtNTI0Ny00YzU1LWEx MGItMjE4NGYyNmM0Zjg0LzZlYjNmNjgzLTUyNDctNGM1NS1hMTBiLTIxODRmMjZj NGY4NC5jcmwwHwYDVR0jBBgwFoAUZ3PZ+0gjuyrO78ZBW50EaCloq28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIzZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0 ZjI2YzRmODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlfh4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMT+4l1mZfLabInyGlhsIHjLlVfAIZvvWQ1ak1bm3Xq/BhDtPiDq1fMZ IKE4GBO+oqyewy8/5Kxt/25WTy6x5bJfouIHKXNrZ/XU2VyQvIR7cC3JBqi5ZbGD Ov/19EdbWDUTndUlKFIngfAQwi9nLx3lJmnPVTmz2ECNx6HD8IyLfQBhSi/T922W Nb9nN5XgCYOqPWZBiDrdI7awh3rF1GWdtE7B+U2oCWuM5PIu3ReOIv3t0s5SkJhR R7bjpzXuVLiGsVaxNSwXxlhCRaOTgmcxzeKKxsuFZGxa4FrCdfu+rX4xAvDoZDKA 6SQ5dBuC2ESeshN0fiT2u+78rDsPx7Q= -----END CERTIFICATE-----Generated at Fri Mar 14 10:42:22 2025 by rpki-client