$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/d1507fa1-5e61-3848-be76-f27ee6fc5174.roa File: d1507fa1-5e61-3848-be76-f27ee6fc5174.roa (raw, json) Hash identifier: Djdj4RbZXo+ZhNY79UDnTZxEUGdLmS1Bd+Kan/NAEjY= Subject key identifier: C3:35:B9:89:8E:11:22:6F:99:A4:B6:89:82:53:9E:85:51:46:62:8A Certificate issuer: /CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Certificate serial: 010D0C9F4328584902EBFC9EDDD5477C15A7E480 Authority key identifier: 67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/d1507fa1-5e61-3848-be76-f27ee6fc5174.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 36445 IP address blocks: 149.248.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:eb:fc:9e:dd:d5:47:7c:15:a7:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=f01f411f-cff9-47c0-bec3-8388bccde6d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:f3:c1:b6:4b:44:2f:ac:80:e3:25:64:2e:69: 6d:50:f4:b6:30:3b:f9:e0:c8:ac:d2:bc:b6:9e:68: 0e:75:b8:33:4f:36:92:a5:2a:a6:fb:d2:cb:67:f4: 97:cc:b0:cf:05:f9:51:46:9a:41:41:97:52:2c:ac: 7e:dc:df:a0:d0:83:52:4a:83:19:5d:cd:bf:a8:62: 54:c5:d1:e7:05:06:3b:ed:dc:ea:64:6c:38:c6:a7: 6b:25:25:cd:56:2a:90:7e:94:bd:f3:21:56:21:60: c5:3a:ae:4d:08:e2:6a:38:81:87:bf:43:c5:6c:e6: 7c:af:e1:86:c0:51:ac:35:5a:b8:0c:37:98:d0:83: e5:53:b5:c6:9a:8b:68:2f:13:34:ed:06:73:cd:30: c2:92:1b:3f:6c:1c:ee:8c:e2:9e:b1:c9:b5:f3:52: a3:41:fd:a8:1f:18:44:be:16:ef:8c:09:b8:b8:5a: 03:e6:b6:15:e5:54:22:d0:a1:91:c3:30:24:0e:a2: b6:76:c3:04:f1:8f:45:de:8c:2b:61:4e:56:a5:00: a5:f3:c8:39:a0:18:eb:32:90:2a:aa:43:71:58:17: b5:f8:dc:51:a3:05:52:13:aa:39:40:40:19:a6:21: 1a:80:41:8b:ee:62:fe:1b:e9:a1:ef:66:4a:39:2a: e3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:35:B9:89:8E:11:22:6F:99:A4:B6:89:82:53:9E:85:51:46:62:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/d1507fa1-5e61-3848-be76-f27ee6fc5174.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl X509v3 Authority Key Identifier: keyid:67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer sbgp-ipAddrBlock: critical IPv4: 149.248.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:31:c2:c3:43:3f:e4:b3:38:d2:4d:81:14:b2:86:39:e3:67: 61:33:78:4e:55:71:5a:31:b7:37:23:34:02:89:9e:f9:66:04: 82:cd:06:e3:f1:dc:7c:44:6f:f2:be:98:61:9f:7c:d4:d5:44: 9d:dd:26:f1:74:17:56:6a:86:31:59:ff:33:73:19:d9:51:fe: 12:99:7d:1a:e0:22:f7:d9:9b:c6:a5:2f:64:39:e3:47:5f:cd: 01:d6:4d:9c:97:95:46:b9:fa:c8:17:13:6f:dc:fc:a9:d4:ad: 4e:6f:f9:77:9d:1c:d9:ca:ae:b2:89:bc:2d:ca:06:c5:aa:f7: 80:0d:32:78:8e:e7:1d:18:1f:37:81:1a:09:0f:87:e3:cc:d7: 34:5f:04:d5:bc:59:01:86:6a:e3:f4:2e:02:8e:19:c4:1d:3e: 3f:21:1a:73:54:76:63:67:c2:97:58:73:9a:8e:9e:52:4d:2d: a6:61:8b:4d:a3:8d:29:05:4e:13:3d:8d:1b:02:5c:c5:35:e1: e9:7e:6d:0a:a3:bf:c1:dc:23:ce:79:b3:d0:50:03:5c:a4:c0: 89:ca:3a:b8:66:46:87:1b:0c:80:ba:4b:4a:d7:1b:1b:2b:65: ce:9d:3e:96:c0:f5:09:67:bb:51:d5:b9:ac:c4:c3:ad:d9:94: bd:28:31:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC6/ye3dVHfBWn5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmViM2Y2ODMtNTI0Ny00YzU1LWExMGItMjE4NGYyNmM0 Zjg0MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk ZjAxZjQxMWYtY2ZmOS00N2MwLWJlYzMtODM4OGJjY2RlNmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/fPBtktEL6yA4yVkLmltUPS2MDv54Mis0ry2 nmgOdbgzTzaSpSqm+9LLZ/SXzLDPBflRRppBQZdSLKx+3N+g0INSSoMZXc2/qGJU xdHnBQY77dzqZGw4xqdrJSXNViqQfpS98yFWIWDFOq5NCOJqOIGHv0PFbOZ8r+GG wFGsNVq4DDeY0IPlU7XGmotoLxM07QZzzTDCkhs/bBzujOKescm181KjQf2oHxhE vhbvjAm4uFoD5rYV5VQi0KGRwzAkDqK2dsME8Y9F3owrYU5WpQCl88g5oBjrMpAq qkNxWBe1+NxRowVSE6o5QEAZpiEagEGL7mL+G+mh72ZKOSrj+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMM1uYmOESJvmaS2iYJTnoVRRmKKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIz ZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0ZjI2YzRmODQvZDE1MDdmYTEtNWU2MS0z ODQ4LWJlNzYtZjI3ZWU2ZmM1MTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmViM2Y2ODMtNTI0Ny00YzU1LWEx MGItMjE4NGYyNmM0Zjg0LzZlYjNmNjgzLTUyNDctNGM1NS1hMTBiLTIxODRmMjZj NGY4NC5jcmwwHwYDVR0jBBgwFoAUZ3PZ+0gjuyrO78ZBW50EaCloq28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIzZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0 ZjI2YzRmODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElfhgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8xwsNDP+SzONJNgRSyhjnjZ2EzeE5VcVoxtzcjNAKJnvlmBILNBuPx 3HxEb/K+mGGffNTVRJ3dJvF0F1ZqhjFZ/zNzGdlR/hKZfRrgIvfZm8alL2Q540df zQHWTZyXlUa5+sgXE2/c/KnUrU5v+XedHNnKrrKJvC3KBsWq94ANMniO5x0YHzeB GgkPh+PM1zRfBNW8WQGGauP0LgKOGcQdPj8hGnNUdmNnwpdYc5qOnlJNLaZhi02j jSkFThM9jRsCXMU14el+bQqjv8HcI855s9BQA1ykwInKOrhmRocbDIC6S0rXGxsr Zc6dPpbA9Qlnu1HVuazEw63ZlL0oMRQ= -----END CERTIFICATE-----Generated at Fri Mar 14 08:27:33 2025 by rpki-client